- xwiki-users@xwiki.org - lists.xwiki.org

[xwiki-users] chicken & egg / catch 21 problem
by Yishay Mor 29 Dec '08

29 Dec '08

In several sections of our XWiki site, we want to use the following workflow:1. any registered user can create a new object. 2. upon creation, the user will be taken to a form for editing the new object. 3. the user who created the object will be able to assign co-editors. The problem is, I don't want to give all users edit rights to the whole section. I have a form for creating a new object, but if I don't give edit rights on the whole space to all registered users, the form results in a "you are not allowed to edit this page". If I do, then users will be able to edit others' pages, or mess up the space structure. I'm not worried about malice, I just want to protect users from their own mistakes, and avoid spam. Ideally, I would like to either: * have a separate"create" column in the rights editor, which will allow users to create a new object and give them edit rights over it. * have a script attached to the current create form which would do the same. Currently that doesn't work unless the user invoking the form already has edit rights. See example here: http://patternlanguagenetwork.myxwiki.org/xwiki/bin/view/Cases/ ___________________________ Yishay Mor, Researcher, London Knowledge Lab http://www.lkl.ac.uk/people/mor.html http://www.google.com/calendar/embed?src=yishaym%40gmail.com +44-20-78378888 x5737

3 2

[xwiki-users] [Fwd: Re: What is the way you use to add/modify events "easily"]
by [Ricardo Rodriguez] Your EPEC Network ICT Team 28 Dec '08

28 Dec '08

Hi all, Just to keep the list posted about some XWiki side-relations. This topic was brought into the list by Jeremie Bousquet one year ago. Simile Timeline, and related projects (http://simile.mit.edu/) is getting better as XWiki is, thus to bring them together could be of major interest for both sides! Cheers, Ricardo -- Ricardo Rodríguez Your EPEC Network ICT Team

1 0

[xwiki-users] [myxwiki] new wiki request
by tom 28 Dec '08

28 Dec '08

Hi there, I would like to ask for a wiki creation under the name of "copino.myxwiki.org" We are a group of people who are just in the process of founding a organic-regional-fair cooperative and we would like to use the wiki as our main knowledge management tool. My username at myxwiki.org is ThomasBecker Thank you and greetings, Thomas <http://www.stuttgart-open-fair.de> -- Thomas Becker Farrenstr. 5 70186 Stuttgart Germany tel/fax +49 711 467157

2 1

[xwiki-users] Tags not showing
by Ajdin Brandic 24 Dec '08

24 Dec '08

Hi I'm playing with tags and noticed something odd. I've added tags to a few pages but when I go to "xwiki/bin/view/Main/Tags" I always get message "No documents have been tagged yet. To tag a document, edit it and enter the tags ...". I've searched all the posts but found only one person having the same problem in April 2008 but no one answered. In the end I found the problem in the page itself ##set($sql = "select distinct elements(prop.list) from BaseObject as obj, DBStringListProperty as prop where obj.className='XWiki.TagClass' and obj.id=prop.id.id and prop.id.name='tags'") Note at the end " and prop.id.name='tags' " should be " and prop.name='tags' " Example: http://patternlanguagenetwork.myxwiki.org/xwiki/bin/view/Main/Tags There are some tags added already but none displayed. Also is there a list of all Hibernate Object names that relate to database tables (ie. DBStringListProperty = xwikilistitems or LargeStringProperty = xwikilargestrings). I am trying to work with xwiki but its documentation is patchy and sometimes out of date so I try to find info in the database to understand xwiki structure but get stuck when I want to get some info out using HQL. I usually spend hours looking through Velocity scripts. I have not fixed this on -------------------------------------------------------- NOTICE This message and any files transmitted with it is intended for the addressee only and may contain information that is confidential or privileged. Unauthorised use is strictly prohibited. If you are not the addressee, you should not read, copy, disclose or otherwise use this message, except for the purpose of delivery to the addressee. Any views or opinions expressed within this e-mail are those of the author and do not necessarily represent those of Coventry University.

