Daily Log for #alfresco IRC Channel

Alfresco discussion and collaboration. Stick around a few hours after asking a question.

Official support for Enterprise subscribers: support.alfresco.com.

Joining the Channel:

Join in the conversation by getting an IRC client and connecting to #alfresco at Freenode. Our you can use the IRC web chat.

More information about the channel is in the wiki.

Getting Help

More help is available in this list of resources.

Daily Log for #alfresco

2020-02-25 04:36:23 GMT <alfresco-discord> <MartinM> Very good answer 馃憦馃徎. Thanks AFaust

2020-02-25 09:01:13 GMT <alfresco-discord> <PJ> Just released an hotfix release of APS SDK https://github.com/OpenPj/alfresco-process-services-project-sdk/releases/tag/v1.3.1

2020-02-25 09:01:14 GMT <alfbot> Title:Release v1.3.1 路 OpenPj/alfresco-process-services-project-sdk 路 GitHub (at github.com)

2020-02-25 09:25:41 GMT <alfresco-discord> <MartinM> Not related to my last posts. For a customer I would like to suggest putting ACS 5.2, Share, ActiveMQ, Activiti + customisations in one docker image rather than do all manually and for another node again. Has lots of advantages I think. The customer do not want to use K8s hence I suggested to back only one image as than no k8s is necessary. Does that makes sense?

2020-02-25 09:35:43 GMT <alfresco-discord> <lars> You can also keep using the images and write a docker-compose file to put things together. That way, you save yourself the trouble of putting everything in one image, and you can keep using images that are already built for you

2020-02-25 09:43:05 GMT <alfresco-discord> <MartinM> That鈥檚 the idea

2020-02-25 09:43:32 GMT <alfresco-discord> <MartinM> But docker compose for production? I never heard from that

2020-02-25 09:43:49 GMT <alfresco-discord> <MartinM> For development great yes

2020-02-25 09:45:15 GMT <alfresco-discord> <MartinM> DB is external

2020-02-25 09:46:19 GMT <angelborroy> Docker Compose for Community is a regular scenario

2020-02-25 09:46:43 GMT <angelborroy> As for Enterprise is not allowed because of Alfresco, people is not using it

2020-02-25 09:46:57 GMT <angelborroy> But it could be used also in the same way

2020-02-25 09:48:21 GMT <alfresco-discord> <MartinM> Interesting. Can you be more precise with not allowed 馃檹馃徎? Would I not be allowed to put 5.2 in Docker ?

2020-02-25 09:48:37 GMT <angelborroy> You loose support

2020-02-25 09:48:59 GMT <alfresco-discord> <MartinM> Oh no 馃槶

2020-02-25 09:49:30 GMT <alfresco-discord> <MartinM> But good feedback 馃檹馃徎

2020-02-25 09:49:40 GMT <alfresco-discord> <MartinM> Thank you so much

2020-02-25 09:49:55 GMT <alfresco-discord> <lars> I guess you would also lose support when you assemble everything together in one container

2020-02-25 09:51:08 GMT <alfresco-discord> <MartinM> Actually do I need support if I have it in Docker 馃. I probably shouldn鈥檛 ask those questions here 馃槄

2020-02-25 09:53:27 GMT <alfresco-discord> <lars> Well, I have my own reservations about running a k8s cluster just for one Alfresco installation. Sounds like a lot of operational overhead

2020-02-25 09:54:30 GMT <angelborroy> Same feeling here

2020-02-25 09:54:39 GMT <alfresco-discord> <MartinM> Hence only one image

2020-02-25 09:55:06 GMT <alfresco-discord> <MartinM> You only need the docker demon than

2020-02-25 09:55:22 GMT <alfresco-discord> <MartinM> Orchestrating one image should be fine

2020-02-25 09:55:36 GMT <alfresco-discord> <MartinM> One container in this case

2020-02-25 09:55:51 GMT <angelborroy> But you loose control on the resources

2020-02-25 09:56:06 GMT <angelborroy> More or less the same problem as installing the full stack in one server on premise

2020-02-25 09:56:13 GMT <angelborroy> I guess it鈥檚 a discouraged approach

2020-02-25 09:58:24 GMT <alfresco-discord> <lars> I guess that may work for you, but in general, you use one container for each "service"/main process. Handling multiple is of course possible if you put some service manager in between, but is generally discouraged

2020-02-25 10:02:35 GMT <alfresco-discord> <MartinM> Yes I know. That would be the ideal case. But I see lots of advantages putting almost the whole stack into the image.

