Re: Deplyoing the component in security enabledsmartfrog Daemon

Good to hear that you got everything working. 

When using security all the description files must be sealed in a signed
jar file. The signature is in the jar file and therefore it is the only
way a daemon can verify if a .sf file was signed by the correct CA. This
also checks that the file was not tampered by checking the seal of the
jar file. 

BTW, the same applies to default.ini and default.sf. When using security
default.ini and default.sf are loaded (by default) from the
smartfrog.jar.

Regards,

Julio

> -----Original Message-----
> From: Shrishailappa Awanty, Ambika (STSD)
> Sent: 06 September 2006 04:36
> To: Guijarro, Julio
> Cc: 'smartfrog-developer-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org'; Gururaja, Grandhi
(STSD)
> Subject: RE: [Smartfrog-developer] Deplyoing the component in security
> enabledsmartfrog Daemon
> 
> Hi Julio,
> 	Thanks for the reply, now I can deploy the components in
security
> mode.
> 
> 	But I getting one more problem while deploying a component whole
> .sf file in localdirectory not in jar file. Details are as below.
> ==================================
> #/opt/iexpress/smartfrog/bin/security/smartfrog  -a
> counterEx:DEPLOY:/opt/iexpress/smartfrog/ambika/array.sf::localhost:
-e
> 
>  - FAILED when trying DEPLOY of 'counterEx',
> [/opt/iexpress/smartfrog/ambika/array.sf],  host:localhost
>     Result:
>       * Exception: 'SmartFrogDeploymentException: unnamed component.
> deploying description '/opt/iexpress/smartfrog/ambika/array.sf' for
> 'counterEx'
>          cause: SmartFrogResolutionException:: Error creating parser
for
> '/opt/iexpress/smartfrog/ambika/array.sf'. Parser error
> [SmartFrogParseException:: Unable to locate URL
> "/opt/iexpress/smartfrog/ambika/array.sf"
>     Reason: URL may be incorrect or resource is missing]
>          deployedContext: included'
>       * Command line SFACT:
> 'counterEx:DEPLOY:/opt/iexpress/smartfrog/ambika/array.sf::localhost:'
>       * To String: ' name:counterEx,  type:DEPLOY,
> url:/opt/iexpress/smartfrog/ambika/array.sf,  host:localhost,
> resultType:FAILED,  resultExceptionMessage:unnamed component.
deploying
> description '/opt/iexpress/smartfrog/ambika/array.sf' for 'counterEx''
> ====================================
> 
> 	I need to keep that array.sf file in a jar file and export that
in
> CLASSPATH?
> 
> Thanks and Regards,
> Ambika
> 
> -----Original Message-----
> From: Guijarro, Julio
> Sent: Tuesday, September 05, 2006 9:04 PM
> To: Shrishailappa Awanty, Ambika (STSD)
> Cc: 'smartfrog-developer-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org'; Gururaja, Grandhi
(STSD)
> Subject: RE: [Smartfrog-developer] Deplyoing the component in security
> enabledsmartfrog Daemon
> 
> The steps should be:
> 
> =============================
>   * ant initCA : creates a new Certificate Authority for siging jars
and
> generating the credentials ---> Only once!
> 
>   * mkdir  signedLib
> 
>   *  ant signJars :signs the jar files and populates the
dist/signedLib
> dir. Only once (and copy jars to all daemons).
> 
>   *  ant newDaemon : creates new host credentials This will generate
the
> host credentials in
<smartfrog-installation-dir>/dist/private/hostxxx>
> directory.
> 
>   *  Rename the generated directory
>    /opt/iexpress/smartfrog/private/hostxxx to
>    /opt/iexpress/smartfrog/private/host1.
> 
>   *  ant newDaemon : creates 2nd new host credentials This will
generate
> the host credentials in  <smartfrog-installation-
> dir>/dist/private/hostxxx> directory.
>   *  copy the generated directory to 2nd machine:
>    /opt/iexpress/smartfrog/private/hostxxx to
>    <2nd host>/opt/iexpress/smartfrog/private/host1.
>   *  copy the dist/signedLib  directory to 2nd machine in
dist/signedLib
> 
>   * start Daemon 2
>   * start Daemon 1
>   * deploy application.
> 
> 
