I'm trying to get our Security module working with Spring dm Server. So far, I've hit several roadblocks. This is our current showstopper in getting our application to run on Spring dm Server.

I've managed to get upgraded (at least got it to compile anyway) to Spring Security 3.0.0.RC1 (which nicely uses Spring 3.0 bundles provided by dm Server). We currently depend on spring-security 3.0.0.RC1 modules: core, cas-client, web, and ldap. These are not published in the EBR yet.

Problem is, that the spring-security-ldap depends in spring-ldap-core (the non EBR one), and the EBR one of those still has spring 2.5.6 dependencies (i.e. we need a 3.0 version of spring-ldap-core).

As well, spring-security-core brings in a whole bunch of non-OSGi jars.

Spring-security-cas-client brings in cas-client-core which isn't OSGi.

Security-ldap requires org.springframework.ldap 1.3.0.RELEASE which isn't Spring 3.0.

So, as you can see, trying to use spring security in dm Server is pretty much a mess.

My request, can we get a fully Spring 3.0 and OSGi friendly version of Spring Security 3.0 brought into the EBR (or at least core, cas, ldap, and web)... one where all the transitive dependencies resolve to OSGi-ified JARs in the EBR and all depend on only Spring 3.0 (i.e. no Spring 2.5.6 dependencies)?

Thanks in advance!

-J.C.