1 0

Re: [xwiki-users] generic XML API snippet, and SOS
by Yishay Mor 19 Dec '08

19 Dec '08

> > From: Sergiu Dumitriu <sergiu(a)xwiki.com> > > Yishay Mor wrote: > > That's what I thought. But have a look at: > > http://patternlanguagenetwork.myxwiki.org/xwiki/bin/view/XWiki/YishayMor > > vs. > > > http://patternlanguagenetwork.myxwiki.org/xwiki/bin/view/api/genericXML?xpa… > > The problem is not that the user profile is not readable, but that the > sheet that displays the profile is protected. This is a false > protection, as the user profile is readable, it simply isn't displayed. > What you can get in your XML respects the access rights. I thought that might be the case. This is the default setting on the XWiki farm. Perhaps it is a bit misleading? Also, how do I change access rights on all XWiki.XWikiUser objects to fix this? > >>> Here is the corrupted class: > >>> > http://patternlanguagenetwork.myxwiki.org/xwiki/bin/view/Cases/CaseClass > >> I've never seen that :) Something is indeed deeply broken since the > >> rendering is failing to display but I don't know why. > Yes, that is the problem. And any action you want to perform requires that the document is first loaded, which fails. The only way around this is a direct database change (which I just did, now the class displays fine). I created http://jira.xwiki.org/jira/browse/XWIKI-3026 to remember this issue, and it will need to be solved some time later. Thanks! you saved me. ___________________________ Yishay Mor, Researcher, London Knowledge Lab http://www.lkl.ac.uk/people/mor.html http://www.google.com/calendar/embed?src=yishaym%40gmail.com +44-20-78378888 x5737 2008/12/19 <users-request(a)xwiki.org> > Send users mailing list submissions to > users(a)xwiki.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.xwiki.org/mailman/listinfo/users > or, via email, send a message with subject or body 'help' to > users-request(a)xwiki.org > > You can reach the person managing the list at > users-owner(a)xwiki.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of users digest..." > > > Today's Topics: > > 1. Re: Can't log on in Internet Explorer (Esbach, Brandon) > 2. Re: Can't log on in Internet Explorer (Mike A.) > 3. Re: ldap + xwiki.authentication.ldap.user_group (Thomas Mortagne) > 4. Re: generic XML API snippet, and SOS (Sergiu Dumitriu) > 5. Re: Can't log on in Internet Explorer (Sergiu Dumitriu) > 6. Re: Can't log on in Internet Explorer (Nick Watts) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Fri, 19 Dec 2008 08:18:41 -0500 > From: "Esbach, Brandon" <Esbachb(a)tycoelectronics.com> > Subject: Re: [xwiki-users] Can't log on in Internet Explorer > To: "XWiki Users" <users(a)xwiki.org> > Message-ID: > < > B7266B04487707449A3919731A7DBA7810EF1D77(a)us358mx02.tycoelectronics.net> > > Content-Type: text/plain; charset="us-ascii" > > Any cookie restrictions setup on the IE options? > > -----Original Message----- > From: users-bounces(a)xwiki.org [mailto:[email protected]] On Behalf > Of Nick Watts > Sent: 19 December 2008 12:15 > To: XWiki Users > Subject: [xwiki-users] Can't log on in Internet Explorer > > I have XWiki 1.6.1.13621 installed on Tomcat 6.0.18. I am having some > problems logging in when using IE 7. I'm putting in what I know is a > valid username and password, but after submitting the login form I am > brought back to the login screen. I found a closed issue in Jira that > may be the same problem I'm running into > (http://jira.xwiki.org/jira/browse/XWIKI-2211) I have never had a > problem with Firefox or Safari, only IE. Something to add to the mix > though is that I was able to login with IE from within the LAN where > XWiki is installed using my work laptop. If I try to login with IE on > the same laptop, but across the Internet, the login fails. Does anyone > have any insight into this problem? > > -- > Nick Watts > blog: thewonggei.wordpress.com > _______________________________________________ > users mailing list > users(a)xwiki.org > http://lists.xwiki.org/mailman/listinfo/users > > > ------------------------------ > > Message: 2 > Date: Fri, 19 Dec 2008 15:23:10 +0200 > From: "Mike A." <_muxa(a)inbox.lv> > Subject: Re: [xwiki-users] Can't log on in Internet Explorer > To: XWiki Users <users(a)xwiki.org> > Message-ID: <1229692990.494ba03ea8d55(a)www.inbox.lv> > Content-Type: text/plain; charset=UTF-8 > > In xwiki.cfg, have you specified the login name name (bind_dn) as > domainusername (in xwiki.cfg it would be domain\{0})? > Firefox can authentificate using only username, but IE needs to > specify domain also. > Quoting Nick Watts : I have XWiki 1.6.1.13621 installed on Tomcat > 6.0.18. I am having some > problems logging in when using IE 7. I'm