Daily Log for #alfresco IRC Channel

Alfresco discussion and collaboration. Stick around a few hours after asking a question.

Official support for Enterprise subscribers: support.alfresco.com.

Joining the Channel:

Join in the conversation by getting an IRC client and connecting to #alfresco at Freenode. Our you can use the IRC web chat.

More information about the channel is in the wiki.

Getting Help

More help is available in this list of resources.

Daily Log for #alfresco

2018-05-16 07:53:01 GMT *** Tichodroma is now known as Guest51740

2018-05-16 07:54:17 GMT *** lutz_ is now known as Tichodroma

2018-05-16 10:39:30 GMT * AFaust is - again - shocked at the poor dependency management being exercised in a secondary component of Alfresco

2018-05-16 10:40:35 GMT <AFaust> The SAML module contains a library called "not-yet-commons-ssl" created by some random dude with a gmail address where the web page referenced in the pom.xml no longer exists (is for sale), and the content of the library uses the typically "trusted" package "org.apache.commons"

2018-05-16 10:44:10 GMT <AFaust> Ah - and of course the library was built in early 2011, while the SAML module is a pretty recent addition to the portfolio (Enterprise GA around January 2017)... one would think, given various SSL vulnerabilities being discovered over the years, that such an old, unmaintained library would be automatically disqualified...

2018-05-16 10:45:48 GMT <yreg> AFaust, sounds very secure :)

2018-05-16 10:46:26 GMT <yreg> But I don't see it in the poms for both repo and share

2018-05-16 10:46:27 GMT <angelborroy> I’m looking at pom.xml and it does not look that they are aware of it

2018-05-16 10:46:30 GMT <angelborroy> yep

2018-05-16 10:46:34 GMT <angelborroy> it’s in the repo

2018-05-16 10:46:40 GMT <yreg> It's definitely some transitive dependency

2018-05-16 10:46:41 GMT <angelborroy> but it’s provided by some other dependency

2018-05-16 10:47:15 GMT <angelborroy> wow, we look frontend developers now! :D

2018-05-16 10:47:19 GMT <AFaust> Anyway... as a product / solution architect you always own the entire chain of dependencies and need to check/vet every lib...

2018-05-16 10:47:53 GMT <yreg> AFaust, it's actually opensaml>openws>not-yet-commons-ssl

2018-05-16 10:48:39 GMT <AFaust> Well, that is also quite old (2012)

2018-05-16 10:48:56 GMT <divya> I am trying to disable the browser's password saving option in alfresco

2018-05-16 10:49:44 GMT <yreg> divya, are you referring to login page or basic auth prompt ?

2018-05-16 10:50:02 GMT <divya> So,I have tried to put the autocomplete="off" in login.get.html.ftl file as shown in the below snippet

2018-05-16 10:51:03 GMT <divya> https://pastebin.com/L0bk8gyj

2018-05-16 10:51:04 GMT <alfbot> Title: <@markup id="form"> <form id="${el}-form" accept-charset="UTF-8" me - Pastebin.com (at pastebin.com)

2018-05-16 10:52:22 GMT <divya> yreg,I am talking about the option for the browser to save the password or not while doing the login in alfresco

2018-05-16 10:52:48 GMT <Preto> hi

2018-05-16 10:53:16 GMT <Preto> where could I get an Alfresco Contest Services5.2 full installation manual?

2018-05-16 10:53:46 GMT <yreg> Preto, on customer portal

2018-05-16 10:53:50 GMT <divya> I have tried to do the autocomplete="off" in login.get.html.ftl as explained above but no success

2018-05-16 10:54:18 GMT <divya> browser is still asking for the option to save the password or not

2018-05-16 10:54:43 GMT <AFaust> This seems to refer to this thread: https://community.alfresco.com/thread/237095-disable-password-saving-option-while-login

2018-05-16 10:54:45 GMT <alfbot> Title: Disable password saving option while login | Alfresco Community (at community.alfresco.com)

2018-05-16 10:55:42 GMT <yreg> Preto, if you are a customer/partner you should have access to this : https://myalfresco.force.com/support/articles/en_US/Release_Notes/Alfresco-Content-Services-version-5-2-3

2018-05-16 10:56:04 GMT <divya> Afaust,I have tried that but no success

2018-05-16 10:56:35 GMT <divya> browser is still prompting for the option to save the password or not

2018-05-16 10:56:42 GMT <divya> plz help me out

2018-05-16 10:57:23 GMT <yreg> divya, I don't think all browsers support that, read this : https://stackoverflow.com/a/41217255/2307988

2018-05-16 10:57:24 GMT <alfbot> Title: html - How to prevent a browser from storing password - Stack Overflow (at stackoverflow.com)

2018-05-16 11:13:42 GMT <MorganP> I'm guessing you could potentially rename the fields...

