What Web frame work to go with EJB3?

Our coming new project dictates EJB so we plan to use EJB3. But what web frame work is best to go with EJB3? We are currently using Struts1 and EJB2 in our existing project.
We narrowed down to Struts 1, Struts 2, JSF, and Spring MVC. Since EJB 3 is new to us, we don't know which one is best for EJB 3 integration. Anyone can share their experience? Thanks.

I suggest you seam framefork with richfaces components, this framefork integrates JSF + EJB and based on MVC of coarse, so that framework gives you great flexibility to write good application
for jsf UI components you can see this [http://livedemo.exadel.com/richfaces-demo/richfaces/actionparam.jsf|http://livedemo.exadel.com/richfaces-demo/richfaces/actionparam.jsf]
and for seam framework [http://seamframework.org/|http://seamframework.org/]

Similar Messages

Which is better frame works use along with flex

Hi,
I am developing an hospital application, mainly includes the
management of outpatients and in front end i am using flex but in
back end i did not get a clear idea about which frame work has to
use or need of a new architecture. i just need some suggestion
which of these spring,EJB 3.0 and Jboss Seam is better for back end
implementation.
Thanks and Regards
kumar

Hey kumar ,
I don't have experience with a lot of frameworks but I am
using Blaze-DS + Spring with deployed under glassfish.
I think you biggest problem here is how to make the frontend
pluggable, extensible and easy to maintain.
I do make all single screens as single modules. and each
module have it's own java class to do the work + some java classes
for general perpose.
Teh whole thing is build in ANTS and using jnit as a testing
framework for java. I don't have anything yet to do automated UI
testing.
Ries

Web Application working correctly only with Everyone user added to user privilages

Hello,
I have an web application in Sharepoint 2013 which only works correctly with the Everyone (Read Only) user added to User Privileges in Central Admin.
If I remove Everyone user from user privileges, user domains, that are added to access groups in Site Permissions, are directed to Request Access page of the site. I cannot understand how is this happening, specially because I have other Web App on the same
server which are working correctly.
Could you please advice me how could I trace the problem and resolve it.
Thank you!

Hi Bogdan,
According to your description, my understanding is that Everyone user cannot access the web application except adding the account to user policy of the web application in Central Administration.
I recommend to check if the Super Reader account has been given the Full Read permission on the web application in Central Administration.
If not, add the account to the User Policy of the web application and grant Full Read permission to the account.
Best regards.
Thanks
Victoria Xia
TechNet Community Support

Frame work problem along with tag libraries...

Hi..
I am new to jsp and am making a project in it, I am following MVC architecture but my problem is i am unable to understand all this concept of frameworks like struts, spring etc... i need some help with what they actually are..??
also i am not using any tag libraries in my project i am using simple jsp files with minimum java coding at the front end and class files at the logic layer... and then the databse layer... i want to know is it better to use tag libraries and for using them will i have to follow any particular framework.. and are these tag libraries different for different frameworks..??... will i be missing something if i don't use tag libraires or don't follow a particular framework...???

Those taglibs are particularly for the view layer of the MVC pattern. In a MCV framework you use taglibs to associate beans from the model/controller layer with the view layer. The framework will care about getting and setting the bean properties during the HTTP request-response cycle. With for example Sun JSF framework the relevant part of your JSP page would look like:
<h:form>
    <h:inputText value="#{myBean.input}" />
    <h:commandButton value="submit" action="#{myBean.submit}" />
</h:form>The JSF framework will generate this as something like<form name="someGeneratedName" method="post" action="currentPage.jsf">
    <input type="text" id="someGeneratedId" name="someGeneratedName" value="theInputValueFromMyBeanIfAny" />
    <input type="submit" id="someGeneratedId" name="someGeneratedId" value="submit" />
</form>The MyBean class would look like something as:public class MyBean {
    private String input;
    public void submit() {
        System.out.println("The framework has already set the input value: " + input);
        // You can do with this whatever you want. Eg persisting in DB:
        DAOFactory.getInstance("dbname").getSomeDAO().save(new SomeDTO(input));
    public String getInput() {
        return input;
    public void setInput(String input) {
        this.input = input;
}The average MVC framework also provides customizable Converters (convert between String for output and the desired Object type in model/controller layer) and Validators (required values, numeric values, date values, etc). Each MVC framework have its own taglibraries. For example JSF with the URI's http://java.sun.com/jsf/core and /html. Struts has another taglibs. Further on there is also the Java Standard Tag Library (JSTL) with the URI's http://java.sun.com/jsp/jstl/core, /functions and so on. Mixing of the taglibs is possible, but not always recommended. You should prefer the taglib of the framework used, but if the framework doesn't provide the tag with the desired functionality, then you can add another taglib, such as JSTL or, in case of JSF, Apache Tomahawk and JBoss Ajax4jsf.
If you want to learn more about JSF, you may find this article useful: [http://balusc.blogspot.com/2008/01/jsf-tutorial-with-eclipse-and-tomcat.html].