putting in what I know is > a valid > username and password, but after submitting the login form I am > brought back > to the login screen. I found a closed issue in Jira that may be the > same > problem I'm running into > (http://jira.xwiki.org/jira/browse/XWIKI-2211) I > have never had a problem with Firefox or Safari, only IE. Something > to add > to the mix though is that I was able to login with IE from within > the LAN > where XWiki is installed using my work laptop. If I try to login > with IE on > the same laptop, but across the Internet, the login fails. Does > anyone have > any insight into this problem? > -- > Nick Watts > blog: thewonggei.wordpress.com > _______________________________________________ > users mailing list > users(a)xwiki.org > http://lists.xwiki.org/mailman/listinfo/users > Best regards, Mike > > Links: > ------ > [1] mailto:[email protected] > > > ------------------------------ > > Message: 3 > Date: Fri, 19 Dec 2008 14:35:35 +0100 > From: "Thomas Mortagne" <thomas.mortagne(a)xwiki.com> > Subject: Re: [xwiki-users] ldap + xwiki.authentication.ldap.user_group > To: "XWiki Users" <users(a)xwiki.org> > Message-ID: > <a8e97d9c0812190535s5dcc337cvf19a1f69e59b9588(a)mail.gmail.com> > Content-Type: text/plain; charset=UTF-8 > > Fixed now. > > It was a wrong log in fact: > > if (LOG.isDebugEnabled()) { > LOG.debug("LDAP authentication succeed with principal [" + > principal.getName() + "]"); > } > > was executed even when the auth failed meaning that the principal was > null in this case. > > On Wed, Dec 17, 2008 at 2:58 PM, Bart?omiej Radziszewski > <br(a)debian.linux.pl> wrote: > > Thomas Mortagne wrote: > >> Hi, > >> > >> 2008/12/17 Bart?omiej Radziszewski <br(a)debian.linux.pl>: > >> > >>> hello, > >>> > >>> > >>> I want to add access to xwiki only for users from special posixGroup in > >>> ldap. So I have added option: > >>> > >>> > >>> #-# only members of the following group will be verified in the LDAP > >>> #-# otherwise only users that are found after searching starting from > >>> the base_DN > >>> xwiki.authentication.ldap.user_group=cn=xwiki,ou=services,dc=xxx,dc=com > >>> > >>> > >>> > >>> all works fine but in logs i get exeption when i dont have some user in > >>> this group: > >>> > >>> com.xpn.xwiki.XWikiException: Error number 8001 in 8: LDAP user > usertest > >>> does not belong to LDAP group cn=xwiki,ou=services,dc=xxx,dc=com. > >>> at > >>> > com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticateInContext(XWikiLDAPAuthServiceImpl.java:328) > >>> at > >>> > com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticate(XWikiLDAPAuthServiceImpl.java:198) > >>> at > >>> > com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java:149) > >>> at > >>> > com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.authenticate(MyFormAuthenticator.java:239) > >>> at > >>> > com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:165) > >>> at > >>> > com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:148) > >>> at > >>> > com.xpn.xwiki.user.impl.xwiki.XWikiAuthServiceImpl.checkAuth(XWikiAuthServiceImpl.java:203) > >>> at com.xpn.xwiki.XWiki.checkAuth(XWiki.java:3578) > >>> at > >>> > com.xpn.xwiki.user.impl.xwiki.XWikiRightServiceImpl.checkAccess(XWikiRightServiceImpl.java:139) > >>> at com.xpn.xwiki.XWiki.checkAccess(XWiki.java:3586) > >>> at com.xpn.xwiki.XWiki.prepareDocuments(XWiki.java:4572) > >>> at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:190) > >>> at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:115) > >>> at > >>> > org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431) > >>> at > >>> > org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:236) > >>> at > >>> org.apache.struts.action.ActionServlet.process(ActionServlet.java:1196) > >>> at > >>> org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:432) > >>> at javax.servlet.http.HttpServlet.service(HttpServlet.java:727) > >>> at javax.servlet.http.HttpServlet.service(HttpServlet.java:820) > >>> java.lang.NullPointerException > >>> at > >>> > com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java:157) > >>> at > >>> > com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.authenticate(MyFormAuthenticator.java:239) > >>> at > >>> > com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:165) > >>> at > >>> > com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:148) > >>> at > >>> > com.xpn.xwiki.user.impl.xwiki.XWikiAuthServiceImpl.checkAuth(XWikiAuthServiceImpl.java:203) > >>> at com.xpn.xwiki.XWiki.checkAuth(XWiki.java:3578) > >>> at > >>> > com.xpn.xwiki.user.impl.xwiki.XWikiRightServiceImpl.checkAccess(XWikiRightServiceImpl.java:139) > >>> at com.xpn.xwiki.XWiki.checkAccess(XWiki.java:3586) > >>> at