#foswiki 2013-02-13,Wed

↑back Search ←Prev date Next date→ Show only urls(Click on time to select a line by its url)

WhoWhatWhen
gac410None of those names are familiar to me.
foswiki.org runs on freebsd, but we install from the tarball, not from the ports.
and trunk.foswiki.org runs from a svn checkout
[00:30]
.................... (idle for 1h35mn)
***TilJ has left [02:06]
................................ (idle for 2h35mn)
GithubBot[foswiki] FoswikiBot pushed 1 new commit to master: http://git.io/R8sU3Q
foswiki/master 4c0e22a PaulHarvey: Item12180: Fix; umasks can be greater than 777...
[04:41]
***GithubBot has left [04:41]
FoswikiBothttp://foswiki.org/Tasks/Item12180 [ Item12180: Implementation for AJAXOnDemandCheckersForConfigure ] [04:41]
.............. (idle for 1h8mn)
***gac410 has left [05:49]
pharveyConfigure doesn't use CGISetup.pm checker any more (web server environment)?
ah, it's on-demand
[05:51]
....... (idle for 34mn)
GithubBot[foswiki] FoswikiBot pushed 1 new commit to Release01x01: http://git.io/oLpG7Q
foswiki/Release01x01 13f6b1f PaulHarvey: Item12391: Check for bad Locale::Maktext versions...
[06:25]
***GithubBot has left [06:25]
FoswikiBothttp://foswiki.org/Tasks/Item12391 [ Item12391: Maketext improvements ] [06:25]
GithubBot[foswiki] FoswikiBot pushed 1 new commit to master: http://git.io/Y8nP_g
foswiki/master 1115ef5 PaulHarvey: Item12391: Check for bad Locale::Maktext versions...
[06:26]
***GithubBot has left [06:26]
............................ (idle for 2h19mn)
ChanServ sets mode: +o MichaelDaum [08:45]
jastmorning! [08:45]
.................................. (idle for 2h46mn)
CDot: the "whine to magically fix" approach is a personal favourite for me, too
though yesterday I fixed a bug I'd been tearing my hair out over for two months... by adding a semicolon
[11:31]
..................... (idle for 1h42mn)
***ChanServ sets mode: +o Babar [13:14]
...... (idle for 29mn)
nick_Damn it, EditChapterPlugin just broke again :(
Just updated via the ubuntu package
Now I have the little edit icons on the table of contents
but not on the actual section titles
[13:43]
..... (idle for 21mn)
Guest7413Morning folks. How does people use to help foswiki development? [14:06]
gac410Hi Guest7413 Are you looking for some help? [14:11]
.... (idle for 19mn)
CDotgac410: while working on the honeypot, I found that there was an easy way to add a "preload" handler to plugins. This is invoked before... most things. Before the store is loaded, before a user is identified, before a login manager is installed. It's intended for an early abort based on the data from the request.
I recall there being a Task to this effect, but I can't find it :-/
[14:30]
gac410Cool. Unfortunately today I've been sidetracked again :( [14:31]
CDotno worries, no hurries [14:33]
..... (idle for 22mn)
Guest7413gac410: No. I was wondering if the foswiki comunity doesn't wants some help - the open source spirit [14:55]
gac410Oh.. sure, we can always use some help. [14:55]
Guest7413I know Perl, I can translate docs to pt-br (brazilian portuguse). [15:00]
gac410Our pt-br translation is in pretty good shape (I hope). http://translate.foswiki.org/projects/foswiki/ Only 3 words flagged as needing translation. But sure, we welcome help.
Do you use Foswiki?
