Wiki source code of IRC Archive for channel #xwiki
Last modified by Vincent Massol on 2012/10/18 19:12
Show last authors
| author | version | line-number | content |
|---|---|---|---|
| 1 | lucaa joined #xwiki at 00:04 | ||
| 2 | penyaskito__ left at 00:13 (Read error: Connection reset by peer | ||
| 3 | penyaskito__ joined #xwiki at 00:13 | ||
| 4 | penyaskito_ joined #xwiki at 00:49 | ||
| 5 | penyaskito__ left at 00:53 (Ping timeout: 265 seconds | ||
| 6 | abusenius left at 00:57 (Quit: Konversation terminated! | ||
| 7 | penyaskito_ left at 01:11 (Read error: Connection reset by peer | ||
| 8 | penyaskito_ joined #xwiki at 01:12 | ||
| 9 | sdumitriu left at 01:28 (Ping timeout: 252 seconds | ||
| 10 | MartinCleaver left at 03:21 (Quit: MartinCleaver | ||
| 11 | venkatesh joined #xwiki at 04:46 | ||
| 12 | sburjan` left at 06:16 ( | ||
| 13 | vmassol joined #xwiki at 06:31 | ||
| 14 | vmassol left at 06:33 (Client Quit | ||
| 15 | npm left at 06:55 (Remote host closed the connection | ||
| 16 | npm joined #xwiki at 06:57 | ||
| 17 | vmassol joined #xwiki at 07:25 | ||
| 18 | sburjan` joined #xwiki at 07:52 | ||
| 19 | sburjan` left at 07:58 (Quit: Peace and Protection 4.22 | ||
| 20 | sburjan` joined #xwiki at 07:58 | ||
| 21 | tmortagne joined #xwiki at 08:21 | ||
| 22 | kibahop joined #xwiki at 08:26 | ||
| 23 | kibahop left #xwiki at 08:26 | ||
| 24 | kibahop joined #xwiki at 08:26 | ||
| 25 | kibahop left #xwiki at 08:26 | ||
| 26 | silviar joined #xwiki at 08:50 | ||
| 27 | asrfel joined #xwiki at 08:52 | ||
| 28 | sburjan joined #xwiki at 08:53 | ||
| 29 | vmassol left at 08:59 (Quit: Leaving. | ||
| 30 | sdumitriu joined #xwiki at 09:15 | ||
| 31 | mflorea joined #xwiki at 09:20 | ||
| 32 | sburjan - (09:20): sdumitriu : ping | ||
| 33 | silviar1 joined #xwiki at 09:21 | ||
| 34 | sdumitriu - (09:21): Pong | ||
| 35 | sburjan - (09:22): which issue discussed yesterday I should report on JIRA ? (or for the time should I leave them alone ?) | ||
| 36 | sdumitriu - (09:23): You can make one for always checking the active field | ||
| 37 | lucaa left at 09:23 (Ping timeout: 265 seconds | ||
| 38 | sdumitriu - (09:24): "Always take into account the Active setting on user accounts" | ||
| 39 | sdumitriu - (09:24): Hm, bad, too many "account" | ||
| 40 | sdumitriu - (09:24): "Always check the Active setting on user accounts" | ||
| 41 | sburjan - (09:24): okay. In this case, I'll have to create two. One for the server side .. to make it check by default, and other for the UI to be removed | ||
| 42 | silviar left at 09:25 (Ping timeout: 265 seconds | ||
| 43 | sdumitriu - (09:25): Yes | ||
| 44 | sburjan - (09:25): the UI will go to X-Colibri, and the other .. to Core ? | ||
| 45 | sdumitriu - (09:25): You're getting the hang of it, sburjan | ||
| 46 | sdumitriu - (09:25): The other to core, the UI to XAADMINISTRATION | ||
| 47 | sburjan - (09:25): okay | ||
| 48 | sburjan - (09:25): sdumitriu : thanks :) | ||
| 49 | sburjan - (09:28): and there was another topic yesterday regarding the storing the password for stmp settings from admin area. abusenius and caleb told me that this wasn't a good thing because these passwrds are stored in XWikiPropieties, which is visible to all users, so it's not safe. And we started discussing how can we store this kind of data in a secure manner | ||
| 50 | lpereira joined #xwiki at 09:29 | ||
| 51 | sburjan - (09:29): should I make a suggestion to this too ? | ||
| 52 | cjdelisle - (09:31): someone said caleb? | ||
| 53 | sburjan - (09:31): me :) | ||
| 54 | sdumitriu - (09:31): Good morning Caleb | ||
| 55 | cjdelisle - (09:31): good morning | ||
| 56 | sburjan - (09:31): good morning | ||
| 57 | cjdelisle - (09:32): re password in XWikiProperties, I think maybe it's a better idea to just look at fixing XPMAIL-7 | ||
| 58 | lucaa joined #xwiki at 09:33 | ||
| 59 | sdumitriu - (09:33): Well, what if the password is stored encrypted | ||
| 60 | cjdelisle - (09:33): Then where's the key stored? | ||
| 61 | sdumitriu - (09:34): I thought you guys took care of encrypting (reversibly) stuff | ||
| 62 | sdumitriu - (09:34): The key should be stored in a java keystore | ||
| 63 | cjdelisle - (09:35): xwiki-crypto doesn't do any storage of keys. | ||
| 64 | sburjan - (09:35): I'm just proposing stuff here, don't know the best way to achieve them. | ||
| 65 | cjdelisle - (09:36): Suppose you put the key in the java keystore then ported to another machine. You would not be happy when nothing decrypted. | ||