What Web Cam is compatible with the Mac mini

Hi everyone,
Thinking of buying a Mac mini to use with my Sony TV but I want to connect a web cam also. Does anyone know what web cam works with a Mac mini? Keen to get one but if I cannot find a compatible web cam I don't think I will. I have no wish to buy the apple monitor just for the use of a web cam.
Jamie

Hi Jamie,
Here's a couple with Mics too...
http://eshop.macsales.com/item/Macally/ICECAM2/
http://eshop.macsales.com/item/MacAlly/MEGACAM/

Error while creating Frame work Purchase order

Hi Gurus,
We are trying to implement Frame work order process with following configurations.
1)Item cat B for acc assingment Y
2)Allow item catg B with acc *** K and Y.(How to config this in SPRO)
So when i am creating a PO adopted through Purchase Req (account *** K and item cat B) i am getting error message "Pricing Error :Mandatory condition NAVS is Missing".So how do i configure this pricing process.
Also when i am creating a Frame work order do i need to select the document type both in PO and PR as frame work order or NB order type will work with these config of Item cat B and acc *** Y?
When i am creating a PR or PO with doc type frame work order the order unit is automatically populating as "AU" is this something std or do i have to do anything in configuration?
When i created a PO with ref to PR aith account *** K into the PO and add the item category B the charging information was not maintained so how to maintian this?
How to maintain the accounting info from PR?
Also if there is a complete process link releated to config of frame work order that will be great.
Thanks in Advance.

Hi
We are trying to implement Frame work order process with following configurations.
Item cat B for acc assingment Y
Create new acct assignment category in IMG -MM - Purchasing -Account Assignment - Maintain Account Assignment Categories (If you are sure of fields to be used then you can directly create Y, if not then copy existing category say K to new one and choose required fields)
Allow item catg B with acc *** K and Y.(How to config this in SPRO)
In Purchasing - account assignment - Define Combination of Item Categories/Account Assignment Categories - set combination for Y and B.
Hope your documement types (PO & PR) allows item category B.
So when i am creating a PO adopted through Purchase Req (account *** K and item cat B) i am getting error message "Pricing Error :Mandatory condition NAVS is Missing".So how do i configure this pricing process.
Check the pricing procedure in IMG - Purchasing - Conditions - Define Price Determination Process - Define Calculation Schema - Check for calculation schema - NAVS has been maintained.
Also when i am creating a Frame work order do i need to select the document type both in PO and PR as frame work order or NB order type will work with these config of Item cat B and acc *** Y?
You need to choose document types while creating purchase transactions. If that document type doesnt support item category B- then you will get an error message.
When i am creating a PR or PO with doc type frame work order the order unit is automatically populating as "AU" is this something std or do i have to do anything in configuration?
For services (D category) we define AU as default unit (IMG - MM - External Services Management - Source Determination and Default Values - for Client/for Purchasing Organizations)
When i created a PO with ref to PR aith account *** K into the PO and add the item category B the charging information was not maintained so how to maintian this?
How to maintain the accounting info from PR?
create Framework requisition and then copy it to a PO.
Thanks

Introduction to OA frame work

Hi ,
I want to know OA frame work is related with java or oracle apps??
can any body tell me where I can get introduction material to this subject

Please download patch 4725670 from Metalink. This one has Jdeveloper RUP3. You can start working on these. The Jdeveloper comes with inbuilt documentation. All that information can help you with OA.
Thanks

What web cam(s) actually work with my macbook pro? (os10 ver 10.6.8)

What is the best (out of the box running) web cam for a macbook pro? ( I'm running os10.6.8) Little background below:
Man I'm confused! I see that the logitech c910 web cam works with the mac but then I also see that it only "sort of " works..... huh?? I got my macbook pro because its software instantly recognized me as the dummy. Very "turn key" user friendly stuff with the MAC and great for music stuff which is what I do for a living. One of my jobs is part time guitar instructor at a community college and I'm hoping to create digested vids of the sessions to help students that miss class. I'd like to edit the videos in imovie and have some text/music stuff on the screen as well. I knew there would be a little learning curve and it would take a while to get comfortable but I can't even get the camera to get started! Any suggestions would help. Especially from anyone who has done guitar stuff before i.e. youtube etc....thanks

I am embarrassed how simple that was. I did warn you that I'm technologically challenged; I'm pretty sure that proved it.
The external hard drive is formatted as Mac OS Extended (Journaled). The link you provided indicates the external drive will work with Time Machine. I've never worked with Time Machine and don't know what my next step should be. Would you please walk me through it?
Your help is greatly appreciated. From the points you have accumulated, I can tell you have helped many others and I thank you for your generosity.

