[jira] [Commented] (CONNECTORS-458) Incubator site has moved; adjust crawler-ui documentation reference accordingly
[ https://issues.apache.org/jira/browse/CONNECTORS-458?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13254579#comment-13254579 ] Karl Wright commented on CONNECTORS-458: It turns out that the URLs haven't changed; just the location from which they are mirrored. So this can be closed. Incubator site has moved; adjust crawler-ui documentation reference accordingly --- Key: CONNECTORS-458 URL: https://issues.apache.org/jira/browse/CONNECTORS-458 Project: ManifoldCF Issue Type: Bug Components: Framework crawler agent Affects Versions: ManifoldCF 0.5, ManifoldCF 0.6 Reporter: Karl Wright Fix For: ManifoldCF 0.6 The ManifoldCF site has moved from http://incubator.apache.org/connectors to http://incubator.apache.org/content/connectors. The crawler UI references the on-line documentation and should be updated. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Resolved] (CONNECTORS-458) Incubator site has moved; adjust crawler-ui documentation reference accordingly
[ https://issues.apache.org/jira/browse/CONNECTORS-458?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Karl Wright resolved CONNECTORS-458. Resolution: Not A Problem Incubator site has moved; adjust crawler-ui documentation reference accordingly --- Key: CONNECTORS-458 URL: https://issues.apache.org/jira/browse/CONNECTORS-458 Project: ManifoldCF Issue Type: Bug Components: Framework crawler agent Affects Versions: ManifoldCF 0.5, ManifoldCF 0.6 Reporter: Karl Wright Fix For: ManifoldCF 0.6 The ManifoldCF site has moved from http://incubator.apache.org/connectors to http://incubator.apache.org/content/connectors. The crawler UI references the on-line documentation and should be updated. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Resolved] (CONNECTORS-438) Only the current release should be referred to by the documentation on the mirror - the rest should point to the archive
[ https://issues.apache.org/jira/browse/CONNECTORS-438?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Karl Wright resolved CONNECTORS-438. Resolution: Fixed Resolved as part of another commit Only the current release should be referred to by the documentation on the mirror - the rest should point to the archive Key: CONNECTORS-438 URL: https://issues.apache.org/jira/browse/CONNECTORS-438 Project: ManifoldCF Issue Type: Task Components: Documentation Affects Versions: ManifoldCF 0.6 Reporter: Karl Wright Assignee: Karl Wright Fix For: ManifoldCF 0.6 The download page should refer to only the current release via the mirror. All older releases should refer to http://archive.apache.org/dist. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (CONNECTORS-460) ManifoldCF authority service doesn't handle multi-domain environments
[
https://issues.apache.org/jira/browse/CONNECTORS-460?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13254605#comment-13254605
]
Colin Anderson commented on CONNECTORS-460:
---
Hi Karl,
It works!
I also had to remove the '@' from the start of the domain suffix (so it is
{{ap.internal.com}} rather than {{@ap.internal.com}})
Many thanks for your swift work on this :D
I expect this functionality will be useful to other large organisation too, so
it's good to have it in ManifoldCF
ManifoldCF authority service doesn't handle multi-domain environments
-
Key: CONNECTORS-460
URL: https://issues.apache.org/jira/browse/CONNECTORS-460
Project: ManifoldCF
Issue Type: Improvement
Components: Active Directory authority, Authority Service
Affects Versions: ManifoldCF 0.1, ManifoldCF 0.2, ManifoldCF 0.3,
ManifoldCF 0.4, ManifoldCF 0.5, ManifoldCF 0.6
Environment: Two Active Directory domains: {{internal.com}} and
{{external.com}}
I'm indexing a Sharepoint site, where that site has permissions set
from_both_domains
Reporter: Colin Anderson
Assignee: Karl Wright
Labels: active-directory, authorization, security
Fix For: ManifoldCF 0.6
The ManifoldCF authority service doesn't handle multi-domain environments.
The authority service returns a list of SIDs for the specified user, from all
available ManifoldCF authorities, for example:
{{TOKEN:InternalAD:S-1-5-21-1234567890-1234567890-1234567890-1234}}
Note that the SID is prefixed with the name of the ManifoldCF authority.
Here is my setup:
Output connector: Solr
Authority connector1: Active Directory ({{internal.com}} domain), named
{{InternalAD}}
Authority connector2: Active Directory ({{external.com}} domain), named
{{ExternalAD}}
Repository connector: Sharepoint
If I set the Sharepoint repository connector to use the authority 'None
(Global Authority)', then {{allow_token_document}} will contain SIDs that are
_not_ prefixed with any authority name, for example:
{{S-1-5-21-1234567890-1234567890-1234567890-1234}}
It is therefore not possible to get any search results, because the authority
service tokens will not match the stored tokens (because they _are_ prefixed
with authority names).
If I set the Sharepoint repository connector to use one of the AD authorities
'InternalAD', then {{allow_token_document}} will contain SIDs that are
prefixed with 'InternalAD', for example:
{{TOKEN:InternalAD:S-1-5-21-1234567890-1234567890-1234567890-1234}}
However, the prefix is _always_ 'InternalAD', even if the user/group actually
belongs to the {{external.com}} domain. Therefore it is not possible for
users in the {{external.com}} domain to get any search results, because the
authority service tokens will not match the stored tokens.
In essence, there seems to be a mismatch between the tokens that the
authority service outputs, and those that repository connectors output.