| 66 | sdumitriu - (09:36): Yeah, but that's sysadmin stuff | ||
| 67 | sdumitriu - (09:36): You want to encrypt stuff, you must take care of the storage | ||
| 68 | penyaskito_ left at 09:36 (Ping timeout: 265 seconds | ||
| 69 | sdumitriu - (09:36): Maybe we should have a key migration mechanism | ||
| 70 | cjdelisle - (09:37): One reason I like the way attachments are handled is because you can dump the db and load on another box and everything works. | ||
| 71 | sdumitriu - (09:37): Keys should be changed periodically | ||
| 72 | cjdelisle - (09:37): Symmetric keys? | ||
| 73 | sburjan - (09:37): yes well in this particular case, smtp settings should be made by the sysadmin .. and it's not a field that would change too often .. so porting it to another machine and setting it up there is sysadmin job | ||
| 74 | SvenDowideit left at 09:38 (Read error: Connection reset by peer | ||
| 75 | cjdelisle - (09:38): What's the advantage of putting the key in the java keystore rather than somewhere like a config file? | ||
| 76 | sburjan - (09:39): yeah, I was +1 config file :P | ||
| 77 | sburjan - (09:39): putside of web dir ( cjdelisle don't laugh) :) | ||
| 78 | sburjan - (09:39): *outside | ||
| 79 | cjdelisle - (09:40): Should we give Sorin access to the super secret jira issues? | ||
| 80 | sdumitriu - (09:41): We could | ||
| 81 | SvenDowideit joined #xwiki at 09:41 | ||
| 82 | cjdelisle - (09:41): I think the protocol is you (Sorin) ask on the list for access to the secret mailing list and the jirs issues come with that. | ||
| 83 | sburjan - (09:42): by list meaning dev list ? | ||
| 84 | cjdelisle - (09:42): Yup. | ||
| 85 | sburjan - (09:43): well I could, but I don;t know how can I help further with security. I'm not so experienced like you guys are | ||
| 86 | cjdelisle - (09:43): what? me? experienced? | ||
| 87 | arkub joined #xwiki at 09:43 | ||
| 88 | sburjan - (09:43): well you wrote some crypto class, right ? | ||
| 89 | cjdelisle - (09:44): https://encrypted.google.com/search?q=what+me+worry <-- making fun of this line | ||
| 90 | cjdelisle - (09:46): re keystore: I don't see any real benefit to using the keystore. My opinion is if the key is on the machine then it can be accessed. | ||
| 91 | cjdelisle - (09:47): unfeasible or bust. | ||
| 92 | evalica joined #xwiki at 09:50 | ||
| 93 | Enygma` joined #xwiki at 09:51 | ||
| 94 | KermitTheFragger joined #xwiki at 10:06 | ||
| 95 | penyaskito joined #xwiki at 10:06 | ||
| 96 | sburjan - (10:08): XAADMINISTRATION-165 | ||
| 97 | sburjan - (10:08): XWIKI-5430 | ||
| 98 | sburjan - (10:08): sdumitriu, : are they ok ? | ||
| 99 | sdumitriu - (10:09): Yes | ||
| 100 | sburjan - (10:09): great | ||
| 101 | sburjan - (10:10): next : http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Configuration#HConfiguringtheSMTPserver | ||
| 102 | sburjan - (10:11): i was hoping I can refactor these and add some javamail param in the documentation. For the mail to be set up without any "object" editing | ||
| 103 | sburjan - (10:12): should I delete the 2 obsolete categories, and put a new screenshot along with some documentation in the "Configuring the SMTP server" ? | ||
| 104 | sburjan - (10:13): there are 2 ways of doing it, either by those examples, either by putting params in the aditional params textarea | ||
| 105 | abusenius joined #xwiki at 10:14 | ||
| 106 | cjdelisle - (10:16): closing XWIKI-5415 as won't fix | ||
| 107 | sburjan - (10:23): odd, those settings seem to work .. nothing obsolete there | ||
| 108 | sburjan - (10:23): now let's see if they work | ||
| 109 | sdumitriu - (10:25): sburjan: Which settings? | ||
| 110 | abusenius - (10:25): re storing sensitive data, we could introduce a "settings key" that the admin has to enter, this eliminates migration problems | ||
| 111 | abusenius - (10:25): (good time of the day everyone) | ||
| 112 | sburjan - (10:25): sdumitriu, : http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Configuration#HConfiguringtheSMTPserver . there I have 2 warnings that settings are obsolete.. I'm investigating if they work | ||
| 113 | sdumitriu - (10:25): Why are SSDs still so expensive? | ||
| 114 | sburjan - (10:25): good day abusenius | ||
| 115 | sburjan - (10:26): because they are still new tech for commercial sector :) | ||
| 116 | sdumitriu - (10:26): sburjan: It's not the settings that are obsolete, but the instructions | ||
