Saturday, 29 December 2007

Why JBoss Microcontainer doesn't work for me

First off the JBoss Microcontainer is a big step forward for JBoss. It will hopefully let the meaty parts of the appserver unhinge from the gooey stuff that is the API. However, I can't help but not think that it is that big of the deal for the rest of the world. First off, since Spring added annotations as seemingly first class citizens, I think the only profound step forward for the JBoss Microcontainer is:

  • Hibernate Annotations/EJB3 as first class citizens (you can even scan a directory for them with an ant task from a plain Java application)
  • Designed rather than organic. This is like "gee if we had it to do all over today we would..." This is especially apparent when you DO write XML. Spring's XML has always made me gag. The JBoss MC ones only make me slightly sick to my stomach.
  • Persisted attributes. This was most of the point really. Somewhere this was supposed to be configurable to different stores. This seems under documented.

Springy people are going to comment and tell me how wrong I am about even these things and that is fine, but I've actually looked and at least run both where they'll just run around looking for anything that is positive about anything else and "correct" (I only like one "evangelist" in the world and think the rest of you are techno-scum and worse the kind that aren't paid to do it are messed in the head to boot) :-).

For JBoss users the Microcontainer is probably going to be a snoozer. They're probably going to find more third-party reference material and tutorials on Spring and even Guice. There probably will be better Eclipse tools and other tool integration for Spring. For JBoss internals this will probably be a big deal. For users of OTHER appservers, this is a biggy as JBoss is developing some really good stuff that will no longer be strictly bound to JBoss. In some ways I hope this along with OSGi support shrinks JBossAS and allows it to finally be right-sizable by dumb people.

For Meldware this misses the mark because it still "by Java developers and for Java developers". It doesn't abstract configuration from Java. Meldware users don't as a whole care much about Java. The developers mostly whine about it as it is a means to an ends and not all that interesting in itself.

<javabean xmlns="urn:jboss:javabean:2.0" class="org.jboss.test.javabean.support.SimpleBean">
    <property name="ADouble">3.14e12</property>
    <property name="ADate">Jan 01 00:00:00 CET 2001</property>
    <property name="ABigDecimal">12e4</property>
    <property name="ABigInteger">123456</property>
    <property name="abyte">12</property> 
</javabean>

JBoss MC "javabean" descriptor

How many system administrators do you think really want to think about WHAT class we implemented the SMTP Protocol in? How many do you think want to know what class we implemented the socket listener in? Probably pretty few. They may want to declare another socket bound to the same SMTLSSL service they defined but I can't imagine that they want to type all this org crap. Secondly try writing a tool that can not only read, write but update this!!! (I did for JBossMX the MC predecessor and it hurts my head)

For us we want a way to use Java to define a service "smtp" and then configure the service:

exampleService {
  type           = example
  setting        = "settingValue"
  anotherSetting = 4
}

bkernel prototype out of a unit test

Where did all the Java crap go? It is behind the definition of "example" which is either an annotation or in another file somewhere. It probably never changes so WHO CARES. It is a "type" of thing to be configured. Indeed this may also look like:

...
dn: ou=Services,dc=buni,dc=org
objectClass: organizationalunit
objectClass: top
ou: Services

dn: cn=Service,ou=Services,dc=buni,dc=org
ObjectClass: bkernelService
objectClass: top
setting: o=setting,cn=Service,ou=Services,dc=buni,dc=org
setting: o=anotherSetting,cn=Service,ou=Services,dc=buni,dc=org
cn: Service

dn: o=setting,cn=Service,ou=Services,dc=buni,dc=org
ObjectClass: bkernelServiceSetting
objectClass: top
value: settingValue
o: setting

dn: o=anotherSetting,cn=Service,ou=Services,dc=buni,dc=org
ObjectClass: bkernelServiceSetting
objectClass: top
value: 4
o: anotherSetting

LDIF from one of Andy's nightmeres

That looks like something logical exploded and its guts were left on the road but that is not intended to be written by hand but generated by tools or processes inside of LDAP. The advantage is that you can centralize configuration in a directory with replication and all that cool stuff. Moreover this stuff is poorly expressed in a relational database as the stuff is really more of a tree and walking a tree in ANSI SQL is at least horrible.

The point is that the microcontainer is still just Spring reloaded. For me it isn't very useful because I can't abstract the Java out of my configuration. For Java Application developers who do not work with non-Java programmers, "who cares". For me...it's just another flavor of the same stuff we've all been smoking for a few years now. Let's have some config files that don't look like throw-up and don't expose your guts to the world. For JBoss...when is JBossAS 5 coming out again (okay I'm a hypocrite but it is still a good question)?

