Daily Log for #alfresco IRC Channel

Alfresco discussion and collaboration. Stick around a few hours after asking a question.

Official support for Enterprise subscribers: support.alfresco.com.

Joining the Channel:

Join in the conversation by getting an IRC client and connecting to #alfresco at Freenode. Our you can use the IRC web chat.

More information about the channel is in the wiki.

Getting Help

More help is available in this list of resources.

Daily Log for #alfresco

2018-03-15 07:48:21 GMT <kkore> Help: if I run webscript on noderef to get audit details facing error like Exception from executeScript: maxResults must be greater than 0 java.lang.IllegalArgumentException: maxResults must be greater than 0

2018-03-15 07:48:54 GMT <kkore> audits are enabled in global properties file

2018-03-15 07:50:02 GMT <yreg> kkore, you know that audits are supposed to be exclusively available for admins by default

2018-03-15 07:50:05 GMT <yreg> right ?

2018-03-15 07:50:39 GMT <yreg> you also know about the couple of addons to preview audit data based on some filtering ?

2018-03-15 07:51:28 GMT <yreg> Do you as well know that NodeRef is not logged as part of the audit trail, only prefixed path is ?

2018-03-15 07:52:06 GMT <yreg> (that is in the out of the box alfresco-access audit application)

2018-03-15 07:52:32 GMT <yreg> do you know that the path gets less reliable upon content moves / copies ...

2018-03-15 07:52:53 GMT <kkore> yreg:I am able to see audits in path http://localhost:9090/alfresco/service/api/audit/query/alfresco-access?verbose=true

2018-03-15 07:53:14 GMT <kkore> see as the admin

2018-03-15 07:53:31 GMT <yreg> and even messier when content gets deleted (or moved out) and then an other content with same name gets placed in the same location

2018-03-15 07:54:43 GMT <kkore> yes

2018-03-15 08:04:24 GMT <yreg> kkore, do you know of the existence of few addons for previewing audit data ?

2018-03-15 08:05:13 GMT <yreg> https://github.com/sujaypillai/ev-aikau-auditreport is probably the best amongst them

2018-03-15 08:05:14 GMT <alfbot> Title: GitHub - sujaypillai/ev-aikau-auditreport: AIKAU Audit Report (at github.com)

2018-03-15 08:06:23 GMT <yreg> well this is the original repo, and it sounds a bit more up to date : https://github.com/vipulswarup/ev-aikau-auditreport

2018-03-15 08:06:24 GMT <alfbot> Title: GitHub - vipulswarup/ev-aikau-auditreport (at github.com)

2018-03-15 08:22:17 GMT <alfbot> angelborroy: Sent 14 hours and 26 minutes ago: <hi-ko> Thanks for testing and your feedback. Anyone who find a solution to separate auth mechanisms per protocol should raise hands

2018-03-15 08:42:24 GMT <alfbot> fcorti: Sent 14 hours and 18 minutes ago: <hi-ko> I missed ttl but watched it now. I like David's use case. Are there any artefacts to share except the youtube video?

2018-03-15 08:45:18 GMT <fcorti> good morning hi-ko, about TTL. David's presentation is about a solution that is not released as open source. In any case I can create a contact with David. Do you want me to?

2018-03-15 08:47:48 GMT <hi-ko> fcorti: no thanks - he already gave his contact infos in the presentation.

2018-03-15 08:48:22 GMT <DarkStar1> Bonjour a tous

2018-03-15 08:49:01 GMT <yreg> Morning DarkStar1 !

2018-03-15 08:49:11 GMT <DarkStar1> Comment t'allez vous?

2018-03-15 08:49:12 GMT <hi-ko> fcorti: which would be valuable: share / link the slides in the youtube since the code snippets are not or very hard to read in the presentation. But no action required for now.

2018-03-15 08:49:22 GMT <DarkStar1> o/ yreg

2018-03-15 08:49:42 GMT <yreg> Fine, thanks ! how is life treating you recently DarkStar1 ?

