Nabble - Netbeans.org

Re: Enterprise app client, additional jars and Java web start: ClassNotFoundException

2009-12-18T05:58:53Z

Hi, David.

I am able to reproduce this. It's a GlassFish bug.

There are actually multiple generated JNLP files. The problematic one is (probably) named client-libs-s1as.jnlp. You can view it using the Java Web Start cache viewer: launch it using

javaws -viewer

GlassFish is generating the URLs in that JNLP document incorrectly. The URLs should use "http:" and not "file:" and should be relative to the codebase but instead are absolute and refer to the files on the disk. The file is there but, as Java Web Start says, it is not signed.

I have created a new GlassFish issue for this:

https://glassfish.dev.java.net/issues/show_bug.cgi?id=11339

There is an (inconvenient) workaround... If you create an EAR file using NetBeans and then deploy the EAR file - using either the "asadmin deploy" command or the admin GUI then you will be able to launch the client successfully.

Sorry it took so long to pin this down. Thanks for your patience and for trying all my suggestions and furnishing all the information along the way. Feel free to add yourself to the cc list for that issue.

- Tim

dbritton wrote:

Tim,
 

I changed the http listerer to port 8081.  Laptop is installed on default port of 8080 and has same symptom.

When I said that I could run the client outside of netbeans, I meant by using "java" to run the client.  I tried using javaws and I get the same result.  So I don't think there is a Netbeans issue.

Thanks for the explaintion on the directories.

OK, about the signed/ directory... The auto-signed files will reside 
there, and GlassFish creates each signed JAR when it receives the first 
request for that file. (The files need to be signed because app clients 
- and the ACC itself - need to run with elevated permissions and Java 
Web Start insists on signed JARs to permit that.) That directory is 
empty so far because, for the problems you've been encountering, 
GlassFish has not yet received a specific request for one of the JARs 
that needs to be signed



I thought I had bee requesting those jars via the browser and now javaws.
It seems like glassfish is not signing them and moving them to the signed dir automatically.

Here is a copy of the launch file

<?xml version="1.0" encoding="UTF-8"?>
<!--
 * To change this template, choose Tools | Templates
 * and open the template in the editor.
 *
 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
 *
 * Copyright 1997-2009 Sun Microsystems, Inc. All rights reserved.
 *
 * The contents of this file are subject to the terms of either the GNU
 * General Public License Version 2 only ("GPL") or the Common Development
 * and Distribution License("CDDL") (collectively, the "License").  You
 * may not use this file except in compliance with the License. You can obtain
 * a copy of the License at https://glassfish.dev.java.net/public/CDDL+GPL.html
 * or glassfish/bootstrap/legal/LICENSE.txt.  See the License for the specific
 * language governing permissions and limitations under the License.
 *
 * When distributing the software, include this License Header Notice in each
 * file and include the License file at glassfish/bootstrap/legal/LICENSE.txt.
 * Sun designates this particular file as subject to the "Classpath" exception
 * as provided by Sun in the GPL Version 2 section of the License file that
 * accompanied this code.  If applicable, add the following below the License
 * Header, with the fields enclosed by brackets [] replaced by your own
 * identifying information: "Portions Copyrighted [year]
 * [name of copyright owner]"
 *
 * Contributor(s):
 *
 * If you wish your version of this file to be governed by only the CDDL or
 * only the GPL Version 2, indicate your decision by adding "[Contributor]
 * elects to include this software in this distribution under the [CDDL or GPL
 * Version 2] license."  If you don't indicate a single choice of license, a
 * recipient has the option to distribute your version of this file under
 * either the CDDL, the GPL Version 2 or to extend the choice of license to
 * its licensees as provided above.  However, if you add GPL Version 2 code
 * and therefore, elected the GPL Version 2 license, then the option applies
 * only if the new code is made subject to such option by the copyright
 * holder.
-->
<jnlp
    spec="1.0+"
    codebase="http://localhost:47762/___JWSappclient/___app/JWSv3"
    href="___dyn/JWSv3-app-client.jarClient/___main.jnlp">
    <information>
        <title>JWSv3-app-client</title>
        <vendor>Application Client</vendor>
        <homepage href="${appclient.information.homepage.filepath}"/>
        <description kind="one-line">JWSv3-app-client</description>
        <description kind="short">JWSv3-app-client</description>
        