Technorati Tags:

Posted by acoliver at 3:12 PM in Open Source

Monday, 3 December 2007

More on OpenDS...and Sun's interesting views on what open source are

The other day I wrote on Sun's dirty tricks re: the apparently not quite open source OpenDS. Sun's new "OpenDS Community Leader" Ludovic Poitou has posted a response that more or less calls all the developers Sun let go -- for their not being French* and then subsequently forced out of the project -- liars. *(this is the only explanation that has been given up until now). Following this I posted that I didn't really feel the response was all that satisfying. To which the Distinguished Engineer posted a challenge to suggest a response that would be satisfying. I replied:

The license is not enough to create open source. Your governance model is de facto shared-source if not de jure.

The obvious:

  • 1. Restore all developers who were forced to resign
  • 2. Restore the governance to the state prior to your recent reversion
  • 3. Discuss the proposed changes with the full community.
  • 4. Management apology for this behavior and a promise that it will not happen again.

The ideal:

  • 5. Rehire those developers who want to come back in their previous positions.

Not surprisingly he didn't like that response and since Sun has done something dirty they'd like to "move on" (read: get away with it and admit no wrong doing, free to do it again in the future). So he reiterated that all the former Sun employees whom myself and others had come to respect technically and believe had a sincere desire to do REAL open source were liars who had dirtily sneakily made Sun's project open.

Shockingly one of the other OpenDS developers, Trey Drake (who was fired and then pushed off the project), didn't like being called a liar and evildoer and clarified:

Enough. I have attempted to stay out of the fray as I find the whole thing embarrassing as I initiated the governance change. As the previous OpenDS Community Leader I was deeply involved in the community and was the primary advocate for making OpenDS and the broader Identity Management community more open, transparent and independent. The change in question was the result of months of discussion amongst the owners, myself, and the eventual Identity Management community owners (which included me). To say that it wasn't "Sun approved" is incorrect. There were no less than 2 Sun officers (Directors), an engineering manager, a principal engineer, and the previous Sun appointed Project Lead involved in the change. As an advocate for the community, I wanted to take these changes further to ensure that there were non Sun users on the ownership board and explicitly state that community participants represent themselves not their employer. The adopted change was a first, conservative step in that direction. The idea behind this and other changes was inspired by Jonathan's vision for Sun's growth and credibility in the OSS community. The "doacrcy" is nothing new and based on very successful OSS communities; i.e., Apache, Eclipse...

As for the broader community - I personally bounced the change off a select group of OpenDS users, but not the entire community on the public mailing list. In hindsight, I suppose this change should have been sent out over the public alias, but to what end? Would anyone, in the OpenDS user community have disagreed with a freer, more open project? The change was not swept under the rug nor done in secret. Ludo, you and others may have "just discovered" the change because you were not involved in the OpenDS project until shortly before we were laid off. Please don't attempt to cast a negative shadow over our previous efforts as OSS advocates.

From the preceding thread and claims by Neil, it appears that Sun requires ultimate authority over projects it deems critical to their success. There are many java.net projects initiated and entirely staffed by Sun employees with weaker and, in fact, no governance whatsoever. Current Sun employees may claim that they didn't see nor approve the change and that may be a true statement. It is also true that there was no clear need to consult these employees on the change. So, what's your point?

Lastly, I haven't seen any public discussion or legitimate reasoning for reverting back to the post April governance. Reasoning that "we didn't approve" and hence this is a correction implies there was a previous wrong. You have chosen to change the governance as you see fit. As the only project owners you have that right, but don't discredit the previous leadership and claim the moral high ground in doing so.

I do think that Trey made some mistakes here. The changes should have been vetted publicly. It isn't that you agree or disagree -- and he's right -- it is hard to imagine anyone in open source disagreeing with more openness (though it does happen). However it isn't that you agree or disagree. It is that you showed everyone the respect for their input. Do that enough and you get an open source project. If you don't, you get a shared source project. Sun is demonstrating this very clearly now. Trey breeched some etiquette, not more. Sun burned the house down. It isn't the same thing.

After 1.0 we'll probably migrate away from OpenDS. It makes me sad though, it is a technically excellent but dysfunctional non-open source project. I was duped. I thought that so long as the OpenDS developers were sincere about the desire to do this as real OSS that the details would work themselves out. I didn't anticipate just how much control Sun intends to exhibit. My imagination doesn't allow me to see the long term benefits for Sun to exhibit this much control and simultaneous pretend that it is open source. I think they'd be better off just keeping it proprietary or shared source and giving up the pretense and headache if they don't give a damn what anyone else thinks unless they immediately agree with Sun. If you don't get to vote with your hands, vote with your feet.

