Slashdot Mirror

Their site is giving an "500 Internal Error"... Perhaps they should look into the next generation Operating System and Web Server as well.

Who do you get support from? Anyone our corporate masters have heard of? "really cheap support might not impress the "who do we sue?" kind of managers either.

The Jakarta website lists only one support vendor, in Australia. Sounds bigger than tiny, but not "on the mainland" -- still better than "no support available" that I'd heard.

• ArgoUML:http://argouml.tigris.org/
• XDoclet:http://xdoclet.sourceforge.net/
• uml2ejb:http://uml2ejb.sourceforge.net/
• struts:http://www-106.ibm.com/developerworks/jav a/library/j-struts/
• struts:http://jakarta.apache.org/struts/index.ht ml
• ant:http://jakarta.apache.org/ant/index.html
• maven:http://jakarta.apache.org/turbine/maven/
• log4j:http://jakarta.apache.org/log4j/docs/
• middlegen:http://sourceforge.net/projects/middle genmaven
• maven:http://jakarta.apache.org/turbine/maven/
• xalan:http://xml.apache.org/xalan-j/index.html
• xerces:http://xml.apache.org/xerces2-j/index.htm l

• ArgoUML:http://argouml.tigris.org/
• XDoclet:http://xdoclet.sourceforge.net/
• uml2ejb:http://uml2ejb.sourceforge.net/
• struts:http://www-106.ibm.com/developerworks/jav a/library/j-struts/
• struts:http://jakarta.apache.org/struts/index.ht ml
• ant:http://jakarta.apache.org/ant/index.html
• maven:http://jakarta.apache.org/turbine/maven/
• log4j:http://jakarta.apache.org/log4j/docs/
• middlegen:http://sourceforge.net/projects/middle genmaven
• maven:http://jakarta.apache.org/turbine/maven/
• xalan:http://xml.apache.org/xalan-j/index.html
• xerces:http://xml.apache.org/xerces2-j/index.htm l

• ArgoUML:http://argouml.tigris.org/
• XDoclet:http://xdoclet.sourceforge.net/
• uml2ejb:http://uml2ejb.sourceforge.net/
• struts:http://www-106.ibm.com/developerworks/jav a/library/j-struts/
• struts:http://jakarta.apache.org/struts/index.ht ml
• ant:http://jakarta.apache.org/ant/index.html
• maven:http://jakarta.apache.org/turbine/maven/
• log4j:http://jakarta.apache.org/log4j/docs/
• middlegen:http://sourceforge.net/projects/middle genmaven
• maven:http://jakarta.apache.org/turbine/maven/
• xalan:http://xml.apache.org/xalan-j/index.html
• xerces:http://xml.apache.org/xerces2-j/index.htm l

• ArgoUML:http://argouml.tigris.org/
• XDoclet:http://xdoclet.sourceforge.net/
• uml2ejb:http://uml2ejb.sourceforge.net/
• struts:http://www-106.ibm.com/developerworks/jav a/library/j-struts/
• struts:http://jakarta.apache.org/struts/index.ht ml
• ant:http://jakarta.apache.org/ant/index.html
• maven:http://jakarta.apache.org/turbine/maven/
• log4j:http://jakarta.apache.org/log4j/docs/
• middlegen:http://sourceforge.net/projects/middle genmaven
• maven:http://jakarta.apache.org/turbine/maven/
• xalan:http://xml.apache.org/xalan-j/index.html
• xerces:http://xml.apache.org/xerces2-j/index.htm l

• ArgoUML:http://argouml.tigris.org/
• XDoclet:http://xdoclet.sourceforge.net/
• uml2ejb:http://uml2ejb.sourceforge.net/
• struts:http://www-106.ibm.com/developerworks/jav a/library/j-struts/
• struts:http://jakarta.apache.org/struts/index.ht ml
• ant:http://jakarta.apache.org/ant/index.html
• maven:http://jakarta.apache.org/turbine/maven/
• log4j:http://jakarta.apache.org/log4j/docs/
• middlegen:http://sourceforge.net/projects/middle genmaven
• maven:http://jakarta.apache.org/turbine/maven/
• xalan:http://xml.apache.org/xalan-j/index.html
• xerces:http://xml.apache.org/xerces2-j/index.htm l