com.xpn.xwiki.XWiki.prepareDocuments(XWiki.java:4572) > >>> at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:190) > >>> at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:115) > >>> at > >>> > org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431) > >>> at > >>> > org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:236) > >>> at > >>> org.apache.struts.action.ActionServlet.process(ActionServlet.java:1196) > >>> at > >>> org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:432) > >>> at javax.servlet.http.HttpServlet.service(HttpServlet.java:727) > >>> at javax.servlet.http.HttpServlet.service(HttpServlet.java:820) > >>> at > >>> org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:502) > >>> at > >>> > org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1124) > >>> at > com.xpn.xwiki.plugin.webdav.DavFilter.doFilter(DavFilter.java:68) > >>> at > >>> > org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1115) > >>> at > >>> > com.xpn.xwiki.wysiwyg.server.filter.ConversionFilter.doFilter(ConversionFilter.java:96) > >>> at > >>> > org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1115) > >>> at > >>> > com.xpn.xwiki.web.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:287) > >>> at > >>> > org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1115) > >>> at > >>> > com.xpn.xwiki.web.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:112) > >>> at > >>> > org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1115) > >>> at > >>> > org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:361) > >>> at > >>> > org.mortbay.jetty.security.SecurityHandler.handle(SecurityHandler.java:216) > >>> at > >>> > org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:181) > >>> at > >>> > org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:766) > >>> at > >>> org.mortbay.jetty.webapp.WebAppContext.handle(WebAppContext.java:417) > >>> at > >>> > org.mortbay.jetty.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:230) > >>> at > >>> > org.mortbay.jetty.handler.HandlerCollection.handle(HandlerCollection.java:114) > >>> at > >>> > org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152) > >>> at org.mortbay.jetty.Server.handle(Server.java:324) > >>> at > >>> org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:534) > >>> at > >>> > org.mortbay.jetty.ajp.Ajp13Connection.access$2900(Ajp13Connection.java:44) > >>> at > >>> > org.mortbay.jetty.ajp.Ajp13Connection$RequestHandler.content(Ajp13Connection.java:249) > >>> at > org.mortbay.jetty.ajp.Ajp13Parser.parseNext(Ajp13Parser.java:602) > >>> at > >>> org.mortbay.jetty.ajp.Ajp13Parser.parseAvailable(Ajp13Parser.java:157) > >>> at > org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:403) > >>> at > >>> > org.mortbay.jetty.bio.SocketConnector$Connection.run(SocketConnector.java:228) > >>> at > >>> > org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:522) > >>> > >>> > >>> Probably this NullPointer this is bug.. > >>> > >> > >> Yes even if all is working well NullPointer should never append. Which > >> version of XWiki Core/XE are you using ? > >> > > xwiki version 1.7, and core i have from snapshot -11.12.2008 > >> Thanks for the report. > >> > >> > >>> Thx and greetings, > >>> > >>> -- > >>> Bart?omiej Radziszewski > >>> mobile: +48 509 561 540 > >>> e-mail: br(a)debian.linux.pl > >>> JID: br(a)debian.linux.pl > >>> ICQ: #305569725 > >>> > >>> > >>> _______________________________________________ > >>> users mailing list > >>> users(a)xwiki.org > >>> http://lists.xwiki.org/mailman/listinfo/users > >>> > >>> > >> > >> > >> > >> > > > > > > -- > > Bart?omiej Radziszewski > > mobile: +48 509 561 540 > > e-mail: br(a)debian.linux.pl > > JID: br(a)debian.linux.pl > > ICQ: #305569725 > > > > > > _______________________________________________ > > users mailing list > > users(a)xwiki.org > > http://lists.xwiki.org/mailman/listinfo/users > > > > > > -- > Thomas Mortagne > > ------------------------------ > > Message: 4 > Date: Fri, 19 Dec 2008 14:50:19 +0100 > From: Sergiu Dumitriu <sergiu(a)xwiki.com> > Subject: Re: [xwiki-users] generic XML API snippet, and SOS > To: XWiki Users <users(a)xwiki.org> > Message-ID: <494BA69B.4020905(a)xwiki.com> > Content-Type: text/plain; charset=ISO-8859-1 > > Yishay Mor wrote: > >> the first problem is that is seems like this API can deliver protected > >> data > >> > >> It's already blocked by the permission system and for password fields > you > >> shouldn't be able to see the value. > > > > > > That's what I thought. But have a look at: > > http://patternlanguagenetwork.myxwiki.org/xwiki/bin/view/XWiki/YishayMor > > vs. > > > http://patternlanguagenetwork.myxwiki.org/xwiki/bin/view/api/genericXML?xpa… > > The problem is not that the user profile is not readable, but that the > sheet that displays the profile is protected. This is a false > protection, as the user profile is readable, it simply isn't displayed. > What you can get in your XML respects the access rights. > > >>> Here is the corrupted class: > >>> > http://patternlanguagenetwork.myxwiki.org/xwiki/bin/view/Cases/CaseClass > >> I've never seen that :) Something is indeed deeply broken since the > >> rendering is failing to display but I don't know why. > > > > > > The problem started when I renamed a property to ".unused". I thought I > > could then add something like: > > #if (!"