Update: Simon Phipps who is kind of a PR Sock-puppet for Sun's open source misadventures, has commented. Basically whenever Sun gets caught with their hands in the cookie jar they get Simon to act as a "voice of reason" and try and convince people it is okay. Simon views himself as a "man on the inside" but in reality rarely reads from a different script. Oddly he's "still looking into it" but is PERFECTLY voiced in Sun's talking points...lame as they are. What is good for Sun (in their shortsided view) is good for the community!

Another Update: Thanks to Ken Coar for mentioning this excellent summation of how Sun often misses when it tries to grok open source.

Yet another Update: They are in full fire control and have either shutdown the list archive or have put me in "a sandbox". I can't tell which. It was BEFORE this blog post too. Meaning this message looks like I was just peachy with regards to if you're not watching carefully. Since they're only interested in feedback from those that auto-agree with them, I think I'll vote with my feet. I encourage you to look very dubiously on Sun's "open source" projects as even if the developers are great nice guys who really believe and "get it"...they work under the sword of Damocles and it doesn't matter what they say/think/do.

More coverage: LinuxWorld, and Neil's followup to Simon's talking points (which seem to have been written mainly by Sun's HR). So Sun is going to set up a central governance committee for all of Sun's projects for the sake of "consistency". They have the right to do this... it is there code. It just isn't open source...where consistency is of course not exactly job #1. ;-) BTW my post was swallowed too. After Trey told more of the story Sun started moderating the list. I'm sure a "technical issue" will be discovered after the media coverage dies down a bit. BTW link to the articles. Google news wants to know ;-). Meanwhile Sun's tactic is to make this look like he said/she said though they don't address the facts just repeat talking points.

Kudos to Dave Johnson..... for not just repeating the talking points...now if the underlying issue of "Does Sun think Open Source == Just licensing" (which was a Simon Phipps aka WebPRmink talking point some years back "development vs distribution")... Governance makes this sound like some committee issue...and distracts us from the meat.

Another post: with a great quote. Note that eduard/o is making sure the Sun talking points are disseminated widely. Again, eduard/o this isn't a 'perception problem' to be fixed with PR, it is a problem with Sun's behavior. If you haven't changed that and are instead running around calling ALL of the former OpenDS developers liars (what did they all get together and start a lying club?) then you're creating an even BIGGER 'perception problem' and your PR effort will double backfire on you. For instance some JBoss developers got tired of a dedicated band of fools who trashed JBoss in every JBoss-related post -- often anonymously and under aliases. Since gracing them with a response would lend such folks credibility, they came up with fake names and addressed them under aliases. Which part do you remember, that JBoss was unfairly stalked and trashed by some individuals with competitive falsehoods or that JBoss "Astroturfed"? Do you think anyone will give a damn about the details of your talking points or that Sun once again has managed to be "not so open" and "controversial". Next, by aggressively repeating talking points that seem overly consistent to be self-authored what do you think will happen in your after career? There were times at JBoss where I couldn't defend what JBoss was doing (for instance the horrible JBoss ON proprietary mess that was a top-down management thing but didn't address what customers REALLY wanted which was an admin console!)... Privately when asked I referred people to JBoss sales and said "I have no opinion to share really" (which most people read between the lines) and kept my mouth shut. I liked Rich and most of the guys on the product but really couldn't stand behind it. There is an art to not being a total tool and keeping your job.

It seems that someone at Sun has made a bad decision on how to handle this project once many of the key members of the community were laid off when Sun's Directory Engineering effort moved to France. I haven't seen any type of response from Sun. Hopefully cooler heads will prevail. Some of the recent halo Sun has is due to it's efforts in open source. A blunder like this could really tarnish what their executives are trying to accomplish.

Technorati Tags:

Posted by acoliver at 8:35 AM in Open Source

Thursday, 29 November 2007

Hello, Android

I'm totally going to buy one of the new Android phones when they come out. Today in less than 5 minutes I managed to get the SDK, Eclipse plugin installed and create the Hello, Android application. I managed to write an app for their emulator and run it before the phone even came out whereas it took me an entire day just to figure out how to get my palm to work with bluetooth on Linux. Better yet, it looks like they're licensing the important parts under open source licenses. It looks like these will be real open source licenses that we're familiar with already (not just some license sanctioned in a secret meeting by a closed and non-representative body pushed by some VC afraid that open source will screw up his "enterprise upgrade" strategy). Contrast this with the Palm where they freaking make it hard to even do hello world with their horrible SDKs or the iPhone which is a monstrous "all your data are belong to us" plan by apple. I think Android is probably going to do for phones what the IBM PC did for microcomputers. The evidence is there. When something doesn't matter, no one comments on it. When something matters they comment on why and how much it doesn't matter.

