Daily Log for #alfresco IRC Channel

Alfresco discussion and collaboration. Stick around a few hours after asking a question.

Official support for Enterprise subscribers: support.alfresco.com.

Joining the Channel:

Join in the conversation by getting an IRC client and connecting to #alfresco at Freenode. Our you can use the IRC web chat.

More information about the channel is in the wiki.

Getting Help

More help is available in this list of resources.

Daily Log for #alfresco

2018-09-26 00:05:30 GMT <alfresco-discord> <Erik.whipp> Is testing not recommended for Alfresco extensions? I've been looking around at different open source extensions and not many seem to implement any tests. I assume this is a mal-informed question but figured its worth asking here.

2018-09-26 02:28:27 GMT <yreg> @Erik.whipp they are simply quite hard to maintain across SDK versions

2018-09-26 08:20:10 GMT <alfresco-discord> <MorganP> With this authentication chain: authentication.chain=kerberos1:kerberos,ldap-ad1:ldap-ad,alfrescoNtlm1:alfrescoNtlm

2018-09-26 08:20:28 GMT <alfresco-discord> <MorganP> I can put my Kerberos configuration into this file: $ALF_HOME/tomcat/shared/classes/alfresco/extension/subsystems/Authentication/kerberos/kerberos1/kerberos-authentication.properties

2018-09-26 08:20:29 GMT <alfresco-discord> <MorganP> right?

2018-09-26 08:20:54 GMT <angelborroy> it looks fine, yes

2018-09-26 08:21:01 GMT <alfresco-discord> <MorganP> I'm always doing it for the ldap but usually not for krb

2018-09-26 08:21:12 GMT <angelborroy> but you can include it also properties in alfresco-global.properties

2018-09-26 08:21:54 GMT <alfresco-discord> <MorganP> Yes that's why I'm doing usually but since I put it in the separate properties file for the LDAP, it makes more sense to put both of them in dedicated files

2018-09-26 08:22:24 GMT <angelborroy> Why? Do you have two different LDAPs?

2018-09-26 08:22:36 GMT <angelborroy> LDAP can also be configured in alfresco-global.properties

2018-09-26 08:22:43 GMT <alfresco-discord> <MorganP> Yes I know

2018-09-26 08:22:48 GMT <alfresco-discord> <MorganP> and yes I have 2 ADs

2018-09-26 08:22:52 GMT <angelborroy> hehe

2018-09-26 08:24:43 GMT <angelborroy> From some installation manual:

2018-09-26 08:24:44 GMT <angelborroy> ${alfresco.base}/tomcat/shared/classes/alfresco/extension/subsystems/Authentication/kerberos/kerberos1

2018-09-26 08:24:59 GMT <angelborroy> So, yes, it works

2018-09-26 08:25:54 GMT <angelborroy> @MorganP I have also a Docker Compose with Kerberos Auth configured for Alfresco 2010707 if you consider it worth it

2018-09-26 08:31:10 GMT *** vicenteH is now known as Guest87878

2018-09-26 08:47:09 GMT <alfresco-discord> <IanW> Has anyone tried SSO with version 6 yet?

2018-09-26 08:47:56 GMT <angelborroy> We’ve tried Keycloak integration

2018-09-26 08:48:04 GMT <angelborroy> What is not exactly the same

2018-09-26 08:48:24 GMT <angelborroy> But no Kerberos or CAS

2018-09-26 09:49:58 GMT <alfresco-discord> <IanW> Thanks - very preliminary conclusion is that it's broken again.... (every release...)

2018-09-26 12:23:06 GMT <alfresco-discord> <MorganP> I enabled Kerberos on an environment and now I have this damn "Alfresco is running without Share Services. See your System Administrator for more details." message...

2018-09-26 12:23:23 GMT <alfresco-discord> <MorganP> I know I had it in the past and I was able to remove it somehow but I don't remember anymore

2018-09-26 12:23:33 GMT <alfresco-discord> <MorganP> I have all the endpoints including the alfresco-api one

2018-09-26 12:23:47 GMT <alfresco-discord> <MorganP> And the message isn't showing without Kerberos SSO.

