ApacheCon: Core Europe 2015

OpenOffice started it all, but the ODF standard has now outgrown its original implementation. ODF is now supported by many desktop implementations, some of which completely unrelated to the OpenOffice codebase, by cloud products, mobile applications and converters. How relevant is OpenOffice to ODF these days? And what's the real state of health of the major implementations and their level of compatibility?

Successfully running an open source software project involves more than just posting source code in a public Github. It involves balancing numerous interrelated engineering, business, and legal decisions.

We share our experience in supporting a dozen open source communities including Cloud Foundry, Spring, RabbitMQ, Redis, and our recent experience with launching the Apache Geode (incubating) community based on 1 million lines of code from Pivotal GemFire. These communities and their products have highly varied histories, licensing, and governance models.

Specifically we will cover: reasons to open source a commercial product; business and legal choices in licensing, governance and ownership; engineering choices of OSS components & readying code; executing the switch to open source; our experience from commercially supported OSS to stand alone foundations to joining The ASF.

The Java EE architecture provides the necessary enablement but most developers do not have the time or the training to take full advantage of what it has to offer. This technical session describes and demos an end-to-end application security architecture for an Apache Wicket Web app running in Tomcat. It includes practical, hands-on guidance to properly implementing authentication, authorization, and confidentiality controls using Java EE, Spring and Apache Directory Fortress. In addition to finding out where the security controls must be placed and why, attendees will be provided with code they can use to kick-start their own highly secure Java web applications using Apache products and a few tricks.