2018-05-16 11:14:00 GMT <MorganP> If it is just 2 random names fields, the browser might not propose you to save them

2018-05-16 11:14:50 GMT <MorganP> I would personnally try to create a custom login page with random names for the fields, something that does not contain "password"

2018-05-16 11:50:13 GMT <hi-ko> Has anybody tried to replace / modify the Surf error page? It contains version numbers one should not provide in production systems ...

2018-05-16 11:52:47 GMT <AFaust> Yes, quite a while back... Are you talking just about the generic error page or the web script error status templates=

2018-05-16 11:52:50 GMT <AFaust> ?

2018-05-16 11:53:24 GMT <AFaust> The error page is just a error500.jsp that can be overriden, but I don't see where that exposes version information...

2018-05-16 11:53:30 GMT <hi-ko> AFaust: last one like https://my.alfresco.com/share/page/page/messages

2018-05-16 11:54:13 GMT <AFaust> Then there is the status.ftl bundled in the Surf JAR, which could certainly be overridden via the WEB-INF/classes/ location

2018-05-16 11:54:42 GMT <AFaust> That would be the status.ftl I believe

2018-05-16 11:54:56 GMT <hi-ko> AFaust: Let me check ...

2018-05-16 11:55:23 GMT <AFaust> https://github.com/Alfresco/surf/tree/develop/surf/spring-surf/spring-surf/src/main/resources/surf/webscripts

2018-05-16 11:55:24 GMT <alfbot> Title: surf/surf/spring-surf/spring-surf/src/main/resources/surf/webscripts at develop · Alfresco/surf · GitHub (at github.com)

2018-05-16 11:55:50 GMT <AFaust> So - if you have a custom one in WEB-INF/classes/surf/ that should take precedence

2018-05-16 11:56:08 GMT <AFaust> I mean WEB-INF/classes/surf/webscripts/

2018-05-16 11:56:20 GMT <hi-ko> I give it a try - thanks

2018-05-16 12:35:48 GMT <hi-ko> AFaust: works as expected - I was able to overwrite the template in share with share/WEB-INF/classes/surf/webscripts/status.ftl

2018-05-16 13:20:35 GMT <mbrodsky> does anyone know how to override an existing transformer with a new custom transformer that specifies a slightly different command? For instance, I want to transform eps to png using ImageMagick (which is already configured) BUT I want to use -colorspace RGB in the command.

2018-05-16 13:21:31 GMT <angelborroy> mbrodksy Just define a Spring bean with the same name and override that property with your value

2018-05-16 13:23:13 GMT <angelborroy> mbodsky the name for the bean is transformer.worker.ImageMagick

2018-05-16 13:23:54 GMT <mbrodsky> angelborroy, thanks I tried that but my colorspace attribute doesn't seem to be taking effect.

2018-05-16 13:24:41 GMT <angelborroy> Two options: EPS to PNG is not performed by ImageMagick transformer or you didn’t overwrite property the bean

2018-05-16 13:25:08 GMT <mbrodsky> ah now I'm looking at the bean. You're right I did not use transformer.worker.ImageMagick

2018-05-16 13:25:34 GMT <mbrodsky> thanks I'll make the adjustment and see if it works

2018-05-16 13:26:15 GMT <angelborroy> This one: https://github.com/Alfresco/alfresco-repository/blob/3887fefdbb5a188ed57b622d1891fb93e9587c86/src/main/resources/alfresco/subsystems/thirdparty/default/imagemagick-transform-context.xml#L5

2018-05-16 13:26:16 GMT <alfbot> Title: alfresco-repository/imagemagick-transform-context.xml at 3887fefdbb5a188ed57b622d1891fb93e9587c86 · Alfresco/alfresco-repository · GitHub (at github.com)

2018-05-16 13:44:44 GMT <angelborroy> mbrodsky I guess the problem is that this is a subsystem Spring Bean https://github.com/Alfresco/alfresco-sdk/issues/360

2018-05-16 13:44:46 GMT <alfbot> Title: Subsystem property injections ignored while using local/alfresco-global.properties · Issue #360 · Alfresco/alfresco-sdk · GitHub (at github.com)

2018-05-16 13:44:56 GMT <angelborroy> And it’s not easy to overwrite it

2018-05-16 13:46:19 GMT <AFaust> ~flushLog

2018-05-16 13:46:19 GMT <alfbot> AFaust: Woooosh, your log has been flushed...