What is the exact use of STRUTS frame work??

Hi every one,
I'm new to this STRUTS frame work. Can any one explain me in detail (if possible with an example) about,, why we need to use STRUTS framework as we have already JSP's.
For example if we want to move from one JSP to another JSP, it is quite easy to move to the page with out any other extra logic. Where as comes to the point of STRUTS, we need to write, JSP form, Form-bean class, Action Class, configure our STRUTS XML file, if validation needed validation xml files. Is it not looking cumbersome to process?
Please help me to recover from this...
Expecting reply from many of you..
Thanx in advance.
Sriram

meetshriram wrote:
Hi every one,
I'm new to this STRUTS frame work. Can any one explain me in detail (if possible with an example) about,, why we need to use STRUTS framework as we have already JSP's. Struts is a web MVC-2 framework.
For example if we want to move from one JSP to another JSP, it is quite easy to move to the page with out any other extra logic. No, there's logic, and it's embedded into the page.
It's fine for one page to another, but when you have a substantial application that has tens or hundreds of JSPs it's much harder to manage.
Where as comes to the point of STRUTS, we need to write, JSP form, Form-bean class, Action Class, configure our STRUTS XML file, if validation needed validation xml files. Is it not looking cumbersome to process?
Extra complexity does cost you something. Ask yourself what it's buying you: better layering, more configuration and less code, validation, etc.
%

What Monitors WILL work with the Mac-Mini?

If the new Mac-Mini does not put out analog video and Apple does not state this, what monitors will work with it?

I was able to get an Apple Studio Display to work via the adapter in the Mac Mini box combined with that huge DVI to ADC adapter they had sold me years ago. In the Apple Store I really had to press them to assure me my display would work as they told me they'd charge me a re-stock fee if I had to bring the Mini back. I pressed the point that Apple should know if a monitor it made works with a computer it made. The rep asked around and we both searched the web and then she was able to confirm it would work. They really need a list of acceptable monitors. If anyone locates such a list, please let us all know!

What are Azure limitations for Websockets in Cloud Services (web and worker role)?

A WebSocket Server should be built on Azure platform with OnPrem connections and have questions regarding limitations for Websockets in Azure Cloud Services - web and worker roles.
Websockets can be configured for Web Sites and limitations are understood, but Azure Websites is not an option.
Nevertheless it is planned to run a web service (without UI - no web site) as a Cloud service which has secure websocket (WSS) connections to OnPrem machines. Websocket protocol is enabled for IIS8 on Cloud services web and worker roles. Azure Service Bus Relay
is not an option.
Questions:
1) Are Websockets supported for Azure Cloud services web and worker roles? we assume yes
2) What are potential limitations from Azure side to support concurrent Websocket connections? We are aware that CPU, memory etc are limitations, but are there additional limitations from MS Azure side?

Hi,
As I know, azure cloud service web and worker role support Websockets, users can connect to the role via the special endpoint, if we use Azure cloud service, I think we can monitor the metrics such as CPU, memory, etc... and scale our cloud service via these
metrics to keep the websockets working, refer to
http://azure.microsoft.com/en-us/documentation/articles/cloud-services-how-to-scale/ for more information about how to scale a cloud service.
Regards

How to use Adobe Interactive forms with ISR frame work in Webdynpro forJava

Hi,
Anybody worked on Adobe Interactive forms with ISR frame work in Webdynpro for Java in ESS/MSS development.
We have already searched in ISR_Cookbook_2004, however we didn't anything related webdynpro for java in that.
Any information regarding this will be of great help.
Regards
Satish Kumar

There are a number of issues here. A form that you created with LiveCycle Designer (XFA) cannot be used with FormsCentral. An Acroform, the kind you can create with Acrobat, can be used with FormsCentral, with certain limitations, one of which is skip logic. A dynamic XFA form allows for this type of thing, but as mentioned, they don't work with FormsCentral. You can set up an Acroform to show/hide or activate/inactivate fields based on selections or entries made in other fields, but you'd have to set this up in Acrobat, not FormsCentral. So you can set up something roughly equivalent to a web form's skip logic, but you'd have to learn how to do this in Acrobat using JavaScript. There is a separate Acrobat JavaScript forum here if you have any questions.