[15:04]
Guest7413I was bugging you yesterday about how to install it. (perl.blog.br)
I just have some security adjustments to do
but it seems very powerfull
[15:05]
gac410Ah... okay great. :) [15:05]
Guest7413and I like Perl very much, so... [15:06]
jastthe hard part is to figure out where to start contributing, really :)
the easiest way is if you have something specific that you're missing, or that seems to you like it could be improved
[15:06]
Guest7413humm [15:07]
gac410Usually developers get started with extensions, and then gradually move into core. but there is no specific roadmap required [15:08]
Guest7413it sounds reasonable way to start [15:08]
......... (idle for 43mn)
CDotdamn. EngineException is not correctly handled. [15:51]
TilJHi Folks. I'm using mod_authn_otp for 2-factor auth (pin & token) via apache. I have a working foswiki install now and I'm starting to configure it for my needs. I'm pretty sure that with this setup I'll want to use Foswiki::LoginManager::ApacheLogin rather than template login? My understanding from http://foswiki.org/System/UserAuthentication is that this will re-use the username Apache hands it. [15:55]
FoswikiBothttp://trunk.foswiki.org/System/PerlDoc?module=Foswiki::LoginManager::ApacheLogin [15:55]
TilJHow does this play with the .htpasswd mechanism though ]? Because the mod_authn_otp stuff doesn't really use .htpasswd, it uses it's own otp-users file [15:56]
jastyes, you'll want to use ApacheLogin [15:57]
TilJIf foswiki does need a .htpasswd file to store info in, I think I can make that work using an "eternal" .htpasswd file to hold just the users pins, as per the example at http://code.google.com/p/mod-authn-otp/wiki/UsersFile [15:57]
CDotdepends on what you mean by "need" [15:58]
jastyou can set the PasswordManager to 'none' if you use ApacheLogin
all that means is that users won't be able to change their passwords/PINs from inside the wiki
[15:58]
CDotbut then new users can't register [15:58]
jast(which you probably don't want anyway) [15:58]
gac410I think then the email addresses will be stored in the user topics. [15:58]
jastwell, the wiki can't set up 2-factor auth for new users anyway, now can it :) [15:58]
TilJOh! So then where does it store user info like email addresses? [15:58]
jastTopicUserMapping stores them in Main.WikiUsers [15:59]
TilJThat's true, registering token keys is ugly enough that I'd want to do it by hand anyway
Ok, this is making more sense now.
[15:59]
gac410er... In each user topic in the UserForm [15:59]
jastI haven't tried using TopicUserMapping with custom Apache auth yet [15:59]
TilJSo login manager reads from Apache vars, and password manager set to "none" basically means that it turns off that sort of functionality in the wiki itself, leaving me to do registrations by hand [15:59]
jastyeah [16:00]
TilJWould I have to do login name to WikiName mapping by hand in this ase?
*case
[16:00]
jastif they're different, yes. you can do that in Main.WikiUsers, following the right format for TopicUserMapping. [16:01]
gac410Is your external user db accessible via LDAP? [16:02]
jastjust checked... TopicUserMapping falls back on getting the e-mail address from the 'Email' form field in the user topic
if you use LDAP, you can just use LdapUserMapping from LdapContrib, of course
[16:03]
TilJNo, it's a local file [16:04]
jastright [16:04]
TilJThe local file holds only the pin, the token is generated (time based) by the mod [16:04]
jastquite understandable... as convenient as LDAP is, maintaining it is a huge pain from what I've seen [16:04]
TilJYeah, especially for under a dozen users [16:04]
jastwell, technically we don't have _that_ many users at work and we still use LDAP :}
but we have many services consolidated into it, so it still pays off
[16:05]
TilJLOL. Well, in that case, yeah it would be super useful. [16:05]
jaste-mail, several wikis, git server, ... [16:05]
TilJI'll be able to re-use the OTP for services on this single server, but not elsewhere. That's find since for this distributed team everything we need is web based. [16:06]
jastgood for you ;) [16:06]
TilJThere, I'm done to 1 warning in configure. Excellent.
"Note:The Following scripts are open to unauthenticated users: changes, compare, oops, preview, rdiff, register, resetpasswd, search, view, viewfile" <-- if the whole foswiki is behind Apache auth, would I care about this?
[16:07]
jastnot really [16:08]
TilJThis is odd. All the default pages except for the main one at /foswiki seem to lead me to Access Denied error pages if I have ScriptUrlPath set to /foswiki/bin, and they all lead to 404 Not Found pages if I set it to /bin
ScriptAlias /bin "/usr/local/www/foswiki/bin" <-- From my foswiki.conf for Apache, I've confirmed that path is correct
[16:15]
I'm wondering if I should ditch the shorter URL setting to keep things simpler to figure out [16:26]
gac410Shorter URL (removing /bin/ prefix for view) is generally pretty benign.
Can you get into the bin/configure script?
[16:27]
TilJYeah, that's the weird part
I can also edit LocalSite.cfg by hand, of course
And the main /foswiki entrance page works
[16:29]
gac410Okay, so bin/configure works, but bin/view gives you a 404? [16:29]
TilJRiew, when I set ScriptUrlPath to /bin
It gives a Foswiki access denied when it's set to /foswiki/bin
When I ls the directory, the other scripts are clearly in the same directory as configure so I'm confused
[16:29]
gac410right. since /foswiki/bin doesn't have a script alias, it's going to be looked at as a web/topic [16:31]
TilJForexample, when I select the WelcomeGuest link, it gets rewritten to: https://itoteam.seekingfire.com/System/WelcomeGuest, which 404s [16:31]
gac410if you rewrite that to /bin/view/System/WelcomeGuest ... does that work? [16:31]
TilJThe original link is https://itoteam.seekingfire.com/bin/view/System/WelcomeGuest [16:32]
gac410Ah.. okay, shorter url rewriting kicking in. hm.. [16:32]
TilJBy rewrite that, do you mean turn off Apache rewriting in the foswiki.conf? [16:32]
gac410That might be worth a quick test. [16:32]
TilJI don't mind the longer URLs, this just needs to functional rather than pretty. The ticketing system generates some gnarly URLs too but we handle that with copy n' paste easily enough. Nobody is typing them by hand. [16:33]
gac410And also in bin/configure, set {ScriptUrlPaths}{view} to it's default (Long string with $Foswiki... stuff in it.
so yes I agree, for now turn off short URLs, and get the basic system working.