    <offline-allowed/>
    </information>

    <security>
        <all-permissions/>
    </security>

    <resources>
        
<!--        <java version="1.6+"
             java-vm-args="-showversion -javaagent=glassfish/modules/gf-client.jar=mode=jws,${agent.args} " /> -->
        <java version="1.6+" java-vm-args="" />
        
        <!-- 
            In v3, run the client facade as the main JAR. Eventually Java Web
            Start might support the splash screen in the JAR.
        -->
        <jar href="JWSv3Client/JWSv3-app-clientClient.jar" main="true" />
        
        <!--
            If the client is part of an EAR then there will be an EAR-level
            generated facade JAR file.
        -->
        <jar href="JWSv3Client.jar"/>

        <!--
            These next JARs will have been signed using the
            deployer-specified alias, if specified, or the default domain alias.
            Note that even though these are fetched within the code base of the
            app, we do not sign these once for each app but reuse ones
            signed with the same alias.
        -->
        <jar href="glassfish/modules/gf-client.jar"/>
        <jar href="glassfish/modules/gf-client-module.jar"/>

        <!--
            Refer to extension JNLP documents which list other resources - JARs and JNLPs.

            The system extension lists the JARs that are common to all apps.  The
            facade extension lists the generated facade JAR file for the client.
            The client extension lists the client JAR.  The library extension
            lists JARs from the EAR application to which the client directly
            or indirectly refers.
        -->
        <extension name="___system" href="http://localhost:47762/___JWSappclient/___system/___dyn/___system.jnlp"/>
        <extension name="___client" href="___dyn/JWSv3-app-client.jarClient/___client.jnlp"/>

        <extension name="libJars-s1as" href="___lib/client-libs-s1as.jnlp"/>

        <property name="appclient.system.codebase" value="http://localhost:47762/___JWSappclient/___system"/>
        <property name="appclient.is.jws" value="true"/>

        <property name="agent.args" value="mode=jws,client=url=http://localhost:47762/___JWSappclient/___app/JWSv3/JWSv3Client/JWSv3-app-clientClient.jar,arg=-targetserver,arg=localhost:47719"/>

        <property name="client.facade.jar.path" value="JWSv3Client/JWSv3-app-clientClient.jar"/>
        <property name="full.app.codebase.path" value="http://localhost:47762/___JWSappclient/___app/JWSv3"/>
        <!--
            Properties specified on the request as query parameters (if any)
        -->
        

        <!--
            Content normally read from files during an appclient script launch.
        -->
        <property name="sun-acc.xml.content" value="&lt;?xml version=&quot;1.0&quot; encoding=&quot;UTF-8&quot;?&gt;

&lt;!--
   Copyright 2004-2005 Sun Microsystems, Inc. All rights reserved.
   Use is subject to license terms.
--&gt;

&lt;!--
   Please remember to customize this file for your environment. The defaults for 
   following fields may not be appropriate.  
   - target-server name, address and port
   - Property security.config in message-security-config
--&gt;

&lt;!DOCTYPE client-container PUBLIC &quot;-//Sun Microsystems Inc.//DTD Application Server 8.0 Application Client Container//EN&quot; &quot;http://www.sun.com/software/appserver/dtds/sun-application-client-container_1_2.dtd&quot;&gt;