• ArgoUML:http://argouml.tigris.org/
• XDoclet:http://xdoclet.sourceforge.net/
• uml2ejb:http://uml2ejb.sourceforge.net/
• struts:http://www-106.ibm.com/developerworks/jav a/library/j-struts/
• struts:http://jakarta.apache.org/struts/index.ht ml
• ant:http://jakarta.apache.org/ant/index.html
• maven:http://jakarta.apache.org/turbine/maven/
• log4j:http://jakarta.apache.org/log4j/docs/
• middlegen:http://sourceforge.net/projects/middle genmaven
• maven:http://jakarta.apache.org/turbine/maven/
• xalan:http://xml.apache.org/xalan-j/index.html
• xerces:http://xml.apache.org/xerces2-j/index.htm l

• ArgoUML:http://argouml.tigris.org/
• XDoclet:http://xdoclet.sourceforge.net/
• uml2ejb:http://uml2ejb.sourceforge.net/
• struts:http://www-106.ibm.com/developerworks/jav a/library/j-struts/
• struts:http://jakarta.apache.org/struts/index.ht ml
• ant:http://jakarta.apache.org/ant/index.html
• maven:http://jakarta.apache.org/turbine/maven/
• log4j:http://jakarta.apache.org/log4j/docs/
• middlegen:http://sourceforge.net/projects/middle genmaven
• maven:http://jakarta.apache.org/turbine/maven/
• xalan:http://xml.apache.org/xalan-j/index.html
• xerces:http://xml.apache.org/xerces2-j/index.htm l

Surprisingly, Tomcat is used in his example setup.

Surprised? Most Java developers use Tomcat for a servlet app server (not a full blown app server, but you can have that if you tie-in JBoss). Tomcat is great for development if you aren't dealing with EJBs.
Most Java developers I know use Tomcat before an app server is chosen so they can get stuff working, and will stay with tomcat unless the customer has a license for an expensive appserver or they are using EJBs.

Not to sound too idiotic, but in my experience you always get what you pay for. If you don't pay enough, you get poor architecture, lack of extensibility, creeping deadlines (if you only have one developer, and he's sick...), and the knowledge is locked with a smaller group. Documentation is ALWAYS the thing that gets cut in an effort to save money, but when you have a group of 10 people working on the project, you cannot work without it, so you can't cut it.

On the other hand, open source projects like ezPublish[ez.no], Apache[apache.org], and MANY others have the benefit of long development times, good documentation, and many developers working on them. That is the way to get less expensive quality software, not to underbid!

Anyways, just my $.02

I encourage developers interested in working on such a replacement to take a look at Jakarta James ( http://jakarta.apache.org/james ).

James is a mail server project designed on top of the Jakarta Avalon Framework. It's a rapidly developing project that is designed to provide mail (SMTP, POP3, IMAP) and other essential services (i.e. NNTP). Speaking as a committer on this project I can tell you that I would welcome a new sub-project to develop iCalendar/vCal compatible services. I think it would be an extremely valuable addition to the project.

Tomcat 4.0 has a manager application that allows you to create/reload/delete a context without restarting the server through a manager application.

The point isn't to send the people away who, through no fault of their own, don't arrive by the front door. The point is to convert them to your own customers.

Try any of them. I use Resin. Others are happy with Tomcat. I've never heard of Jetty, but it may be good, too.

The important thing is that you write your application to the servlet spec. If you do that, switching servlet containers will be completely trivial. So if you later decide you've outgrown Tomcat, try something else instead.

An anonymous reader writes "A flaw in Apache 2.0's interpretation of the backslash delimiter allows for a remote r00ting on NetWare, Windows, and OS/2. InfoWorld has an overview; the attack was discoverd by PivX's Auriemma Luigi, and he describes it in this technical document. I don't know whether there is such a thing as an OS/2 shop anymore, and most Microsoft shops probably run IIS, but Apache now ships as the default web server for NetWare 6, so Novell shops: Take note. A patch is available from Apache, and Luigi describes a workaround in his article."