[16:33]
TilJChecking ... ScriptUrlPaths was already at default [16:35]
gac410okay. [16:35]
TilJOk, commented out shorter URLs
https://itoteam.seekingfire.com/bin/view/foswiki is the landing page now, I'm guessing?
That loads
And WelcomeGuest loads now
Cool
[16:35]
gac410no... It should just be bin/view. What's the foswikis suffix? [16:36]
TilJsuffix?
That redirected to https://itoteam.seekingfire.com/bin/view/Main/WebHome, if that's what you mean
[16:36]
gac410Ah... okay. But main landing should be https://itoteam.seekingfire.com/bin/view/Main/WebHome or https://itoteam.seekingfire.com/bin/view
before you said https://itoteam.seekingfire.com/bin/view/foswiki the /foswiki is the suffix I'm asking about
[16:37]
TilJAhhh. Yeah. that redirected to the other URL. [16:38]
GithubBot[foswiki] FoswikiBot pushed 1 new commit to master: http://git.io/Ni3JXA
foswiki/master 062ba30 CrawfordCurrie: Item12393: new plugin to filter incoming requests based on lookups of project honeypot...
[16:40]
***GithubBot has left [16:40]
FoswikiBothttp://foswiki.org/Tasks/Item12393 [ Item12393: Add interface to Project HoneyPot ] [16:40]
..... (idle for 20mn)
TilJInteresting problem now: I want to edit /bin/view/Main/WikiUsers so I can map my WikiName to my Apache name, but since no users exist yet I don't think I can authenticate to edit the page :-)
Is there a way to do it directly on the filesystem?
[17:00]
gac410Log in with user "admin" and the superuser password you established in bin/configure [17:02]
TilJFor example, would changing $Foswiki::cfg{AdminUserLogin} = 'admin'; to my Apache name work? [17:02]
gac410No... admin is a "special" internal ID
It works even if other auth methods are failing.
[17:02]
TilJI'm not even sure how I login. The Apache login won't work since the internal admin ID isn't seen by Apache.
Under the top left "Main" navigation panel I get "Hell _tillman?_", but no log out/in
[17:03]
gac410First log in with your apache authenticated ID, then visit Main/AdminUser, and there is a sudo login link there
Logout from your 2-factor id is done by closing the browser, I don't think there is any other way to clear http authentication.
[17:04]
TilJAwesome, that works :-) [17:05]
gac410The format of WikiUsers is very particular. No extra blank lines in the list of users.
Format is WikiName - loginId - Date
If the 2-factor login is different from the WikiName, you also need to enable AllowLoginNames in bin/configure
er... format is a bullet list entry
* WikiName - loginId - Date
[17:06]
TilJOk, and once done, adding my WikiName to /bin/view/Main/AdminGroup means I don't have to use the internal admin ID anymore?
It seems to have worked :-)
So when I want to pre-register my users, I need to remember to also add them to WikiUsers.
[17:11]
gac410Yeah. the internal admin login is for initial setup, and emergency use. Important to protect that password.
I thought that with AllowLoginName enabled, foswiki would work fine without registered users. but I might be mis-remembering.
And I also thought it was possible to use UserRegistration to create the mapping, even though the passwords were managed externally.
[17:13]
TilJI should create a test user and try that [17:15]
gac410But it's been a few years since I worked with that type of configuration. [17:15]
TilJgac410: Turns out that your memory is right. Worked automatically for my test user. [17:24]
gac410Great [17:28]
GithubBot[foswiki] FoswikiBot pushed 2 new commits to master: http://git.io/a0sI6g
foswiki/master 3e12705 GeorgeClark: Item12391: Better Maketext fix...
foswiki/master f44dd36 GeorgeClark: Item12391: Patch contrib for Item12391...
[17:29]
***GithubBot has left [17:29]
FoswikiBothttp://foswiki.org/Tasks/Item12391 [ Item12391: Maketext improvements ] [17:29]
..................................................... (idle for 4h20mn)
***pots has left [21:49]

↑back Search ←Prev date Next date→ Show only urls(Click on time to select a line by its url)