Key-Encryption-key support, r1334257

[c.schinzer-2]

Hello all,


I do have issues with this as follows:

After downloading the latest trunk for my monthly merge release I do find
issues with my tenant data sources as the framework complains, kekText was
too short (not to say NULL). Digging deeper I finally found out that it
should be possible to generate respective keys for each delegator using
org.ofbiz.crypto.Main class which is designed to be a standalone
commandline class. So I invoked it as :

> java -cp ofbiz.jar org.ofbiz.base.crypto.Main -kek
Exception in thread "main" java.lang.NoClassDefFoundError:
org/ofbiz/base/crypto
/Main
Caused by: java.lang.ClassNotFoundException: org.ofbiz.base.crypto.Main
        at java.net.URLClassLoader$1.run(URLClassLoader.java:202)
        at java.security.AccessController.doPrivileged(Native Method)
        at java.net.URLClassLoader.findClass(URLClassLoader.java:190)
        at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
        at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:301)
        at java.lang.ClassLoader.loadClass(ClassLoader.java:248)
Could not find the main class: org.ofbiz.base.crypto.Main.  Program will
exit.
>

Now this is surprising as this class definitely is in the respective
package and jar file.
Anything I am not seeing here?

Running this very class directly off my Eclipse IDE results in the same
Exception by the way.

On top of this, the documentation available on this important feature is
extremely slim (to say the least), however any tenant setup from before
this commit will not be able to run any more apparently. So I find it would
be good to release such features only *with* sufficient documentation, at
least on the JIRA.

Adam's comment on
http://mail-archives.apache.org/mod_mbox/ofbiz-dev/201205.mbox/%3C4FA8404A.8060104@...%3E
underlines this and I would be happy to help, however without an even
initial howto and working code I do have difficulty to provide that.

Also: Is the a JIRA reference for this feature enhancement?

Kind regards


Carsten

[Adrian Crum-3]

Try using ofbiz-base.jar instead of ofbiz.jar.

-Adrian

On 11/17/2012 5:05 PM, Carsten Schinzer wrote:

> Hello all,
>
>
> I do have issues with this as follows:
>
> After downloading the latest trunk for my monthly merge release I do find
> issues with my tenant data sources as the framework complains, kekText was
> too short (not to say NULL). Digging deeper I finally found out that it
> should be possible to generate respective keys for each delegator using
> org.ofbiz.crypto.Main class which is designed to be a standalone
> commandline class. So I invoked it as :
>
>> java -cp ofbiz.jar org.ofbiz.base.crypto.Main -kek
> Exception in thread "main" java.lang.NoClassDefFoundError:
> org/ofbiz/base/crypto
> /Main
> Caused by: java.lang.ClassNotFoundException: org.ofbiz.base.crypto.Main
>          at java.net.URLClassLoader$1.run(URLClassLoader.java:202)
>          at java.security.AccessController.doPrivileged(Native Method)
>          at java.net.URLClassLoader.findClass(URLClassLoader.java:190)
>          at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
>          at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:301)
>          at java.lang.ClassLoader.loadClass(ClassLoader.java:248)
> Could not find the main class: org.ofbiz.base.crypto.Main.  Program will
> exit.
> Now this is surprising as this class definitely is in the respective
> package and jar file.
> Anything I am not seeing here?
>
> Running this very class directly off my Eclipse IDE results in the same
> Exception by the way.
>
> On top of this, the documentation available on this important feature is
> extremely slim (to say the least), however any tenant setup from before
> this commit will not be able to run any more apparently. So I find it would
> be good to release such features only *with* sufficient documentation, at
> least on the JIRA.
>
> Adam's comment on
> http://mail-archives.apache.org/mod_mbox/ofbiz-dev/201205.mbox/%3C4FA8404A.8060104@...%3E
> underlines this and I would be happy to help, however without an even
> initial howto and working code I do have difficulty to provide that.
>
> Also: Is the a JIRA reference for this feature enhancement?
>
> Kind regards
>
>
> Carsten
>

[Jacques Le Roux]

I'm not quite sure because there is any documentation but you might also be interested by the gen-kek ant target

We asked for details, still waiting http://markmail.org/message/546ktszoki7aahy2 ...

Adam?

Jacques

From: "Adrian Crum" <[hidden email]>

> Try using ofbiz-base.jar instead of ofbiz.jar.
>
> -Adrian
>
> On 11/17/2012 5:05 PM, Carsten Schinzer wrote:
>> Hello all,
>>
>>
>> I do have issues with this as follows:
>>
>> After downloading the latest trunk for my monthly merge release I do find
>> issues with my tenant data sources as the framework complains, kekText was
>> too short (not to say NULL). Digging deeper I finally found out that it
>> should be possible to generate respective keys for each delegator using
>> org.ofbiz.crypto.Main class which is designed to be a standalone
>> commandline class. So I invoked it as :
>>
>>> java -cp ofbiz.jar org.ofbiz.base.crypto.Main -kek
>> Exception in thread "main" java.lang.NoClassDefFoundError:
>> org/ofbiz/base/crypto
>> /Main
>> Caused by: java.lang.ClassNotFoundException: org.ofbiz.base.crypto.Main
>>          at java.net.URLClassLoader$1.run(URLClassLoader.java:202)
>>          at java.security.AccessController.doPrivileged(Native Method)
>>          at java.net.URLClassLoader.findClass(URLClassLoader.java:190)
>>          at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
>>          at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:301)
>>          at java.lang.ClassLoader.loadClass(ClassLoader.java:248)
>> Could not find the main class: org.ofbiz.base.crypto.Main.  Program will
>> exit.
>> Now this is surprising as this class definitely is in the respective
>> package and jar file.
>> Anything I am not seeing here?
>>
>> Running this very class directly off my Eclipse IDE results in the same
>> Exception by the way.
>>
>> On top of this, the documentation available on this important feature is
>> extremely slim (to say the least), however any tenant setup from before
>> this commit will not be able to run any more apparently. So I find it would
>> be good to release such features only *with* sufficient documentation, at
>> least on the JIRA.
>>
>> Adam's comment on
>> http://mail-archives.apache.org/mod_mbox/ofbiz-dev/201205.mbox/%3C4FA8404A.8060104@...%3E
>> underlines this and I would be happy to help, however without an even
>> initial howto and working code I do have difficulty to provide that.
>>
>> Also: Is the a JIRA reference for this feature enhancement?
>>
>> Kind regards
>>
>>
>> Carsten
>>
>