2018-05-16 13:46:41 GMT <mbrodsky> yeah the other issue is that if I overwrite it, the flag will be inserted for every IM transformation, not just eps to png

2018-05-16 13:47:27 GMT <AFaust> mbrodsky: Why override the existing transformer? You could also just configure your own transformer with the command you would like it to execute and configure that transformer with a higher priority / disable the other transformer via the transformer subsystem properties...

2018-05-16 13:47:27 GMT <mbrodsky> I'm looking to see if there is a way to only define the custom command for a given mimetype

2018-05-16 13:48:07 GMT <angelborroy> yes, this approach is better:

2018-05-16 13:48:08 GMT <angelborroy> https://github.com/keensoft/alfresco-zip-previewer

2018-05-16 13:48:10 GMT <alfbot> Title: GitHub - keensoft/alfresco-zip-previewer: Alfresco ZIP and RAR entries preview for Share (at github.com)

2018-05-16 13:48:36 GMT <angelborroy> Define transformer

2018-05-16 13:48:40 GMT <angelborroy> https://github.com/keensoft/alfresco-zip-previewer/blob/master/zip-previewer-repo/src/main/resources/alfresco/module/zip-previewer-repo/alfresco-global.properties#L10

2018-05-16 13:48:41 GMT <alfbot> Title: alfresco-zip-previewer/alfresco-global.properties at master · keensoft/alfresco-zip-previewer · GitHub (at github.com)

2018-05-16 13:48:51 GMT * AFaust goes to review that addon...

2018-05-16 13:49:12 GMT <angelborroy> And then implement it in your way

2018-05-16 13:49:13 GMT <angelborroy> https://github.com/keensoft/alfresco-zip-previewer/blob/master/zip-previewer-repo/src/main/resources/alfresco/module/zip-previewer-repo/context/service-context.xml#L30

2018-05-16 13:49:15 GMT <alfbot> Title: alfresco-zip-previewer/service-context.xml at master · keensoft/alfresco-zip-previewer · GitHub (at github.com)

2018-05-16 13:49:17 GMT <mbrodsky> I think I see where I went wrong. I was not defining the custom transformer correctly in alfresco-global.properties

2018-05-16 13:49:34 GMT <mbrodsky> that's exactly the method I tried

2018-05-16 13:49:48 GMT <angelborroy> It should work, at least for ZIP to PDF works

2018-05-16 13:50:38 GMT <angelborroy> AFaust that addon is generating a PDF preview with ZIP contents, what makes also indexable listing inside the ZIP

2018-05-16 13:50:53 GMT <MorganP> angelborroy: this is included by default in ACS 6 no?

2018-05-16 13:51:00 GMT <angelborroy> I don’t think so

2018-05-16 13:51:21 GMT <MorganP> I think yesterday I could preview a zip content

2018-05-16 13:51:25 GMT <angelborroy> really

2018-05-16 13:51:29 GMT <angelborroy> I’m going to try

2018-05-16 13:51:32 GMT <angelborroy> let me see

2018-05-16 13:51:53 GMT <AFaust> angelborroy, minor nit-picky remark: it would be extremely cool if the transformer properties were contained in the Transformers subsystem instead of the alfresco-global.properties

2018-05-16 13:52:03 GMT <angelborroy> hehe

2018-05-16 13:52:07 GMT <angelborroy> I know

2018-05-16 13:52:18 GMT <angelborroy> But you are free to pull-request my repo ;-)

2018-05-16 13:54:56 GMT <angelborroy> MorganP Yes! It’s included ootb in Alfresco 6

2018-05-16 13:55:39 GMT <MorganP> Ok I'm not crazy :D

2018-05-16 13:56:02 GMT <angelborroy> good to know, thanks

2018-05-16 13:56:48 GMT <angelborroy> bah… but mine is better

2018-05-16 13:57:51 GMT <MorganP> ;)

