#foswiki 2013-04-08,Mon

↑back Search ←Prev date Next date→ Show only urls(Click on time to select a line by its url)

WhoWhatWhen
GithubBot[foswiki] FoswikiBot pushed 1 new commit to master: http://git.io/B6iphQ
foswiki/master cb0991d JoenioCosta: Item12468: release UnixUsersContrib version 0.1.2...
[00:32]
***GithubBot has left [00:32]
FoswikiBothttp://foswiki.org/Tasks/Item12468 [ Item12468: Update UnixUserContrib version ] [00:32]
....................................... (idle for 3h11mn)
***gac410 has left [03:43]
.................................... (idle for 2h58mn)
ChanServ sets mode: +o CDot [06:41]
....... (idle for 31mn)
ChanServ sets mode: +o MichaelDaum [07:12]
............ (idle for 58mn)
Colas has quit IRC (Ping timeout: 255 seconds) [08:10]
GithubBot[foswiki] FoswikiBot pushed 1 new commit to master: http://git.io/ibFFcg
foswiki/master 0aafa61 MichaelDaum: Item10936:...
[08:17]
***GithubBot has left [08:17]
FoswikiBothttp://foswiki.org/Tasks/Item10936 [ Item10936: uc() and lc() (and probably d2n() ) don't seem to work ] [08:17]
................ (idle for 1h18mn)
***harlan has quit IRC (Ping timeout: 256 seconds) [09:35]
............................. (idle for 2h22mn)
ChanServ sets mode: +o pharvey [11:57]
............. (idle for 1h4mn)
ChanServ sets mode: +o Lynnwood [13:01]
.......... (idle for 45mn)
foswiki_irc1hello everyone! I tried to update my Locale::Maketext script to the 1.23 using "cpan". but all I get is an error: [13:46]
GithubBot[foswiki] FoswikiBot pushed 1 new commit to master: http://git.io/_RUHew
foswiki/master 1cfd3bd MichaelDaum: Item12470: fixed html error in pager markup...
[13:46]
***GithubBot has left [13:46]
FoswikiBothttp://foswiki.org/Tasks/Item12470 [ Item12470: html error disturbing IE ] [13:46]
foswiki_irc1Checking if your kit is complete... Looks good Writing Makefile for Locale-Maketext Can't exec "make": Datei oder Verzeichnis nicht gefunden at /usr/share/perl/5.10/CPAN/Distribution.pm line 2003. TODDR/Locale-Maketext-1.23.tar.gz make -- NOT OK Running make test Can't test without successful make Running make install Make had returned bad status, install seems impossible Failed during this command: TODDR/Locale-Maket [13:46]
jastcpan needs make installed, among other things
if you need help with installing make, we're going to need to know your OS/distribution
[13:59]
foswiki_irc1I have debian installed [14:01]
jast'aptitude install make' as root should do it, then [14:01]
foswiki_irc1nice, seems to work!
thank you
yep, it worked. thanks again!