How to create web site using STRUTS frame work

Hi,
I know how to create web pages using JSP & Servlets.But now i have to create Matrimonial web site using STRUTS frame work.Plz any one guide for me...
Thank U....

Struts is not to be confused with JSF.
Start at their own homepage over there at apache.org.
Good luck.

I'm looking for a digital picture frame that is compatible with the iPhone 5 and 4S. I was looking at the Panasonic MW-20 but from what I can see I don't think it is. Any information would be great! Looking to buy a replacement frame for Christmas.

I'm looking for a digital picture frame that is compatible with the iPhone 5 and 4S. I was looking at the Panasonic MW-20 but from what I can see I don't think it is. Any information would be great. Looking to buy a replacement for Christmas. Thanks!

Hi - the new lightning connector on the iPhone 5 has an authentication chip so very few 3rd party manufacturers have come out with compatible devices - so I doubt that you will find a frame that works for both phones - however Apple has come out with 2 apapters - one is a cable and one is a direct 30 pin to lightning device - you would have to check out each frame to see if one of these might work - I looked at the Panasonic and it looks promising but I would check the return policy of anything that you buy in a case it doesn't work.

How To Install A (Almost) Working Lion Server With Profile Management/SSL/OD/Mail/iCal/Address Book/VNC/Web/etc.