2018-03-15 08:49:43 GMT <hi-ko> DarkStar1: Tu parle le francais?

2018-03-15 08:49:51 GMT <DarkStar1> {nolog] fcorti: How's your baby?

2018-03-15 08:50:07 GMT <fcorti> hi-ko: good point. This is something I can fairly ask them.

2018-03-15 08:50:24 GMT <fcorti> Then I'll add the link to the youtube description

2018-03-15 08:51:31 GMT <DarkStar1> yreg: Well ok-ish. I'm starting to feel old now that I have lost my last Grandmother, the last of her generation

2018-03-15 08:51:51 GMT <DarkStar1> hi-ko: Oui, mais un peu :)

2018-03-15 08:52:36 GMT <DarkStar1> no more grandma's cooking, forever now

2018-03-15 08:52:43 GMT <yreg> DarkStar1, mes condoléances !

2018-03-15 08:52:56 GMT <DarkStar1> yreg: merci

2018-03-15 08:52:58 GMT <hi-ko> fcorti: What I didn't understand but have to ask david is why he used freemarker generated html as layer over the pdf instead of using docx4j to change the docx whith the metadata.

2018-03-15 08:53:51 GMT <fcorti> hi-ko: this is definitely a good question.

2018-03-15 08:54:03 GMT <yreg> hi-ko, I had some interaction with auto-generated docx files and docx4j in the past

2018-03-15 08:54:16 GMT <yreg> and missing properties were a real pain to manage

2018-03-15 08:54:43 GMT <hi-ko> yreg: interesting - would be a nice subject for a blog?

2018-03-15 08:54:57 GMT <yreg> hi-ko, also having style changing around the place holders did often cause a lot of pains

2018-03-15 08:55:07 GMT <fcorti> hi-ko, yreg: +1

2018-03-15 08:57:02 GMT <yreg> hi-ko, I will have few weeks between jobs starting from end of next week... and I hope I would finally have time to setup a personal blog during that time ..

2018-03-15 08:57:05 GMT <hi-ko> yreg: So what is missing from the user perspective (and which many systems support) is something like a world templating api to replace / renew values in the doc initiated by Alfresco

2018-03-15 08:57:52 GMT <hi-ko> or vice versa to read values from the doc an to update metadata in Alfresco.

2018-03-15 08:58:22 GMT <yreg> hi-ko, well for that I made a custom association as part of an aspect to refer to the source template

2018-03-15 08:59:02 GMT <yreg> and whenever I needed regeneration I use the source template for that (based on the association)

2018-03-15 08:59:55 GMT <yreg> of course I made that only available via a workflow task with a big fat warning that any changes to the document would be overridden upon regeneration from template

2018-03-15 09:00:25 GMT <hi-ko> yreg: that's not my point. There are a lot of use cases where values / parts need to be updated automatically even the ducument has already been filled with user conntent (e.g. a contract draft)

2018-03-15 09:00:52 GMT <yreg> unlike david's use-case mine was relying exclusively on workflows for mmanaging state of document and generation/regeneration based on templates ... with validation steps etc..

2018-03-15 09:02:48 GMT <hi-ko> yreg: all these use cases could take use of the same mechanisms: read or replace content in office documents at specific place holders or variable markers using an api instead of parsing an manipulating officexml

2018-03-15 09:07:32 GMT *** angelborroy_ is now known as angelborroy

2018-03-15 09:08:43 GMT <yreg> will have to dive into that

2018-03-15 09:09:12 GMT <kkore> yreg: Thanks I will go through that link

2018-03-15 09:09:54 GMT <yreg> last time I was working on this I was following some tutorial I found for manipulating the templates, and I had really hard time managing edge cases...

