Mailing-List: contact dev-help@river.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@river.apache.org
Content-Type: multipart/alternative;
	boundary=Apple-Mail-1ED97673-2033-42FD-A572-87E92FEE421C
Mime-Version: 1.0 (1.0)
Subject: Re: another interesting link
From: Gregg Wonderly <gergg@cox.net>
In-Reply-To: <PQhi1t00R03wcJL01QhjD4>
Date: Tue, 26 Jul 2016 12:13:56 -0400
Content-Transfer-Encoding: 7bit
Message-Id: <15FBA0F4-E3BE-46E9-B549-CB74605725BC@cox.net>
References: <f30b1c5160062b3a97c3c33441c78179@org.tizen.email> <BEB8725D-FEBF-4B2F-95CC-51AFBDD84854@googlemail.com> <E3D1EE39-C707-4EBB-8AC5-EE7EAA91D31C@wonderly.org> <PQhi1t00R03wcJL01QhjD4>
To: dev@river.apache.org
archived-at: Tue, 26 Jul 2016 16:14:11 -0000

--Apple-Mail-1ED97673-2033-42FD-A572-87E92FEE421C
Content-Type: text/plain;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

Also maven has been used as part of this solution too.  Maven lookup by pack=
age instead of interface seems like adding another layer or a redirection in=
 lookup mechanisms.

Gregg

Sent from my iPhone

> On Jul 26, 2016, at 8:41 AM, Micha=C5=82 K=C5=82eczek (XPro Sp. z o. o.) <=
michal.kleczek@xpro.biz> wrote:
>=20
> I am well aware of StartNow since that is the first Jini "support library"=
 I have used. Indeed - it is really easy to use.
> But it is only one side of the issue - the API and some support support co=
de that is supposed to be linked statically with the service implementation.=

>=20
> What I am talking about is actually "externalizing" most aspects of a serv=
ice implementation so that:
> - you do not have to package any (for some meaning of "any" :) ) libraries=
 statically (since all code can be downloaded dynamically)
> - you do not have to provide any (for some meaning of "any" :) ) static co=
nfiguration (ie. configuration files) - a service should simply use other se=
rvices and "reconfigure" itself when those change
> It would go towards some kind of an "agent architecture", with movable obj=
ects (ie "services") being "hosted" by well... other movable objects :). The=
 idea is less appealing today when we have all the cloud infrastructure, vir=
tualization, software defined networking etc. Nevertheless still interesting=
 IMHO.
>=20
> Thanks,
> Michal
>> Gregg Wonderly July 26, 2016 at 1:28 PM
>> My StartNow project on Java.net aimed directly at this mode of operation a=
 decade ago. I wanted conventions that provided use of configuration with de=
faults.
>>=20
>> You just extend PersistantJiniService and call start(serviceName). Subcla=
sses could override default implementation for how the conventions in the AP=
Is created implementation objects through code or configuration.
>>=20
>> The intent was to create THE API to provide the conventions of service cr=
eation.
>>=20
>> We have a Window/JWindow class and don't have to do all the decorating ou=
rselves.=20
>>=20
>> Jini service construction should work the same way!
>>=20
>> Gregg
>>=20
>> Sent from my iPhone
>>=20
>>=20
>> Tom Hobbs July 26, 2016 at 11:50 AM
>> I would say the comment on that blog sums everything about Jini up.
>>=20
>> It=E2=80=99s just too hard to set up and get working.
>>=20
>> That=E2=80=99s why I think simplifying reggie is possibly a first step. M=
ake a /small/ and simple reggie jar that just handled service registration a=
nd not proxy downloading etc. Make it really easy to register your services w=
ithout needing class loaders etc, preferably via some convention rather than=
 configuration. (This is what I=E2=80=99m trying to find the time to work on=
.)
>>=20
>> I=E2=80=99d really like to be able to type;
>>=20
>> $ java -jar reggie.jar
>>=20
>> And have a reggie running with all the defaults ready to register my serv=
ices with. Or perhaps, as an option;
>>=20
>> $ java -jar reggie.jar =E2=80=94ipv6
>>=20
>> Security, class loading, proxy downloading and all the rest of it could t=
hen be put back in by specifying more advanced configuration options.
>>=20
>> My Scala service would be great if I could define it just as;
>>=20
>> object MyCoolService extends LazyLogging with ReggieRegistration with Reg=
gieLookup
>>=20
>> Or in Java with default interface methods;
>>=20
>> class MyCoolService implements ReggieRegistration, ReggieLookup
>>=20
>> And that would be it, congratulations you=E2=80=99ve started a reggie and=
 registered your service and have methods available to help you find other s=
ervices.
>>=20
>> This would satisfy use cases where the network was private and/or trusted=
. And security on top would, ideally, be up to configuration again or perhap=
s injecting some alternative implementation of some bean somewhere. But the c=
ore premise is, make it easy to startup, demo and see if it fits what you wa=
nt it for.=20
>>=20
>>=20
>>=20
>>=20
>> Peter July 26, 2016 at 3:58 AM
>> Note the comment about security on the blog?
>>=20
>> Steps I've taken to simplify security (that could also be adopted by rive=
r):
>> 1. Deprecate proxy trust, replace with authenticate service prior to obta=
ining proxy.
>> 2. proxy codebase jars contain a list of requested permissions to be gran=
ted to the jar signer and url (client need not know in advance).
>> 3. Policy file generation, least privilege principles (need to set up com=
mand line based output for admin verification of each permission during poli=
cy generation).
>> 4 Input validation for serialization.
>> 5. DownloadPermission automatically granted to authenticated registrars (=
to signer and url, very specific) during multicast discovery.
>>=20
>> Need to more work around simplification of certificate management.
>>=20
>> Regards,
>>=20
>> Peter.
>> Sent from my Samsung device.
>> =20
>>   Include original message
>> ---- Original message ----
>> From: Peter <jini@zeus.net.au>
>> Sent: 26/07/2016 10:27:59 am
>> To: dev@river.apache.org <dev@river.apache.org>
>> Subject: another interesting link
>>=20
>> https://blogs.oracle.com/hinkmond/entry/jini_iot_edition_connecting_the
>>=20
>>=20
>> Sent from my Samsung device.
>=20

--Apple-Mail-1ED97673-2033-42FD-A572-87E92FEE421C--