2020-02-25 10:02:44 GMT <alfresco-discord> <MartinM> Thank you guys much appreciated

2020-02-25 10:47:17 GMT <alfresco-discord> <MartinM> I see here the support matrix https://docs.alfresco.com/5.2/concepts/supported-platforms-ACS.html it doesn't say anything about Docker. If I base the image on like on Ubuntu could it be supported? Might a better question for Alfresco Support I guess.

2020-02-25 10:47:18 GMT <alfbot> Title:Supported Platforms | Alfresco Documentation (at docs.alfresco.com)

2020-02-25 12:38:13 GMT <AFaust> angelborroy / MartinM: "Loosing support" when not running k8s for Enterprise is not really a loss anyway. You can always reproduce the core issues in other deployment scenarios / independent of the method of deployment, and support by Alfresco is typically limited in usefulness anyway, so it does not matter if you are a) quicker to fix things yourself when not using k8s and not getting support from Alfresco, or b) quicker to fix

2020-02-25 12:38:13 GMT <AFaust> things yourself when using k8s and waiting too long on Alfresco to fix things in the some future release...

2020-02-25 12:48:30 GMT <alfresco-discord> <MartinM> Very true. Thank you AFaust 馃檪

2020-02-25 12:56:30 GMT <alfresco-discord> <mbui> Are SSO authentication audited? If not, is it possible to?

2020-02-25 12:57:08 GMT <alfresco-discord> <MartinM> Is via API just like everything

2020-02-25 12:57:35 GMT <alfresco-discord> <MartinM> REST API AFAIK

2020-02-25 13:00:25 GMT <alfresco-discord> <fguariba> Hi guys! Thanks to accept me on this server. 馃檪

2020-02-25 13:15:36 GMT <alfresco-discord> <yreg> @mbui which SSO

2020-02-25 13:16:07 GMT <alfresco-discord> <yreg> I would say, if it is done right, the alfresco-api audit producer should have an auditable trace of it 馃檪

2020-02-25 13:21:50 GMT <alfresco-discord> <mbui> @yreg In this case Kerberos SSO

2020-02-25 13:26:05 GMT <alfresco-discord> <yreg> not by default

2020-02-25 13:26:18 GMT <alfresco-discord> <yreg> but it should be fairly easy to add support for it

2020-02-25 13:27:47 GMT <alfresco-discord> <yreg> it's a matter of either redifining this bean adding the audit interceptor along with the transaction interceptor: https://github.com/Alfresco/alfresco-repository/blob/master/src/main/resources/alfresco/subsystems/Authentication/kerberos/kerberos-authentication-context.xml#L32

2020-02-25 13:27:48 GMT <alfbot> Title:alfresco-repository/kerberos-authentication-context.xml at master 路 Alfresco/alfresco-repository 路 GitHub (at github.com)

2020-02-25 13:28:33 GMT <alfresco-discord> <yreg> or rename this https://github.com/Alfresco/alfresco-repository/blob/master/src/main/resources/alfresco/subsystems/Authentication/kerberos/kerberos-authentication-context.xml#L9 into something else and create a proxy with the audit interceptor using the same name

2020-02-25 13:28:34 GMT <alfbot> Title:alfresco-repository/kerberos-authentication-context.xml at master 路 Alfresco/alfresco-repository 路 GitHub (at github.com)

2020-02-25 18:23:52 GMT <AxelFaust> @mbui / @yreg: SSO authentications are not handled via any existing audit producer. This is the reason I had to create https://github.com/Acosix/alfresco-audit/blob/master/src/main/java/de/acosix/alfresco/audit/repo/web/auth/AuthenticationAuditingListener.java for auditing which users are active for a customer (to then be able to determine from who we can revoke Enterprise licenses if the customer was close to their limit)

2020-02-25 18:23:53 GMT <alfbot> Title:alfresco-audit/AuthenticationAuditingListener.java at master 路 Acosix/alfresco-audit 路 GitHub (at github.com)

2020-02-25 18:25:49 GMT <AxelFaust> Unfortunately, Alfresco only supports one authentication listener (of a certain use case, e.g. webdav vs. sharepoint vs. global) globally, so it would require a bit of an override. Or introduction of a global listener which can aggregate multiple listeners, which I decided to do, e.g. https://github.com/Acosix/alfresco-utility/blob/master/full/repository/src/main/java/de/acosix/alfresco/utility/repo/web/auth/AuthenticationLi

2020-02-25 18:25:49 GMT <AxelFaust> stenersFacade.java

End of Daily Log

The other logs are at http://esplins.org/hash_alfresco