2018-03-15 09:12:06 GMT <yreg> I will be back on that pro-bono project where I needed this stuff.. and I will probably review few old decisions before going forward with the planned enhancements

2018-03-15 09:13:09 GMT *** angelborroy_ is now known as angelborroy

2018-03-15 10:09:07 GMT <fcorti> hi-ko: David shared his deck at the link below

2018-03-15 10:09:08 GMT <fcorti> https://es.slideshare.net/david110288/alfresco-generate-documents-dynamically-from-templates

2018-03-15 10:09:09 GMT <alfbot> Title: Alfresco - Generate documents dynamically from templates (at es.slideshare.net)

2018-03-15 10:09:25 GMT <yreg> QQ: When I want to have multivalued text field indexed by Solr in a way that it would be possible to query it either by a complete value (one of many) or any sub-token, what would the correct index setup be ? tokenized=both ?

2018-03-15 10:09:54 GMT <yreg> QQ: When I want to have multivalued text field indexed by Solr in a way that it would be possible to query it either by a complete value (one of many) but not any sub-token, what would the correct index setup be ? tokenized=false ?

2018-03-15 10:11:32 GMT <hi-ko> fcorti: cool - thanks!

2018-03-15 10:13:40 GMT <hi-ko> yreg: yes - I would expect this as you suggest.

2018-03-15 10:14:48 GMT <hi-ko> yreg: That's the way we use it and it is working as expected.

2018-03-15 10:16:09 GMT <yreg> thanks for confirming that! I was on the official docs and they do not seem to address the issue with multivalued properties, quote : "The property value is tokenized when it is indexed (<tokenized>true</tokenized>), so if the value is "Company Confidential" it will be tokenized into two strings that will be indexed separately, which might not always be what you want. You can also use false, which will just tokenize the value as one item. Further on, it

2018-03-15 10:16:09 GMT <yreg> also possible to set it to both, which means that "Company Confidential", "Company", and "Confidential" will be in the index."

2018-03-15 10:19:26 GMT <hi-ko> yreg: both seems to be the best fit but is not in times of solr facets since you don't want to see all the tokens as facets. So go ahead with false and show the users how to use wildcards

2018-03-15 10:22:12 GMT <hi-ko> fcorti: same issue: the slide are not readable ... Do we really need to upload files to linked in? Are you really working for a dms company? ;-)

2018-03-15 10:24:26 GMT <hi-ko> fcorti: that points out that Alfresco doesn't have any easy way to share files with the community ... Maybe you should setup a nextcloud instance ;-)

2018-03-15 10:24:54 GMT <fcorti> hi-ko: dms... it was dozen of years I did not heard it. So vintage... :-)

2018-03-15 10:25:33 GMT <fcorti> well, community.alfresco.com could be enough ... I think.

2018-03-15 10:27:07 GMT <fcorti> I'm going to ask David for a better quality (this might help) as first step.

2018-03-15 10:27:27 GMT <fcorti> Then he can publish it for downloading also on community.alfresco.com

2018-03-15 10:28:09 GMT <hi-ko> community.alfresco.com has no option I can see to share files, right?

2018-03-15 10:29:41 GMT <hi-ko> fcorti: just take it as a long term homework: eat your own dog food to convince others

2018-03-15 10:33:14 GMT <fcorti> hi-ko: Yes, you can share files on community.alfresco.com using the link to the page containing the deck.

2018-03-15 10:33:44 GMT <fcorti> Already asked to David to improve the quality of the slides and publish on community portal as PDF

2018-03-15 11:06:48 GMT <fwu> hi all

2018-03-15 11:07:21 GMT <fwu> ppl, anyone ever gave access to Alfresco on a DMZ with SSO enabled?