| 117 | sdumitriu - (10:27): Because they say to _add_ those fields to the class, but now they are there already | ||
| 118 | sburjan - (10:27): well hint | ||
| 119 | sburjan - (10:28): if they are there (I confirm) why are they not display in the form | ||
| 120 | sburjan - (10:28): shouldnt they be visible ? | ||
| 121 | sdumitriu - (10:30): What form? | ||
| 122 | sburjan - (10:31): sdumitriu, : xwiki/bin/admin/XWiki/XWikiPreferences?editor=globaladmin§ion=General | ||
| 123 | sburjan - (10:31): the fields for user / pass and other important smtp settings are not there | ||
| 124 | sburjan - (10:32): only server and port .. and addidional javamail | ||
| 125 | sdumitriu - (10:32): I can see them on 2.4 | ||
| 126 | sburjan - (10:33): odd. I'm on 2.5 and cant see them | ||
| 127 | sdumitriu - (10:33): Server, Port, SMTP Server Username. SMTP Server Password. Additional JavaMail properties | ||
| 128 | cjdelisle - (10:34): ssd's are expensive, these things are ridiculous http://www.gigabyte.com/products/product-page.aspx?pid=2180 | ||
| 129 | cjdelisle - (10:34): and they only take a certain kind of ram | ||
| 130 | sburjan - (10:35): let me download another snapshot | ||
| 131 | cjdelisle - (10:35): Sent mail about changing XHS#saveXWikiProperty | ||
| 132 | sburjan - (10:36): great: now I think I found another bug | ||
| 133 | sburjan - (10:36): sdumitriu, : have 5 minutes to do a call ? | ||
| 134 | sdumitriu - (10:36): Yes | ||
| 135 | sdumitriu - (10:37): But fast, I'm leaving in a few minutes | ||
| 136 | silviar1 left at 10:40 (Quit: Leaving. | ||
| 137 | silviar joined #xwiki at 10:41 | ||
| 138 | silviar left at 10:48 (Quit: Leaving. | ||
| 139 | silviar joined #xwiki at 10:55 | ||
| 140 | evalica - (10:57): silviar: it would be nice if you were consistent with the user in the screenshots | ||
| 141 | evalica - (10:57): you have 3 users: silvia rusu, administrator and James Joyce | ||
| 142 | evalica - (10:57): for the FeaturesHelpTutorial | ||
| 143 | sburjan - (11:08): sdumitriu, : ping when back | ||
| 144 | MartinCleaver joined #xwiki at 11:35 | ||
| 145 | evalica left at 11:36 (Read error: Connection reset by peer | ||
| 146 | evalica joined #xwiki at 11:39 | ||
| 147 | vmassol joined #xwiki at 11:42 | ||
| 148 | vmassol left at 11:43 (Client Quit | ||
| 149 | tmortagne left at 12:13 (Ping timeout: 240 seconds | ||
| 150 | tmortagne joined #xwiki at 12:17 | ||
| 151 | sdumitriu - (12:33): sburjan: Ping | ||
| 152 | sburjan - (12:36): ok. Tested. The fileds are there, everything seems ok. I have only one problem with that. When using auth, the protocol requests that you provide a valid hostname. there is no visible filed in the UI, NOR in the class. | ||
| 153 | sburjan - (12:36): and you get something like this : | ||
| 154 | sburjan - (12:37): javax.mail.SendFailedException: Invalid Addresses; | ||
| 155 | sburjan - (12:37): nested exception is: | ||
| 156 | sburjan - (12:37): com.sun.mail.smtp.SMTPAddressFailedException: 504 5.5.2 <localhost>: Helo command rejected: need fully-qualified hostname | ||
| 157 | sburjan - (12:38): I'm proposing to add a filed for that too, because it is required when authing with user/pass | ||
| 158 | sdumitriu - (12:38): No | ||
| 159 | sdumitriu - (12:38): It should not fail like that | ||
| 160 | sdumitriu - (12:38): There's no need to set a hostname | ||
| 161 | rstavro joined #xwiki at 12:38 | ||
| 162 | sburjan - (12:38): I'm testing with xwiki sas mailing system | ||
| 163 | sburjan - (12:39): and it fails if i don't set that field | ||
| 164 | sburjan - (12:39): ps: this is not related to TLS/StartTLS | ||
| 165 | sburjan - (12:40): helo comand is plain telnet auth | ||
| 166 | sburjan - (12:40): and when auth-ing you need to identify yourself with a hostname | ||
| 167 | sdumitriu - (12:40): Yes, but it has to be a real hostname | ||
| 168 | sdumitriu - (12:40): It means that you must set a hostname on your computer | ||
| 169 | sdumitriu - (12:41): It's not something you fake in XWiki | ||
| 170 | sburjan - (12:41): well, you can fake | ||
| 171 | cjdelisle - (12:41): Whatever the outside world knows you as is what you use for a hostname. | ||
| 172 | sburjan - (12:41): I'm running on localhost, havent put a hostname on my OS, and faking with param : mail.smtp.localhost=mail.xwiki.com | ||
| 173 | sburjan - (12:41): and it works this way | ||