2018-09-26 12:23:58 GMT <alfresco-discord> <MorganP> And the module is indeed shown as installed obviously

2018-09-26 12:25:10 GMT <alfresco-discord> <MorganP> The SSO is working fine and Share seems too... browse, check out, check in, AOS, all that works fine

2018-09-26 12:25:31 GMT <alfresco-discord> <MorganP> I could just hide the message but that's ugly

2018-09-26 12:28:39 GMT <alfresco-discord> <MorganP> If anyone has any idea... Alfresco 5.2.d

2018-09-26 12:58:46 GMT <alfresco-discord> <IanW> When I've had the 'running without Share Services' message I find it usually goes away if I restart just share - suspect there's a timing thing going on

2018-09-26 13:07:34 GMT <alfresco-discord> <Loftux> https://issues.alfresco.com/jira/browse/ALF-21776

2018-09-26 13:07:49 GMT <alfresco-discord> <Loftux> About the Share Services...

2018-09-26 13:29:20 GMT <alfresco-discord> <MorganP> @Loftux I'm not sure I understand the ALF-21776

2018-09-26 13:29:55 GMT <alfresco-discord> <MorganP> I have SSO enabled. If I login through the Kerberos SSO with my account, I have the warning message. If I connect with the same user on another browser not configured to use the SSO, then the warning isn't displayed

2018-09-26 13:31:02 GMT <alfresco-discord> <Loftux> The ticket just explains how to hide it, Alfresco could not reproduce, and therefore does not fix underlaying issue.

2018-09-26 13:31:37 GMT <alfresco-discord> <Loftux> There is a linked ticket that says that i maybe will be fixed in future release.

2018-09-26 14:17:20 GMT <alfresco-discord> <dgradecak> hi guys, is alfresco releasing the war for ACS (and share) on nexus, sure for version 6?

2018-09-26 14:18:02 GMT <alfresco-discord> <dgradecak> I am trying to find them but without success, however if I remember correctly it was said that all this will still be released normally. I only can find the zip distribution

2018-09-26 14:21:39 GMT <AFaust> @dgradecak: You may have missed that artifact names / version schemes have been changed with the 6.0 release

2018-09-26 14:23:49 GMT <AFaust> Repository WAR can be found using artifact ID content-services-community and version 6.0.7-ga, while Share is using its old artifactId with 6.0.b / 6.0.c (latter one was part of the latest 6.1 EA)

2018-09-26 14:24:18 GMT <alfresco-discord> <dgradecak> just found indeed

2018-09-26 14:26:26 GMT <alfresco-discord> <dgradecak> any idea if it will be released in the future also?

2018-09-26 14:26:40 GMT <alfresco-discord> <dgradecak> I know Francesco said once that it will be ...

2018-09-26 14:31:51 GMT <alfresco-discord> <dgradecak> AFaust, I rememeber we discussed about Post/Pre resources ...

2018-09-26 14:32:12 GMT <alfresco-discord> <dgradecak> I am trying to do the same in docker, struggling with java permissions issue

2018-09-26 14:32:26 GMT <alfresco-discord> <dgradecak> did you manage at the end to solve your issue?

2018-09-26 14:32:42 GMT <AFaust> So far I don't know of any plans to stop releasing it to Nexus, and as long as you need it to build custom WARs for your own Docker images, it will have to stay the same

2018-09-26 14:37:05 GMT <AFaust> Hmm - I believe I left you a notice via ~later at some point, but of course due to IRC - Discord you don't get that

2018-09-26 14:37:26 GMT <AFaust> ~seen dgradecak

2018-09-26 14:37:26 GMT <alfbot> AFaust: dgradecak was last seen in #alfresco 7 weeks, 0 days, 5 hours, 22 minutes, and 26 seconds ago: <dgradecak> mbui: I think that if you do not need to transactionnaly create documents or update them via the workflow, than you could consider having it outside the repo already

2018-09-26 14:38:05 GMT <AFaust> Soo - you must have already logged in since then.... I guess searching Discord history is now your next step

2018-09-26 14:38:24 GMT <AFaust> Let's see if I can find it in my local logs

2018-09-26 14:40:46 GMT <AFaust> Ah, right. It was an issue with permissions due to running Docker on Windows

2018-09-26 14:40:57 GMT <AFaust> And you actually already replied to that.