I recently installed a fresh version of Lion Server after attempting to fix a broken upgrade. With some help from others, I've managed to get all the new features working and have kept notes, having found that many or most of the necessary installation steps for both the OS and its services are almost entirely undocumented. When you get them working, they work great, but the entire process is very fragile, with simple setup steps causing breaks or even malicious behaviors. In case this is useful to others, here are my notes.
Start with an erased, virgin, single guid partitioned drive. Not an upgrade. Not simply a repartitioned drive. Erased. Clean. Anything else can and probably will break the Lion Server install, as I discovered myself more than once. Before erasing my drive, I already had Lion and made a Lion install DVD from instructions widely available on the web. I suppose you could also boot into the Lion recovery partition and use disk utility to erase the OS X partition then install a new partition, but I cut a DVD. The bottom line is to erase any old OS partitions. And of course to have multiple, independent backups: I use both Time Machine with a modified StdExclusions.plist and Carbon Copy Cloner.
Also, if you will be running your own personal cloud, you will want to know your domain name ahead of time, as this will be propagated everywhere throughout server, and changing anything related to SSL on Lion Server is a nightmare that I haven't figured out. If you don't yet have a domain name, go drop ten dollars at namecheap.com or wherever and reserve one before you start. Soemday someone will document how to change this stuff without breaking Lion Server, but we're not there yet. I'll assume the top-level domain name "domain.com" here.
Given good backups, a Lion Install DVD (or Recovery Partition), and a domain name, here are the steps, apparently all of which must be more-or-less strictly followed in this order.
DVD>Disk Utility>Erase Disk [or Recovery Partition>Disk Utility>Erase Partition]
DVD>Install Lion
Reboot, hopefully Lion install kicks in
Update, update, update Lion (NOT Lion Server yet) until no more updates
System Preferences>Network>Static IP on the LAN (say 10.0.1.2) and Computer name ("server" is a good standbye)
Terminal>$ sudo scutil --set HostName server.domain.com
App Store>Install Lion Server and run through the Setup
Download install Server Admin Tools, then update, update, update until no more updates
Server Admin>DNS>Zones [IF THIS WASN'T AUTOMAGICALLY CREATED (mine wasn't): Add zone domain.com with Nameserver "server.domain.com." (that's a FQDN terminated with a period) and a Mail Exchanger (MX record) "server.domain.com." with priority 10. Add Record>Add Machine (A record) server.domain.com pointing to the server's static IP. You can add fancier DNS aliases and a simpler MX record below after you get through the crucial steps.]
System Prefs>Network>Advanced>Set your DNS server to 127.0.0.1
A few DNS set-up steps and these most important steps:
A. Check that the Unix command "hostname" returns the correct hostname and you can see this hostname in Server.app>Hardware>Network
B. Check that DNS works: the unix commands "host server.domain.com" and "host 10.0.1.2" (assuming that that's your static IP) should point to each other. Do not proceed until DNS works.
C. Get Apple Push Notification Services CA via Server.app>Hardware>Settings><Click toggle, Edit... get a new cert ...>
D. Server.app>Profile Manager>Configure... [Magic script should create OD Master, signed SSL cert]
E. Server.app>Hardware>Settings>SSL Certificate> [Check to make sure it's set to the one just created]
F. Using Server.app, turn on the web, then Server.app>Profile Manager> [Click on hyperlink to get to web page, e.g. server.domain.com/profilemanager] Upper RHS pull-down, install Trust Profile
G. Keychain Access>System>Certificates [Find the automatically generated cert "Domain", the one that is a "Root certificate authority", Highlight and Export as .cer, email to all iOS devices, and click on the authority on the device. It should be entered as a trusted CA on all iOS devices. While you're at it, highlight and Export... as a .cer the certificate "IntermediateCA_SERVER.DOMAIN.COM_1", which is listed an an "Intermediate CA" -- you will use this to establish secure SSL connections with remote browsers hitting your server.]
H. iOS on LAN: browse to server.domain.com/mydevices> [click on LHS Install trust cert, then RHS Enroll device.
I. Test from web browser server.domain.com/mydevices: Lock Device to test
J. ??? Profit
12. Server Admin>DNS>Zones> Add convenient DNS alias records if necessary, e.g., mail.domain.com, smtp.domain.com, www.domain.com. If you want to refer to your box using the convenient shorthand "domain.com", you must enter the A record (NOT alias) "domain.com." FQDN pointing to the server's fixed IP. You can also enter the convenient short MX record "domain.com." with priority 11. This will all work on the LAN -- all these settings must be mirrored on the outside internet using the service from which you registered domain.com.
You are now ready to begin turning on your services. Here are a few important details and gotchas setting up cloud services.