$propertyName.startsWith(".")) > > to hide unused properties. > > I think what happened is this: > > The class definition is stored (or processed) in XML, and having a > property > > name starting with '.' confuses the parser. > > Yes, that is the problem. And any action you want to perform requires > that the document is first loaded, which fails. The only way around this > is a direct database change (which I just did, now the class displays > fine). I created http://jira.xwiki.org/jira/browse/XWIKI-3026 to > remember this issue, and it will need to be solved some time later. > > -- > Sergiu Dumitriu > http://purl.org/net/sergiu/ > > > ------------------------------ > > Message: 5 > Date: Fri, 19 Dec 2008 15:03:51 +0100 > From: Sergiu Dumitriu <sergiu(a)xwiki.com> > Subject: Re: [xwiki-users] Can't log on in Internet Explorer > To: XWiki Users <users(a)xwiki.org> > Message-ID: <494BA9C7.2050802(a)xwiki.com> > Content-Type: text/plain; charset=ISO-8859-1 > > Nick Watts wrote: > > I have XWiki 1.6.1.13621 installed on Tomcat 6.0.18. I am having some > > problems logging in when using IE 7. I'm putting in what I know is a > valid > > username and password, but after submitting the login form I am brought > back > > to the login screen. I found a closed issue in Jira that may be the same > > problem I'm running into (http://jira.xwiki.org/jira/browse/XWIKI-2211) > I > > have never had a problem with Firefox or Safari, only IE. Something to > add > > to the mix though is that I was able to login with IE from within the LAN > > where XWiki is installed using my work laptop. If I try to login with IE > on > > the same laptop, but across the Internet, the login fails. Does anyone > have > > any insight into this problem? > > > > This is most likely a cookie problem. Try cleaning cookies first, and > see if you can login afterwards. > -- > Sergiu Dumitriu > http://purl.org/net/sergiu/ > > > ------------------------------ > > Message: 6 > Date: Fri, 19 Dec 2008 10:10:20 -0500 > From: "Nick Watts" <nick.a.watts(a)gmail.com> > Subject: Re: [xwiki-users] Can't log on in Internet Explorer > To: "XWiki Users" <users(a)xwiki.org> > Message-ID: > <72a1e8420812190710p8b2f96el2dcde81d2f8897f4(a)mail.gmail.com> > Content-Type: text/plain; charset=ISO-8859-1 > > I tried cleaning out my cookies and the problem persisted. I also tried > adding my site to my list of trusted sites which didn't work either. I > even > took the security all the way to low for trusted sites with no change. > > On Fri, Dec 19, 2008 at 9:03 AM, Sergiu Dumitriu <sergiu(a)xwiki.com> wrote: > > > Nick Watts wrote: > > > I have XWiki 1.6.1.13621 installed on Tomcat 6.0.18. I am having some > > > problems logging in when using IE 7. I'm putting in what I know is a > > valid > > > username and password, but after submitting the login form I am brought > > back > > > to the login screen. I found a closed issue in Jira that may be the > same > > > problem I'm running into (http://jira.xwiki.org/jira/browse/XWIKI-2211 > ). > > I > > > have never had a problem with Firefox or Safari, only IE. Something to > > add > > > to the mix though is that I was able to login with IE from within the > LAN > > > where XWiki is installed using my work laptop. If I try to login with > IE > > on > > > the same laptop, but across the Internet, the login fails. Does anyone > > have > > > any insight into this problem? > > > > > > > This is most likely a cookie problem. Try cleaning cookies first, and > > see if you can login afterwards. > > -- > > Sergiu Dumitriu > > http://purl.org/net/sergiu/ > > _______________________________________________ > > users mailing list > > users(a)xwiki.org > > http://lists.xwiki.org/mailman/listinfo/users > > > > > > -- > Nick Watts > blog: thewonggei.wordpress.com > > > ------------------------------ > > _______________________________________________ > users mailing list > users(a)xwiki.org > http://lists.xwiki.org/mailman/listinfo/users > > > End of users Digest, Vol 17, Issue 33 > ************************************* >