2018-05-16 13:58:00 GMT <angelborroy> they are using plain lines visualization

2018-05-16 13:58:17 GMT <angelborroy> what makes difficult to understand the hierarchy

2018-05-16 13:58:47 GMT <angelborroy> I’m using “tree” command notation

2018-05-16 14:05:10 GMT <angelborroy> MorganP It looks like it was available from Alfresco 3.4

2018-05-16 14:05:11 GMT <angelborroy> https://github.com/Alfresco/alfresco-repository/blob/5de7c1d9746a6ba08e9a8b7c0ad886503d4b5cc3/src/main/java/org/alfresco/repo/content/transform/ArchiveContentTransformer.java#L52

2018-05-16 14:05:13 GMT <alfbot> Title: alfresco-repository/ArchiveContentTransformer.java at 5de7c1d9746a6ba08e9a8b7c0ad886503d4b5cc3 · Alfresco/alfresco-repository · GitHub (at github.com)

2018-05-16 14:05:19 GMT <angelborroy> But it was not working

2018-05-16 14:05:41 GMT <angelborroy> Tika library upgrading has bring it again to light

2018-05-16 14:05:41 GMT <angelborroy> https://github.com/Alfresco/alfresco-repository/commit/5de7c1d9746a6ba08e9a8b7c0ad886503d4b5cc3

2018-05-16 14:05:43 GMT <alfbot> Title: Feature/repo 1066 tika upgrade (#72) · Alfresco/alfresco-repository@5de7c1d · GitHub (at github.com)

2018-05-16 14:06:17 GMT <yreg> Hey ohej, it has been a while since the last time you were seen here !

2018-05-16 14:06:21 GMT <yreg> Welcome back

2018-05-16 14:06:59 GMT <ohej> Thanks! it has indeed been a while :O

2018-05-16 14:07:43 GMT <AFaust> Potentially you knew you could not come back without new information on https://github.com/Alfresco/alfresco-content-app/issues/179 and today is the first day you have some, no?

2018-05-16 14:07:45 GMT <alfbot> Title: Module/extension mechanism · Issue #179 · Alfresco/alfresco-content-app · GitHub (at github.com)

2018-05-16 14:07:54 GMT <AFaust> ;)

2018-05-16 14:07:54 GMT <ohej> I'm drowning in communications tooling, skype, slack, zoom, gitter, irc.. I usually forget to open at least one of them every day

2018-05-16 14:08:51 GMT <AFaust> Why you need to "open" them? I start my tools typically once after a patch day, and they end up running until the next (or a blue screen)

2018-05-16 14:10:11 GMT <ohej> AFaust: We've actually done some heavy experiments on extensibility for ADF based apps but it's been down to priorities and resourcing. It is still very, very high on the backlog but all efforts have been towards getting search, permissions and SSO working

2018-05-16 14:10:32 GMT <ohej> I'm hoping once we fininsh the search over the coming weeks we can share some details on how we imagine extensibility might work

2018-05-16 14:11:17 GMT <ohej> - that is not a commitment that it will happen in weeks, I'm going on holiday and will be moving to a new house by the end of this month so yeah.. I realise this is dragging on, along with potential decisions on supported out-of-the-box applications

2018-05-16 14:12:47 GMT <AFaust> as long as there is at least some update at the next devcon, you would be still well within my basic expectations of a timeline...

2018-05-16 14:13:38 GMT <AFaust> I just thought maybe a little reminder here and there couldn't hurt...

2018-05-16 14:13:45 GMT <ohej> hehe I always welcome the poking! ;)

2018-05-16 14:13:48 GMT <ohej> But actually

2018-05-16 14:14:08 GMT <ohej> a lot of the ways we've implemented the faceted search configuration leads towards how we imagine extensibility

2018-05-16 14:14:40 GMT <ohej> Biggest difference is that the way we do it now in search requires the code to be available at build time, but we have experiments that proves we can do it, but it does have some limitations

2018-05-16 14:14:49 GMT <MorganP> As long as the facetted search is less buggy than in share

2018-05-16 14:18:35 GMT <ohej> I think it's turning out pretty neat

2018-05-16 14:19:02 GMT <ohej> can you elaborate on "buggy"? It would be interesting to get some concrete thoughts so I can use it as a sanity check for what we have in ADF so far