Firewall
Server Admin>Firewall>Services> Open up all ports needed by whichever services you want to run and set up your router (assuming that your server sits behind a router) to port forward these ports to your router's LAN IP. This is most a straightforward exercise in grepping for the correct ports on this page, but there are several jaw-droppingly undocumented omissions of crucial ports for Push Services and Device Enrollment. If you want to enroll your iOS devices, make sure port 1640 is open. If you want Push Notifications to work (you do), then ports 2195, 2196, 5218, and 5223 must be open. The Unix commands "lsof -i :5218" and "nmap -p 5218 server.domain.com" (nmap available from Macports after installing Xcode from the App Store) help show which ports are open.
SSH
Do this with strong security. Server.app to turn on remote logins (open port 22), but edit /etc/sshd_config to turn off root and password logins.
PermitRootLogin no
PasswordAuthentication no
ChallengeResponseAuthentication no
I'm note sure if toggling the Allow remote logins will load this config file or, run "sudo launchctl unload -w /System/Library/LaunchAgents/org.openbsd.ssh-agent.plist ; sudo launchctl load -w /System/Library/LaunchAgents/org.openbsd.ssh-agent.plist" to restart the server's ssh daemon.
Then use ssh-keygen on remote client to generate public/private keys that can be used to remotely login to the server.
client$ ssh-keygen -t rsa -b 2048 -C client_name
[Securely copy ~/.ssh/id_rsa.pub from client to server.]
server$ cat id_rsa.pub > ~/.ssh/known_hosts
I also like DenyHosts, which emails detected ssh attacks to [email protected]. It's amazing how many ssh attacks there are on any open port 22. Not really an added security feature if you've turned off password logins, but good to monitor. Here's a Lion Server diff for the config file /usr/share/denyhosts:
$ diff denyhosts.cfg-dist denyhosts.cfg
12c12
< SECURE_LOG = /var/log/secure
> #SECURE_LOG = /var/log/secure
22a23
> SECURE_LOG = /var/log/secure.log
34c35
< HOSTS_DENY = /etc/hosts.deny
> #HOSTS_DENY = /etc/hosts.deny
40a42,44
> #
> # Mac OS X Lion Server
> HOSTS_DENY = /private/etc/hosts.deny
195c199
< LOCK_FILE = /var/lock/subsys/denyhosts
> #LOCK_FILE = /var/lock/subsys/denyhosts
202a207,208
> LOCK_FILE = /var/denyhosts/denyhosts.pid
> #
219c225
< ADMIN_EMAIL =
> ADMIN_EMAIL = [email protected]
286c292
< #SYSLOG_REPORT=YES
> SYSLOG_REPORT=YES
Network Accounts
User Server.app to create your network accounts; do not use Workgroup Manager. If you use Workgroup Manager, as I did, then your accounts will not have email addresses specified and iCal Server WILL NOT COMPLETELY WORK. Well, at least collaboration through network accounts will be handled clunkily through email, not automatically as they should. If you create a network account using Workgroup Manager, then edit that account using Server.app to specify the email to which iCal invitations may be sent. Server.app doesn't say anything about this, but that's one thing that email address entry is used for. This still isn't quite solid on Lion Server, as my Open Directory logs on a freshly installed Lion Server are filled with errors that read:
2011-12-12 15:05:52.425 EST - Module: SystemCache - Misconfiguration detected in hash 'Kerberos':
     User 'uname' (/LDAPv3/127.0.0.1) - ID 1031 - UUID 98B4DF30-09CF-42F1-6C31-9D55FE4A0812 - SID S-0-8-83-8930552043-0845248631-7065481045-9092
Oh well.
Email
Email aliases are handled with the file /private/etc/postfix/aliases. Do something like this
root:           myname
admin:          myname
sysadmin:       myname
certadmin:      myname
webmaster:      myname
my_alternate:   myname
Then run "sudo newaliases". If your ISP is Comcast or some other large provider, you probably must proxy your outgoing mail through their SMTP servers to avoid being blocked as a spammer (a lot of SMTP servers will block email from Comcast/whatever IP addresses that isn't sent by Comcast). Use Server.app>Mail to enter your account information. Even then, the Lion Server default setup may fail using this proxy. I had to do this with the file /private/etc/postfix/main.cf:
cd /etc/postfix
sudo cp ./main.cf ./main.cf.no_smtp_sasl_security_options
sudo echo 'smtp_sasl_security_options = noanonymous' >> ./main.cf
sudo serveradmin stop mail
sudo serveradmin start mail
Finally, make sure that you're running a blacklisting srevice yourself! Server Admin>Mail>Filter> Use spamhaus.org as a blacklister. Finally, set up mail to use strong Kerberos/MD5 settings under on Server Admin>Mail>Advanced. Turn off password and clear logins. The settings should be set to "Use" your SSL cert, NOT "Require". "Require" consistently breaks things for me.
If you already installed the server's Trust Certificate as described above (and opened up the correct ports), email to your account should be pushed out to all clients.
iCal Server