&lt;client-container&gt;
  &lt;target-server name=&quot;Io&quot; address=&quot;localhost&quot; port=&quot;47719&quot;/&gt;
  &lt;log-service file=&quot;&quot; level=&quot;WARNING&quot;/&gt;
  &lt;message-security-config auth-layer=&quot;SOAP&quot;&gt;
    &lt;!-- turned off by default --&gt;
    &lt;provider-config class-name=&quot;com.sun.xml.wss.provider.ClientSecurityAuthModule&quot; provider-id=&quot;XWS_ClientProvider&quot; provider-type=&quot;client&quot;&gt; 
      &lt;request-policy auth-source=&quot;content&quot;/&gt;
      &lt;response-policy auth-source=&quot;content&quot;/&gt;
      &lt;property name=&quot;encryption.key.alias&quot; value=&quot;s1as&quot;/&gt;
      &lt;property name=&quot;signature.key.alias&quot; value=&quot;s1as&quot;/&gt;
      &lt;property name=&quot;dynamic.username.password&quot; value=&quot;false&quot;/&gt;
      &lt;property name=&quot;debug&quot; value=&quot;false&quot;/&gt;
    &lt;/provider-config&gt;
    &lt;provider-config class-name=&quot;com.sun.xml.wss.provider.ClientSecurityAuthModule&quot; provider-id=&quot;ClientProvider&quot; provider-type=&quot;client&quot;&gt; 
      &lt;request-policy auth-source=&quot;content&quot;/&gt;
      &lt;response-policy auth-source=&quot;content&quot;/&gt;
      &lt;property name=&quot;encryption.key.alias&quot; value=&quot;s1as&quot;/&gt;
      &lt;property name=&quot;signature.key.alias&quot; value=&quot;s1as&quot;/&gt;
      &lt;property name=&quot;dynamic.username.password&quot; value=&quot;false&quot;/&gt;
      &lt;property name=&quot;debug&quot; value=&quot;false&quot;/&gt;
      &lt;property name=&quot;security.config&quot; value=&quot;${security.config.path}&quot;/&gt;
    &lt;/provider-config&gt;
  &lt;/message-security-config&gt;
&lt;/client-container&gt;
"/>
        <property name="appclient.login.conf.content" value="/*  Copyright 2004 Sun Microsystems, Inc.  All rights reserved.    */
/*  SUN PROPRIETARY/CONFIDENTIAL. Use is subject to license terms. */

default {
	com.sun.enterprise.security.auth.login.ClientPasswordLoginModule required debug=false;
};

certificate {
	com.sun.enterprise.security.auth.login.ClientCertificateLoginModule required debug=false;
};
"/>
        <property name="message.security.config.provider.security.config"
            value="&lt;!--
Copyright 2004 Sun Microsystems, Inc. All rights reserved.
SUN PROPRIETARY/CONFIDENTIAL. Use is subject to license terms.
--&gt;
&lt;!--
 This client side config file pairs with wss-server-config-1.0.xml on the server
 and supports the following UseCases:
 Usecase 1: Authentication by Protected UsernameToken
 Usecase 3: Encrypted UsernameToken and MessageBody
 Usecase 4: Response Encryption Key Learnt from Incoming Message

 Certificate Alias Information :
 1. A certificateAlias under the &lt;xwss:Encrypt&gt; element signifies the certificate
    of the recipient of the message.
 2. A certificateAlias under the &lt;xwss:Sign&gt; element signifies the certificate of the
    sender.

 NOTE: 

   1. the certificateAlias has the above meaning for all the Sign and Encrypt elements below
   2. there are several Sign and Encrypt elements below and similarly several RequireSignature and
      RequireEncryption elements. Which of them would be actually used at runtime will depend on
      the AuthPolicy passed to the module.

      For Example : if Auth-Source=Sender then only the &lt;xwss:UsernameToken&gt; elements will be used
      and none of the &lt;xwss:Sign&gt; elements will be used.
      If Auth-Source=Content then the &lt;xwss:Sign&gt; element will be used

   3.  The different variations of &lt;xwss:Encrypt&gt; elements in this configuration file are to accomodate
       default encryption of the UsernameToken.

   4.  The actual certificate alias to be used for any Signature operation can be modified during AuthModule
       initialization by setting the alias as the value of &quot;signature.key.alias&quot; property in the Module Options Map.
   5.  The actual certificate alias to be used for any Encrypt operation can be modified during AuthModule
       initialization by setting the alias as the value of &quot;encryption.key.alias&quot; 
jnlp file truncated after 10K



Sorry for the long response and misleading you about being able to launch
outside of NB.  I cannot launch outside  of NB.

Regards,
David

From forum: Netbeans - J2EE

Re: newbie frustration

2009-12-18T05:44:40Z

I will write some blog post about how to do this in the way that is the
most similar to MSVS (if I recall correctly, you just dropped the
component in the designer and it was displayed below the form, then you
could edit its properties in some more friendly way, right?)

Stay tuned;)...

