Alfresco discussion and collaboration. Stick around a few hours after asking a question.
Official support for Enterprise subscribers: support.alfresco.com.
Join in the conversation by getting an IRC client and connecting to #alfresco at Freenode. Our you can use the IRC web chat.
More information about the channel is in the wiki.
More help is available in this list of resources.
2020-02-25 04:36:23 GMT <alfresco-discord> <MartinM> Very good answer 👏🏻. Thanks AFaust
2020-02-25 09:01:13 GMT <alfresco-discord> <PJ> Just released an hotfix release of APS SDK https://github.com/OpenPj/alfresco-process-services-project-sdk/releases/tag/v1.3.1
2020-02-25 09:01:14 GMT <alfbot> Title:Release v1.3.1 · OpenPj/alfresco-process-services-project-sdk · GitHub (at github.com)
2020-02-25 09:25:41 GMT <alfresco-discord> <MartinM> Not related to my last posts. For a customer I would like to suggest putting ACS 5.2, Share, ActiveMQ, Activiti + customisations in one docker image rather than do all manually and for another node again. Has lots of advantages I think. The customer do not want to use K8s hence I suggested to back only one image as than no k8s is necessary. Does that makes sense?
2020-02-25 09:35:43 GMT <alfresco-discord> <lars> You can also keep using the images and write a docker-compose file to put things together. That way, you save yourself the trouble of putting everything in one image, and you can keep using images that are already built for you
2020-02-25 09:43:05 GMT <alfresco-discord> <MartinM> That’s the idea
2020-02-25 09:43:32 GMT <alfresco-discord> <MartinM> But docker compose for production? I never heard from that
2020-02-25 09:43:49 GMT <alfresco-discord> <MartinM> For development great yes
2020-02-25 09:45:15 GMT <alfresco-discord> <MartinM> DB is external
2020-02-25 09:46:19 GMT <angelborroy> Docker Compose for Community is a regular scenario
2020-02-25 09:46:43 GMT <angelborroy> As for Enterprise is not allowed because of Alfresco, people is not using it
2020-02-25 09:46:57 GMT <angelborroy> But it could be used also in the same way
2020-02-25 09:48:21 GMT <alfresco-discord> <MartinM> Interesting. Can you be more precise with not allowed 🙏🏻? Would I not be allowed to put 5.2 in Docker ?
2020-02-25 09:48:37 GMT <angelborroy> You loose support
2020-02-25 09:48:59 GMT <alfresco-discord> <MartinM> Oh no 😭
2020-02-25 09:49:30 GMT <alfresco-discord> <MartinM> But good feedback 🙏🏻
2020-02-25 09:49:40 GMT <alfresco-discord> <MartinM> Thank you so much
2020-02-25 09:49:55 GMT <alfresco-discord> <lars> I guess you would also lose support when you assemble everything together in one container
2020-02-25 09:51:08 GMT <alfresco-discord> <MartinM> Actually do I need support if I have it in Docker 🤔. I probably shouldn’t ask those questions here 😅
2020-02-25 09:53:27 GMT <alfresco-discord> <lars> Well, I have my own reservations about running a k8s cluster just for one Alfresco installation. Sounds like a lot of operational overhead
2020-02-25 09:54:30 GMT <angelborroy> Same feeling here
2020-02-25 09:54:39 GMT <alfresco-discord> <MartinM> Hence only one image
2020-02-25 09:55:06 GMT <alfresco-discord> <MartinM> You only need the docker demon than
2020-02-25 09:55:22 GMT <alfresco-discord> <MartinM> Orchestrating one image should be fine
2020-02-25 09:55:36 GMT <alfresco-discord> <MartinM> One container in this case
2020-02-25 09:55:51 GMT <angelborroy> But you loose control on the resources
2020-02-25 09:56:06 GMT <angelborroy> More or less the same problem as installing the full stack in one server on premise
2020-02-25 09:56:13 GMT <angelborroy> I guess it’s a discouraged approach
2020-02-25 09:58:24 GMT <alfresco-discord> <lars> I guess that may work for you, but in general, you use one container for each "service"/main process. Handling multiple is of course possible if you put some service manager in between, but is generally discouraged
2020-02-25 10:02:35 GMT <alfresco-discord> <MartinM> Yes I know. That would be the ideal case. But I see lots of advantages putting almost the whole stack into the image.