Server.app>Calendar>Turn ON and Allow Email Invitations, Edit... . Whatever you do, do NOT enter your own email account information in this GUI. You must enter the account information for local user com.apple.calendarserver, and the password for this account, which is stored in the System keychain: Keychain Access>System> Item com.apple.servermgr_calendar. Double-click and Show Password, copy and paste into Server.app dialog. This is all described in depth here. If you enter your own account information here (DO NOT!), the iCal Server will delete all Emails in your Inbox just as soon as it reads them, exactly like it works for user com.apple.calendarserver. Believe me, you don't want to discover this "feature", which I expect will be more tightly controlled in some future update.
Web
The functionality of Server.app's Web management is pretty limited and awful, but a few changes to the file /etc/apache2/httpd.conf will give you a pretty capable and flexible web server, just one that you must manage by hand. Here's a diff for httpd.conf:
$ diff httpd.conf.default httpd.conf
95c95
< #LoadModule ssl_module libexec/apache2/mod_ssl.so
> LoadModule ssl_module libexec/apache2/mod_ssl.so
111c111
< #LoadModule php5_module libexec/apache2/libphp5.so
> LoadModule php5_module libexec/apache2/libphp5.so
139,140c139,140
< #LoadModule auth_digest_apple_module libexec/apache2/mod_auth_digest_apple.so
< #LoadModule encoding_module libexec/apache2/mod_encoding.so
> LoadModule auth_digest_apple_module libexec/apache2/mod_auth_digest_apple.so
> LoadModule encoding_module libexec/apache2/mod_encoding.so
146c146
< #LoadModule xsendfile_module libexec/apache2/mod_xsendfile.so
> LoadModule xsendfile_module libexec/apache2/mod_xsendfile.so
177c177
< ServerAdmin [email protected]
> ServerAdmin [email protected]
186c186
< #ServerName www.example.com:80
> ServerName domain.com:443
677a678,680
> # Server-specific configuration
> # sudo apachectl -D WEBSERVICE_ON -D MACOSXSERVER -k restart
> Include /etc/apache2/mydomain/*.conf
I did "sudo mkdir /etc/apache2/mydomain" and add specific config files for various web pages to host. For example, here's a config file that will host the entire contents of an EyeTV DVR, all password controlled with htdigest ("htdigest ~uname/.htdigest EyeTV uname"). Browsing to https://server.domain.com/eyetv points to /Users/uname/Sites/EyeTV, in which there's an index.php script that can read and display the EyeTV archive at https://server.domain.com/eyetv_archive. If you want Apache username accounts with twiddles as in https://server.domain.com/~uname, specify "UserDir Sites" in the configuration file.
Alias /eyetv /Users/uname/Sites/EyeTV
<Directory "/Users/uname/Sites/EyeTV">
    AuthType Digest
    AuthName "EyeTV"
    AuthUserFile /Users/uname/.htdigest
    AuthGroupFile /dev/null
    Require user uname
    Options Indexes MultiViews
    AllowOverride All
    Order allow,deny
    Allow from all
</Directory>
Alias /eyetv_archive "/Volumes/Macintosh HD2/Documents/EyeTV Archive"
<Directory "/Volumes/Macintosh HD2/Documents/EyeTV Archive">
    AuthType Digest
    AuthName "EyeTV"
    AuthUserFile /Users/uname/.htdigest
    AuthGroupFile /dev/null
    Require user uname
    Options Indexes MultiViews
    AllowOverride All
    Order allow,deny
    Allow from all
</Directory>
I think you can turn Web off/on in Server.app to relaunch apached, or simply "sudo apachectl -D WEBSERVICE_ON -D MACOSXSERVER -k restart".
Securely copy to all desired remote clients the file IntermediateCA_SERVER.DOMAIN.COM_1.cer, which you exported from System Keychain above. Add this certificate to your remote keychain and trust it, allowing secure connections between remote clients and your server. Also on remote clients: Firefox>Advanced>Encryption>View Certificates>Authorities>Import...> Import this certificate into your browser. Now there should be a secure connection to https://server.domain.com without any SSL warnings.
One caveat is that there should be a nice way to establish secure SSL to https://domain.com and https://www.domain.com, but the automagically created SSL certificate only knows about server.domain.com. I attempted to follow this advice when I originally created the cert and add these additional domains (under "Subject Alternate Name Extension"), but the cert creation UI failed when I did this, so I just gave up. I hope that by the time these certs expire, someone posts some documentation on how to manage and change Lion Server SSL scripts AFTER the server has been promoted to an Open Directory Master. In the meantime, it would be much appreciated if anyone can post either how to add these additional domain names to the existing cert, or generate and/or sign a cert with a self-created Keychain Access root certificate authority. In my experience, any attempt to mess with the SSL certs automatically generated just breaks Lion Server.
Finally, if you don't want a little Apple logo as your web page icon, create your own 16×16 PNG and copy it to the file /Library/Server/Web/Data/Sites/Default/favicon.ico. And request that all web-crawling robots go away with the file /Library/Server/Web/Data/Sites/Default/robots.txt:
User-agent: *
Disallow: /
Misc
VNC easily works with iOS devices -- use a good passphrase. Edit /System/Library/LaunchDaemons/org.postgresql.postgres.plist and set "listen_addresses=127.0.0.1" to allow PostgreSQL connections over localhost. I've also downloaded snort/base/swatch to build an intrusion detection system, and used Macports's squid+privoxy to build a privacy-enhanced ad-blocking proxy server.