--pd

Don Millhofer wrote:

> Hi Andrew tutorials aren't for eveyone - why not try the library. Get
> a basic Java programming manual.
>
> Don
>
> Thomas Wolf wrote:
>> Andrew,
>> I've never used VC/C++ (well, I've used C++ quite a bit, but never
>> Microsoft's IDE), but when it comes to Netbeans, it's pretty much a
>> "must" to know Java/Swing before you can understand what the IDE is
>> doing (you can "use" it, but a lot of what gets generated by the
>> builder will be a mystery if you don't). On top of this, since NB is
>> OS, the help documentation has not gotten a lot of love in recent
>> years, it seems. Java/Swing tutorials that are very good can be
>> found at:
>> http://java.sun.com/docs/books/tutorial/uiswing/
>> I would suggest working yourself through some of the examples
>> *without* trying to use the NB GUI builder (you alluded to the fact
>> that some tutorials you came across don't use the builder - that's
>> *good* - understanding of Swing should not be comingled with
>> understanding the GUI builder - it should precede it). Once you've
>> done that, try some simple GUIs with the GUI builder. There's
>> nothing magic about it - it simply creates the Java code in the
>> initComponents() method that you would have written by hand anyway
>> (well, the generated code is not as efficient, but that's not so
>> important). Since you're letting the GUI builder do your job for
>> you, you can't mess with the code it needs to re-generate as you
>> drag/drop the GUI components around - that's why those blocks are
>> made read-only in NB (if you go into them using notepad, your changes
>> are likely to disappear the next time you make any changes via the
>> GUI builder). But the builder gives you many hooks through which you
>> can add code that will be then referenced from the protected blocks.
>> Those hooks are found in the "Events" and "Code" tabs of the
>> properties window in the GUI builder.
>>
>> Hope this helps,
>> tom
>>
>>
>> On 12/17/2009 06:34 AM, mistertransistor wrote:
>>> Petr
>>> many thanks for the response. You say that I "should acquire at
>>> least basic knowledge of Java concepts and workflows". That's
>>> exactly what I'm trying to do. My point is that the tutorials and
>>> code examples all assume that the reader has this knowledge. Your
>>> reponse
>>> "you just implement a method "processFileChooser(...)" or whatever
>>> name you like and you call the method from within both action" is
>>> exactly the kind of thing I am failing to find.
>>>
>>> How do you suggest I acquire this knowledge?
>>>
>>> Andrew
>>>
>>>
>>>
>>>
>>>
>> **********************************************************************************************
>>
>> IMPORTANT: The contents of this email and any attachments are
>> confidential. They are intended for the named recipient(s) only.
>> If you have received this email in error, please notify the system
>> manager or the sender immediately and do not disclose the contents to
>> anyone or make copies thereof.
>> *** eSafe scanned this email for viruses, vandals, and malicious
>> content. ***
>> **********************************************************************************************
>>
>>
>>
>

My websites:

Nabble - Netbeans.org

Re: Enterprise app client, additional jars and Java web start: ClassNotFoundException

Re: newbie frustration

Re: Migrating NB6.7 projects to NB6.8 - reference issues.

Compile on Save, target specification

Re: Netbeans 6.8 Maven projects - How to activate multiple profiles?

Re: JUnit test execution order

Re: Swing Application Desktop

Re: Swing Application Desktop

Re: looking for a tutorial with a file chooser

Re: Jaxb API 2.2 on Mac OS X

Re: Netbeans takes long time to startup! (newbie)

2009-2010

Why Ge ts ner lg ic?

Why Cho xhs ose D uz r xs ugstore?

Does debugger work slower in 6.8?

JPA JTable with more records

Add a folder with a name different from the package name

HELP: XML Schema editor in IDE 6.8 - missing when click "XML" at "new file"

Swing Application Desktop

Migrate 3.0 to 3.1 beans

OS X Snow Leopard/NB6.1

JAX-WS Client with user defined classes

Re: Netbeans takes long time to startup! (newbie)

NB build fails on dependency

Missing Underscore in Netbeans

Re: How to force NB6.8 to recognize an file without extension in ./bin as a ruby file?

Download a file

Just a Thank You to Netbeans contributors

Scala Plugin with NB 6.8

org.glassfish.appclient.client.acc.UserError: ACC007

Download a file

GoToImplementation Java Plugin

Re: OS X Snow Leopard/NB6.1

what controls generated javadoc code snippets?

(no subject)

An Error Occurred:

+- Stack Trace

Netbeans takes long time to startup! (newbie)

Re: JUnit test execution order