2018-05-16 14:20:09 GMT <MorganP> It's on the configuration part

2018-05-16 14:20:44 GMT <MorganP> Facets that disappear, this kind of things

2018-05-16 14:21:20 GMT <ohej> AFaust: about opening the chat apps, I spend quite a bit of time outside work doing audio for my podcast so I usually close all my apps to be able to foucs ;)

2018-05-16 14:21:34 GMT <MorganP> I didn't check how the facetted search configuration works with ADF though

2018-05-16 14:23:48 GMT <ohej> MorganP: something like this https://github.com/Alfresco/alfresco-ng2-components/blob/development/docs/content-services/search-filter.component.md

2018-05-16 14:23:49 GMT <alfbot> Title: alfresco-ng2-components/search-filter.component.md at development · Alfresco/alfresco-ng2-components · GitHub (at github.com)

2018-05-16 14:24:00 GMT <AFaust> ohej: Blessed be the tools you can just mute without having to close them down...

2018-05-16 14:24:42 GMT <ohej> Even if they are muted and don't give notifications I still tend to tab over whenever I'm having a "uhmm..." moment, and then I end up working all day :P

2018-05-16 14:24:51 GMT <angelborroy> ohej does it support custom content models?

2018-05-16 14:25:33 GMT <AFaust> ohej: Regarding faceted search, one thing that - for some reason I never understood Alfresco never did - was considering the use case of "emergent facets", i.e. without having to explicitly configure / code facets, expose facets "as they make sense" using result set and content model analysis

2018-05-16 14:25:43 GMT <ohej> angelborroy: I don't see why not, but I haven't exactly verified it personally. It all comes down to the APIs

2018-05-16 14:25:56 GMT <AFaust> i.e. config can only just be left for the special cases / explicit disablements or explicit styles

2018-05-16 14:26:08 GMT <angelborroy> ohej (currently there is no support, at least in documentation)

2018-05-16 14:26:31 GMT <MorganP> { "query": "created:2018", "label": "Created This Year" }, => Does that mean every year you have to change the configuration of the facetted search? :D

2018-05-16 14:27:18 GMT <AFaust> ^^ MorganP - yes... or you use SOLR date math like created:[NOW/YEAR TO NOW/YEAR+1YEAR]

2018-05-16 14:27:35 GMT <AFaust> Though I don't know if ADF would handle queries with date math...

2018-05-16 14:27:48 GMT <AFaust> But judging from the support for range queries for content size it should

2018-05-16 14:27:51 GMT <angelborroy> I don’t see why not

2018-05-16 14:28:09 GMT <ohej> AFaust: we pass it straight into the search API which passes into Solr so if the v1 search api can do it, ADF should allow you to do it

2018-05-16 14:28:18 GMT <AFaust> Interesting though that all these fields are missing the cm: prefix, promoting bad style of relying on automatic inference...

2018-05-16 14:28:27 GMT <angelborroy> +1

2018-05-16 14:28:43 GMT <MorganP> Not all, there are some at the top :p

2018-05-16 14:29:06 GMT <ohej> AFaust: your idea about emergent facets, not sure I understand it it fully. So you all possible facets to show up in the UI?

2018-05-16 14:29:16 GMT <AFaust> Just saw them, only the NOT cm:creator:System is a proper query

2018-05-16 14:29:32 GMT <AFaust> We did this at PRODYNA way before Alfresco even had faceted search in Share

2018-05-16 14:31:10 GMT <AFaust> The backend would basically automatically generate facet requests based on the current query / data model (i.e. no need asking for field facets if the query already excludes the type / aspect defining the field), and then score the facets based on selectivity. The X most selective facets would be shown

2018-05-16 14:31:49 GMT <AFaust> There were intelligent defaults for dealing with date facets i.e. take the min/max values and generate X ranges, and once you select a range to restrict, it would generate new ranges to sub-divide the remaining data set

2018-05-16 14:32:34 GMT <AFaust> Same with numerics for instances

2018-05-16 14:33:05 GMT <AFaust> So instead of fixed content size brackes, you would - again - use the min/max and build your brackets based on a (potentially configured) desired number of brackets to show

2018-05-16 14:33:21 GMT <ohej> OK that makes sense.. unfortunately I'm not a search wizard

2018-05-16 14:33:36 GMT <ohej> but I will point Harry to this chat, I don't know if this is something he's thinking about

2018-05-16 14:33:55 GMT <AFaust> Negative selection was also something we added because often the most frequently used terms are not the ones you are interested in or were you could simply discard the entire matching set

2018-05-16 14:34:54 GMT <ohej> Where would you put this logic? on the API layer or in the frontend?