| 174 | sburjan - (12:42): and I'm guessing that if you don't set it, the default is localhost, which will always fail when authing | ||
| 175 | sdumitriu - (12:42): You can just set it in Additional JavaMail properties, can't you? | ||
| 176 | sburjan - (12:42): yes, of course | ||
| 177 | sburjan - (12:43): but this option should be included in the UI because it comes with the settings mandatory for auth | ||
| 178 | sburjan - (12:43): I mean, we have user and password , but without this field set, it will fail auth no matter what | ||
| 179 | sdumitriu - (12:44): No | ||
| 180 | sburjan - (12:44): only open-relay mailserver don't need this option afaik | ||
| 181 | sdumitriu - (12:44): It never failed for me or for any of the public XWiki servers | ||
| 182 | sburjan - (12:44): okay | ||
| 183 | sburjan - (12:44): you know better | ||
| 184 | cjdelisle - (12:44): Usually people run the mail server on the same box as the webserver so it's not used. | ||
| 185 | sdumitriu - (12:44): It's just that you don't have a hostname set on your system | ||
| 186 | sdumitriu - (12:44): Most servers do have a hostname | ||
| 187 | sburjan - (12:44): yeah, true | ||
| 188 | cjdelisle - (12:45): Nah everyone has a hostname, I'd bet his is xwikisoftware.iasi.rdsnet.ro | ||
| 189 | sdumitriu - (12:45): sburjan, you're the first one to report this problem | ||
| 190 | sburjan - (12:45): so are we sure xwiki takes the os hostname and use it in the mailing system ? | ||
| 191 | sburjan - (12:45): no, mine is localhost :P | ||
| 192 | sburjan - (12:45): sdumitriu, : it's not a problem, it was a suggestion | ||
| 193 | cjdelisle - (12:46): "* sburjan ([email protected]) has joined #xwiki" | ||
| 194 | sdumitriu - (12:46): That's the hostname for the entire Ia?i office | ||
| 195 | sdumitriu - (12:46): It's not the hostname of the individual computers | ||
| 196 | sburjan - (12:47): well yes, but running an instance on localhost, I mean xwiki sees my host as localhost, not as xwikisoftware.iasi.rdsnet.ro | ||
| 197 | cjdelisle - (12:47): If the mail server is outside the office then that's the one to use. | ||
| 198 | sdumitriu - (12:47): Although they should set up their computers to use x.i.r.ro as the network name, and an extra hostname | ||
| 199 | sburjan - (12:47): well... it's outside the office | ||
| 200 | sburjan - (12:47): I get your point | ||
| 201 | cjdelisle - (12:48): You have to report yourself as what the mailserver sees you as. | ||
| 202 | sburjan - (12:48): no. becauseI report as mail.smtp.localhost=mail.xwiki.com and I'm allowed to send | ||
| 203 | sburjan - (12:48): and my hostname isnt mail.xwiki.com | ||
| 204 | jvelociter joined #xwiki at 12:48 | ||
| 205 | cjdelisle - (12:49): Sounds like something is wrong on the server then. | ||
| 206 | sburjan - (12:49): yeah .. that's what I guessing | ||
| 207 | cjdelisle - (12:50): You shouldn't be able to trick a server into thinking it's sending itself the message which you are actually sending it. | ||
| 208 | cjdelisle - (12:50): You probably get an interesting mail header from that trick too. | ||
| 209 | sburjan - (12:51): Received: from localhost (localhost.localdomain [127.0.0.1]) | ||
| 210 | sburjan - (12:51): by borabora.xpertnet.biz (Postfix) with ESMTP id 8C637660008 | ||
| 211 | sburjan - (12:51): from the header | ||
| 212 | cjdelisle - (12:51): I'd love to rent a shell from the .gov so all my emails had nsa.gov in the header :D | ||
| 213 | sburjan - (12:51): intresting. so the server overrides the param I put there .. it still takes localhost | ||
| 214 | sburjan - (12:51): :P | ||
| 215 | sburjan - (12:52): and it works :) | ||
| 216 | cjdelisle - (12:52): might be because mail.xwiki.com resolves to it's own ip which is localhost. | ||
| 217 | sburjan - (12:52): sdumitriu, : you're right. I read the javadoc and it seems you are right | ||
| 218 | cjdelisle - (12:53): Anyway it allows you to send mail without revealing your ip which is incorrect. | ||
| 219 | sburjan - (12:53): Defaults to InetAddress.getLocalHost().getHostName(). Should not normally need to be set if your JDK and your name service are configured properly. | ||
| 220 | cjdelisle - (12:53): Nah, if there's a nat then that doesn't work. | ||
| 221 | cjdelisle - (12:54): Lots of businesses use nats. | ||
| 222 | sburjan - (12:54): well the odd thing is that if you override with a fake, you're allowed, something localhost is not allowed to HELO, but after all, localhost is used to fill the header. funny thing | ||