Technorati Tags:

Posted by acoliver at 2:58 PM in Open Source

Wednesday, 28 November 2007

Does OpenDS need a fork

This is a pretty disturbing read. Early on I voiced my concerns that maybe OpenDS was only pseudo-open source. This seems to confirm that. Maybe we made the right technical choice in using it, but maybe we do need to consider the community aspects a little more closely in our technology choices. Alex K. can laugh at me now...if only the ApacheDS build and config process wasn't ass.

PS. Who in their right mind would relocate open source development to Europe right now...from a financial standpoint the move seems...stupid (anyone notice the Euro vs Dollar right now)...not to mention the "IK" factor...Sun never seems to miss an opportunity to shoot themselves in the foot.

UPDATE: my original post had a broken link (ref is not valid ;-) )... This is fixed. The "IK" factor is a Marc Fleuryism that explained why...a certain company...got it wrong...if I recall correctly. JBoss did not need "Intellectual Property" IP because we had "Intellectual Knowledge". Meaning we had all the guys who wrote the thing and had been working in it and knew RIGHT where the ins and outs of the code were without having to even look at it. Building a new open source developer is really actually very expensive. Losing a good one for no reason is not cheap. I say "no reason" because Sun is doing this to...SPEND EUROS as opposed to DOLLARS? Where is THAT business sense. The importance of co-location is greatly diminished in open source. It might not be 0 but certainly isn't worth the loss of IK, relationships and good will. I'm hoping Marc picks this up and expounds on "IK" a bit.

Technorati Tags:

Posted by acoliver at 7:08 PM in Open Source

Friday, 9 November 2007

Audio/slides of Pat Patterson on Digital Identity, SSO, LDAP, Liberty, etc

Last night TriLUG hosted Pat Patterson (the identity expert and not the wrestler) on identity. This was what many, including myself, thought was one of the best talks we'd attended. I could tell Pat was sweating it as the announcements and time ticked off (I'd promised him close to 2 hours as our announcements and AV setup usually take less time). He managed in 90 minutes to bring over 60 people up to speed on the whole of the "Digital Identity" space, at least from a high-level perspective. You can find the slides: here and the audio: here. I'm the guy who asked all the stupid questions (as usual).

My only complaint is that Pat is a "Font Sinner". He used "Arial Narrow" on his iMac which renders differently on my Ubuntu box. Ideally, he'd have used a free and multi-platform font like: Red Hat's Liberation fonts or the BitStream fonts. This is less of a problem with his PDF rendering, but initially he gave us ODP files which rendered poorly. In essence, when distributing a PPT or ODP or whatever, use a free/multi-platform/unique named font set like Red Hat's Liberation Fonts or the BitStream fonts. When distributing PDF it only matters ideologically (my issue is that stuff doesn't render right rather than the ideological issues).

Technorati Tags:

Posted by acoliver at 3:39 PM in Open Source

Tuesday, 16 October 2007

Not all code released under the Ms-PL and Ms-RL will be open source.

As I alluded to, without letting the cat exactly out of the bag, OSI approved two MS license. I liked Microsoft's blog statement on the matter and I have to say that I didn't care for Matt Asay's statement. Matt's posts frequently trouble me in that they confuse Open Source licensing with open source. Meaning you can use an open source license...and produce non-open source. The simplest way is to patent some technology or knowingly produce software that uses a (valid) patent by someone else and restrict how that patent is licensed in a way that is incongruent with open source. The cool thing about Microsoft's licenses is that they appear to confer such patents (where owned by MS). On the other hand, you can also do things like SuperWaba did and shut down your community site. The tough thing here is that it is less obvious in some ways. On one hand, the source to SuperWaba isn't readily available or developed in the open nor is it indeed easy to get at the binaries. It has the look, feel and smell of a proprietary product (they even make you register to download it), but is GPL. No way that is open source. Microsoft may end up throwing binaries over the wall, make the source hard to get at and potentially even license the binaries under other licenses. They might open source license that without actually doing open source development or distribution per se. This wouldn't be unique to Microsoft, so don't pick on them here, I'm just saying don't do what Matt Asay does, occasionally in his writing, and confuse open source licensing with open source.

Technorati Tags:

Posted by acoliver at 7:02 PM in Open Source

Wednesday, 10 October 2007

appointed as an OSI board observer. Also new Program Manager position open.