[14:03]
now I tried to install another perl script. and I got this error:
error building lib/Crypt/Eksblowfish.o from 'lib/Crypt/Eksblowfish.c' at /usr/share/perl/5.10/ExtUtils/CBuilder/Base.pm line 110. ZEFRAM/Crypt-Eksblowfish-0.009.tar.gz ./Build -- NOT OK Running Build test Can't test without successful make Running Build install Make had returned bad status, install seems impossible Failed during this command: ZEFRAM/Crypt-Eksblowfish-0.009.tar.gz : make NO
[14:13]
TBoxHello. Enabling the safewiki plugin causes the tinymce plugin to fail with "Unable to install TinyMCE: could not read "TINYMCEPLUGIN_INIT" from FoswikiTiny.init" Is there a way around that? [14:15]
foswiki_irc1seems to me like 'make' is again the problem, but I already installed it... [14:15]
jastfoswiki_irc1: you might actually need the full range of compiler tools and such, notably these packages (but probably more): gcc libc6-dev
since CPAN builds things from source, often involving compiling C code, there can be a lot of build dependencies
TBox: there is a newer version of SafeWikiPlugin that hasn't been released yet that resolves that issue
[14:27]
TBoxAny eta? [14:28]
jastwell, there's one thing I have to figure out still [14:28]
foswiki_irc8hello - I'm having some issues configuring ad authentication with foswiki, and I'm not sure where to start troubleshooting...is anyone experienced with this? [14:28]
TBoxNo rush. It's more paranoia than necessity. [14:29]
jastas you probably know, the goal of SafeWikiPlugin is to prevent arbitrary JS code from getting injected into pages
since foswiki can't distinguish 'official' JS and malicious JS easily, SafeWikiPlugin filters all JS and has a few exceptions on top
TINYMCEPLUGIN_INIT comes from code that TinyMCEPlugin generates and injects into the page, and then the currently released version of SafeWikiPlugin of course doesn't recognize it and so filters it
the new version has been taught to accept all JS code generated by other plugins
[14:29]
TBoxhahaha oops. I'm sorry, I shouldn't laugh. [14:30]
jastbut TinyMCEPlugin takes the contents for TINYMCEPLUGIN_INIT straight out of a preference (which you can set yourself on any topic you can edit) [14:31]
foswiki_irc8I've installed ldapcontrib and the newuserplugin...filled out all my ad info for ldap, but not really getting any usefull errors in my error_log [14:31]
jastso as it is right now, that makes it a bit of a security issue
you can 'fix' it by making TINYMCEPLUGIN_INIT a "final" preference but I'd like to get something saner into the release
[14:31]
foswiki_irc8i'd also like to get it working via TLS [14:31]
jastfoswiki_irc8: I believe LdapContrib outputs more errors to the webserver's error logfile than foswiki's [14:32]
foswiki_irc8ok yes I was looking at the webservers error_log [14:32]
jastah, right [14:32]
foswiki_irc8where is foswikis?
im on centos
[14:32]
jastdo you get *any* errors?
below wherever you installed foswiki, in working/logs/error.log
[14:32]
foswiki_irc8this is what i see so far which i believe is related to my DN
LdapContrib - WARNING: error refreshing the user cache: 49: 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e,
[14:32]
jastah [14:33]
TBoxThat's a generic problem right now, IMO. For the truly paranoid, too many preferences need to be made final. [14:33]
jastwell, AD's errors are always fairly cryptic; I suggest doing a web search on the latter part of the error message (particularly the DSID-*** thing)
TBox: anyway, with TINYMCEPLUGIN_INIT locked down, SafeWikiPlugin is _fairly_ airtight
as long as other plugins don't open up gaping holes
[14:33]
foswiki_irc8should i be keeping my login manager as TemplateLogin? [14:35]
TBoxThat's good for debug. [14:35]
foswiki_irc8or change it to Ldapapache [14:35]
jastfoswiki_irc8: with LdapContrib installed, you'll want either LdapTemplateLogin or LdapApacheLogin
up to you
the latter requires setting up LDAP authentication in your web server, too
[14:35]
TBoxTemplate will help you isolate the error to either apache or the plugin. [14:35]
foswiki_irc8ok I only see the ldapapachelogin available [14:35]
TBoxonce th eplugin works through template you can switch and fix apache. [14:36]
jasthuh, weird [14:36]
foswiki_irc8no ldaptemplatelogin [14:36]
TBoxI just did this a few days ago, the plugin works with just TemplateLogin. [14:36]
foswiki_irc8ok i'll keep that for now then [14:36]
jastthe difference in LdapTemplateLogin is that it heeds the normalization settings in LdapContrib