| 223 | sburjan - (12:54): we have nat too | ||
| 224 | sburjan - (12:55): ok, sorry sdumitriu for bringing this into discussion :) | ||
| 225 | sdumitriu - (12:55): No problem | ||
| 226 | sdumitriu - (12:55): You found a possible issue | ||
| 227 | sdumitriu - (12:55): You could document it | ||
| 228 | sburjan - (12:56): but I dont think this is xwiki related. maybe the mailserver setup is odd | ||
| 229 | sdumitriu - (12:56): I mean, document mail.smtp.localhost | ||
| 230 | sburjan - (12:56): I was thinking that xwiki uses localhost for that velue without checking the actual hostname. I thought localhost was a default hardcoded var | ||
| 231 | cjdelisle - (12:57): There is some documentation in the InvitationApp on code.xwiki | ||
| 232 | sburjan - (12:57): yes, I will improve the documentation for javamail today | ||
| 233 | sburjan - (12:57): I was thinking adding some cutom params for the aditional javamail params .. like auth, ssl, etc | ||
| 234 | sburjan - (12:58): to be on the documentation site .. to ease for custom configs | ||
| 235 | sdumitriu - (12:58): No, I don't agree with that | ||
| 236 | sdumitriu - (12:58): Too many fields makes it look complicated | ||
| 237 | sdumitriu - (12:58): And they aren't always needed | ||
| 238 | sburjan - (12:58): no no.. I was saying about documentation | ||
| 239 | sburjan - (12:58): not the UI | ||
| 240 | sdumitriu - (12:58): If we have some sample configurations, that should be enough | ||
| 241 | sdumitriu - (12:59): Ah, in the documentation, +1 | ||
| 242 | sburjan - (12:59): some most used customs param | ||
| 243 | sburjan - (12:59): in documentation | ||
| 244 | sburjan - (12:59): I'm done with the UI :P | ||
| 245 | sburjan - (13:00): and shouldn't the password for javamial stored as password field, not blank text ? (my last remark) :P | ||
| 246 | sdumitriu - (13:00): Yes | ||
| 247 | sdumitriu - (13:00): At least password with plaintext storage | ||
| 248 | sdumitriu - (13:01): It doesn't offer real security, but at least the field will be masked from public access | ||
| 249 | sburjan - (13:01): yes. should I create an issue for making that Ui filed to password instead of input field ? | ||
| 250 | sburjan - (13:01): *field | ||
| 251 | rstavro - (13:01): @sdumitriu : in ColorThems.WebHome, there is this line: "= Color Themes =" and everything else is translated by using $msg.get . Shouldn't we add 'xe.themes.title=Color Themes' into the translations document and set the ColorThemes.WebHome title as being $msg.get('xe.themes.title') ? | ||
| 252 | sdumitriu - (13:01): Not the UI, the property | ||
| 253 | sdumitriu - (13:02): rstavro: Yes | ||
| 254 | sburjan - (13:02): the proprety, yes | ||
| 255 | sdumitriu - (13:02): rstavro: Make a patch :) | ||
| 256 | rstavro - (13:02): ok, I'll create a Jira issue and add a patch to it | ||
| 257 | sburjan - (13:04): sdumitriu, : so change t hat proprety from String to Password | ||
| 258 | cjdelisle - (13:04): No, that doesn't work | ||
| 259 | cjdelisle - (13:04): database freaks out. | ||
| 260 | sdumitriu - (13:04): cjdelisle: Why? | ||
| 261 | sdumitriu - (13:05): Password and String are both stored as StringProperty | ||
| 262 | sburjan - (13:05): well... login form works well as password field | ||
| 263 | sburjan - (13:05): and there are other password fields | ||
| 264 | cjdelisle - (13:05): Ahh you're right. Was thinking about something else. | ||
| 265 | cjdelisle - (13:06): Can't set to "hash" though. | ||
| 266 | sburjan - (13:06): well... you cant store as has, at least not one way hash | ||
| 267 | sburjan - (13:06): *hash | ||
| 268 | sburjan - (13:06): okay.. reporting to JIRA | ||
| 269 | cjdelisle - (13:10): So if we were to implement "crypt" password, where does the key get stored? Config files can be read, java keystore can be dumped, Any place they're stored only makes an attack a little harder. | ||
| 270 | cjdelisle - (13:11): xwiki-crypto relies on the user to remember the password to decrypt the content. | ||
| 271 | sburjan - (13:11): XAADMINISTRATION-166 | ||
| 272 | sburjan - (13:15): ok. thanks guys for the discussions | ||
| 273 | sburjan - (13:15): resuming my other work | ||
| 274 | venkatesh left at 14:07 (Quit: Ex-Chat | ||
| 275 | abusenius - (14:26): re storing the keys, imo head > random generated in keystore > random generated in config > unencrypted | ||