I've been appointed as a board observer for OSI. To be clear, I do not back away from my earlier statements, I've just been called to help do something productive with them. While I'm only an observer, my goals continue to be:

  • encourage and pursue an opening of OSI's board and processes and general transparency
  • encourage accountability for board members and their delegates
  • pursue some form of representative voting for electing board members and officers

Meanwhile, Microsoft has submitted the "Microsoft Permissive License" and the Microsoft Public License for approval. These are pretty short and well-written licenses and on their face look like the MPL and BSD licenses that they were fashioned after with the added benefit of patent terminations similar to those in the Apache and Gnu Public License. The only semi-credible technical objection I've seen are mainly that Microsoft isn't giving an explicit trademark license regarding that license name itself. However, if I understand correctly this exemption is granted by US trademark law . The same exemption covers book titles. For instance I can call a book "Professional JBoss Development", without trademark license because trademark law in the US and other countries permits this and thus it does not need to be explicitly granted. I would assume that I can make non-commercial statements like "License: Microsoft Public License" so long as I don't misuse the trademark deceptively. I'd assume that titling our software "Microsoft Public License Meldware" would run afoul (speaking purely hypothetically we do not use MsPL, we use LGPL) where noting that the software is released under the license as a factual statement on a webpage would not.

Less credible objections, in my opinion include those that Microsoft is collectively a "poopy-head". I think a potential one is that these are kind of "vanity licenses"; however, I think that the benefit of approval outweighs this. Basically Microsoft participating in open source and SCO's defeat means that we have won Saratoga. there is always a threat of "Embrace, Extend and Extinguish" but engagement (China) has shown more general success than estrangement (Cuba). Especially given the relative sizes of Open Source vs Microsoft/non-Open Source.

Still to win the ideological war, so to speak, OSI needs to continue to move in the direction of openness, accountability and representation (including representing more working slobs and less of the "gentry") in order to lend to its own legitimacy. I think there is a genuine desire to do so, albeit it is some ways off. The "silent majority" may not be saying anything, but they haven't been asked anything either.

At todays meeting I mostly just asked that the last meeting's minutes be approved and published. Guess what my main issue will be at the next meeting? Ultimately, the point is that secrecy is not the default state but a special circumstance that can be called for when needed. To represent all of open source....you must be open.

Meanwhile in the more mundane department of "get things done" OSI has posted the "Mr. Execution" position. Think of the OSI board as Picard, and the Program Manager as Riker. The board is to say "Number One, Engage." and he's supposed to "Make it so".

Technorati Tags:

Posted by acoliver at 1:32 PM in Open Source

Wednesday, 8 August 2007

Reminder, Come see us tomorrow at the Next Generation Datacenter Expo at Linuxworld

Man, if you're not here in San Francisco around LinuxWorld...you are in a far quieter place with a lot fewer people carrying Apple LCD display boxes around. The Marriott SFO is packed and if you go downstairs to the lobby there is like a 24 hour cocktail party. In short, this place has been overrun by geeks and so I'm right at home. For various reasons, I had a few last minute fixes in time for my preso tomorrow, so I hadn't slept in 24 hours (BTW this means that Meldware's webmail actually has autocomplete support now for the embedded LDAP server...well at least in the HEAD ;-) ), because I had to fly Delta (which I avoid at great expense) which has the oldest most dilapidated planes and the most uncomfortable smallest seats. Thank god for room service. There is a pretty good article on some of the controversy surrounding LinuxWorld and some of the ideas behind the NGDC here and here if you missed it. I wish I could stay for more of the conference, but I've got a pretty wicked schedule this month with massive bouts of coding and talking to prospective customers and a trip to Europe in a few days so I'm here today, speaking tomorrow and flying out right after. Being around this much energy, it is hard not to be sucked in (and I normally hate these things) and feel like I'll really be missing something.

Technorati Tags:

Posted by acoliver at 2:49 AM in Open Source

Friday, 3 August 2007

The Apache lack of Ultimatum

Another month has gone by since I posted about the Apache-JCP situation. Sun has added "Field Of Use" (FOU) restrictions to the licensing terms of the TCK for Apache Harmony. The situation has implications well outside of Harmony which is rendered somewhat less important by Sun's partial open sourcing of the JDK (portions are covered by a proprietary license. Running and passing the TCK (also known as CTK and various other names) is required in order to have the right to distribute implementations of JCP specifications with regards to patent licenses. Moreover passage is required in order to call your implementation "EJB3" or "Java Servlet" container, for instance. This has brought up the question as to whether a standard developed under NDA, with a proprietary/closed TCK is really an "open standard". The FOU restrictions that Sun is requiring would mean Apache's software would need to be distributed under a different license that would not meet the definition of open source. Since I wrote last, Apache has not decided to do anything of substance other than vote negatively protesting that Sun is in violation of the JSPA and should therefore not be able to lead specs in their Java Community Process (JCP) standardization committee. This move has been seen as ineffective and possibly embarrassing by a number of members inside and outside of Apache especially since Apache is alone in its negative vote.