2020-02-25 10:02:44 GMT <alfresco-discord> <MartinM> Thank you guys much appreciated
2020-02-25 10:47:17 GMT <alfresco-discord> <MartinM> I see here the support matrix https://docs.alfresco.com/5.2/concepts/supported-platforms-ACS.html it doesn't say anything about Docker. If I base the image on like on Ubuntu could it be supported? Might a better question for Alfresco Support I guess.
2020-02-25 10:47:18 GMT <alfbot> Title:Supported Platforms | Alfresco Documentation (at docs.alfresco.com)
2020-02-25 12:38:13 GMT <AFaust> angelborroy / MartinM: "Loosing support" when not running k8s for Enterprise is not really a loss anyway. You can always reproduce the core issues in other deployment scenarios / independent of the method of deployment, and support by Alfresco is typically limited in usefulness anyway, so it does not matter if you are a) quicker to fix things yourself when not using k8s and not getting support from Alfresco, or b) quicker to fix
2020-02-25 12:38:13 GMT <AFaust> things yourself when using k8s and waiting too long on Alfresco to fix things in the some future release...
2020-02-25 12:48:30 GMT <alfresco-discord> <MartinM> Very true. Thank you AFaust 🙂
2020-02-25 12:56:30 GMT <alfresco-discord> <mbui> Are SSO authentication audited? If not, is it possible to?
2020-02-25 12:57:08 GMT <alfresco-discord> <MartinM> Is via API just like everything
2020-02-25 12:57:35 GMT <alfresco-discord> <MartinM> REST API AFAIK
2020-02-25 13:00:25 GMT <alfresco-discord> <fguariba> Hi guys! Thanks to accept me on this server. 🙂
2020-02-25 13:15:36 GMT <alfresco-discord> <yreg> @mbui which SSO
2020-02-25 13:16:07 GMT <alfresco-discord> <yreg> I would say, if it is done right, the alfresco-api audit producer should have an auditable trace of it 🙂
2020-02-25 13:21:50 GMT <alfresco-discord> <mbui> @yreg In this case Kerberos SSO
2020-02-25 13:26:05 GMT <alfresco-discord> <yreg> not by default
2020-02-25 13:26:18 GMT <alfresco-discord> <yreg> but it should be fairly easy to add support for it
2020-02-25 13:27:47 GMT <alfresco-discord> <yreg> it's a matter of either redifining this bean adding the audit interceptor along with the transaction interceptor: https://github.com/Alfresco/alfresco-repository/blob/master/src/main/resources/alfresco/subsystems/Authentication/kerberos/kerberos-authentication-context.xml#L32
2020-02-25 13:27:48 GMT <alfbot> Title:alfresco-repository/kerberos-authentication-context.xml at master · Alfresco/alfresco-repository · GitHub (at github.com)
2020-02-25 13:28:33 GMT <alfresco-discord> <yreg> or rename this https://github.com/Alfresco/alfresco-repository/blob/master/src/main/resources/alfresco/subsystems/Authentication/kerberos/kerberos-authentication-context.xml#L9 into something else and create a proxy with the audit interceptor using the same name
2020-02-25 13:28:34 GMT <alfbot> Title:alfresco-repository/kerberos-authentication-context.xml at master · Alfresco/alfresco-repository · GitHub (at github.com)
2020-02-25 18:23:52 GMT <AxelFaust> @mbui / @yreg: SSO authentications are not handled via any existing audit producer. This is the reason I had to create https://github.com/Acosix/alfresco-audit/blob/master/src/main/java/de/acosix/alfresco/audit/repo/web/auth/AuthenticationAuditingListener.java for auditing which users are active for a customer (to then be able to determine from who we can revoke Enterprise licenses if the customer was close to their limit)
2020-02-25 18:23:53 GMT <alfbot> Title:alfresco-audit/AuthenticationAuditingListener.java at master · Acosix/alfresco-audit · GitHub (at github.com)
2020-02-25 18:25:49 GMT <AxelFaust> Unfortunately, Alfresco only supports one authentication listener (of a certain use case, e.g. webdav vs. sharepoint vs. global) globally, so it would require a bit of an override. Or introduction of a global listener which can aggregate multiple listeners, which I decided to do, e.g. https://github.com/Acosix/alfresco-utility/blob/master/full/repository/src/main/java/de/acosix/alfresco/utility/repo/web/auth/AuthenticationLi
2020-02-25 18:25:49 GMT <AxelFaust> stenersFacade.java
The other logs are at http://esplins.org/hash_alfresco