1 0

[xwiki-users] generic XML API snippet, and SOS
by Yishay Mor 19 Dec '08

19 Dec '08

I've posted a snippet: http://code.xwiki.org/xwiki/bin/view/Snippets/GenericXMLapiSnippet Which adds a very simple XML API to a site. This API allows other sites to programmaticaly query the XWiki site, and display data from it in any form they choose. You can see an example here: http://patternlanguagenetwork.myxwiki.org/xwiki/bin/view/api/genericXML I came across two problems in the process of writing this. One is general, and onw specific to my site - and fatal. the first problem is that is seems like this API can deliver protected data to a non-registered user. To avoid this on my site, I restricted it not to show classes under the XWiki space. Shouldn't this be blocked at a lower level? The second problem was that I have some fields (propoerties) in some of the classes which I'm not using. Since I can't delete them, I decided to change the name to ".unused" and filter. However, once I did this it seems to have completly crashed the class at hand. I can't even look at the Class in the ClassEditor to delete the latest versions and go back to the latest good one. Here is the corrupted class: http://patternlanguagenetwork.myxwiki.org/xwiki/bin/view/Cases/CaseClass Any ideas? ___________________________ Yishay Mor, Researcher, London Knowledge Lab http://www.lkl.ac.uk/people/mor.html http://www.google.com/calendar/embed?src=yishaym%40gmail.com +44-20-78378888 x5737