A boycott, or no show, of the JCP seems a more dignified approach. I'm an ASF supporter and agree with you on the underlying issue, but voting no on the merits of a JSR because of your issues with the JCP in general seems childish to me also.

Matt Giacomini, TSS commenter

Some at Apache have called for Apache to sue Sun, which for various reasons. I made an alternate proposal that if Apache is unwilling to withdraw from the JCP, it should create a new project for not-quite-open-source at Apache such as http://sharedsource.apache.org. However, this admittedly somewhat of a modest proposal was not taken seriously. While Sam Ruby continued to express a need for action, Geir Magnusson, speaking for the de facto if not de jure power base at Apache, expressed more of his infinite patience and outright ignored Sam Ruby's call for an "exit strategy".

I think that our participation in the JCP is beneficial, assuming we get this problem w/ Sun squared away. Our years of engagement have shown that, IMO.

Our FOU problem is a big test for the JCP - will it be able to govern itself to the degree that it can?

Geir Magnusson, Jr.

Sun is busy on OpenJDK. Those that are waiting on Sun to provide us what the contract that they signed said that they would are also "blue in the face". This month, the conflict will enter into its second year. We are in a war without an exit strategy. As unpopular as it might be, we need to establish a timetable for withdrawal.

Sam Ruby

So I'd expect to see more "childish" "sandbox" votes on JSRs at least until the next Apache board is elected. However, the board elections have not, in the past, been an very effective measure for change. Moreover the Java side of Apache is fairly large by comparison to the open source side and individuals wishing to protect their positions on the JCP committees are unlikely to change the makeup of the board unless their Apache-JCP membership becomes a career problem for them. So...I'd expect many more months if not years of the same. In the future, I'd also caution you to investigate the exact legal propriety of the Apache project that you may use as Apache will not be labeling the project's entangling legal encumbrances (I actually was serious, preferring a properly labeled closed-source project at Apache to the current unlabeled stuff) nor negotiating them. For instance, if you run Harmony today you likely run awry, among others, of Kodak's patent on dynamic linking with objects that Sun licensed the other year. Yet there are no warnings that Apache has not obtained the licensing from Sun to distribute Harmony or that it is currently more likely shared source and not open source.

Technorati Tags:

Posted by acoliver at 11:52 AM in Open Source

Let the AIR out

I won't be going to the AIR Bus tour. It hardly seems relevant since they don't really plan a Linux version any time soon -- and then only as an afterthought. I'm hoping instead to see if I can get one of the Moonlight developers to come talk to TriLUG.

Technorati Tags:

Posted by acoliver at 10:36 AM in Open Source

Thursday, 26 July 2007

JBoss Portal 2.6.1 worth a look

JBoss Portal 2.4.x (and below) was frankly pretty bare-boned and buggy. However, with the 2.6 release things are really changing and with JBoss Portal 2.6.1 these changes are brought to us in full working order (2.6.0 had some troublesome JSF issues with JBAS 4.2). The 2.6.1 release fixes a number of issues reported by yours truly and provides among other things:

  • Generally much improved look and feel
  • Personal Dashboards
  • WSRP administration interface support
  • A refined Portal API
  • A very usable GUI administration
  • Much improved CMS including workflow
  • LDAP Support
  • JSF support

IMO the Portal API is a majorly important feature here. Take something simple like an email view. Maybe this is or is not the ideal portal application but you get the idea. You expect that selecting a folder will affect the list of emails shown. You expect selecting from the list of emails to affect the mail displayed. All of this requires Inter-portlet communication. JSR-168 doesn't answer that. JSR-268 might but you can do it now with the Portal API. There are certainly other gaps to fill but it is certainly beyond a start.

click here to make it bigger, jboss portal admin screenshot
A much improved look and feel

I now watch this project with a great deal more interest and these guys are moving faster than I expected. For 2.8 I hope to see:

  • Support for JBoss Seam
  • Support for: JBoss SSO, Open SSO, and possibly JOSSO (it is of course important that everyone have their own single sign on that hopefully doesn't interoperate with anyone else's)
  • Improved Cluster support
  • Further Portal API improvements
  • More personalization. I'd like to be able to completely define location of portlets and their min/max state like I can on say my.yahoo.com.
  • A more user-level CMS. At present this is still a little stickly.. I don't expect a PHB or his secretary to really use it just yet.

There is of course an ongoing rumor that Red Hat needs to invest more in JBoss especially outside of their acquisitions and JBossAS. However, regardless of any pressures that these guys face, the JBoss Portal guys have really pulled something special off with this release and are well on their way to pulling off something even cooler in the next release. They are to be commended. I hope Red Hat realizes what these guys have done and positions itself to fully capitalize on it commercially.

