encrypted columns

2020-04-30 Thread Werner Brasch
Hallo
I have set the column jdbcPassword In the entity TenantDataSource to 
encrypt="true" and it seems to work. It is possible to work on the new tenant.
But I don't know how the Security works, is the jdbcPassword now save, how does 
it works?

Best regards

Viele Grüße aus Bremen

Werner Brasch



[CVE-2019-12425] Apache OFBiz Host Header Injection

2020-04-30 Thread Jacques Le Roux

Severity:
Important

Vendor:
The Apache Software Foundation

Versions Affected:
OFBiz 17.12.01

Description:
Apache OFBiz is vulnerable to Host header injection by accepting arbitrary hosts

Mitigation:
Upgrade to 17.12.03 or manually apply the commit at OFBIZ-11583


Credit:
Pradeep Jairamani 

References:
https://ofbiz.apache.org/security.html



[CVE-2019-0235 ] Apache OFBiz multiple CSRF vulnerabilities

2020-04-30 Thread jler...@apache.org

Severity:
Important

Vendor:
The Apache Software Foundation

Versions Affected:
OFBiz 17.12.01

Description:
Apache OFBiz is vulnerable to CSRF attacks

Mitigation:
Upgrade to 17.12.03 or manually apply the commits at OFBIZ-11470


Credit:
Initially known by the OFBiz security team (OFBIZ-10427),
also reported later by
Man Yue Mo via RT 
Shuibo Ye 
Vikash Patnaik 
Sonali Agrahari 
Girish Vasmatkar 
Dinesh Kumar Mohanty 
Jason Nordenstam 
Pradeep Jairamani 
Faiz Zaidi 

References:
https://ofbiz.apache.org/security.html



Re: Welcome Swapnil M Mane as new PMC member

2020-04-30 Thread Swapnil M Mane
Dear all,
Thank you so much for your kind wishes!
It's a privilege and honor to be part of the vibrant OFBiz community.
Looking forward to having more amazing experience with you all, thanks
again.

Thank you Jacques for your mail.

- Best regards,
Swapnil M Mane,
ofbiz.apache.org



On Tue, Apr 28, 2020 at 8:46 PM Deepak Nigam 
wrote:

> Congratulations, Swapnil.
>
> Regards
> --
> Deepak Nigam
>
> On Mon, Apr 27, 2020, 11:02 AM Aditya Sharma 
> wrote:
>
> > Congratulations Swapnil!
> >
> > Thanks and Regards,
> > Aditya Sharma
> >
> > On Sat, Apr 25, 2020 at 9:58 PM Mohammad Kathawala <
> > mohammad.kathaw...@hotwaxsystems.com> wrote:
> >
> > > Many Congratulations Swapnil!
> > > Kind Regards,
> > > Mohammad Kathawala
> > > Senior Technical Consultant
> > > *HotWax Systems*
> > > *Enterprise open source experts*
> > > cell: +91-7772858789
> > > office: 0731-409-3684
> > > http://www.hotwaxsystems.com
> > >
> > >
> > > On Sat, Apr 25, 2020 at 7:19 PM Pranay Pandey <
> > > pranay.pan...@hotwaxsystems.com> wrote:
> > >
> > > > Swapnil M,
> > > >
> > > > Congratulations and welcome.
> > > > Looking forward to a wonderful journey together.
> > > >
> > > > Best regards,
> > > > Pranay Pandey
> > > >
> > > >
> > > > On Thu, Apr 23, 2020 at 5:02 PM Jacques Le Roux <
> > > > jacques.le.r...@les7arts.com> wrote:
> > > >
> > > > > The OFBiz PMC has invited Swapnil M Mane to become member of the
> > > > committee
> > > > > and we are glad to announce that he has accepted the nomination.
> > > > >
> > > > > On behalf of the OFBiz PMC, welcome on board!
> > > > >
> > > > >
> > > >
> > >
> >
>


RE: Welcome Rishi Solanki as new PMC member

2020-04-30 Thread Swapnil Shah
Congratulations Rishi !!