3 4

[xwiki-users] ldap + xwiki.authentication.ldap.user_group
by Bartłomiej Radziszewski 19 Dec '08

19 Dec '08

hello, I want to add access to xwiki only for users from special posixGroup in ldap. So I have added option: #-# only members of the following group will be verified in the LDAP #-# otherwise only users that are found after searching starting from the base_DN xwiki.authentication.ldap.user_group=cn=xwiki,ou=services,dc=xxx,dc=com all works fine but in logs i get exeption when i dont have some user in this group: com.xpn.xwiki.XWikiException: Error number 8001 in 8: LDAP user usertest does not belong to LDAP group cn=xwiki,ou=services,dc=xxx,dc=com. at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticateInContext(XWikiLDAPAuthServiceImpl.java:328) at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.ldapAuthenticate(XWikiLDAPAuthServiceImpl.java:198) at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java:149) at com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.authenticate(MyFormAuthenticator.java:239) at com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:165) at com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:148) at com.xpn.xwiki.user.impl.xwiki.XWikiAuthServiceImpl.checkAuth(XWikiAuthServiceImpl.java:203) at com.xpn.xwiki.XWiki.checkAuth(XWiki.java:3578) at com.xpn.xwiki.user.impl.xwiki.XWikiRightServiceImpl.checkAccess(XWikiRightServiceImpl.java:139) at com.xpn.xwiki.XWiki.checkAccess(XWiki.java:3586) at com.xpn.xwiki.XWiki.prepareDocuments(XWiki.java:4572) at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:190) at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:115) at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431) at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:236) at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1196) at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:432) at javax.servlet.http.HttpServlet.service(HttpServlet.java:727) at javax.servlet.http.HttpServlet.service(HttpServlet.java:820) java.lang.NullPointerException at com.xpn.xwiki.user.impl.LDAP.XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java:157) at com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.authenticate(MyFormAuthenticator.java:239) at com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:165) at com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.processLogin(MyFormAuthenticator.java:148) at com.xpn.xwiki.user.impl.xwiki.XWikiAuthServiceImpl.checkAuth(XWikiAuthServiceImpl.java:203) at com.xpn.xwiki.XWiki.checkAuth(XWiki.java:3578) at com.xpn.xwiki.user.impl.xwiki.XWikiRightServiceImpl.checkAccess(XWikiRightServiceImpl.java:139) at com.xpn.xwiki.XWiki.checkAccess(XWiki.java:3586) at com.xpn.xwiki.XWiki.prepareDocuments(XWiki.java:4572) at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:190) at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:115) at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431) at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:236) at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1196) at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:432) at javax.servlet.http.HttpServlet.service(HttpServlet.java:727) at javax.servlet.http.HttpServlet.service(HttpServlet.java:820) at org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:502) at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1124) at com.xpn.xwiki.plugin.webdav.DavFilter.doFilter(DavFilter.java:68) at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1115) at com.xpn.xwiki.wysiwyg.server.filter.ConversionFilter.doFilter(ConversionFilter.java:96) at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1115) at com.xpn.xwiki.web.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:287) at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1115) at com.xpn.xwiki.web.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:112) at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1115) at org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:361) at org.mortbay.jetty.security.SecurityHandler.handle(SecurityHandler.java:216) at org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:181) at org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:766) at org.mortbay.jetty.webapp.WebAppContext.handle(WebAppContext.java:417) at org.mortbay.jetty.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:230) at org.mortbay.jetty.handler.HandlerCollection.handle(HandlerCollection.java:114) at org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152) at org.mortbay.jetty.Server.handle(Server.java:324) at org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:534) at org.mortbay.jetty.ajp.Ajp13Connection.access$2900(Ajp13Connection.java:44) at org.mortbay.jetty.ajp.Ajp13Connection$RequestHandler.content(Ajp13Connection.java:249) at org.mortbay.jetty.ajp.Ajp13Parser.parseNext(Ajp13Parser.java:602) at org.mortbay.jetty.ajp.Ajp13Parser.parseAvailable(Ajp13Parser.java:157) at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:403) at org.mortbay.jetty.bio.SocketConnector$Connection.run(SocketConnector.java:228) at org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:522) Probably this NullPointer this is bug.. Thx and greetings, -- Bartłomiej Radziszewski mobile: +48 509 561 540 e-mail: br(a)debian.linux.pl JID: br(a)debian.linux.pl ICQ: #305569725