Technorati Tags:

Posted by acoliver at 12:11 PM in Open Source

Wednesday, 18 July 2007

Flex @ TriJUG and Flex Sprint with Flex genius James Ward

We held a successful Intro to Flex talk at TriJUG. James Ward spoke and I heckled. Actually I didn't, but he was a afraid I would. The following day we had a 10 person free training at the Buni office on 9th street, here in (recently) excessively sunny Durham, NC. James, our Flex genius for Meldware. The TriJUG talk was well attended. I didn't count but it was around 60 people. The "Flex Sprint" @ Buni was unexpectedly well attended (read: we didn't buy enough chairs and I had to borrow one from the office next door and loan my office chair out) with 10 people showing up. My stepson, Alec (14), came and did get his YouTube example working before deciding to play Sonic the Hedgehog in Flash (he's more into guitar than writing code). One thing that impressed me was the lady from a rather large three-letter organization that said she and her team was using Flex but wanted to port to Linux (including development). Great news for Linux and Flex. It also means that Adobe's still second-rate support for Linux (no Flex Builder on Linux, everything comes out months later, ApolloAIR is going to come out much later for Linux than Siverlight will) is becoming more of a glaring miscalculation (it doesn't matter where consumer Linux is, though with devices it will soon, it matters where DEVELOPER Linux is -- I'd guess its bigger than Mac OS). Another thing that impressed me was how quickly everyone was able to start going above and beyond James's example. Flex is just awesome. Now it is up to Adobe to decide if they want to be a nitch player like Apple (small market share, high margin) or the mainstream (high market share, low margin). This is all about moving further towards openness and open standards and reaching platform ubiquity across their whole RIA platform.

Anyhow, the event was a great success. Adobe sprang for Lunch at Dale's Indian place on 9th. I imagine Bean Traders (the coffee shop in front of Buni) did great as well ha. Me and some of the attendees will be organizing a Flex user group soon. I was pleasantly surprised that some of the folks were also on 9th St. Following the event James and I were interviewed by a local podcaster, Mike Kimsal. I'll post the link as soon as it is up. Hopefully I wasn't too controversial.

Technorati Tags:

Posted by acoliver at 12:44 PM in Open Source

Monday, 9 July 2007

Google Video: GPLv3 and MS Patents explained by Duke Lawyer

Tanner Lovelace just uploaded the TriLUG meeting by the Duke Lawyer on GPLv3 patents I mentioned earlier. You can view here with less commitment than before :-).

Update: now with captions.

Technorati Tags:

Posted by acoliver at 9:00 PM in Open Source

Tuesday, 3 July 2007

The Apache Conundrum

Way back when Sun promised to submit Java to an independent standards board. However, they changed their mind and decided to instead create their own standards board called "The Java Community Process", only it wasn't a Community and the process was not transparent and at best chaotic. Under the old rules, for various reasons, it was not possible to implement an open source version of the JCP created specifications and certify it as compatible (and thus the right to call it an implementation of that specification). This created a row with Apache which resulted in a letter of intent which when implemented got us to JCP vs 2.5. Sun created a scholarship program which allowed it to "sponsor" (funny money alert) projects it deemed as "non-commercial" open source for free access to the Test Compatibility Kit (also sometimes called the TCK or CTK and in this case the JCK - Java Compatibility Kit). This allowed JonAS (ironically considered non-commercial by sun) to certify for free as well as Apache's Geronimo, but the reduced restrictions also allowed JBoss to buy the TCK.

I couldn't possibly agree more. I hope at the end of this all of the NDA BS goes away.

Apache Geronimo developer, Dain Sundstrom in regards to the problems of the effects of NDAs

However in order to do that Apache members had to follow guidelines including signing NDAs. This restricted what projects that implemented the specifications (including some that were the basis for those specifications like Jetspeed which was broken into Pluto). The communities thus had to fork into those who had access to the information/TCK and those who had to be excluded from that information. The latter group of proletariat also could not participate in the design discussions governing who/what/how the software would be designed so long as it was under the "standard". The NDAs even were interpreted as prohibiting CVS/SVN commit statements like "done to pass TCK test XYZ" and various other seemingly innocuous forms of communication.

To the best of my knowledge, there is no other specification process where the ASF directly participates in collecting NDAs, or in private mailing lists. Should we, in the future, ever be presented with the "opportunity" to do so, I would strongly suggest that we pass on that opportunity.