"Would that tool alleviate this problem?"

http://jakarta.apache.org/tomcat/tomcat-4.0-doc/ma nager-howto.html

This sounds like a pefect job for Ant. I am sure you can find a way to make Ant alter the config files then produce individual WAR files for each server.

And if you are not using Ant for builds, I would highly recommend you check it out. It's saves me so much time and, when I actually did have a job (a year ago), it saved my team and incredible amount of grief and time.

What the hell are you talking about?

You didn't mention what spec you mean but I think you meant that Tomcat implements Servlet, JSP etc. specs poorly?

I wonder what is your standard for poor but you can't get any better compliance than what you get with Tomcat namely it happens to be the official, Sub-blessed reference implementation of these very specs. If you're in doubt, then check these URLs: Java Servlet technology - Implementations ja Specifications at java.sun.com and Front page of Tomcat site. Thank you.

Checkout Apache Test page. Apache comes with Flood, a profile-driven web server tester.

Checkout Apache Test page. Apache comes with Flood, a profile-driven web server tester.

sorry should have previewed. Apache Jakarta

Your looking in the wrong place.

It sounds like what your looking for is really an object-relational wrapper rather than an XML based RDBMS. Take a look at OJB and see if it is not really what you are seeking.

I have been developing with Torque for several months now, and I like it. It does a very nice job of generating DDL SQL and Java model objects from an XML-based schema, but to clarify, it is not an XML database. The API is all straight Java, no XML, and data is still stored in an RDBMS (MySQL, Oracle, DB2, others).

That said, there are some decent tools in Torque to import and export data between XML and RDBMSes, and there is always the Digester utility in the Jakarta Commons project if you want to work in XML, and then store data asynchronously back to an RDBMS.

http://jakarta.apache.org/commons/

Hmm...I wonder where the heck would my career be without Apache?

• Castor - http://castor.exolab.org/
• Hibernate - http://sourceforge.net/projects/hibernate/
• Torque - http://jakarta.apache.org/turbine/torque/
• ObjectRelationalBridge - http://jakarta.apache.org/ojb/

• Castor - http://castor.exolab.org/
• Hibernate - http://sourceforge.net/projects/hibernate/
• Torque - http://jakarta.apache.org/turbine/torque/
• ObjectRelationalBridge - http://jakarta.apache.org/ojb/

I can't believe this was modded up to +3.

"Apache and Perl was the way to go in 1996, but times have changed." What?! This is the same type of fallacious argument that Microsoft uses against UNIX; "it's 30 years old, it can't be any good!"

Of course, generally, the entire reason one uses a high-level language (like Perl, or Python, or PHP, or whatever...) is because quickly putting something together is more important than lightning-fast speed. It's safe to say that web development is one of those tasks which generally benefits more from the former than the latter. With this in mind, your (unsupported claims) of Perl CGI's "efficiency" problems are irrelevant. Could we see something like benchmarks, or any kind of evidence?

Your comment about "serious" webmasters "doing it" in "Java or C" for "serious speed" strikes me as being particularly odd. Your use of the word "serious" seems quite silly; there are plenty of serious 'webmasters' using Perl. As for the languages you mention, almost no one uses C; that defeats the entire purpose of general web development methodology. Again, your claims are completely unsupported by any further evidence.

Personally, if I need to do any web scripting, I have my own language of choice.

You never heard of mod_perl, FastCGI, Embperl, or the Template Toolkit if you're still talking about PERL CGI scripts, have you?

Apache and PERL is still the bleeding edge of web developement. It's just no more alone at the top. Perhaps you should take a look on these Benchmarks. Especially the JSP don't look very good there and Embperl2 is usually very close to PHP regarding performance. Only Apache modules written in C are without real competitor. But you should also think about the ease of developent if you compare C code with PERL, PHP, ASP or JSP.

You never heard of mod_perl, FastCGI, Embperl, or the Template Toolkit if you're still talking about PERL CGI scripts, have you?

Apache and PERL is still the bleeding edge of web developement. It's just no more alone at the top. Perhaps you should take a look on these Benchmarks. Especially the JSP don't look very good there and Embperl2 is usually very close to PHP regarding performance. Only Apache modules written in C are without real competitor. But you should also think about the ease of developent if you compare C code with PERL, PHP, ASP or JSP.