> NOTE: I forgot to mention that if you don't use dynamic classloading
you
> need to have all the jar files signed by the same certificate
authority.
> 
> - Daemon credentials = daemon identity and each host has a unique one
> signed by the same CA.
> - Signed jars = all signed by the same CA that signed the daemons
> identity. Same jars for all the daemons or jar in only one place and
> classes downloaded dynamically in the other participating daemons.
> 
> Regards,
> 
> Julio
> 
> =======================
> 
> > -----Original Message-----
> > From: Shrishailappa Awanty, Ambika (STSD)
> > Sent: 05 September 2006 14:47
> > To: Guijarro, Julio
> > Cc: 'smartfrog-developer-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org'; Gururaja, Grandhi
> > (STSD)
> > Subject: RE: [Smartfrog-developer] Deplyoing the component in
security
> > enabledsmartfrog Daemon
> >
> > Hi Julio,
> > 	I have create different certificates on each system before.
> > 	Now as you said now I have created only one cirtificate and
copied
> to
> > other machine.
> > 	When I run sfDaemon in secure mode on other machine its giving
> > following error.
> > ===================================
> > Exception in thread "main" java.lang.ExceptionInInitializerError
> at
> >
org.smartfrog.sfcore.componentdescription.ComponentDescriptionImpl.get
> > Clas
> > sComponentDescription(ComponentDescriptionImpl.java:1055)
> > at
> >
org.smartfrog.sfcore.componentdescription.ComponentDescriptionImpl.get
> > Clas
> > sComponentDescription(ComponentDescriptionImpl.java:1033)
> >         at
org.smartfrog.sfcore.logging.LogImpl.<init>(LogImpl.java:154)
> >         at
> > org.smartfrog.sfcore.logging.LogFactory.getLog(LogFactory.java:66)
> >         at
> >
org.smartfrog.sfcore.logging.LogFactory.sfGetProcessLog(LogFactory.jav
> > a:13
> > 6)
> >         at org.smartfrog.SFSystem.sfLog(SFSystem.java:530)
> >         at org.smartfrog.SFSystem.execute(SFSystem.java:324)
> >         at org.smartfrog.SFSystem.main(SFSystem.java:309)
> > Caused by: java.security.AccessControlException: access denied
> > (java.util.PropertyPermission org.smartfrog.Reference.initCap read)
> > ==============================
> >
> > 	Please can you send me the list of steps to be executed in other
> > machine where I didn't created any new cirtificates.
> >
> > Thanks and Regards,
> > Ambika
> >
> > -----Original Message-----
> > From: Guijarro, Julio
> > Sent: Tuesday, September 05, 2006 6:53 PM
> > To: Shrishailappa Awanty, Ambika (STSD)
> > Cc: 'smartfrog-developer-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org'
> > Subject: RE: [Smartfrog-developer] Deplyoing the component in
security
> > enabledsmartfrog Daemon
> >
> > Hi Ambika,
> >
> > Are you running iniCA in both machines? If you do that, then you are
> > creating to different Certifacate Authorities or two domains. All
the
> > daemons have to share the same CA if they are part of the same
domain.
> >
> > What you need to do is to create only one CA in one of the machines,
> > run "ant newDaemon" twice and copy one of the private/hostxxx to the
> > other machine with dir name private/host1.
> >
> > Then it should work. Let me know if you are already doing this and
it
> > is still not working for you.
> >
> > Julio
> >
> > > -----Original Message-----
> > > From: Shrishailappa Awanty, Ambika (STSD)
> > > Sent: 05 September 2006 14:08
> > > To: Guijarro, Julio
> > > Cc: 'smartfrog-developer-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org'
> > > Subject: RE: [Smartfrog-developer] Deplyoing the component in
> > > security enabledsmartfrog Daemon
> > >
> > > Hi Julio,
> > > 	I have created the certificates for both the daemons using the
> > > following steps.
> > > =============================
> > >     * ant initCA : creates a new Certificate Authority for siging
> > > jars and generating the credentials
> > >     * mkdir  signedLib
> > >     *  ant signJars :signs the jar files and populates the
