Slashdot Mirror

What?!?!?

http://httpd.apache.org/ABOUT_APACHE.html

Apache originated at the National Center for Supercomputing Applications, University of Illinois, Urbana-Champaign.

but is there an obvious point where software become more patch then content?

4758 Secure Coprocessor Driver for Linux
This project is a Linux device driver for the IBM 4758 PCI Cryptographic Coprocessor, which is a tamper-sensing and responding, programmable PCI card. It provides a highly secure subsystem in which data processing and cryptography can be performed.

ATM on Linux
ATM support for Linux is currently in pre-alpha stage. There is an experimental release, which supports raw ATM connections (PVCs and SVCs), IP over ATM, LAN emulation, MPOA, Arequipa, and some other goodies.

Abstract Machine Test Utility (AMTU) for Linux
Abstract Machine Test Utility (AMTU) is an administrative utility that checks whether the underlying protection mechanism of the hardware is being enforced. This is a requirement of the Controlled Access Protection Profile (CAPP) FTP_AMT.1.

Ananas Project: Summary
This is the source for Working XML, a column on developerWorks with companion project code that demonstrates the evolution of full-fledged XML applications. This is distributed under the artistic license.

Apache HTTP Server
The Apache project develops and maintains an open-source HTTP server for various modern desktop and server operating systems.

BlueHoc simulator
BlueHoc is a tool that predicts the performance of Bluetooth wireless hardware technologies. BlueHoc simulates the baseband and link layers of the Bluetooth specification.

COIN (Common Optimization INterface)
Developers can use Common Optimization INterface (COIN) to build optimization solutions. IBM mathematical optimization researchers opened the code they use in finding the optimal allocation of limited resources. The code has many applications in a variety of industries.

Channel Bonding
The Channel Bonding project works on methods to join multiple networks on Linux into a single logical network with higher bandwidth. The project team works with the Beowulf Ethernet Channel Bonding project, where bonding work began.

Consensus prototype
Consensus is a joint European project carried out by six companies. The project is partially funded by the European Commission. The project goal is to provide technology to support single-authoring for mobile devices. developerWorks hosts the open source implementation developed by the Consortium. Detailed information about the project is at the Consensus Project home page (http://www.consensus-online.org./

Content Query System (CQS) Project: Summary
Content Query System (CQS). CQS is a distributed peer-to-peer query system for the purpose of discovering content or data. XML messages are passed between systems and query "engines" are used to access the data that is being made available on the system.

Crypto Accelerator Driver
Device Driver Support for the IBM eServer Cryptographic Accelerator.

Crypto Interface Library
Generalized Interface library for the IBM eServer Cryptographic Accelerator Device Driver. Note, this is a low level api for the Specified adapter, it is not intended to be an interface which is written to by applications. Applications should use the openCryptoki PKCS#11 api for interfacing to the token.

Dynamic Probe Class Library (DPCL)
DPCL is an object-based C++ class library that allows tool developers and sophisticated tool users to build parallel and serial tools using a technology called dynamic instrumentation.

Embedded IBM PowerPC 4xx Linux Support
This project contains packages which enable add

Use the connector (mod_jk) to let httpd handle the HTTP protocol and forward it to Tomcat (or Tomcat-embedding appservers such as JBoss)

The only things you need to start developing J2EE applications are: Tomcat (http://jakarta.apache.org/tomcat/index.html), optionally a web-framework (like http://jakarta.apache.org/tapestry/index.html) and you can start developing tomorrow (if you know Java of course) and a decent IDE (http://www.eclipse.org/). It will cost you about $0.

The only things you need to start developing J2EE applications are: Tomcat (http://jakarta.apache.org/tomcat/index.html), optionally a web-framework (like http://jakarta.apache.org/tapestry/index.html) and you can start developing tomorrow (if you know Java of course) and a decent IDE (http://www.eclipse.org/). It will cost you about $0.

First, you have some misconeptions about J2EE.

True, you can't just drop J2EE on your desktop because there's no such _thing_ as J2EE. J2EE is a set of standards (which contains just about everything).

The only things you need to start developing J2EE applications are: Tomcat (http://jakarta.apache.org/tomcat/index.html), optionally a web-framework (like http://jakarta.apache.org/tapestry/index.html) and you can start developing tomorrow (if you know Java of course) and a decent IDE (http://www.eclipse.org/). It will cost you about $0.

