Mailing-List: contact dev-help@activemq.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@activemq.apache.org
Received-SPF: pass (athena.apache.org: domain of chris.mattmann@gmail.com
 designates 209.85.160.54 as permitted sender)
User-Agent: Microsoft-MacOutlook/14.3.9.131030
Date: Fri, 17 Jan 2014 09:20:14 -0800
Subject: Re: [DISCUSS] Remove the old ActiveMQ Console
From: Chris Mattmann <mattmann@apache.org>
To: <dev@activemq.apache.org>
Message-ID: <CEFEA60C.12B379%chris.mattmann@gmail.com>
Thread-Topic: [DISCUSS] Remove the old ActiveMQ Console
References: <05AAA2FB-2982-4AA8-8CE2-4AC94DE2C708@gmail.com>
 <CAH+vQmNmFZuKBLr4s_MdteRbTGpqahXRbq-z6QXOzELkvUuOsg@mail.gmail.com>
 <01D2C10F-0EC3-424F-A14E-241259EBFAE1@gmail.com>
In-Reply-To: <01D2C10F-0EC3-424F-A14E-241259EBFAE1@gmail.com>
Mime-version: 1.0
Content-type: text/plain;
	charset="ISO-8859-1"
Content-transfer-encoding: quoted-printable

Hi Everyone,

I reported at the board meeting two days ago that you guys
are making steps towards addressing this. The big issue that
still remains is that hawtio in its current form unbranded
as the default Apache ActiveMQ console must be fixed ASAP and
addressed. *How* that is done is currently being discussed, but
realize that discussion needs to conclude in a reasonable time
frame, let's say before the next board meeting 3rd week of February 2014.

Cheers,
Chris


-----Original Message-----
From: Robert Davies <rajdavies@gmail.com>
Reply-To: <dev@activemq.apache.org>
Date: Friday, January 17, 2014 1:32 AM
To: <dev@activemq.apache.org>
Subject: Re: [DISCUSS] Remove the old ActiveMQ Console

>This discussion has been open a while - not exactly consensus but then
>there=B9s not really much difference either. There does seem to be general
>consensus amongst the poor folks who actually maintain the old console
>(me included) it should die quickly, but I think we should keep it around
>optionally for those users who can=B9t use anything else?.
>We have to get this resolved quickly - so I=B9ll start a vote and hope to
>gain some consensus, at least within the PMC.
>
>thanks,
>
>Rob
>On 16 Jan 2014, at 22:21, Gary Tully <gary.tully@gmail.com> wrote:
>
>> I think the web-console should die, letting it rot in a subproject
>> will not make it more secure,usable nor maintainable.
>>=20
>> Then we either -
>> 1) skin hawtio with an Apache ActiveMQ brand and continue to ship it
>> 2) document the extension points for third party consoles.
>>=20
>> I think dropping needs to be contingent on either 1 or 2.
>>=20
>> Imho, hawtio does it right with the jolokia jmx/http bridge and has
>> some nice extension points so I am in favour of 1
>>=20
>> On 2 January 2014 09:59, Robert Davies <rajdavies@gmail.com> wrote:
>>> The old/original console is no longer fit for purpose, it is hard to
>>>maintain, the source of a lot of security issues [1] over the last few
>>>years.
>>>=20
>>> There is another thread about using hawtio as the console going
>>>forward, and without going into all the gory details it is probably
>>>likely that there may be no web console shipped at all in future
>>>releases of ActiveMQ. The JMX naming hierarchy was improved for
>>>ActiveMQ 5.8, such that its easy to view the running status of an
>>>ActiveMQ broker from 3rd party tools such as jconsole, visualvm or
>>>hawtio. Regardless of the outcome of the other discussion [2] - It
>>>doesn=B9t help the ActiveMQ project to try and maintain a static web
>>>console any more.
>>>=20
>>> I propose we remove the old web console from the ActiveMQ 5.10 release
>>>- thoughts ?
>>>=20
>>>=20
>>>=20
>>> [1]=20
>>>https://issues.apache.org/jira/browse/AMQ-2714?jql=3Dproject%20%3D%20AMQ%2
>>>0AND%20text%20~%20%22XSS%22
>>> [2]=20
>>>http://activemq.2283324.n4.nabble.com/Default-Web-Console-td4675705.html
>>>=20
>>> Rob Davies
>>> =8B=8B=8B=8B=8B=8B=8B=8B
>>> Red Hat, Inc
>>> http://hawt.io - #dontcha
>>> Twitter: rajdavies
>>> Blog: http://rajdavies.blogspot.com
>>> ActiveMQ in Action: http://www.manning.com/snyder/
>>>=20
>>=20
>>=20
>>=20
>> --=20
>> http://redhat.com
>> http://blog.garytully.com
>
>Rob Davies
>=8B=8B=8B=8B=8B=8B=8B=8B
>Red Hat, Inc
>http://hawt.io - #dontcha
>Twitter: rajdavies
>Blog: http://rajdavies.blogspot.com
>ActiveMQ in Action: http://www.manning.com/snyder/
>