Mailing-List: contact dev-help@cxf.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cxf.apache.org
Received-SPF: pass (nike.apache.org: domain of willem.jiang@gmail.com
 designates 209.85.210.41 as permitted sender)
Date: Fri, 2 Nov 2012 10:59:36 +0800
From: Willem jiang <willem.jiang@gmail.com>
To: dev@cxf.apache.org
Message-ID: <60C8F92AA2154989BA03514F3B6A185B@gmail.com>
In-Reply-To: <07542788-5A70-4559-89E4-9D53523779C2@apache.org>
References: <20121019073745.E1E2123888E4@eris.apache.org>
 <07542788-5A70-4559-89E4-9D53523779C2@apache.org>
Subject: Re: svn commit: r1399990 -
 /cxf/trunk/services/sts/sts-core/pom.xml
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Hi Dan,

I'm sorry, I just saw the mail. 
For the wsn service stuff, as it is not tied with CXF version which we ship, so it should be fine.
I will revert the sts-service part, as it could introduce some security related issue.

-- 
Willem Jiang

Red Hat, Inc.
FuseSource is now part of Red Hat
Web: http://www.fusesource.com | http://www.redhat.com
Blog: http://willemjiang.blogspot.com (http://willemjiang.blogspot.com/) (English)
          http://jnn.javaeye.com (http://jnn.javaeye.com/) (Chinese)
Twitter: willemjiang 
Weibo: willemjiang


On Friday, October 19, 2012 at 7:43 PM, Daniel Kulp wrote:

> 
> I'm -1 to this change (and to the similar change done to the wsn stuff). I KNOW the latest sts stuff doesn't work with 2.6.0 due to the security enhancements done in 2.6.1. As we move forward, I'm 95% confident that other security related things will prevent it from working in the future.
> 
> I'm also wondering why its importing org.apache.cxf.sts.provider which it's also exporting. Isn't that something it shouldn't be doing? Colm, know why?
> 
> 
> Dan
> 
> 
> 
> On Oct 19, 2012, at 3:37 AM, ningjiang@apache.org (mailto:ningjiang@apache.org) wrote:
> 
> > Author: ningjiang
> > Date: Fri Oct 19 07:37:45 2012
> > New Revision: 1399990
> > 
> > URL: http://svn.apache.org/viewvc?rev=1399990&view=rev
> > Log:
> > CXF-4585 Updated the cxf imports version range of sts-core bundle
> > 
> > Modified:
> > cxf/trunk/services/sts/sts-core/pom.xml
> > 
> > Modified: cxf/trunk/services/sts/sts-core/pom.xml
> > URL: http://svn.apache.org/viewvc/cxf/trunk/services/sts/sts-core/pom.xml?rev=1399990&r1=1399989&r2=1399990&view=diff
> > ==============================================================================
> > --- cxf/trunk/services/sts/sts-core/pom.xml (original)
> > +++ cxf/trunk/services/sts/sts-core/pom.xml Fri Oct 19 07:37:45 2012
> > @@ -102,9 +102,9 @@
> > org.apache.cxf.sts.*;version=${project.version}
> > </Export-Package>
> > <Import-Package>
> > - org.apache.cxf.sts.provider.*;version=${project.version},
> > + org.apache.cxf.sts.provider.*;version="[2.6,3)",
> > !org.apache.cxf.sts.*,
> > - org.apache.cxf.*;version=${project.version},
> > + org.apache.cxf.*;version="[2.6,3)",
> > javax.xml.ws*;version="[0.0,3)",
> > org.springframework.ldap*;resolution:=optional,
> > *
> 
> 
> 
> -- 
> Daniel Kulp
> dkulp@apache.org - http://dankulp.com/blog
> Talend Community Coder - http://coders.talend.com