Java has some metaprogramming featues starting from version 1.5. Right now we're writing application in C++ and Python, so I don't miss metaprogramming features :)

RoR is extensible, but some features are just very hard to implement: maintaning persistent object identity, complex mappings support, distributed caching and long-running transactions with optimistic locking.

We had previous expirience in dynamic languages (Python, Perl, PHP). This project was a sort of expirement - we wanted to see what can be done with RoR.

First, you have some misconeptions about J2EE.

True, you can't just drop J2EE on your desktop because there's no such _thing_ as J2EE. J2EE is a set of standards (which contains just about everything).

The only things you need to start developing J2EE applications are: Tomcat (http://jakarta.apache.org/tomcat/index.html), optionally a web-framework (like http://jakarta.apache.org/tapestry/index.html) and you can start developing tomorrow (if you know Java of course) and a decent IDE (http://www.eclipse.org/). It will cost you about $0.

Java has some metaprogramming featues starting from version 1.5. Right now we're writing application in C++ and Python, so I don't miss metaprogramming features :)

RoR is extensible, but some features are just very hard to implement: maintaning persistent object identity, complex mappings support, distributed caching and long-running transactions with optimistic locking.

We had previous expirience in dynamic languages (Python, Perl, PHP). This project was a sort of expirement - we wanted to see what can be done with RoR.

I thought it was a standard, just that Adobe dominates the market. There are certainly other non-Adobe products that support pdf creation, such as PDFCreator, and Apache's Formatting Objects Processor

I guess the answer is "it depends". ;-)

If I'm doing anything half-ways complex in web-to-db, yes I do want OO. I'll choose OO DB access in the form of Hibernate, JDBC, JBoss and EJBs and XDoclet. And I'll build my UI with an MVC-based JSP/Servlet framework, usually home-grown, but maybe using JavaServer Faces or Struts.

In my opinion, this kind of OO sophistication makes building even half-ways complex projects better.

Sam

PHP is a horrible language. Even perl is a better programming language. Java and Python blow it away in ability to create easy to maintain and efficient data structures. I'm amazed and fearful of the monstrosities that have been cobbled together with PHP (I'm talking about you Mediawiki and Drupal).

PHP is to web programming as x86 is to microprocessor architecture. It's nasty and inefficient and I can't figure out why so many people use it.

And like many other no-declaration scripting languages PHP is sorely lacking in warnings and errors. Forgot a dollarsign or typoed your variable name? Sorry, yer screwed!

To let you know where I'm coming from, Apache Tomcat is my favorite solution. But it seems that the project I most want to tinker with is Scoop and I'm finding mod_perl pretty workable and the way they architected that giant mass of perl is pretty reasonable.
</rant>

Its already beeing worked on:

http://incubator.apache.org/projects/harmony.html

There are other efforts (in addition to RBL style lists) to fix some of the problems which derive from the assumed trust that's built into the SMTP protocol. For a brief shining moment last year, I thought that we might all hold hands and sing together on this one, but Microsoft managed to drive of their early Sender ID adopters and alienate potential allies in the battle against spam by making vague patent claims and apparently refusing to even clarify.

Adoption of the Sender Policy Framework seems to have slowed, probably caught up in the confusion around Sender ID and the Microsoft patent claims. The linked site claims that SPF is unencumbered.

That's simply not true. Apache began as a set of patches to the NCSA webserver. Here's a bit about Apache's history.

If they started to give out modules that provided certain functionality, is it possible, that apache, through Wine, or some other interface, could make use of these components? Imagine having apache run .Net or ASP web applications. It may make the switch to Apache, and maybe eventually Linux cheaper and easier for many companies. Many companies have lots of money invested in .Net and ASP web applications.

• This kind of modularity is a part of IIS since its first version.
• ASP.NET is already implemented as a module, in all ASP.NET-supporting IIS versions.

*sigh* now I gotta learn to dodge katanas and knives as I buy my software?

I'm all for this. If it's not binary, though, it's a problem: I've only been able to compile one FOSS program from source for reasons unknown to me. I'll figure it out someday, I guess...

Innovation is not just happening in throwing more processors at a problem, but in HOW we solve problems.

I've been in the computing business for over twenty years, and I am amazed at the rate of acceleration of technical innovation.