(case sensitivity, umlaut resolving)
[14:37]
foswiki_irc3thx jast, installing the gcc update worked! [14:38]
jastgreat [14:38]
foswiki_irc3are there any more packages I should have? [14:38]
jastwell you don't need any of that for running foswiki, just for building CPAN modules
and then it really depends on the individual modules. some might need more stuff, some might not
[14:38]
TBoxAlso, read the fine print in the documentation for LdapContrib. There are several dependencies that you may or may not have already installed. CPAN stuff. [14:40]
foswiki_irc8yeah i've been going through it the past couple days
making my head spin =)
[14:40]
foswiki_irc3ok, thanks again! [14:40]
jastbtw, my *guess* for your current LDAP issue is that the bind (as the bind user) didn't work [14:41]
foswiki_irc8i got the new user plugin installed, i wonder if thats messing with it
i haven't configured anything for that yet
[14:41]
jastnah, NewUserPlugin does something mostly unrelated [14:41]
foswiki_irc8ok [14:41]
jastit just makes sure that a user topic gets created for an LDAP user after the user has been logged in successfully [14:41]
foswiki_irc8yeah thats what i got when search too, something with the DN bind user [14:42]
foswiki_irc7sorry got disconnected
i think my id was irc8 before
with the ldap issues
ok looks better now, typo in my DN =)
more errors though
LdapContrib - WARNING: error refreshing the user cache: 32: 0000208D: NameErr: DSID-0310020A, problem 2001 (NO_OBJECT), data 0, best match of:,
thats the error when i try to login i guess
[14:46]
it worked!
it was my ldap user serach base
newuserplugin didn't work though
it created the webtopic...is that all it's supposed to do??? Because the ad user that i logged in as isn't listed as "user"
[14:53]
TBoxListed where?
I've got a whole three weeks' experience here, but I'm pretty sure that's all newuserplugin does. What did you want it to do?
[15:09]
foswiki_irc7well create the webtopic
but also register the AD user
because when you login it doesn't register which I thought it would do
[15:11]
TBoxRegister where? The LdapContrib lets the AD manage the users. If you have LdapApacheLogin, LdapUserMapping, and LdapPasswdUser all set, there's nothing left for foswiki to do. [15:17]
foswiki_irc7oh...how can you restrict access then if actual "users" from ad never get listed or shown in the users section to add them to admin groups
FYI - i still have the templatelogin selected, so I guess I should change that now to ldapapache
[15:18]
TBoxNah leave it template for a bit. [15:18]
foswiki_irc7ok [15:18]
TBoxYou have to be psychic. Just add the mapped username to the admingroup [15:18]
foswiki_irc7ok i'll try it [15:19]
TBoxLike if newuserplugin created a topic called JohnSmith, even if JohnSmith doesn't show up as a user, you can add him to access controls.
Same for groups.
[15:19]
foswiki_irc7do i have to add via the topic name?
or can i use the the actual login name i used
because the topic name showed up a FirstLast
when i logged in with the sAMAccountname
[15:19]
TBoxshort answer yes. Long answer is you have to add by the mapped username, and the topic is generated through the mapped username
Same for groups
[15:20]
foswiki_irc7yeah i'd rather use the groups for access restrictions
AD groups
[15:21]
TBoxbut I haven't explored how ad groups map to foswiki groups. There are mapping settings you can fiddle iwth, but if by default your groups are named reasonably, they map perfectly.
I have a group called Sysadmins that works exactly like expected.
[15:21]
foswiki_irc7k
yup that worked
just found it when adding the user to the group
ok now to fiddle with group access
do I have to create a new group, which will be an AD group first?
and then add it to the admin group?
[15:22]
TBoxno
All your ad groups exist, they're just hidden from view
So you can just plop down a group you know must be there and it works.
[15:25]
foswiki_irc7ok
cool, yeah no errors when adding the group
[15:25]
ok but the group doesn't seem to be working properly
im apart of the group in AD
i login with my user
the AD group is a member of the AdminGroup
but I am still not an admin when i login
must be my group base
[15:32]
***ChanServ sets mode: +o pharvey [15:34]
TBoxI'm suspicious that AdminGroup may be more special than we hope. I'd test first to see if it recognizes your group membership by setting access to some topic to be viewable only by your group.