Perhaps one solution would be to use the authority 'None (Global Authority)',
and modify the authority service to take an extra query parameter that
prevents it from prefixing SIDs with the authority name.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (CONNECTORS-460) ManifoldCF authority service doesn't handle multi-domain environments
[
https://issues.apache.org/jira/browse/CONNECTORS-460?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13254625#comment-13254625
]
Karl Wright commented on CONNECTORS-460:
r1326543
ManifoldCF authority service doesn't handle multi-domain environments
-
Key: CONNECTORS-460
URL: https://issues.apache.org/jira/browse/CONNECTORS-460
Project: ManifoldCF
Issue Type: Improvement
Components: Active Directory authority, Authority Service
Affects Versions: ManifoldCF 0.1, ManifoldCF 0.2, ManifoldCF 0.3,
ManifoldCF 0.4, ManifoldCF 0.5, ManifoldCF 0.6
Environment: Two Active Directory domains: {{internal.com}} and
{{external.com}}
I'm indexing a Sharepoint site, where that site has permissions set
from_both_domains
Reporter: Colin Anderson
Assignee: Karl Wright
Labels: active-directory, authorization, security
Fix For: ManifoldCF 0.6
The ManifoldCF authority service doesn't handle multi-domain environments.
The authority service returns a list of SIDs for the specified user, from all
available ManifoldCF authorities, for example:
{{TOKEN:InternalAD:S-1-5-21-1234567890-1234567890-1234567890-1234}}
Note that the SID is prefixed with the name of the ManifoldCF authority.
Here is my setup:
Output connector: Solr
Authority connector1: Active Directory ({{internal.com}} domain), named
{{InternalAD}}
Authority connector2: Active Directory ({{external.com}} domain), named
{{ExternalAD}}
Repository connector: Sharepoint
If I set the Sharepoint repository connector to use the authority 'None
(Global Authority)', then {{allow_token_document}} will contain SIDs that are
_not_ prefixed with any authority name, for example:
{{S-1-5-21-1234567890-1234567890-1234567890-1234}}
It is therefore not possible to get any search results, because the authority
service tokens will not match the stored tokens (because they _are_ prefixed
with authority names).
If I set the Sharepoint repository connector to use one of the AD authorities
'InternalAD', then {{allow_token_document}} will contain SIDs that are
prefixed with 'InternalAD', for example:
{{TOKEN:InternalAD:S-1-5-21-1234567890-1234567890-1234567890-1234}}
However, the prefix is _always_ 'InternalAD', even if the user/group actually
belongs to the {{external.com}} domain. Therefore it is not possible for
users in the {{external.com}} domain to get any search results, because the
authority service tokens will not match the stored tokens.
In essence, there seems to be a mismatch between the tokens that the
authority service outputs, and those that repository connectors output.
Perhaps one solution would be to use the authority 'None (Global Authority)',
and modify the authority service to take an extra query parameter that
prevents it from prefixing SIDs with the authority name.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[RESULT][VOTE] Upgrade ManifoldCF to jdk 1.6 prior to next release
Looks like there's no problem with going ahead with this. The ticket is CONNECTORS-459, and I've created a corresponding branch to work on the ticket. Karl On Wed, Apr 11, 2012 at 3:29 PM, Erlend Garåsen e.f.gara...@usit.uio.no wrote: +1 Erlend On 11.04.12 02.39, Karl Wright wrote: Folks, When doing the dependency rework, it became clear that many of our binary dependencies are stuck without fixes or upgrades because we are still using jdk 1.5. I'd like to get a sense from the community whether everyone thinks we should abandon support for jdk1.5 in our next release. The pros of such a move include allowing us to upgrade to jetty 7 (which brings in a number of bug fixes), tomcat 7 components, and off-the-shelf hsqldb builds. I cannot at this time identify any obvious cons. Please let me know your opinion. +1 to upgrade, from me. Thanks, Karl -- Erlend Garåsen Center for Information Technology Services University of Oslo P.O. Box 1086 Blindern, N-0317 OSLO, Norway Ph: (+47) 22840193, Fax: (+47) 22852970, Mobile: (+47) 91380968, VIP: 31050
Re: [ANNOUNCE] ManifoldCF 0.5-incubating has been released!
A big congratulations to Abe-san for pulling all of this together! It was a difficult release. Karl On Mon, Apr 16, 2012 at 11:15 AM, Shinichiro Abe shinichiro.ab...@gmail.com wrote: Thanks to all who put time and effort into this release! The site and download mirrors should update in a day or so, but if you cannot wait, you can download the release in the interim from http://www.apache.org/dist/incubator/manifoldcf. Thank you, Shinichiro Abe - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
Re: [ANNOUNCE] ManifoldCF 0.5-incubating has been released!
Great news! Thanks Abe for your work :) But I have to say that also Karl made great points here ;) I hope to write a post about this latest release :-P I'll let you know soon. Piergiorgio Il giorno 16 aprile 2012 20:09, Karl Wright daddy...@gmail.com ha scritto: A big congratulations to Abe-san for pulling all of this together! It was a difficult release. Karl On Mon, Apr 16, 2012 at 11:15 AM, Shinichiro Abe shinichiro.ab...@gmail.com wrote: Thanks to all who put time and effort into this release! The site and download mirrors should update in a day or so, but if you cannot wait, you can download the release in the interim from http://www.apache.org/dist/incubator/manifoldcf. Thank you, Shinichiro Abe - To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org -- Piergiorgio Lucidi http://www.open4dev.com