2018-03-15 11:08:38 GMT <fwu> I beleive the Alfresco machine would need to belong to the internal domain, and that seems a huge security risk

2018-03-15 11:27:36 GMT <hi-ko> fwu: the machine needs to have a SPN in AD which means the network needs to be handled from AD DNS

2018-03-15 11:28:56 GMT <hi-ko> fwu: for kerberos JAAS auth to work the web server needs network access to the AD to be able to authenticate

2018-03-15 11:29:30 GMT *** HasanAtizaz is now known as Guest43022

2018-03-15 11:33:51 GMT <hi-ko> fwu: on the other hand it points out that starting with Alfresco 5.1 has a painful issue with kerberos SSO since Alfresco disables all other auth mechanisms to avoid an identified backdor. S. https://issues.alfresco.com/jira/browse/ALF-21983

2018-03-15 11:38:29 GMT <hi-ko> fwu: and this same bug/removed feature causes a non working basic auth prompt on /share/page if called from external network.

2018-03-15 12:36:53 GMT *** Guest43022 is now known as HasanAtizaz

2018-03-15 13:32:40 GMT <douglascrp> good morning everyone

2018-03-15 13:32:48 GMT <douglascrp> well, it seems the LocalFeedGenerator is not that optimized

2018-03-15 13:33:00 GMT <douglascrp> I have a server where I got threads locked almost every day

2018-03-15 13:36:18 GMT <douglascrp> nice... both batchSize and numThreads are hardcoded: https://github.com/Alfresco/community-edition-old/blob/master/projects/repository/source/java/org/alfresco/repo/activities/feed/local/LocalFeedGenerator.java#L55-L56

2018-03-15 13:36:19 GMT <alfbot> Title: community-edition-old/LocalFeedGenerator.java at master · Alfresco/community-edition-old · GitHub (at github.com)

2018-03-15 13:55:07 GMT <hi-ko> douglascrp: we deactivated the feed generation in larger systems since the implementation is far to expensive - not only when generating the feed but also during the day when changing content if you have > 500 users

2018-03-15 13:56:25 GMT <douglascrp> hi-ko, I tried that once, but users like the feature

2018-03-15 13:56:26 GMT <douglascrp> :D

2018-03-15 13:56:33 GMT <douglascrp> so I have to find a way to make it work better

2018-03-15 13:57:02 GMT <douglascrp> maybe configuring it to run several time a day, but processing less information per time

2018-03-15 13:57:33 GMT <douglascrp> but having those values hard coded is not a good thing

2018-03-15 13:59:00 GMT <hi-ko> you're right - it should be possible to tune the feedgenerator since it runs only once a day but our concerns were with the load during the day putting the changes in the feed tables.

2018-03-15 14:00:46 GMT <hi-ko> best solution would be to have a real async, persistent queue which doesn't consume resources in the repo but this doesn't help you at the moment.

2018-03-15 14:04:18 GMT <hi-ko> if you don't see the hiccup during the day when Alfresco consolidates changes for the first step as raw data (before preparing the real messages once a day) I only see the chance to: reduce the threads and to put the cron to a point of time where no other threads produce load.

2018-03-15 14:12:00 GMT <douglascrp> hi-ko, yes

2018-03-15 14:17:20 GMT <fwu> hi-ko thank you

2018-03-15 14:18:02 GMT <fwu> connection from the server to AD is always a requirement right?

2018-03-15 14:19:17 GMT *** ChanServ sets mode: +o fcorti

2018-03-15 14:19:43 GMT *** fcorti changes topic to "Alfresco discussion and collaboration. Stick around a few hours after asking a question. Logs: http://chat.alfresco.com Channel help: https://community.alfresco.com/ Official support for Enterprise subscribers: http://support.alfresco.com. Next event is Office Hours, the 29th of march, on feedback on the DBP with Brian Remmington: https://youtu.be/yxRT4kgwbYc."

