Dependency org.jdom:com.springsource.org.jdom:jar:2.0.1 fails to download (Unauthorized access)

[Maximiliano Lira Del Canto]

Hi,

I just got an error that is not possible to download from the spring repo this pom file, thus fails to build.

Module affected: opencast-search-service-impl.

https://repo.spring.io/plugins-release/org/jdom/com.springsource.org.jdom/2.0.1/com.springsource.org.jdom-2.0.1.pom

If you try to manually download, ask you about a user and a password.

[Christoph Reifers]

Hi Max,

we ran in to that same issue yesterday, we tried a quick fix (https://github.com/rfharokh/opencast-8.6), which seems to help. Now that this builds, we ran into "[ERROR] Failed to execute goal on project opencast-security-openid: Could not resolve dependencies for project org.opencastproject:opencast-security-openid:bundle:8.6: Failed to collect dependencies at org.openid4java:com.springsource.org.openid4java:jar:0.9.5: Failed to read artifact descriptor for org.openid4java:com.springsource.org.openid4java:jar:0.9.5: Could not transfer artifact org.openid4java:com.springsource.org.openid4java:pom:0.9.5 from/to spring.io (https://repo.spring.io/plugins-release/): Authentication failed for https://repo.spring.io/plugins-release/org/openid4java/com.springsource.org.openid4java/0.9.5/com.springsource.org.openid4java-0.9.5.pom 401 Unauthorized -> [Help 1]"

Seems like a generel problem with com.springsource.org ?

kind regards,

christoph

--
To unsubscribe from this group and stop receiving emails from it, send an email to dev+uns...@opencast.org.

[Maximiliano Lira Del Canto]

It seems to, I tried to contact the maintainers of Spring repo, but can't find any way to contact them. :(

[Lars Kiesow]

Hi Max,
since you have problems with JDOM, why don't you review and possibly
merge this pull request:

https://github.com/opencast/opencast/pull/1789

It's looking for a reviewer for quite some time now and would probably
solve your problem as well.

–Lars

[Maximiliano Lira Del Canto]

Nice! building your PR right now!

[Thomas Hufschmidt]

Same issue here.

Successfully build on 22.09.2020 via the Opencast-Docker images, then yesterday docker build started to fail due to beeing unable to build Opecast via maven because com.springsource.org.jdom-2.0.1.pom can't be downloaded (requires authentication).

The issue is also with a few other spring.io packages. From the top of my head:

* com.springsource.org.jdom-2.0.1.pom

* org.springframework.ldap

* org.springframework.security

And probably some more, I stopped after those...

[Greg Logan]

Hi all,

My builds are working, probably because I already have the files in my m2.  I've pulled the ones out that seem to be required, and put a copy at https://pkg.opencast.org/bin/m2.tar.bz2.

HTH

G

[Maximiliano Lira Del Canto]

I delete the .m2 folder very frequently, to avoid any incompabilities between versions. This bug hit me hard.

[Thomas Hufschmidt]

Thank your for those packages. I was able to progress further with the build, but now I'm stuck at:

[ERROR] Failed to execute goal on project opencast-security-openid: Could not resolve dependencies for project org.opencastproject:opencast-security-openid:bundle:8.6: Failed to collect dependencies at org.openid4java:com.springsource.org.openid4java:jar:0.9.5 -> net.sourceforge.nekohtml:com.springsource.org.cyberneko.html:jar:1.9.13: Failed to read artifact
descriptor for net.sourceforge.nekohtml:com.springsource.org.cyberneko.html:jar:1.9.13: Could not transfer artifact net.sourceforge.nekohtml:com.springsource.org.cyberneko.html:pom:1.9.13 from/to spring.io (https://repo.spring.io/plugins-release/): Authentication failed for https://repo.spring.io/plugins-release/net/sourceforge/nekohtml/com.springsource.org.c
yberneko.html/1.9.13/com.springsource.org.cyberneko.html-1.9.13.pom 401 Unauthorized -> [Help 1]

So same issue with com.springsource.org.cyberneko.html-1.9.13 :(

--- Addendum #1 ---

I was able to successfully build using the Opencast "Nexus" Repository now: https://nexus.opencast.org/

I added the repository to the main pom.xml:

    <repository>

      <id>nexus.opencast.org</id>

      <name>Opencast 3rd-Party Repository (Nexus)</name>

      <url>https://nexus.opencast.org/nexus/content/repositories/public/</url>

    </repository>

Question: 

What is the relation between https://mvn.opencast.org which is in the official pom.xml

and https://nexus.opencast.org which I stumbled upon when searching for mirrors on google?

--- Addendum #2 ---

The following settings.xml works as well without editing main pom.xml (Tested clean build):

<settings xmlns="http://maven.apache.org/SETTINGS/1.0.0"
 xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.0.0
                     https://maven.apache.org/xsd/settings-1.0.0.xsd">
 <profiles>
   <profile>
     <id>Opencast</id>
     <repositories>
       <repository>
         <id>nexus.opencast.org</id>
         <name>Opencast 3rd-Party Repository (Nexus)</name>
         <url>https://nexus.opencast.org/nexus/content/repositories/public/</url>
       </repository>
     </repositories>
   </profile>
 </profiles>  
 <activeProfiles>  
   <activeProfile>Opencast</activeProfile>
 </activeProfiles>
</settings>

[Maximiliano Lira Del Canto]

If someone can upload a copy of their .m2 folder would be great meanwhile this issue is being fixed.