Also, make sure prefetch is on.
[15:35]
foswiki_irc7where is the prefetch option? [15:37]
TBoxbin/configure > Extensions on left > LDAP on right up top. It's... in the user section? I should look.
I'm sorry
performance settings, and it's called precache, not prefetch.
[15:37]
foswiki_irc7oh ok
yea thats checked
[15:38]
jastAD groups should show up in WikiGroups [15:38]
foswiki_irc7is the AD group that you add as a member, so supposed to look black? [15:39]
jastif they don't, something is wrong [15:39]
foswiki_irc7like the other members are highlighted as links
yeah the ad groups dont' show in groups
[15:39]
TBoxhnh. They do for me now. [15:40]
jastmake sure {Ldap}{MapGroups} is enabled
it's in "Group settings"
[15:40]
foswiki_irc7thats enabled [15:40]
jastalso make sure the base DN for groups is correct
if your group names are very weird you may have to enable NormalizeGroupNames
[15:40]
foswiki_irc7how about the other optoins in tehre
i have checked...
wikigroupsbackoff, normalizegroupnames, mapgroups
[15:41]
jastand the other settings in that category are definitely correct?
if the GroupBase or GroupFilter are wrong, chances are the groups aren't imported at all
[15:42]
foswiki_irc7objectClass=posixGroup
base is good
what about filter
what do you have
[15:43]
TBoxAD isn't posix. :) Try just objectClass=group [15:49]
foswiki_irc7oops i knew that
but still no go
i'll see if there are anything in the logs
[15:52]
jastyou may have to tell it to refresh the cache (there's a button for that on System.LdapContrib) [15:53]
***JulianLevens has left [15:54]
foswiki_irc7hmm looking for it [15:54]
i can't find it
i have to create that button?
[15:59]
TBoxIt's in the documentation
use the Jump feature, System.LdapContrib
It's in the introduction.
[16:01]
foswiki_irc7oh
ok so that worked and i see groups now
from my AD
but
the access still doesn't seem to be working right
doesn't pick up the members
in the ad groups
all of them show "No Members", except for 1 group
[16:03]
TBoxSounds like there's still some setting that's wrong. I eventually had to use adsiedit to see how my ad was mapping to ldap attributes.
but that was just because I was unfamiliar with ad
group filter is objectClass=group, GroupAttribute=cn, foswiki_irc7 PrimaryGroupAtrribute=primaryGroupID, foswiki_irc7 memberattribute=member, innergroupattribute=member. Member indirection checked, map groups checked.
argh why does it keep inserting your name.
[16:11]
.... (idle for 18mn)
foswiki_irc7cool its working now
needed indirection checked
thanks
one more thing...how do i get rid of the "redirect denied" when i logout
looks like i need to add it to PermittedRedirectHostUrls?
[16:31]
TBoxSounds right. [16:33]
***ChanServ sets mode: +o gac410 [16:37]
GithubBot[foswiki] FoswikiBot pushed 1 new commit to master: http://git.io/TfKE0g
foswiki/master 55a1342 JoenioCosta: Item12468: fix error when running with -T flag...
[16:45]
***GithubBot has left [16:45]
FoswikiBothttp://foswiki.org/Tasks/Item12468 [ Item12468: Update UnixUserContrib version ] [16:45]
.... (idle for 15mn)
GithubBot[foswiki] FoswikiBot pushed 1 new commit to master: http://git.io/GEM88A
foswiki/master 2dd3e66 JoenioCosta: Item12468: release UnixUsersContrib version 0.1.3...
[17:00]
***GithubBot has left [17:00]
ChanServ sets mode: +o CDot [17:08]
........................................................ (idle for 4h39mn)
ChanServ sets mode: +o OliverKrueger
OliverKrueger sets mode: +vv [LOGGER_FOSWIKI] FoswikiBot
[21:47]

↑back Search ←Prev date Next date→ Show only urls(Click on time to select a line by its url)