[c.schinzer-2]

Hello again and thanks.

ant target works, the different jarfile does in principle as well, would
need the full cp though incuding the reference to commons-codec library.

I got my stuff and will continue working my way through to make my
databases and tenant dbs crypto-ready !

Thanks & regards


Carsten


2012/11/18 Jacques Le Roux <[hidden email]>

> I'm not quite sure because there is any documentation but you might also
> be interested by the gen-kek ant target
>
> We asked for details, still waiting
> http://markmail.org/message/546ktszoki7aahy2 ...
>
> Adam?
>
> Jacques
>
> From: "Adrian Crum" <[hidden email]>
>  > Try using ofbiz-base.jar instead of ofbiz.jar.
> >
> > -Adrian
> >
> > On 11/17/2012 5:05 PM, Carsten Schinzer wrote:
> >> Hello all,
> >>
> >>
> >> I do have issues with this as follows:
> >>
> >> After downloading the latest trunk for my monthly merge release I do
> find
> >> issues with my tenant data sources as the framework complains, kekText
> was
> >> too short (not to say NULL). Digging deeper I finally found out that it
> >> should be possible to generate respective keys for each delegator using
> >> org.ofbiz.crypto.Main class which is designed to be a standalone
> >> commandline class. So I invoked it as :
> >>
> >>> java -cp ofbiz.jar org.ofbiz.base.crypto.Main -kek
> >> Exception in thread "main" java.lang.NoClassDefFoundError:
> >> org/ofbiz/base/crypto
> >> /Main
> >> Caused by: java.lang.ClassNotFoundException: org.ofbiz.base.crypto.Main
> >>          at java.net.URLClassLoader$1.run(URLClassLoader.java:202)
> >>          at java.security.AccessController.doPrivileged(Native Method)
> >>          at java.net.URLClassLoader.findClass(URLClassLoader.java:190)
> >>          at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
> >>          at
> sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:301)
> >>          at java.lang.ClassLoader.loadClass(ClassLoader.java:248)
> >> Could not find the main class: org.ofbiz.base.crypto.Main.  Program will
> >> exit.
> >> Now this is surprising as this class definitely is in the respective
> >> package and jar file.
> >> Anything I am not seeing here?
> >>
> >> Running this very class directly off my Eclipse IDE results in the same
> >> Exception by the way.
> >>
> >> On top of this, the documentation available on this important feature is
> >> extremely slim (to say the least), however any tenant setup from before
> >> this commit will not be able to run any more apparently. So I find it
> would
> >> be good to release such features only *with* sufficient documentation,
> at
> >> least on the JIRA.
> >>
> >> Adam's comment on
> >>
> http://mail-archives.apache.org/mod_mbox/ofbiz-dev/201205.mbox/%3C4FA8404A.8060104@...%3E
> >> underlines this and I would be happy to help, however without an even
> >> initial howto and working code I do have difficulty to provide that.
> >>
> >> Also: Is the a JIRA reference for this feature enhancement?
> >>
> >> Kind regards
> >>
> >>
> >> Carsten
> >>
> >
>

[Adam Heath-2]

On 11/18/2012 05:38 AM, Carsten Schinzer wrote:
> Hello again and thanks.
>
> ant target works, the different jarfile does in principle as well, would
> need the full cp though incuding the reference to commons-codec library.
>
> I got my stuff and will continue working my way through to make my
> databases and tenant dbs crypto-ready !
>
> Thanks & regards

Yeah, we don't use tenants here, so I have no way to test that.  I
would hope that the system works without actually having a kek
defined, and just would function like it used to(if the kek is
null/not-defined, it skips the code block).

[c.schinzer-2]

Well it definitely did not feel 'smooth' but whether this was because I
misinterpreted the filed and filled with other stuff or implicit I do not
know.
I have created a kek for each Tenant, loaded the data to the
tenant-database and off it went. Some hickups then, but likely unrelated to
this one and rather due to the patch-up to current trunk which I tend to to
on a monthly basis.

I shall add some lines to the Multitenancy page then.

Thanks & regards


Carsten

2012/11/21 Adam Heath <[hidden email]>

> On 11/18/2012 05:38 AM, Carsten Schinzer wrote:
> > Hello again and thanks.
> >
> > ant target works, the different jarfile does in principle as well, would
> > need the full cp though incuding the reference to commons-codec library.
> >
> > I got my stuff and will continue working my way through to make my
> > databases and tenant dbs crypto-ready !
> >
> > Thanks & regards
>
> Yeah, we don't use tenants here, so I have no way to test that.  I
> would hope that the system works without actually having a kek
> defined, and just would function like it used to(if the kek is
> null/not-defined, it skips the code block).
>