2018-05-16 14:35:30 GMT <ohej> because when you do the search you get all the facet info back and then we do the filtering and configuration in the frontend but it sounds like you want to add some secret sauce into the picking of facets

2018-05-16 14:36:02 GMT <AFaust> Most of the logic would of course be part of the backend (Repository-tier in our case) and frontend (Share) only needed to deal with the UI lifecycle of "new search" => "trigger new facet priority soring" => "display first X returned facets"

2018-05-16 14:36:55 GMT <AFaust> Of course I was assuming Alfresco to work hand in hand between ADF and Insight Engine / Search team to come up with the "next gen search experience"...

2018-05-16 14:37:11 GMT <ohej> ~flushLog

2018-05-16 14:37:11 GMT <alfbot> ohej: Woooosh, your log has been flushed...

2018-05-16 14:37:45 GMT <yreg> AFaust, interesting approach

2018-05-16 14:38:08 GMT <ohej> AFaust: it's an interesting use case for sure. I'll be sure to point Harry to it (the PM for search&analytics)

2018-05-16 14:39:28 GMT <yreg> It would bring major benefit to UX

2018-05-16 14:41:45 GMT <AFaust> I always considered this to be one of the most basic / natural ways faceting should work out-of-the-box, and for that reason was quite surprised to not see that in the first Share-based iteration of faceted search. Of course by that point it was already clear Alfresco no longer cared about enhancing Share substantially, so there was no point in making a fuzz...

2018-05-16 14:42:06 GMT <AFaust> But if there is going to be new UIs, new engines...

2018-05-16 14:42:19 GMT <AFaust> well, not new UIs... only new UI components...

2018-05-16 14:43:52 GMT <AFaust> yreg: you dealt with ADF and SAML recently - any chance you looked at SAML support in APS? Nothing mentioned in docs (only OAuth)...

2018-05-16 14:44:19 GMT <ohej> AFaust: in APS 1.9 and ACS 6.0 we bring native support for JWT through keycloak

2018-05-16 14:44:52 GMT <ohej> so you put keycloak in place and tell APS or ACS to work with keycloak, then SAML, oAuth, OIDC, Kerberos, basic auth etc takes APS or ACS out of the equation

2018-05-16 14:45:40 GMT <AFaust> Doesn't help this customer... ACS 6.0 is removing Share components that they need, and anyway both 1.9 and 6.0 will take too long to be stable GA state to help in the current use case which has a "must be done by" date in September...

2018-05-16 14:46:27 GMT <ohej> the delta on APS 1.8 and 1.9 is bug fixes and SAML

2018-05-16 14:46:37 GMT <ohej> or rather, JWT/keycloak

2018-05-16 14:46:55 GMT <ohej> but if you are on APS 1.8 and need SAML I'm afraid you're out of luck, unless you build it yourself

2018-05-16 14:47:25 GMT <AFaust> Ok - APS 1.9 might be fine, if there is already "a sort of" official release plan / date...

2018-05-16 14:47:40 GMT <ohej> within the next 20 days is what I was told three hours ago

2018-05-16 14:47:44 GMT <ohej> for APS 1.9 that is

2018-05-16 14:48:09 GMT <ohej> for ADF to work with ACS 5.2.x and SAML you will need a modified version of the SAML module for ACS..

2018-05-16 14:48:50 GMT <ohej> essentially the ACS SAML module don't allow you to redirect back to ADF after the "SAML dance", which means ADF never gets the SAML token

2018-05-16 14:48:56 GMT <AFaust> Ok - I wasn't aware a 1.9 was even planned. Latest talks I had with fcorti was only around a 2.0, which would be as problematic as ACS 6 to this customer when the ADF UI would be declared the new standard UI (and potentially no longer having the AngularJs one), not to mention the process migrations...