> > > dist/signedLib dir.
> > >     *  ant newDaemon : creates new host credentials This will
> > > generate the host credentials in
> > > <smartfrog-installation-dir>/dist/private/hostxxx
> > > directory.
> > >     *  Rename the generated directory
> > > 	/opt/iexpress/smartfrog/private/hostxxx to
> > > /opt/iexpress/smartfrog/private/host1.
> > > =======================
> > >
> > > 		Then I started the daemons in security mode.
> > >
> > > Thanks and Regards,
> > > Ambika
> > >
> > > -----Original Message-----
> > > From: Guijarro, Julio
> > > Sent: Tuesday, September 05, 2006 6:36 PM
> > > To: Shrishailappa Awanty, Ambika (STSD)
> > > Cc: smartfrog-developer-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
> > > Subject: RE: [Smartfrog-developer] Deplyoing the component in
> > > security enabledsmartfrog Daemon
> > >
> > > Hi Ambika,
> > >
> > > Did you create a set of certificates for the two daemons or are
you
> > > using the dummy ones?
> > >
> > > Did you start each daemon with its own certificate?
> > >
> > > Julio
> > >
> > > > -----Original Message-----
> > > > From: smartfrog-developer-bounces-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
> > > > [mailto:smartfrog- developer-bounces-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org] On
> > > > Behalf Of Shrishailappa Awanty, Ambika (STSD)
> > > > Sent: 05 September 2006 13:24
> > > > Cc: smartfrog-developer-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
> > > > Subject: [Smartfrog-developer] Deplyoing the component in
security
> > > > enabledsmartfrog Daemon
> > > >
> > > > Hi ,
> > > > 	I am trying to deploy the counter example on two
different
> > > > nodes(HUPX) where I have started samrtfrog daemon in security
> > > > enabled mode. But its failing to depoly the counter example on
> > different node.
> > > > I am getting following error.
> > > >
> > > >
> > > > # ./smartfrog -a
> > > >
counterEx1:DEPLOY:org/smartfrog/examples/functions/function.sf::imp:
> > > > -e SmartFrog 3.08.004
> > > > (C) Copyright 1998-2005 Hewlett-Packard Development Company, LP
> > > >  - FAILED when trying DEPLOY of 'counterEx1',
> > > > [org/smartfrog/examples/functions/function.sf],  host:imp
> > > >     Result:
> > > >       * Exception: 'SmartFrogException:: Unable to connect to
> > > > sfDaemon
> > > > on: imp/15.106.122.89.
> > > > Reason: sfDaemon may not be authenticated properly
> > > >          cause: java.rmi.ConnectIOException: Exception creating
> > > > connection to: 15.106.122.89; nested exception is:
> > > >         javax.net.ssl.SSLPeerUnverifiedException: peer not
> > > > authenticated'
> > > >       * Command line SFACT:
> > > >
> 'counterEx1:DEPLOY:org/smartfrog/examples/functions/function.sf::imp:'
> > > >       * To String: ' name:counterEx1,  type:DEPLOY,
> > > > url:org/smartfrog/examples/functions/function.sf,  host:imp,
> > > > resultType:FAILED,  resultExceptionMessage:Unable to connect to
> > > > sfDaemon
> > > > on: imp/15.106.122.89.
> > > > Reason: sfDaemon may not be authenticated properly'
> > > >
> > > > 	Please any one can help me solve this problem?
> > > >
> > > > Thanks and Regards,
> > > > Ambika
> > > >
> > > >
------------------------------------------------------------------
> > > > --
> > > > --
> > > > --- Using Tomcat but need to do more? Need to support web
> > > > services, security?
> > > > Get stuff done quickly with pre-integrated technology to make
your
> > > > job easier Download IBM WebSphere Application Server v.1.0.1
based
> > > > on Apache Geronimo
> > > >
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=
> > > > 12
> > > > 16
> > > > 42 _______________________________________________
> > > > Smartfrog-developer mailing list
> > > > Smartfrog-developer-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
> > > > https://lists.sourceforge.net/lists/listinfo/smartfrog-developer

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642