Thanks,
Swapnil

> -Original Message-
> From: Jacopo Cappellato 
> Sent: 28 April 2020 19:53
> To: Dev list 
> Subject: Welcome Rishi Solanki as new PMC member
>
> The OFBiz PMC has invited Rishi Solanki to become member of the committee
> and we are glad to announce that he has accepted the nomination.
>
> On behalf of the OFBiz PMC, welcome on board!


Re: encrypted columns

2020-04-30 Thread Ankush Upadhyay
Hello Welner,

I believe you should ask these types of questions on the user mailing list (
u...@ofbiz.apache.org) please do subscribe if you are not on it. User
mailing list is the best place for such a question and you will get better
support on user mailing list.

Regarding your question, please check
https://cwiki.apache.org/confluence/display/OFBIZ/Multitenancy+support it
should help you to understand how it works.
There was another great discussion thread with subject *multi tenant setup
help* on user mailing list.




Kind Regards,
Ankush Upadhyay
Senior Technical Consultant

*HotWax Systems*
*Enterprise open source experts*
cell: +91-8109201285
office: 0731-409-3684
http://www.hotwaxsystems.com


On Thu, Apr 30, 2020 at 5:39 PM Werner Brasch  wrote:

> Hallo
> I have set the column jdbcPassword In the entity TenantDataSource to
> encrypt="true" and it seems to work. It is possible to work on the new
> tenant.
> But I don't know how the Security works, is the jdbcPassword now save, how
> does it works?
>
> Best regards
>
> Viele Grüße aus Bremen
>
> Werner Brasch
>
>


Re: [ofbiz-framework] branch trunk updated: Improved: Converted all ShipmentReceiptRole service from crud to entity-auto (#85)

2020-04-30 Thread Pawan Verma
Hi Suraj,

You've missed to add default-entity-name for the entity-auto engine for the
above services.

Could you please handle?
-- 
Thanks & Regards
Pawan Verma
Technical Consultant
*HotWax Systems*
*Enterprise open source experts*
http://www.hotwaxsystems.com


On Thu, Apr 30, 2020 at 5:05 PM  wrote:

> This is an automated email from the ASF dual-hosted git repository.
>
> surajk pushed a commit to branch trunk
> in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
>
>
> The following commit(s) were added to refs/heads/trunk by this push:
>  new e1a16aa  Improved: Converted all ShipmentReceiptRole service from
> crud to entity-auto (#85)
> e1a16aa is described below
>
> commit e1a16aa9fe4bacded92a0c4c34a0af7c02d0a325
> Author: Suraj Khurana <64310724+surajkhur...@users.noreply.github.com>
> AuthorDate: Thu Apr 30 17:05:39 2020 +0530
>
> Improved: Converted all ShipmentReceiptRole service from crud to
> entity-auto (#85)
>
> * Improved: Converted all ShipmentReceiptRole service from crud to
> entity-auto
> (OFBIZ-11614)
> ---
>  .../shipment/receipt/ShipmentReceiptServices.xml   | 15
> ---
>  applications/product/servicedef/services.xml   |  2 +-
>  applications/product/servicedef/services_shipment.xml  | 18
> ++
>  3 files changed, 7 insertions(+), 28 deletions(-)
>
> diff --git
> a/applications/product/minilang/shipment/receipt/ShipmentReceiptServices.xml
> b/applications/product/minilang/shipment/receipt/ShipmentReceiptServices.xml
> index 2dade39..4334dc5 100644
> ---
> a/applications/product/minilang/shipment/receipt/ShipmentReceiptServices.xml
> +++
> b/applications/product/minilang/shipment/receipt/ShipmentReceiptServices.xml
> @@ -63,21 +63,6 @@ under the License.
>   result-name="affectAccounting"/>
>  
>
> - short-description="Create a ShipmentReceipt Role">
> - value-field="newEntity"/>
> -
> -
> -
> -
> -
> -
> - short-description="Remove a ShipmentReceipt Role">
> - value-field="lookupPKMap"/>
> -
> - map="lookupPKMap" value-field="lookedUpValue"/>
> -
> -
> -
>   short-description="Receive Inventory in new Inventory Item(s)">
>  
>
>