For instance: I work for a client with multiple web projects going, using a variety of operating systems and development environments. A couple weeks ago, one of the other teams gave a presentation to the rest of us about how they have switched from using a relational database for data management to Lucene (http://lucene.apache.org/java/docs/). I was skeptical that a Java-based XML indexer back-end could retrieve information faster than MySQL, but these guys showed that it was much more efficient to do so. Lucene is not a perfect solution to every problem, but for primarily static word searches, it utterly trumps an RDBMS in performance.

The moral of the story is that there are more than one one to skin a cat, and some ways are faster than others!

Sure most have one or two innovative features, but what applications in the OS world are really innovative, especially from an end user perspective?

Certainly not desktop environments, servers, remote shells, anonymizing (or swarming) networks, or compilers.

Because all of those things are just replacements for commercial applications, and did nothing new.

You're missing the point: you don't need that complexity any more. Google Maps basically gives me the ability to use a $300 thin client to accomplish (some of the) tasks I do at work using a $5000 Xeon machine with $10000 worth of ESRI software to do at work. What's more, if Google comes up with some way to make Google Maps better, like, say, add satellite images, they implement that functionality overnight and have millions of users using it the next day. Compare with the release-patch-rerelease paradigm of old. I don't consider JavaScript and the browser and it to be a brain-damaged programming environment--you just have to remember that you are no longer expected to do any heavy lifting on the client side, and the majority of the GUI tasks are already handled for you by the browser itself. Most of the "refinment[s] in programming interfaces that have been around since the 70s" were to simplify those very chores. In that sense, the limited functionality provided by JS is really quite elegant.

Also, emulating stateful-ness over the web is being handled at a much lower level than the browser these days, and to good effect. See Tapestry.

See also embperl if all you want is to embed perl (duh) in html, as you might do with php. That being said, you should separate the code and the layout, blah blah blah.

This is a really good summary of OSS projects.

Lots of minor projects get reincorporated into distro, without any clue what changes were made, and yet are still expected to field bugreps against them.

At the same time, distros need to identify projects that are significant, and get involved in the dev list/planning, if only to get some kind of presence in the project.

For example, the Apache Ant project took input from the eclipse and netbeans teams over their release schedules, and once we'd determined that Ant1.7 wouldnt cut it, did a 1.6.4 release for them: http://wiki.apache.org/ant/Ant17/Planning

One concern I have about this downstream involvement is that it creates extra schedule pressure. A project that releases when it wants can be more relaxed about schedules and release when happy. When vendor driven, you are more prone to release to meet some random milestone, rather than when the quality is best. That means shorter beta tests, possibly lower standards all round. Which can't be good.

there's a csharp to parrot compiler. er.. .net to parrot! parrot to .net!

nah, mod_aspdotnet would still be there.. haunting me.

The following is taken from http://perl.apache.org/
"mod_perl is more than CGI scripting on steroids. It is a whole new way to create dynamic content by utilizing the full power of the Apache web server to create stateful sessions, customized user authentication systems, smart proxies and much more. Yet, magically, your old CGI scripts will continue to work and work very fast indeed. With mod_perl you give up nothing and gain so much!"

"mod_perl gives you a persistent Perl interpreter embedded in your web server. This lets you avoid the overhead of starting an external interpreter and avoids the penalty of Perl start-up time, giving you super-fast dynamic content.

As you'd expect from the Perl community, there are hundreds of modules written for mod_perl, everything from persistent database connections, to templating sytems, to complete XML content delivery systems. Web sites like Slashdot and Wired Magazine use mod_perl."

Yes, Slashdot does run on mod_perl.

A friend of mine uses mod_perl and the performance increase he gets is insane.

But, now we have to flash-cut our production systems, unless someone knows how to changes things to work under both namespaces...

I run Nutch, a project which is now part of Apache Incubator. I'm indexing a few tens of gaming-related websites, on www.playfuls.com. There is a lack of documentationm but if you read and play with the config files, you'll do fine.

I run Nutch, a project which is now part of Apache Incubator. I'm indexing a few tens of gaming-related websites, on www.playfuls.com. There is a lack of documentationm but if you read and play with the config files, you'll do fine.

One project in this area I've been playing with is Nutch.

A diverse set of XML-ified configuration files could be more complicated than the current text file soup in /etc.

XML configuration files would end up with very handy binary objects, and references to other parts of the XML file or other XML files, and other monstrosities yet to be conceived.

And it is quite likely that the validity of many of the new XML configuration files could not be checked anyway. As an example, Ant, touted as more sensical than make, uses a XML configuration file that cant be validated without creating a chick-and-egg problem.

