Hi Keith
How you ship and package Java with the Agent and Server is up to you.
My Problem is just requiring Customers to install and manage additional Software that they don’t need or don’t want at all.
NetBackup and DataProtector for example ship a minimal Java-Runtime included in there Lib-Directories (DP also includes its own Perl).
Since that Software doesn’t need its Directories included in PATH-Variable it is almost impossible that another Software gets to those JREs, also they only include Functions used by their own Software, almost nothing more than that.
Yes it could be a Security risk if a attacker knows a vulnerable Version of that Software is installed, knowing the usually non-Default install path and which Functions are available to exploit. With a general JRE that simply can be queried using the Search-Path with a know Functionset this is very more likely to succeed.
Patching of those REs is done with the regular General Release Patches, again adjusted to the specific need.
Biggest Advantage on that Approach is its Independence.
We have Management Servers with old SAP-GUIs using 1.4 Java Versions (or even older), a DP-GUI with Java 1.5 and four NetBackup-Consoles ranging from Java 1.4 to 1.7.
All working perfectly well without interference.
Freundliche Grüsse / Kind Regards
Stefan Vollrath
T-Systems Schweiz AG
Storage & Backup Operations
Stefan Vollrath
Storage Engineer
Murgenthalstrasse 12, CH-4901 Langenthal
+41 (0) 78 645 1076 (phone)
E-Mail: stefan.vollrath@t-systems.com
http://www.t-systems.ch<http://www.t-systems.ch/>
Notice: This transmittal and/or attachments may be privileged or confidential. If you are not the intended recipient, you are hereby notified that you have received this transmittal in error; any review, dissemination, or copying is strictly prohibited. If you received this transmittal in error, please notify us immediately by reply and immediately delete this message and all its attachments. Thank you.
Von: Keith Tenzer
Gesendet: Mittwoch, 19. Februar 2014 10:15
An: Vollrath, Stefan
Betreff: - Re: SnapCreatorAgent 4.1.0 won't start
<https://communities.netapp.com/index.jspa>
Re: SnapCreatorAgent 4.1.0 won't start
created by Keith Tenzer<https://communities.netapp.com/people/ktenzer> in Snap Creator - View the full discussion<https://communities.netapp.com/message/125824#125824>
Including Java is something we discussed and may do but it has major downsides and security risks. If there is a security patch for example to Java, today you just upgrade Java, but if we bundle or package Java we may lose this capability. There may be a middle ground where we can install Java and it could be upgraded by customers, depends on how tightly we bundle.
The other major issue is usually there is some other Java version installed and this can create conflicts and cause a lot of issues with other applications.
Finally there are potential legal issues with shipping Java, so this is something we would also need to investigate.
It isnt quite a simple problem but I agree we definitely need to make things work out-of-box without forcing customer to install additional software (java).
SC btw doesnt have problems with newer versions of Java but rather older versions. I think you need to be at 1.6.24 or higher but I understand your issue. You cant install software on the host like java or update host often so this is something we need to solve. I think our current approach works for some customer profiles where updating software isnt as big a deal but for your profile I do see it creates problems.
One thought is you could create a package with SC Agent and Java and create an install script. This could be certified by security team and as such then you could standardise and make things easier. Obviously just a workaround that we arent providing this but a thought at least.
Are you looking for us to ship java with SC agent or tightly couple our code with java JVM into a binary and thus completely hide Java?
Keith
Reply to this message by replying to this email -or- go to the message on NetApp Community<https://communities.netapp.com/message/125824#125824>
Start a new discussion in Snap Creator by email<mailto:discussions-community-products_and_solutions-databases_and_enterprise_apps-snapcreator@communities.netapp.com> or at NetApp Community<https://communities.netapp.com/choose-container.jspa?contentType=1&containerType=14&container=2481>