2 3

[xwiki-users] XWikiAuthServiceImpl.java
by Lewis Denizen 19 Dec '08

19 Dec '08

Hi xwiki-users, In XWikiAuthServiceImpl.java, I see the following lines: Line 521: String createuser = getParam("auth_createuser", context); Line 500~517: protected String getParam(String name, XWikiContext context) { String param = ""; try { param = context.getWiki().getXWikiPreference(name, context); } catch (Exception e) { } if (param == null || "".equals(param)) { try { param = context.getWiki().Param("xwiki.authentication." + StringUtils.replace(name, "auth_", ".")); } catch (Exception e) { } } if (param == null) { param = ""; } return param; } Which requires me to create a key called "xwiki.authentication..createuser" in the config - which is strange... Unless there are any side effects, would it be possible to request the StringUtils.replace() removed? Thanks again for a great release!

2 1

[xwiki-users] Using penrose LDAP server with Xwiki
by Cazottes Nicolas 19 Dec '08

19 Dec '08

Hello, I am trying to use Penrose LDAP virtual server (http://docs.safehaus.org/display/PENROSE/Home) as an LDAP source to manage authentification of my xwiki instance. The connection to the server works fine but when xwiki tries to search for my user, it stops with the following exception : 2008-12-01 10:06:38,921 [http://localhost:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] [P1-19] DEBUG ldap.XWikiLDAPUtils - Searching for the user in LDAP: user:nca base: query:(uid=nca) uid:uid 2008-12-01 10:06:39,921 [http://localhost:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] [P1-19] DEBUG ldap.XWikiLDAPConnection - LDAP Search failed LDAPException: Client request timed out (85) LDAP Timeout at com.novell.ldap.Message$Timeout.run(Unknown Source) 2008-12-01 10:06:39,921 [http://localhost:8080/xwiki/bin/loginsubmit/XWiki/XWikiLogin] [P1-19] DEBUG LDAP.XWikiLDAPAuthServiceImpl - Local LDAP authentication failed. After searching in the xwiki source code, I found there is a timeout of 1s for a search query to execute (in XWikiLDAPConnection line 292). It may explains the error I imagine. Is it possible to make this timeout defined via a configuration key in xwiki.cfg ? Another point related to xwiki LDAP logs : I don't like very much to have the password sent to xwiki writen clearly in the log file when LDAP debug is activated. Is it possible to have stars instead of the real value of the password ? If someone can do these modifications to the code, I will be pleased to test them. I would like to test it by myself but, currently, I did not manage to build xwiki with maven after checking out the source. Thank you for your help. Nicolas CAZOTTES

2 4

[xwiki-users] xwiki + ldap filter
by Bartłomiej Radziszewski 19 Dec '08

19 Dec '08

hello, it is posible to use filter in xwiki user search in ldap? i want to use activeAccount atribute when it is TRUE - user have access to xiwki, when it is FALSE user don't have it.. Thx for help and greetings, Bart -- Bartłomiej Radziszewski mobile: +48 509 561 540 e-mail: br(a)debian.linux.pl JID: br(a)debian.linux.pl ICQ: #305569725

1 0