A diverse set of XML-ified configuration files could be more complicated than the current text file soup in /etc.

XML configuration files would end up with very handy binary objects, and references to other parts of the XML file or other XML files, and other monstrosities yet to be conceived.

And it is quite likely that the validity of many of the new XML configuration files could not be checked anyway. As an example, Ant, touted as more sensical than make, uses a XML configuration file that cant be validated without creating a chick-and-egg problem.

Yeah, it's impossible to add extra database servers.

It's also unlikely that one could find a database server that can cache the results of identical queries when the data hasn't changed, significantly speeding up access to nearly-static data.

It's downright insane to consider using proper cache-control headers and a caching proxy in front of a web server farm.

It's sure too bad that these solutions can't be solved by merely hiring a competent sysadmin who's willing to relocate, 'cause that's be far too convenient. :)

It'd probably be easier to teach everyone in the company good HTML.

Well, it can be ugly at times and there are certainly some rough edges, but Request Tracker will probably do the trick.

Mind you, you'll probably need a Linux or BSD server running Apache, PHP, and an SQL engine (MySQL or PostgreSQL, we use Postgres).

*Ahem*. RT does not use PHP; it's a mod_perl (and specifically, a Mason) application.

Quoting from RT's feature list page:

• RT runs great on Linux, FreeBSD, Solaris, Mac OS X and most other flavors of Unix. End users have contributed a port to Windows 2000 and Windows XP.
• RT stores all its data inside an SQL database, so you can use Crystal Reports and similar tools to generate precise reports. Right now, you can deploy on MySQL 4, PostgreSQL 7.3 or Oracle 9i. Best Practical is working to bring support for Sybase and Informix to RT as well.
• RT uses Apache's mod_perl interpreter or the FastCGI protocol, so you get blazing fast performance no matter what web server you choose.

That said, RT is a fantastic tool. I've used it at the last two jobs I've worked at, and if it's not there next time I switch jobs, I expect to introduce it. It can be a bit fiddly to get installed, as it depends on a couple of dozen CPAN modules, but the Wiki documentations's generic and specific installation guides try to make this as painless as possible, and if you get stuck there's always the mailing lists and paid support. And once RT is up and running, it's stable, versatile, flexible, adaptable, and just all around a great tool for managing a collection of on-going tasks.

If it's good enough for NASA, Merrill Lynch, DynDNS, Perl (it's the bug tracker for the Perl language), and others, then chances are it's probably good enough for you too. :-)

Seems to be a difference in the way the licenses deal with patent issues.

Wondering if HTML will make your message look like spam? Well, I know I'd go here:
http://spamassassin.apache.org/tests_3_0_x.html and search on the html related tests and their scores.
They should tell you what the anti-spam community considers "evil".

I don't see a need for html mail - you want it to look a certain way, give me a blurb to get my interest and then link to the content. My friends do this with interesting links, newsletters I get are like this, I even view Slashdot on the "light" mode to get rid of as much of the clutter as possible. Then I go the the links to see more if I care to.

Well, actually Apache isn't GPL. http://www.apache.org/licenses/LICENSE-2.0.html.

That's way too many frameworks. I just use one of them

Nope you don't - here is a quote from your link:

FreeMarker is not a Web application framework. It is suitable for a component in a Web application framework,

Maybe you should consider using a real framework like tapestry. http://jakarta.apache.org/tapestry/

If you know J2EE then you also should have no problems with Tapestry http://jakarta.apache.org/tapestry/ or JSF.

PHP and JSP and the like are nothing but a parameterised buggy nightmare.

http://jakarta.apache.org/tapestry/

See what Kaffe, GCJ or Harmony is missing and implement that instead of wasting time bashing Sun.

Harmony has not relesed any code yet. Their initial announcement is dated 06 May 2005. It is a too early to say whether they ever will.

Geir Magnusson Jr. is from Gluecode, which IBM has acquired.

What is IBM really trying to buy here? I always thought that when IBM wanted Java they'd just buy Sun.

For all of those who didn't know, it's a J2EE server.

Apache Geronimo Homepage

I knew of [apache jakarta] tomcat, but not geronimo. Sorry, I guess I've been living under a comfy rock for too long.