Privacy Enhancing Filtering Proxy and SSH Tunnel
Lion Server comes with its own web proxy, but chaining Squid and Privoxy together provides a capable and effective web proxy that can block ads and malicious scripts, and conceal information used to track you around the web. I've posted a simple way to build and use a privacy enhancing web proxy here. While you're at it, configure your OS and browsers to block Adobe Flash cookies and block Flash access to your camera, microphone, and peer networks. Read this WSJ article series to understand how this impacts your privacy. If you configure it to allow use for anyone on your LAN, be sure to open up ports 3128, 8118, and 8123 on your firewall.
If you've set up ssh and/or VPN as above, you can securely tunnel in to your proxy from anywhere. The syntax for ssh tunnels is a little obscure, so I wrote a little ssh tunnel script with a simpler flexible syntax. This script also allows secure tunnels to other services like VNC (port 5900). If you save this to a file ./ssht (and chmod a+x ./ssht), example syntax to establish an ssh tunnel through localhost:8080 (or, e.g., localhost:5901 for secure VNC Screen Sharing connects) looks like:
$ ./ssht 8080:[email protected]:3128
$ ./ssht 8080:alice@:
$ ./ssht 8080:
$ ./ssht 8018::8123
$ ./ssht 5901::5900 [Use the address localhost:5901 for secure VNC connects using OS X's Screen Sharing or Chicken of the VNC (sudo port install cotvnc)]
$ vi ./ssht
#!/bin/sh
# SSH tunnel to squid/whatever proxy: ssht [-p ssh_port] [localhost_port:][user_name@][ip_address][:remotehost][:remote_port]
USERNAME_DEFAULT=username
HOSTNAME_DEFAULT=domain.com
SSHPORT_DEFAULT=22
# SSH port forwarding specs, e.g. 8080:localhost:3128
LOCALHOSTPORT_DEFAULT=8080      # Default is http proxy 8080
REMOTEHOST_DEFAULT=localhost    # Default is localhost
REMOTEPORT_DEFAULT=3128         # Default is Squid port
# Parse ssh port and tunnel details if specified
SSHPORT=$SSHPORT_DEFAULT
TUNNEL_DETAILS=$LOCALHOSTPORT_DEFAULT:$USERNAME_DEFAULT@$HOSTNAME_DEFAULT:$REMOT EHOST_DEFAULT:$REMOTEPORT_DEFAULT
while [ "$1" != "" ]
do
case $1
in
    -p) shift;                  # -p option
        SSHPORT=$1;
        shift;;
     *) TUNNEL_DETAILS=$1;      # 1st argument option
        shift;;
esac
done
# Get local and remote ports, username, and hostname from the command line argument: localhost_port:user_name@ip_address:remote_host:remote_port
shopt -s extglob                        # needed for +(pattern) syntax; man sh
LOCALHOSTPORT=$LOCALHOSTPORT_DEFAULT
USERNAME=$USERNAME_DEFAULT
HOSTNAME=$HOSTNAME_DEFAULT
REMOTEHOST=$REMOTEHOST_DEFAULT
REMOTEPORT=$REMOTEPORT_DEFAULT
# LOCALHOSTPORT
CDR=${TUNNEL_DETAILS#+([0-9]):}         # delete shortest leading +([0-9]):
CAR=${TUNNEL_DETAILS%%$CDR}             # cut this string from TUNNEL_DETAILS
CAR=${CAR%:}                            # delete :
if [ "$CAR" != "" ]                     # leading or trailing port specified
then
    LOCALHOSTPORT=$CAR
fi
TUNNEL_DETAILS=$CDR
# REMOTEPORT
CDR=${TUNNEL_DETAILS%:+([0-9])}         # delete shortest trailing :+([0-9])
CAR=${TUNNEL_DETAILS##$CDR}             # cut this string from TUNNEL_DETAILS
CAR=${CAR#:}                            # delete :
if [ "$CAR" != "" ]                     # leading or trailing port specified
then
    REMOTEPORT=$CAR
fi
TUNNEL_DETAILS=$CDR
# REMOTEHOST
CDR=${TUNNEL_DETAILS%:*}                # delete shortest trailing :*
CAR=${TUNNEL_DETAILS##$CDR}             # cut this string from TUNNEL_DETAILS
CAR=${CAR#:}                            # delete :
if [ "$CAR" != "" ]                     # leading or trailing port specified
then
    REMOTEHOST=$CAR
fi
TUNNEL_DETAILS=$CDR
# USERNAME
CDR=${TUNNEL_DETAILS#*@}                # delete shortest leading +([0-9]):
CAR=${TUNNEL_DETAILS%%$CDR}             # cut this string from TUNNEL_DETAILS
CAR=${CAR%@}                            # delete @
if [ "$CAR" != "" ]                     # leading or trailing port specified
then
    USERNAME=$CAR
fi
TUNNEL_DETAILS=$CDR
# HOSTNAME
HOSTNAME=$TUNNEL_DETAILS
if [ "$HOSTNAME" == "" ]                # no hostname given
then
    HOSTNAME=$HOSTNAME_DEFAULT
fi
ssh -p $SSHPORT -L $LOCALHOSTPORT:$REMOTEHOST:$REMOTEPORT -l $USERNAME $HOSTNAME -f -C -q -N \
    && echo "SSH tunnel established via $LOCALHOSTPORT:$REMOTEHOST:$REMOTEPORT\n\tto $USERNAME@$HOSTNAME:$SSHPORT." \
    || echo "SSH tunnel FAIL."

What Web frame work to go with EJB3?

Similar Messages

Maybe you are looking for