| 276 | abusenius - (14:26): in any case somehow encrypted is better than nothing | ||
| 277 | lucaa1 joined #xwiki at 14:34 | ||
| 278 | lucaa left at 14:35 (Ping timeout: 240 seconds | ||
| 279 | vmassol joined #xwiki at 14:39 | ||
| 280 | vmassol left at 14:46 (Quit: Leaving. | ||
| 281 | rstavro left at 14:48 ( | ||
| 282 | cjdelisle - (14:52): Don't know about the keystore. Imagine you're an admin and your box gets hacked so instead of chasing around all the backdoors you just wipe the disk and start reinstalling the database dumps. Then you find you can't decrypt anything because you lost the key. | ||
| 283 | abusenius - (15:11): I agree it's easy to overlook | ||
| 284 | abusenius - (15:11): but technically it is safer than config file | ||
| 285 | abusenius - (15:12): and remembering is better because it will work no matter what happens with the disk | ||
| 286 | cjdelisle - (15:16): maybe we demand a master passwd every time the wiki starts? haha how long will it take for that to end up in the init script? | ||
| 287 | cjdelisle - (15:17): and logs :( | ||
| 288 | vmassol joined #xwiki at 15:22 | ||
| 289 | sburjan - (15:25): sdumitriu, : ping | ||
| 290 | sdumitriu - (15:26): Pong | ||
| 291 | sburjan - (15:28): take a look at : http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Configuration#HConfiguringtheSMTPserver and tell me if you like it. If not, what should I improve | ||
| 292 | abusenius - (15:29): cjdelisle: there is no perfect security | ||
| 293 | cjdelisle - (15:30): hmm ps3 | ||
| 294 | abusenius - (15:30): it is not perfect, just very good | ||
| 295 | abusenius - (15:30): and smart done (most consoles were hacked because different groups of hackers joined their forces) | ||
| 296 | sdumitriu - (15:31): sburjan: "Outgoing SMTP Server" does not exist | ||
| 297 | sdumitriu - (15:31): Could you make the image smaller? | ||
| 298 | cjdelisle - (15:31): Only way to get the keys off that is cut the top off the cell chip look at it with an electron microscope. | ||
| 299 | sdumitriu - (15:31): It doesn't fit even on 1280px | ||
| 300 | sdumitriu - (15:32): Leave a space after the dot here: "JavaMail.The" | ||
| 301 | cjdelisle - (15:32): did you hit ctrl+0 | ||
| 302 | abusenius - (15:32): well, normal hardware does not support that security :) | ||
| 303 | sburjan - (15:32): cjdelisle, : me ? | ||
| 304 | cjdelisle - (15:32): I see images way too big usually because I have everything zoomed way in ctrl++++++ | ||
| 305 | cjdelisle - (15:33): no sdumitriu | ||
| 306 | abusenius - (15:33): and I hope will never do, otherwise we'll be forced to use ms or apple | ||
| 307 | cjdelisle - (15:33): "forced to use ms or apple"? | ||
| 308 | sdumitriu - (15:33): cjdelisle: Yes, I'm on Ctrl+0 by default | ||
| 309 | sburjan - (15:33): sdumitriu, ;ok, I'll scrink the image | ||
| 310 | sburjan - (15:33): *shrink | ||
| 311 | abusenius - (15:33): only signed kernel can boot | ||
| 312 | cjdelisle - (15:34): Oh you're talking about trusted computing. | ||
| 313 | abusenius - (15:34): you can guess who will have the money to buy a cert | ||
| 314 | abusenius - (15:34): yes | ||
| 315 | cjdelisle - (15:34): Evil. And most evil ideas also contain big mistakes. | ||
| 316 | abusenius - (15:35): trusted computing is itself one big mistake | ||
| 317 | cjdelisle - (15:35): That said, it would be nice to have "write only" memory to place keys in then be able to encrypt my bios. | ||
| 318 | abusenius - (15:35): well, buy a pc with tpm | ||
| 319 | cjdelisle - (15:35): I don't trust it :P | ||
| 320 | abusenius - (15:36): and it does not trust you :) | ||
| 321 | cjdelisle - (15:36): Anyway the day apple and ms stop getting rooted is still far away. | ||
| 322 | sburjan - (15:37): sdumitriu, : check now. Best screenshots are made on windoze machines, sorry :P | ||
| 323 | sdumitriu - (15:38): Hm, you shouldn't shrink the image | ||
| 324 | sdumitriu - (15:38): Just make the screenshot on a resized browser window | ||
| 325 | sburjan - (15:38): okay. executing | ||
| 326 | cjdelisle - (15:39): At the end of the day, people just do what they want and there isn't really any way to stop it. Ps3 is secure so noone uses it. | ||
| 327 | cjdelisle - (15:40): sdumitriu: Check enterprise/trunk/web/pom.xml there's a reference to flickr plugin. | ||
| 328 | sdumitriu - (15:41): I know, I didn't finish the move | ||
| 329 | sburjan - (15:42): done | ||