2018-03-15 14:33:35 GMT <douglascrp> hi-ko, ok, it is not configured for 2 threads, with only 100 items per run, and running every 2 minutes, instead of 30 seconds

2018-03-15 14:33:40 GMT <douglascrp> lets see how it goes now

2018-03-15 14:33:59 GMT <douglascrp> so it is working, as the users want it, but they will have to wait :D

2018-03-15 14:36:45 GMT <Younes> douglascrp, had that problem once and Alfresco support recommended generating feeds with one single thread

2018-03-15 14:36:54 GMT <Younes> forgot the context though

2018-03-15 14:36:56 GMT *** Younes is now known as yreg

2018-03-15 14:37:07 GMT <douglascrp> yreg, well, that would be a test

2018-03-15 14:37:20 GMT <douglascrp> I can change that, but not now, as I have just told users to go back to work

2018-03-15 14:37:31 GMT <douglascrp> maybe in the afternoon

2018-03-15 14:50:08 GMT <douglascrp> yreg, I have changed it to 1 thread... now I have to wait a moment to restart the server

2018-03-15 14:50:14 GMT <douglascrp> yreg, tks for the tip

2018-03-15 15:11:22 GMT <hi-ko> <douglascrp

2018-03-15 15:11:26 GMT <hi-ko> <douglascrp>

2018-03-15 15:11:41 GMT <hi-ko> <douglascrp> sorry wrong keyboard ... ;-)

2018-03-15 15:12:34 GMT <hi-ko> <douglascrp> since you're already in the code: you may create a patch setting the numbers by properties.

2018-03-15 15:14:09 GMT <hi-ko> fwu: yes - unfotunately that's the concept of ms-kerberos. Alfresco needs access to the AD anyway to sync the users via ldap.

2018-03-15 15:18:54 GMT <fwu> hi-ko what about this: http://docs.alfresco.com/5.2/tasks/auth-alfrescoexternal-sso.html

2018-03-15 15:18:55 GMT <alfbot> Title: Configuring Alfresco Share to use an external SSO | Alfresco Documentation (at docs.alfresco.com)

2018-03-15 15:41:23 GMT <hi-ko> fwu: what is your question?

2018-03-15 15:42:04 GMT <fwu> sorry hi-ko. didnt finish

2018-03-15 15:42:43 GMT <fwu> is this case, is Alfresco still connected to the domain AD?

2018-03-15 15:50:19 GMT <hi-ko> fwu: for external SSO to work you need a separate component which takes core of the authentication and which puts the username into a http header variable.

2018-03-15 15:50:34 GMT <hi-ko> s/core/care/

2018-03-15 15:53:09 GMT <hi-ko> fwu: If you're not allowed to contact the AD from dmz you need to replicate to something similar running in the dmz but replicating password hashes is not an easy task.

2018-03-15 16:07:54 GMT <fwu> hi-ko do you know if there is many Alfresco installs coonecting to AD from the DMZ?

2018-03-15 16:09:49 GMT <fwu> is it a standard practice?

2018-03-15 16:10:28 GMT <fwu> the problm is not contacting the AD but the need to add the server on the dmz to the domain

2018-03-15 16:10:51 GMT <fwu> once added to the domain... you may get anyother machine inside

2018-03-15 16:15:21 GMT <hi-ko> fwu: I don't get the point. You don't need to add the machine to the ad domain. You create SPNs on the AD and copy exported keytabs to the server to authentiate with these service principal keytabs

2018-03-15 16:18:42 GMT <fwu> hi-ko. ok. I thought I would need to add the server to the domain

2018-03-15 16:19:14 GMT <hi-ko> fwu: rtfm?

2018-03-15 16:21:05 GMT <fwu> nevertheless, the bug I talked about will always be a problem, right?

2018-03-15 16:24:14 GMT <hi-ko> which bug?

2018-03-15 21:45:10 GMT <qwebirc92372> can anybody let me know what happen in the Alfresco process services once due date expired?

2018-03-15 21:46:30 GMT *** mohammad is now known as Guest88185

2018-03-15 21:47:05 GMT <Guest88185> can anybody let me know what happen in the Alfresco process services once due date expired?

End of Daily Log

The other logs are at http://esplins.org/hash_alfresco