2018-05-16 14:49:24 GMT <angelborroy> AFaust if you were using ADF, you’ll have it just done

2018-05-16 14:49:24 GMT <angelborroy> https://github.com/Activiti/activiti-cloud-demo-ui

2018-05-16 14:49:26 GMT <alfbot> Title: GitHub - Activiti/activiti-cloud-demo-ui (at github.com)

2018-05-16 14:49:27 GMT <angelborroy> :)

2018-05-16 14:49:33 GMT <AFaust> ohej: My question isn't actually related to ADF at all - I was just asking yreg because I knew he dealt with SAML in that context and maybe he had a look at it

2018-05-16 14:49:48 GMT <ohej> ah sorry, I'll let him reply ;)

2018-05-16 14:49:58 GMT <AFaust> ADF is likely not going to be relevant / marketable to most of my customers until 2020 or so

2018-05-16 14:50:28 GMT <ohej> I've been so heavily involved in all these SSO discussions over the last 6-8 months because ADF is the partner or customers first thing they "see" so the conversation always starts with me.. :S

2018-05-16 14:50:31 GMT <AFaust> (given my timeline expectations for it time to mature)

2018-05-16 14:51:07 GMT <ohej> AFaust: [joking] but I thought you despised everything that involves the modern javascript stack? ;)

2018-05-16 14:51:41 GMT <AFaust> Well, that is likely only because you (Alfresco as a company) are only pushing the ADF story and everything else is tainted in that regard

2018-05-16 14:51:57 GMT <yreg> AFaust, the latest input I got, I got from Ole yesterday..

2018-05-16 14:52:09 GMT <angelborroy> AFaust to be fair they are also delivering 2+ GB Docker images… :-P

2018-05-16 14:52:12 GMT <yreg> Which is basically what he explained a bit earlier

2018-05-16 14:52:18 GMT <AFaust> ohej: I despise most of the developer culture around these "modern" stack frameworks...

2018-05-16 14:52:19 GMT <yreg> No native SAML support in APS

2018-05-16 14:52:57 GMT <yreg> But it can be run through Keycloak (it might involve an extra click for the end user though)

2018-05-16 14:53:34 GMT <ohej> yreg: nope you can disable the extra click, just a matter of keycloak configuration because you can have multiple IdP's in your keycloak setup

2018-05-16 14:53:50 GMT <yreg> AFaust, the idea is to export the problem (authentication) to a dedicated separate service, that does it, and does it well

2018-05-16 14:54:59 GMT <yreg> ohej, nice to know

2018-05-16 14:55:24 GMT <AFaust> yreg: I am familiar with the ideas behind the various "Common XY Services" on the roadmap...

2018-05-16 14:56:00 GMT <AFaust> Though to be honest, it does not require a service - a simple library and some stable development practices would have done it as well.

2018-05-16 14:56:29 GMT <AFaust> But since Alfresco isn't capable of sharing on a Java library level between different products, a separate service is the best option for them

2018-05-16 14:56:49 GMT <yreg> Well, if you are in the platform/solution business, it is more efficient and elegant to do it this way

2018-05-16 14:57:03 GMT <yreg> In a centralised dedicated service

2018-05-16 14:58:38 GMT <AFaust> Sure, it is more efficient / elegant if you can't create a clean, well-structured, common/consistent architecture in your individual products...

2018-05-16 14:59:15 GMT *** angelborroy_ is now known as angelborroy

2018-05-16 14:59:29 GMT <AFaust> And I am not argueing against any of the "Common XY Service" ideas / straegies (well, apart from the lack of transctionality that will plague us)...

2018-05-16 14:59:38 GMT <yreg> -= THIS MESSAGE NOT LOGGED =-

2018-05-16 15:00:18 GMT <ohej> AFaust: I'd argue that's not the case. I do agree that a common library could help a lot things but when you look at something like authentication, SAML is a horrible way to solve SSO for an API or javascript based application

2018-05-16 15:00:31 GMT <ohej> JWT is much more streamlined towards that exact use case

2018-05-16 15:00:34 GMT <yreg> AFaust, The aim is to get eventual consistency using queues ... and streaming API

2018-05-16 15:00:53 GMT <ohej> so the clean way to go about this is to have all the individual services understand how to consume and validate a JWT, then put a common service in front of them to handle the rest

2018-05-16 15:01:22 GMT <yreg> +1 ohej

2018-05-16 15:02:42 GMT <AFaust> I believe you guys are completely missing the point I am argueing. I do not dispute the benefits of JWT vs SAML, or any of the aims. I am merely saying that the "Common Authentication Service" is now Alfresco's only choice / way to make authentication management because they f****ed this up with extremely poor development in the past, so that it is now a completely crazy mess in both ACS / APS...