[Greg Logan]

Hi guys,

https://pkg.opencast.org/bin/repository.tar.bz2 should have everything you need.  It's 2GB, so I filtered out the Opencast jars, but all of our dependencies should be there.

G

[Lars Kiesow]

Hi Max,
taking a short peak at the search service, it's one of the services in
the dependency check exceptions and one of the non-fixed problems if
that a dependency to jdom is declared but seems not to be used at all.
Max, you can probably just remove the dependency declaration. If that
works for you, please create a pull request.
–Lars

On Fri, 25 Sep 2020 00:42:36 -0700 (PDT)
Maximiliano Lira Del Canto <max...@gmail.com> wrote:

> I delete the .m2 folder very frequently, to avoid any incompabilities
> between versions. This bug hit me hard.
>
> gregor...@gmail.com schrieb am Donnerstag, 24. September 2020 um
> 18:11:42 UTC+2:
>
> > Hi all,
> >
> > My builds are working, probably because I already have the files in
> > my m2. I've pulled the ones out that seem to be required, and put
> > a copy at https://pkg.opencast.org/bin/m2.tar.bz2.
> >
> > HTH
> >
> > G
> >
> > On Thu, Sep 24, 2020 at 10:00 AM 'Thomas Hufschmidt' via Opencast
> > Development <d...@opencast.org> wrote:
> >
> >> Same issue here.
> >>
> >> Successfully build on 22.09.2020 via the Opencast-Docker images,
> >> then yesterday docker build started to fail due to beeing unable
> >> to build Opecast via maven because
> >> com.springsource.org.jdom-2.0.1.pom

> >> <https://repo.spring.io/plugins-release/org/jdom/com.springsource.org.jdom/2.0.1/com.springsource.org.jdom-2.0.1.pom>

> >> can't be downloaded (requires authentication).
> >>
> >> The issue is also with a few other spring.io packages. From the
> >> top of my head:
> >> * com.springsource.org.jdom-2.0.1.pom

> >> <https://repo.spring.io/plugins-release/org/jdom/com.springsource.org.jdom/2.0.1/com.springsource.org.jdom-2.0.1.pom>

[Lars Kiesow]

The openid module is also one list of non properly defined dependencies and org.openid4java:com.springsource.org.openid4java:jar:0.9.5 is also marked as not actually being used.

On September 27, 2020 3:00:43 PM GMT+02:00, Lars Kiesow <lki...@uos.de> wrote:
>Hi Max,
>taking a short peak at the search service, it's one of the services in
>the dependency check exceptions and one of the non-fixed problems if
>that a dependency to jdom is declared but seems not to be used at all.
>Max, you can probably just remove the dependency declaration. If that
>works for you, please create a pull request.
>–Lars
>
>

>On Fri, 25 Sep 2020 00:42:36 -0700 (PDT)
>Maximiliano Lira Del Canto <max...@gmail.com> wrote:
>
>> I delete the .m2 folder very frequently, to avoid any incompabilities
>> between versions. This bug hit me hard.
>>
>> gregor...@gmail.com schrieb am Donnerstag, 24. September 2020 um
>> 18:11:42 UTC+2:
>>
>> > Hi all,
>> >
>> > My builds are working, probably because I already have the files in
>> > my m2. I've pulled the ones out that seem to be required, and put
>> > a copy at https://pkg.opencast.org/bin/m2.tar.bz2.
>> >
>> > HTH
>> >
>> > G
>> >
>> > On Thu, Sep 24, 2020 at 10:00 AM 'Thomas Hufschmidt' via Opencast
>> > Development <d...@opencast.org> wrote:
>> >
>> >> Same issue here.
>> >>
>> >> Successfully build on 22.09.2020 via the Opencast-Docker images,
>> >> then yesterday docker build started to fail due to beeing unable
>> >> to build Opecast via maven because
>> >> com.springsource.org.jdom-2.0.1.pom

>> >> <https://repo.spring.io/plugins-release/org/jdom/com.springsource.org.jdom/2.0.1/com.springsource.org.jdom-2.0.1.pom>

>> >> can't be downloaded (requires authentication).
>> >>
>> >> The issue is also with a few other spring.io packages. From the
>> >> top of my head:
>> >> * com.springsource.org.jdom-2.0.1.pom

>> >> <https://repo.spring.io/plugins-release/org/jdom/com.springsource.org.jdom/2.0.1/com.springsource.org.jdom-2.0.1.pom>

[Maximiliano Lira Del Canto]

I will look into that about to delete that reference.

Greg: Thanks for you repo, is Monday and still the spring repo has issues, anyone who tries to build opencast without this folder will have trouble.