Sam Ruby to Geir Magnusson, Jr. on the problems of JCP participation and why the policy change is specific to the JCP

Sun chose not to sponsor Harmony, Apache's implementation of the Java Development Kit with a TCK even though it is certainly open source and definitely non-profit (with no "WebSphere CE" even on the table at this point) at least without "Field of Use" restrictions. Field of Use restrictions are things like "not on mobile devices", an area of profit for Sun. These restrictions are in direct violation of the Open Source Definition which prohibits license discrimination on field of endevour (6), specific technologies (10) and from restricting derived works from meeting the OSD (3). Apache also argues that this is a breech of Sun's JSPA contract with Apache. These restrictions lead to another open letter which Sun did not answer.*(1) This leaves Apache in a bad spot. Continue to participate in a process that restricts a "collaborative, consensus based development process" by forking its communities into NDA-haves and have-nots and potentially prevents Apache from licensing its software as something meeting the Open Source Definition or disavow itself of this process and leave its projects in an unblessed state (they can continue to implement the specs as released to the public but not participate in their design) or potentially a third fragmentary response where restrictions are accepted for some projects (particularly those that do not restrict "Field Of Use"). While Harmony is no longer as important as it once was just because there is an open source JDK and only Apache, those who care about the GPL+exception vs BSD-style Apache licensing, and those who enjoy developing VMs are likely to care whether this particular implementation is certified or not. However, it sets a precedent that may affect other open source projects as well. Moreover, Sun is sticking the FOU as a requirement on the TCK at the back end of the thing so that the approval process is not hampered by concerns by other participants.

However, in the absence of an explicit JSPA rule that would forbid such field-of-use restrictions, we will remain worried that a similar issue might resurface anytime, for any JSR.

Red Hat Middleware LLC (most likely Red Hat VP Sacha Labourey) in response to the JCP vote

Sun's decision to not answer the open letter from Apache has resulted in a vote on a proposal by Sam Ruby. If adopted this would restrict new participation by Apache. Members/Committers could still participate in the JCP specifications as individuals or representatives of their employers, but not Apache. This would mean that any liability out of participation would be on that committer/member's own shoulders. It also likely would restrict new projects based on JCP specifications at Apache. This comes at a time when the legitimacy of the JCP and JavaEE in particular are at stake with members like Red Hat, BEA and IBM going outside and collaborating outside the JCP on things that might have been traditionally done inside of it. Meanwhile Sun has been moving full force into open source in other areas, with next generations of their products like OpenDS (their directory server) and Glassfish (their appserver) being developed as open source on Java.net with a great deal of sincerity. Sun has shrewdly been embracing things like JRuby to capture the slow dwindle of the "alpha geek" away from Java. Many saw the choice of the GPL as opposed to Sun's more conservative open source licenses to be further evidence of this wholehearted embrace and movement to a truly committed open source strategy. In this light it might be seen more as a shrewd method of protectionism in the mobile space. Ironically, since you may still license your app as not GPL even if you distribute it with the GPL'd TCK derivative (which is generally what you want to protect), Sun isn't really served well by protecting against Harmony. One has to ask what good these FOU and NDA restrictions are at all. Do vendors really communicate freely with their competitors even UNDER NDA? Do you think a WebSphere developer (really not developer these days more pointy-hair type) is going to say something he doesn't want published to a bunch of Apache types and JBossers even under NDA? So what is the purpose of the NDA and the secret TCK? Does Sun really make enough revenue from it to make it worth this row? Most people who have seen the TCK say it is crap code that barely runs, maybe sunlight would benefit compatibility? Maybe Mr. Ruby is standing at the Brandenburg Gate saying "Mr. Schwartz, tear down this wall!" For my own part I +1'd the proposal.

1. An interesting note is that Sun's own Open JDK is not subject to these "Field of Use" restrictions although it is licensed under the GPLv2 (plus special exceptions to propagating the GPL to linked components) and a special Binary License. This points more to a financial motive than legal. The binary license also means that certain sections of the JDK are not yet open source albeit some parts like the ALSA library are available in open source separately.

Technorati Tags:

Posted by acoliver at 3:16 PM in Open Source

Tuesday, 26 June 2007

(Video) Lawyer from Duke University on GPL v3/Patents

At TriLUG, my local LUG, we had Sapna Kumar talk about GPLv3 and the patent threat from Microsoft. You can now watch it on video (MP4) (MP4 torrent) (OGM torrent). I thought I would be bored but ended up asking several (too many) questions on the edge of my seat. Software patents are threatening Red Hat with the Firestar suit (Firestar has a patent on OR Mapping issued in 1998...may years after Toplink was on the market and over a decade after the predecessor that became part of WebObjects). Software patents are being claimed by Microsoft. Apparently, they invented disk drivers and binary math or something. These are a few we KNOW about. How many others are being settled under NDA? Watch/Listen to Sapna Kumar (MP4 torrent) (OGM torrent) and see what you think.

Technorati Tags:

Posted by acoliver at 3:56 PM in Open Source