| 330 | abusenius - (15:42): noone uses ps3? people do cluster out of them | ||
| 331 | cjdelisle - (15:43): Not since sony took away linux. | ||
| 332 | sburjan - (15:43): did what ? | ||
| 333 | abusenius - (15:43): well, yes, now they made a big mistake | ||
| 334 | cjdelisle - (15:43): every firmware update, ps3 loses a feature. lol. | ||
| 335 | abusenius - (15:43): it was one of the reasons why it wasn't hacked yet, linux allready worked | ||
| 336 | cjdelisle - (15:45): I guess one of the technician's usb sticks was cloned and they're patching them to do whatever now. Not really hacked though. | ||
| 337 | cjdelisle - (15:45): Definitely funny. | ||
| 338 | abusenius - (15:48): cjdelisle: have you seen the video about how xbox and wii were hacked? | ||
| 339 | cjdelisle - (15:48): nah | ||
| 340 | abusenius - (15:48): quite old, but entertaining | ||
| 341 | cjdelisle - (15:49): I respect game designers. they get these horrible architectures and actually make things run fast on them. | ||
| 342 | abusenius - (15:49): http://chaosradio.ccc.de/22c3_m4v_559.html | ||
| 343 | abusenius - (15:50): and http://chaosradio.ccc.de/23c3_m4v_1606.html | ||
| 344 | abusenius - (15:50): the first one is just fun to watch :) | ||
| 345 | cjdelisle - (15:50): downloading... | ||
| 346 | cjdelisle - (15:51): Few years back in a weak moment I got a ps3. I used it as a headless linux server for a little while, it's sat ever since. | ||
| 347 | cjdelisle - (15:52): Never updated the firmware, so I just discovered that java can be run on it. | ||
| 348 | abusenius - (15:52): I don't remember which of the speakers is better, but one of them made fun of the ms all the time ^^ | ||
| 349 | abusenius - (15:52): nice | ||
| 350 | cjdelisle - (15:53): I have yet to find a java platform which can keep me away from the reflection api. Maybe I'll learn something about how security managers _should_ be set up :) | ||
| 351 | cjdelisle - (15:55): Like do they keep me from loading classes? Can I override a class? Can I override a critical class? Maybe a class which has god permission with the SecurityManager? | ||
| 352 | sburjan_ joined #xwiki at 16:05 | ||
| 353 | sburjan` left at 16:08 (Ping timeout: 255 seconds | ||
| 354 | sburjan_ is now known as sburjan` ([email protected] | ||
| 355 | KermitTheFragger left at 16:10 (Quit: Leaving | ||
| 356 | vmassol left at 16:11 (Quit: Leaving. | ||
| 357 | lucaa1 left at 16:16 (Quit: Leaving. | ||
| 358 | asrfel left at 16:33 (Quit: Leaving. | ||
| 359 | sburjan left at 16:45 (Quit: Ex-Chat | ||
| 360 | silviar left at 16:51 (Quit: Leaving. | ||
| 361 | Enygma`1 joined #xwiki at 16:54 | ||
| 362 | evalica1 joined #xwiki at 16:54 | ||
| 363 | Enygma` left at 16:57 (Ping timeout: 245 seconds | ||
| 364 | evalica left at 16:57 (Ping timeout: 258 seconds | ||
| 365 | lpereira left at 17:02 (Quit: Leaving. | ||
| 366 | kwoot joined #xwiki at 17:05 | ||
| 367 | kwoot - (17:06): hello. Can anybody tell me why "#foreach($n in [0..$stages])" does not work and "#foreach($n in [0..5])" does? | ||
| 368 | kwoot - (17:06): it's driving me nuckin futs :-) | ||
| 369 | sdumitriu - (17:07): Is $stages valid? | ||
| 370 | sdumitriu - (17:07): It should work if $stages exists and is a valid number | ||
| 371 | kwoot - (17:07): yep, : "#set($stages=$xcontext.macro.params.Stages)" and contains "2". | ||
| 372 | sdumitriu - (17:07): That's a string | ||
| 373 | kwoot - (17:08): so how do I convert that to an int then? | ||
| 374 | sdumitriu - (17:09): Try $mathtool.toInteger($xcontext.macro.params.Stages) | ||
| 375 | kwoot - (17:10): works, works, works, yippie kay ai!!!!! | ||
| 376 | kwoot - (17:10): thanks a lot, virtual kisses :-) [rotfl] | ||
| 377 | kwoot - (17:12): okay, next question is premature since I have not yet tried it: can I make a link in a page that refers to an empty page, but when the user clicks on it, will get the edit window prepopulated with the contents from a template? | ||
| 378 | kwoot - (17:15): hm, guess the kissing part did not encourage a new reply. Sorry. | ||
| 379 | sdumitriu - (17:15): Yes, sure | ||
| 380 | sdumitriu - (17:15): What version are you using? | ||
| 381 | sdumitriu - (17:16): 2.4 has a nice new feature, when trying to open a non-existing document, you're promted for a template to copy | ||