2018-05-16 15:04:28 GMT <ohej> but then you would still have the issue of having multiple services doing the same thing

2018-05-16 15:04:56 GMT <ohej> by abstracting this into a service you have to deal with authentication in one place and one config

2018-05-16 15:05:40 GMT <ohej> -= THIS MESSAGE NOT LOGGED =-

2018-05-16 15:05:40 GMT * AFaust wonders if he is writing in Suaheli....

2018-05-16 15:07:20 GMT <ohej> you aren't, I just don't fully agree with you ;)

2018-05-16 15:09:13 GMT <AFaust> I can't be sure, because you are bringing up points to something that is only tangential to my main point.

2018-05-16 15:10:09 GMT <hi-ko> may I interupt your discussion for a question: Has anybody seen an addon for a javascript binding to add a user object for an ldap user having no password like in java authenticationService.createAuthentication?

2018-05-16 15:11:10 GMT <hi-ko> I don't want to reinvent the wheel and wonder if this requirement is not already somewhere implemented ...

2018-05-16 15:11:23 GMT <AFaust> hi-ko: I don't understand what kind of addon you are looking for / what it should be doing. I would simply use the default JavaScript - Java interop layer to access the authenticationService and just call that method...

2018-05-16 15:12:08 GMT <AFaust> I guess you are looking for a root-scope object that provides a "more clean interop" abstraction

2018-05-16 15:12:38 GMT <AFaust> argh.. to late in the day for proper English.... "more clean" => "cleaner"

2018-05-16 15:12:43 GMT <hi-ko> right.

2018-05-16 15:13:24 GMT <AFaust> I'm not aware of such an addon

2018-05-16 15:17:44 GMT <hi-ko> So your suggestion is to use something like ctxt = Packages.org.springframework.web.context.ContextLoader

2018-05-16 15:18:13 GMT <AFaust> If you only need it once, yes... Otherwise I would create such a root-scope object

2018-05-16 15:37:03 GMT *** angelborroy_ is now known as angelborroy

2018-05-16 15:38:11 GMT * AFaust is wondering what would be necessary to backport keycloak support from ACS 6 to ACS 5.x

2018-05-16 15:43:18 GMT <AFaust> Should be quite simple - its an isolated subsystem similar to external, and the classes / dependencies seem to be easily extractable. Not sure why they did had to tie it to the ACS 6 release instead of making it a module...

2018-05-16 18:29:44 GMT <eswbitto> Anyone ever run into Transformation failed to obey timeout limit logs? This is filling up my log file and generating about 1 gig of log files everyday.

2018-05-16 18:50:04 GMT <douglascrp> eswbitto, yes, I have

2018-05-16 18:50:17 GMT <douglascrp> in my case, it was because LibreOffice was facing problems with some pptx files

2018-05-16 18:50:35 GMT <eswbitto> I'm getting problems with thumbnails for pdf files

2018-05-16 19:22:17 GMT *** CptLuxx is now known as CptLuxxine

2018-05-16 19:23:42 GMT *** CptLuxxine is now known as CptLuxx

2018-05-16 19:35:29 GMT <douglascrp> eswbitto, so you should be trying to identify what is wrong in your environment

2018-05-16 19:35:50 GMT <douglascrp> there are configuration properties where you can set the timeout limits for specific transformers

2018-05-16 19:36:18 GMT <douglascrp> you can increase those values, or you could try to give the server more resources in order to it to be able to deal with the load

2018-05-16 19:36:31 GMT <douglascrp> or you could even turn the thumbnail generation of at all

2018-05-16 19:36:35 GMT <douglascrp> if you don't need that

2018-05-16 19:36:52 GMT <douglascrp> or you could even turn the thumbnail generation *off at all

2018-05-16 19:39:55 GMT <eswbitto> douglascrp, I really haven't done much as far as changing the default. I guess I could change the value to something higher to see if that fixes it.

2018-05-16 19:40:36 GMT <eswbitto> I know that we talked a few months back about using a separate transformation server to handle all the requests....I haven't been able to do much with that...I got pulled into other projects.

2018-05-16 19:43:07 GMT <douglascrp> eswbitto, I understand you :P

2018-05-16 22:53:24 GMT <douglascrp> has anyone tried to create a new custom banner in the document library?

End of Daily Log

The other logs are at http://esplins.org/hash_alfresco