As it's been already stated in those comments, gcj can run openoffice almost completely. Now, the Apache foundation started a free (as in speech) implementation of j2se 1.5, so sooner or later, I'm sure the integration of JAVA won't be a problem anymore, and people will stop whining Java is not free (I'm one of those whiners, becoming more and more confident).

Its Log4J.
http://logging.apache.org/log4j/

My favorite logs are the ones where I get control over what events get logged and in what detail they get logged. There's no such thing as a one-size-fits-all software solution; why do we believe in one-size-fits-all logging?

One thing it does not do for you is putting log statements into your code. The more logging info your app provides, the more your user can configure.

At my office I have MailScanner configured with Postfix, SpamAssassin, and ClamAV. Every bit of this configuration is free (beer and speech) and works very well. I have the rules set fairly loosely, yet it still manages to catch >80% spam and I have yet to see a virus make it passed. It is a bit of a bear to set up, but for those who would rather not, all of those packages can be found in openprotect (with or without commercial support).

Now, for the caveat. As is the case with any type of email scanner, it is very resource intensive. As such, I have a dedicated dual Athlon machine which handles scanning for 50-100,000 emails/day and it stays very busy (load over 1, >50% processor utilization).

1. They have to be in a specific directory. A sample setup is

PerlModule Apache::Registry
PerlRequire /path/to/startup.pl
<Location /perl>
SetHandler perl-script
PerlHandler Apache::Registry
Options +ExecCGI
PerlSendHeader On
</Location>

2. mod_perl has problems with named subroutines. Put them in a module instead. Since your application will most likely have multiple perl scripts, put all your commonly used subroutines in a single module.

3. Preload the module you created, and any others you plan to use. This puts them in the Apache Shared Memory pool, which is accessable by all Apache children. I tend to do this using a PerlRequire /path/to/startup.pl and having it load every module I plan to use. Mine looks something like the following:

use lib '/path/to/custom/modules';
use File::Spec (); # Cross platform directory name building
use Carp ();
use CGI::Carp ();
use CGI qw(-compile :cgi :form); # Compile CGI and Form commands instead of Autoloading
use Apache::Session ();
use Template ();
use DBI ();
DBI->install_driver('mysql'); # mysql is an example, works with any DBD:: module.
use MyModule (); # Custom Module
1;

4. You can also preload perl scripts. However, you shouldn't do this until after you finish testing your scripts and put them into a production environment, as Apache would have to be restarted to see new versions of them.

And any constructions based on the last part of clause 7 which contrive to show that you now no longer can sue third parties using apache if you have patents of yourself forego the simple fact that the ASF is the entity which is distributing the code - so you never had that option to sue third parties anyway.

Pv.

Prehaps you should look at the correct report http://secunia.com/product/1438/ which shows 33% of Vulnerabilities are UNPATCHED and another 33% that you have to properly configure a workaround to fix... so ya I'd rather use the one that has all those patches that fix 86% of the issues.

See so theres more to securing your box than turning off one tool, you have to know how to look up the issues which you can do easly on Apache's site right here: http://httpd.apache.org/bug_report.html and its linked right off the front pages of the web servers site.

Then theres Microsoft's site for iis who's security link, links to this wonderful page http://www.microsoft.com/security/guidance/prodtec h/IIS.mspx. But whats that all you see is this message: "We're sorry, but there is no Microsoft.com Web page that matches your entry."

Yup that gives you a warm and fuzzy feeling all over!

I can't think of any other reason why the Apache people would be organizing this, though it surprises me they're going for J2SE and not J2EE compatability.

But they are. J2EE is a superset of J2SE, and by adding Apache Geronimo you'd get the complete stack. Admittedly Geronimo is aiming for J2EE 1.4 rather than J2EE 5.0 at the moment, but J2EE 5.0 doesn't really exist yet. ;o)

http://people.apache.org/~geirm/harmony.jpg

DJ Bernstein Will Tell You Why

Among my favorite advice of his is to completely give up on the standard C library. Really, everybody should have done it a while ago. It's one of those things like the unix pipe model that was a good start, but now that it has hung around for 25 years, it needs an upgrade. How about everybody stop using the standard C library and switch to something like the Apache Portable Runtime?

Write bug-free code. I've mostly given up on the standard C library. Many of its facilities, particularly stdio, seem designed to encourage bugs. A big chunk of qmail is stolen from a basic C library that I've been developing for several years for a variety of applications. The stralloc concept and getln() make it very easy to avoid buffer overruns, memory leaks, and artificial line length limits.