We do most Java server side work with Tomcat which uses XML configuration files. We create a config.xml file with the appropriate settings for each environment and use an Ant task to apply an XSL stylesheet to get the web.xml and server.xml files we need.

We do most Java server side work with Tomcat which uses XML configuration files. We create a config.xml file with the appropriate settings for each environment and use an Ant task to apply an XSL stylesheet to get the web.xml and server.xml files we need.

So snosoft are a security research company? Then how come they haven't bothered updating their web server to fix the security flaw mentioned over a month ago?

According to Netcraft, they're still running Apache 2.0.35...

It seems to be a bug with something that Blizzard is doing because I am yet to BSOD my system on anything but Blizzard games. When StarCraft caused the system to BSOD, I figured it was a problem with the IPX drivers, but since Diablo II can do it on Battle.net, I'm beginning to doubt that. (I've also seen Java manage to reboot my machine randomly - hasn't happened recently, but some how Cocoon managed to reboot my Windows machine with the 1.3 JDK. Don't ask how, it just did...)

I'd guess I have network card issues, something's probably wrong with my LinkSys card drivers ("Works with Linux! Download drivers from our website! Uh, you aren't planning on using the Ethernet for Internet access, right?" - later versions of their driver disk come with Linux drivers, and Linux kernel 2.4.x have the appropriate drivers, but Linux 2.2.x at the time I got the card didn't - meaning a quick boot to Windows before I could get Linux up and running...)

Other than randomly rebooting with JDK 1.3 and the occasional multiplayer Blizzard game BSODing me, Win2k's been rock solid. Although I use Mozilla as my browser, solving the "Explorer bringing the system down" liability that Win2k has. (Mostly when some page causes IE to start chewing threw resources, or when some app manages to crash the Explorer desktop instance and it gets screwed up when it's autorestarted.)

My only beef is that I rarely get "unkillable" processes - processes that Windows claims are being debugged. Ah well - I can deal with it.

It's better than my current Linux Gnome 2 install, which steadfastly refuses to use any window manager except twm... I'll get around to fixing it eventually, but since I mostly use my desktop for games and Java development, I really don't find myself wanting to go back to Linux. Sorry guys...

OK... I'll admit... that does sound very easy. Have you checked out Axis, Apache's rewrite of their original SOAP code? You get the same type of easy deployment. You don't even have to compile:) Axis will also autogenerate the WSDL in the same way ASP.NET does.

The only reason I haven't mentioned it before is because I haven't used it, primarily because it was still not feature complete when I started my project, and the features that were missing were vital to it.

Does anyone know how subversion compares with Slide from the Jakarta Project? Slide is also a WebDAV/DeltaV client and server. In the past, I've been more interested in Slide because it has a more "pluggable" back end (Slide is in Java, and I am a pretty good Java programmer, not so much with the C.) Easier to embed/extend for my own uses.

For example, are the two interoperable in any way? Can you use one's client to talk to the other?

Ant has some pretty cool features (and a few misfeatures, sadly), but it's really caught on in Java-land.

Actually it is not that important to have an open source Java implementation these days; since we have decent JVMs for free (from Sun and IBM for example). What is important is to have a J2EE compliant application server, and we have a production quality solution consisting of JBoss and Tomcat, which are open source.

Gobbles proved them wrong.

(Oh, look, work on Tomcat and we'll make it the reference JSP engine! Oh, now we've changed our minds!)

Sun no longer considers Tomcat to be the reference implmentation for Servlets and JSP? Well, someone should really tell the Jakarta people about that. Look, right on their Tomcat Site, they've got: "Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process." If that's not the case, they really should be told so they can change that blurb!

And this is why MS and Apache get together regularly for better compatibility between Apache's Axis and MS' .NET thing. I don't want to give up my server platform of choice (FreeBSD), but would certainly like to still be able to allow SOAP clients from the Java, .NET, Perl, etc. worlds access my services.

... Microsoft will have to be careful about the structural arrangement into Apache, or GPL claims could reach into .NET and hamper a .NET2 shutout.