2018-09-26 14:41:03 GMT <AFaust> Check logs on August 8th

2018-09-26 14:42:22 GMT <AFaust> So what I essentially did is have my startup script run a proper chown / chmod on my folder structure

2018-09-26 14:42:50 GMT <AFaust> Because folders added from a Windows host via a Dockerfile did not have the permission to list contents

2018-09-26 14:43:05 GMT <dgradecak> and than it worked ... ok will give it a go on my side too

2018-09-26 14:43:44 GMT <AFaust> So the File API lookup in Alfresco / Spring could not traverse anything where wildcards were involved, while exact file lookups did work (which was what was partially confusing me

2018-09-26 14:44:59 GMT <AFaust> Oh - and I also run chmod / chown from my Dockerfile as well... The latter for everything mounted during, build, the former for everything mounted via a docker-compose file

2018-09-26 14:46:54 GMT <alfresco-discord> <IanW> I hate it when people check in files with lots of crlf/whitespaces changes

2018-09-26 17:37:47 GMT *** kiilerix_ is now known as Guest46751

2018-09-26 19:34:21 GMT <dgradecak> AFaust: thank you for reminding me about the permissions issue earlier. I am trying to build an image with the correct setup to deploy modules from how alfresco descibed with the folder structure modules/platform, but having difficulties in windows built containers

2018-09-26 19:35:31 GMT <dgradecak> chmod/chown does not help in this case, of course it works normally when deployed like Angel wrote on his blog, directly in web-inf/lib ... but that is something I am trying to avoid, however probably will fallback to that too

2018-09-26 19:47:49 GMT <AFaust> dgradecak: Well, that is what these Post-Resources are for in my image(s)

2018-09-26 20:20:08 GMT <dgradecak> AFaust: I ended up with this in m Dockerfile for now ...

2018-09-26 20:20:12 GMT <dgradecak> RUN echo 'grant codeBase "file:/usr/local/tomcat/modules/platform/-" {permission java.lang.reflect.ReflectPermission "suppressAccessChecks";};' >> conf/catalina.policy

2018-09-26 20:20:34 GMT <dgradecak> just that you have a note if ever needed something stupid ;)

2018-09-26 20:21:29 GMT <AFaust> Are you / Alfresco images running with a security manager?

2018-09-26 20:22:33 GMT <AFaust> That'd be something new...

2018-09-26 20:24:10 GMT <dgradecak> no idea honestly yet, will check that tomorrow, but adding the alfresco.xml for PostResources from modules/platform simply took me too much time and this is something I just did to make this work

2018-09-26 20:24:46 GMT <dgradecak> but might be something else like spring ...

2018-09-26 20:36:47 GMT <dgradecak> btw, this is tomcat's security manager that for some reason cannot read something configured as a Post/Pre Resource

2018-09-26 21:29:19 GMT <alfresco-discord> <dgradecak> # Starting tomcat with Security Manager CMD ["catalina.sh", "run", "-security"] This is from the alfresco base tomcat image

2018-09-26 21:29:53 GMT <alfresco-discord> <dgradecak> https://github.com/Alfresco/alfresco-docker-base-tomcat

2018-09-26 21:29:54 GMT <alfbot> Title:GitHub - Alfresco/alfresco-docker-base-tomcat (at github.com)

End of Daily Log

The other logs are at http://esplins.org/hash_alfresco