Last week we announced that we moved LDAP integration from Nexus Professional to Nexus Open Source in the Nexus 1.5.0 release.   While we open sourced our LDAP plugin in 1.5.0, we also released an Enterprise LDAP plugin which provides features such as configurable caching, timeouts, templates, and the ability to interact with more than one LDAP server.  In this post, I’m going to summarize the differences between Nexus Open Source’s LDAP integration and Nexus Professional’s LDAP integration.

Repository Manager LDAP Feature comparison

Before we dive into the details of the Enterprise LDAP support in Nexus Professional 1.5.0, here’s a comparison of LDAP support in Nexus Professional 1.5.0, Nexus Open Source 1.5.0, Archiva, and Artifactory.  If you are trying to decide between Nexus Open Source and Nexus Professional, the difference between the LDAP functionality in each is that Nexus Professional’s Enterprise LDAP support adds more features one would expect to see in a mission-critical environment with multiple LDAP servers. Read more…

Nexus, Sonatype

With the 1.5.0 release of Nexus, Sonatype is opening up the current LDAP features in Pro, and making them a part of Nexus Open Source.  Starting with this release, Nexus Open Source users will be able to integrate with LDAP, Active Directory, and Atlassian Crowd servers (via LDAP).  Nexus is the only repository manager with both Authentication AND Authorization (group / role mapping) via LDAP and now this integration is free for all to use.

As we transition this feature to Nexus Open Source, we are also announcing a new Nexus Enterprise LDAP plugin that will support more advanced deployment use cases including support for federated LDAP servers and more intelligent caching of authentication information. Read more…

Nexus, Sonatype ldap, Nexus, open source, plugins, security

It’s a fundamental tenet of Maven that release artifacts never change once they are released. This is enforced in Maven by the fact that once a release artifact or POM is located in the local repository, Maven will never check for an updated artifact in a remote repository. Once an artifact is released, it is considered a static, unchanging artifact. If you release an artifact and then subsequently change it (intentionally or otherwise), you’re in for some fun as people will have different versions based on when they first retrieved it… that’s a situation not exactly conducive to a repeatable, standard build. This blog post discusses a feature in Nexus 1.4 which can enforce this rule and help you avoid problems caused by the redeployment of release artifacts.

Read more…

How-To, Nexus best practice, Nexus, nexus pro, repository

For a number of reasons you might want to require your developers to use a staging repository.    Staged software releases in Nexus Professional are the best way to enable your development team to push a release to an artifact repository such as Nexus while providing management and quality assurance with a way to test and approve a release before “burning” it to production.  If you want to learn how to make a staged release, you can watch this video. or read the remainder of this blog post. Read more…

How-To, Nexus Nexus, nexus pro, staging

The goal of this blog is to show an updated and more involved example then what is currently located on the plexus site.  This will cover creating a couple of components and explain the different ways to inject your dependencies. This example assumes you are using maven 2 to make your life easier.

Read more…

Sonatype How-To, plexus