Re: [ofbiz-framework] branch trunk updated: Improved: Converted all ShipmentReceiptRole service from crud to entity-auto (#85)

2020-04-30 Thread Suraj Khurana
Thanks Pawan.

It is done in rev a92136c662b2a150274b7a9aaea2c3117488e599

--
Best Regards,
Suraj Khurana
Senior Technical Consultant

On Thu, Apr 30, 2020 at 9:54 PM Pawan Verma 
wrote:

> Hi Suraj,
>
> You've missed to add default-entity-name for the entity-auto engine for the
> above services.
>
> Could you please handle?
> --
> Thanks & Regards
> Pawan Verma
> Technical Consultant
> *HotWax Systems*
> *Enterprise open source experts*
> http://www.hotwaxsystems.com
>
>
> On Thu, Apr 30, 2020 at 5:05 PM  wrote:
>
> > This is an automated email from the ASF dual-hosted git repository.
> >
> > surajk pushed a commit to branch trunk
> > in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
> >
> >
> > The following commit(s) were added to refs/heads/trunk by this push:
> >  new e1a16aa  Improved: Converted all ShipmentReceiptRole service
> from
> > crud to entity-auto (#85)
> > e1a16aa is described below
> >
> > commit e1a16aa9fe4bacded92a0c4c34a0af7c02d0a325
> > Author: Suraj Khurana <64310724+surajkhur...@users.noreply.github.com>
> > AuthorDate: Thu Apr 30 17:05:39 2020 +0530
> >
> > Improved: Converted all ShipmentReceiptRole service from crud to
> > entity-auto (#85)
> >
> > * Improved: Converted all ShipmentReceiptRole service from crud to
> > entity-auto
> > (OFBIZ-11614)
> > ---
> >  .../shipment/receipt/ShipmentReceiptServices.xml   | 15
> > ---
> >  applications/product/servicedef/services.xml   |  2 +-
> >  applications/product/servicedef/services_shipment.xml  | 18
> > ++
> >  3 files changed, 7 insertions(+), 28 deletions(-)
> >
> > diff --git
> >
> a/applications/product/minilang/shipment/receipt/ShipmentReceiptServices.xml
> >
> b/applications/product/minilang/shipment/receipt/ShipmentReceiptServices.xml
> > index 2dade39..4334dc5 100644
> > ---
> >
> a/applications/product/minilang/shipment/receipt/ShipmentReceiptServices.xml
> > +++
> >
> b/applications/product/minilang/shipment/receipt/ShipmentReceiptServices.xml
> > @@ -63,21 +63,6 @@ under the License.
> >   > result-name="affectAccounting"/>
> >  
> >
> > - > short-description="Create a ShipmentReceipt Role">
> > - > value-field="newEntity"/>
> > -
> > -
> > -
> > -
> > -
> > -
> > - > short-description="Remove a ShipmentReceipt Role">
> > - > value-field="lookupPKMap"/>
> > -
> > - > map="lookupPKMap" value-field="lookedUpValue"/>
> > -
> > -
> > -
> >   > short-description="Receive Inventory in new Inventory Item(s)">
> >  
> >
> >
>


Re: OutOfMemoryError: Java heap space

2020-04-30 Thread Vemula
Please update the build.gradle file.

jvmArguments = ['-Xms128M', '-Xmx5120M']




--
Sent from: http://ofbiz.135035.n4.nabble.com/OFBiz-Dev-f165671.html