| 382 | kwoot - (17:17): currently 2.2 but upgrade to 2.4 scheduled for this friday because of template function. I am building a prince2 project management tool and if I can program the velocity macro to make a link and the link contains info on which template to use would be very nice. | ||
| 383 | kwoot - (17:18): I will punt in the wiki what I have now because it is simple, but works. | ||
| 384 | kwoot - (17:19): hm, can not add code snippet because I habe no login to the code.xwiki. alright, in the wiki then? | ||
| 385 | cjdelisle - (17:22): If you're just looking for a snippet you don't need to log in. | ||
| 386 | cjdelisle - (17:22): If you're contributing a snippet then you do but registration is easy, we don't ask for a lot of info. | ||
| 387 | kwoot - (17:23): okay, where can I register for code.xwiki.org? | ||
| 388 | sdumitriu - (17:24): On www.xwiki.org | ||
| 389 | kwoot - (17:24): ok | ||
| 390 | kwoot - (17:27): Done: http://code.xwiki.org/xwiki/bin/view/Macros/Prince2Macro | ||
| 391 | kwoot - (17:27): I will try to extend it in the next few weeks. | ||
| 392 | kwoot - (17:27): going home now. thanks for your help. | ||
| 393 | kwoot left #xwiki at 17:27 | ||
| 394 | cjdelisle - (17:28): wake up | ||
| 395 | sburjan` - (17:28): :)) | ||
| 396 | sdumitriu - (17:28): !help | ||
| 397 | jbrBridge - (17:28): !who - shows who is on the other channel | ||
| 398 | jbrBridge - (17:28): !shutdown - shutdown bridge (will probably attempt to rejoin after a few seconds) | ||
| 399 | cjdelisle - (17:28): wrong bot | ||
| 400 | sdumitriu - (17:29): This works: | ||
| 401 | sdumitriu - (17:29): /msg xwikibot abc | ||
| 402 | cjdelisle - (17:30): !search Prince2Macro | ||
| 403 | cjdelisle - (17:30): !news | ||
| 404 | sdumitriu - (17:31): Probably the observation rule was lost | ||
| 405 | cjdelisle - (17:33): It'd be nice if xwikibot could be !restarted | ||
| 406 | abusenius - (18:02): does somebody remember what the intended purpose of xwiki-core-actions was? | ||
| 407 | abusenius - (18:02): was it also supposed to contain the servlet filter? | ||
| 408 | cjdelisle - (18:02): to replace XWikiAction. | ||
| 409 | abusenius - (18:03): I start having doubt if moving ActionFilter out of the core is such a good idea | ||
| 410 | cjdelisle - (18:04): We all want to support portlets but nobody really knows how it should be done. | ||
| 411 | cjdelisle - (18:04): So it's stalled. | ||
| 412 | abusenius - (18:05): I see | ||
| 413 | abusenius - (18:06): is there some kind of migration assistent that moves configuration from cfg to properties? | ||
| 414 | sdumitriu - (18:07): abusenius: No | ||
| 415 | sdumitriu - (18:07): abusenius: You should just leave ActionFilter in the core for the moment, move the other 2 | ||
| 416 | abusenius - (18:07): yea, looks like it is stuck there forever | ||
| 417 | abusenius - (18:08): the rest is easy, I have already moved them locally | ||
| 418 | lucaa joined #xwiki at 18:19 | ||
| 419 | sburjan` - (18:22): cool | ||
| 420 | sburjan` - (18:22): so we'll soon drop xwiki.cfg ? | ||
| 421 | sdumitriu - (18:22): Not quite so soon | ||
| 422 | sdumitriu - (18:22): But yeah, that's a goal | ||
| 423 | vmassol joined #xwiki at 18:26 | ||
| 424 | sburjan` - (18:26): cool | ||
| 425 | sburjan` - (18:26): core needs a lot of improvement | ||
| 426 | KermitTheFragger joined #xwiki at 18:37 | ||
| 427 | arkub left at 18:47 (Quit: Leaving | ||
| 428 | abusenius left at 19:02 (Ping timeout: 252 seconds | ||
| 429 | lpereira joined #xwiki at 19:17 | ||
| 430 | MartinCleaver left at 19:18 (Excess Flood | ||
| 431 | mflorea left at 19:19 (Quit: Leaving. | ||
| 432 | vmassol left at 19:34 (Quit: Leaving. | ||
| 433 | abusenius joined #xwiki at 19:35 | ||
| 434 | KermitTheFragger left at 19:37 (Quit: Leaving | ||
| 435 | lucaa left at 19:48 (Ping timeout: 240 seconds | ||
| 436 | tmortagne left at 20:02 (Quit: Leaving. | ||
| 437 | sburjan` - (21:21): sdumitriu : ping | ||
| 438 | evalica1 left at 21:24 (Quit: Leaving. | ||
| 439 | evalica joined #xwiki at 22:02 | ||
| 440 | sdumitriu - (22:04): sburjan`: Pong | ||
| 441 | lucaa joined #xwiki at 22:05 | ||
| 442 | sburjan` - (22:17): is your DCC working ? | ||
| 443 | sburjan` - (22:17): or should I skype :) | ||
| 444 | sdumitriu - (22:18): No DCC | ||
| 445 | mflorea joined #xwiki at 22:27 | ||
| 446 | evalica left at 22:31 (Quit: Leaving. | ||
| 447 | mflorea left at 22:59 (Quit: Leaving. | ||
| 448 | Enygma`1 left at 23:08 (Ping timeout: 258 seconds | ||
| 449 | lpereira left at 23:20 (Quit: Leaving. |