If you want Open Source politics, you might want to look at organizations like the
Apache (www.apache.org/foundation),
Gnome (foundation.gnome.org), and
Python (www.python.org/psf) Foundations.
I worked on the Jabber Software Foundation
(http://www.jabber.org/jsf.html) for a while. We developed special interest groups and and an enhancement proposal system based on similar things at Gnome and Python. There is a Jabber Council for which elections are currently underway that form a main decision-making body for Jabber. I put together a piece based on my experience advocating establishing an Open Corporation for your efforts. Still, benevelent dicatorship still has a lot to be said for it, though.

Before people get in a huff, we should mention that Apache has a history of integrating well with other technologies, those considered to be "evil" by some people, and others as well. I mean, look at Apache and Java. What about XML? Not to mention perl, PHP, TCL, and others.

Java is not a warm and fuzzy free technology. I daresay it's every bit as proprietary as .NET, just in a different way. Apache is wise to be as flexible and accomodating as possible - it's a good thing that it supports .NET, since it will most likely do it in a free way and expose more people to free software. On the other hand, it could always *not* support .NET, lose more market share to IIS, and generally piss people off who are using .NET technologies by wider corporate edict.

Before people get in a huff, we should mention that Apache has a history of integrating well with other technologies, those considered to be "evil" by some people, and others as well. I mean, look at Apache and Java. What about XML? Not to mention perl, PHP, TCL, and others.

Java is not a warm and fuzzy free technology. I daresay it's every bit as proprietary as .NET, just in a different way. Apache is wise to be as flexible and accomodating as possible - it's a good thing that it supports .NET, since it will most likely do it in a free way and expose more people to free software. On the other hand, it could always *not* support .NET, lose more market share to IIS, and generally piss people off who are using .NET technologies by wider corporate edict.

I remember reading up on a project, called JAMES, under the Apache Jakarta wing for a Java based MTA, with the Apache Avalon framework.

Such frameworks might encourage more advanced filter systems to come out, while maintaining efficiency. Unfortunately, it doesn't lend itself to be compatible with several MTAs.

-Alex

I remember reading up on a project, called JAMES, under the Apache Jakarta wing for a Java based MTA, with the Apache Avalon framework.

Such frameworks might encourage more advanced filter systems to come out, while maintaining efficiency. Unfortunately, it doesn't lend itself to be compatible with several MTAs.

-Alex

Amazingly, I haven't seen any mention of Jakarta, an all-Java project of the Apache Software Foundation (ASF).

Here's my list...

• java.sun.com and developer.java.sun.com
• jakarta.apache.org
• www.theserverside.com

From my viewpoint, these links have served me well for both C++ and Java.
Java's Home
SourceForge - cannot live without
Apache - there is no other
JGuru
IBM DeveloperWorks
Eclipse OR NetBeans
Google is the main site I use
Cetus Links

There is an Apache fix that will patch the older versions of Apache. That is what I did on my webserver.

You might want to check out the advisory

Apache don't seem to think that the patch is really enough (emphasis mine):

"Note that early patches for this issue released by ISS and others do not
address its full scope."

"The Apache Software Foundation has released versions 1.3.26 and 2.0.39
that address and fix this issue, and all users are urged to upgrade
immediately."

The Apache http server page also adds:

"If, for any reason, you are unable to upgrade at this time, as a minimum, this patch for httpd 1.2.0-1.3.22 should be applied to the source code."

Apache webmasters beware: Don't fall into the trap that IIS webmasters fell into. If you fail to address security issues like this fully, you could end up making your webserver of choice look bad.

Linux is a safe haven.

Just a side note, if anyone ever came up with a virus that was as devastating to apache as code red was to IIS, I think Linux would be doomed.

What about the Apache vulnerability that was discoverd a couple of weeks ago? I would think there are still loads of people who haven't patched their servers (and even the patch does not give full protection. See the advisory).

Microsoft are addressing the issue of applying patches to products such as IIS with features that remind system admisitrators about new patches and automate the process of applying them.

I really think that open source systems such as Apache will need to have features like these if they are to compete strongly.

If Code Red taught us one thing, it was that the application of patches is as important as the patches themselves (MS released a patch that prevented Code red infection months before the outbreak)