Maybe you should provide a different startup command for a "secure"
server...

asadmin start-secure-domain domain1

or

asadmin start-domain -secure domain1



-----Original Message-----
From: Shreedhar Ganapathy [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, March 15, 2006 10:33 AM
To: Howard Lewis Ship
Cc: Tapestry users
Subject: Re: Tapestry on GlassFish

Hello Howard
Thank you for responding.
Without de-emphasizing the need to figure out security policy setting 
for apps, here's some news that might help for deploying, running and 
evaluating Tapestry apps with GlassFish.

After much feedback from the community, bearing ease-of-use in mind for 
developers, the default setting in GlassFish(GF) build 40 
<https://glassfish.dev.java.net/public/downloadsindex.html> onwards has 
the security manager set to false (disabled).

This should allow many applications to be deployed and run easily 
allowing the developer to focus on app development, identifying any 
issues with GF, and later get to setting security policies for the app 
while enabling the security manager.

regards
Shreedhar 


Howard Lewis Ship wrote:

>From some discussions with people at conferences, the main problem is
>the stringent security contraints inside GlassFish.  Tapestry does
>some "non-kosher" things in terms of  creating class loaders and using
>reflection (a lot of this is related to using Javassist), and these
>things need to be expressly allowed using a security file.
>
>I'd love to see someone work through those issues and post to the wiki
>the necessary security configuration changes that are needed.
>
>
>On 3/13/06, Shreedhar Ganapathy <[EMAIL PROTECTED]> wrote:
>  
>
>>Hello
>>I am part of the GlassFish project that is developing an open source
>>application server based on Java EE 5. (http://glassfish.dev.java.net).
>>
>>We are looking to better understand how well popular frameworks, and
>>apps work with GlassFish.
>>These have the dual benefits of identifying any bugs/issues, and growing
>>the adoption of both the framework itself, and GlassFish.
>>
>>Could you share any pointers you may have to any blogs, mailing list
>>questions or articles that cover experiences/issues with deploying and
>>running any Tapestry based Apps with GlassFish ?
>>
>>best regards
>>
>>Shreedhar Ganapathy
>>Staff Engineer,
>>Sun Microsystems, Inc.
>>PS: I am not on this mailing list.
>>
>>---------------------------------------------------------------------
>>To unsubscribe, e-mail: [EMAIL PROTECTED]
>>For additional commands, e-mail: [EMAIL PROTECTED]
>>
>>
>>    
>>
>
>
>--
>Howard M. Lewis Ship
>Independent J2EE / Open-Source Java Consultant
>Creator, Jakarta Tapestry
>Creator, Jakarta HiveMind
>
>Professional Tapestry training, mentoring, support
>and project work.  http://howardlewisship.com
>  
>



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to