Re: training

[Jacques Le Roux]

Hi Suchet,

This could be helpful to start
https://cwiki.apache.org/confluence/display/OFBIZ/Framework+Introduction+Videos+and+Diagrams

Jacques

Le 04/10/2024 à 18:49, suchet jain a écrit :

Hi Community,

I am looking for functional training of OFBiz modules. Any pointers would
be appreciated
--
Regards,
Suchet Jain

Re: cache.properties

[Jacques Le Roux]

Hi Vikas,


All the information is inside the file itself. If you need more read
https://cwiki.apache.org/confluence/display/OFBIZ/Framework+Configuration+Guide#FrameworkConfigurationGuide-cache.properties

https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=7045138#ApacheOFBizTechnicalProductionSetupGuide-CacheSettings


HTH


Jacques

*
*

Le 04/10/2024 à 06:20, Vikas Jaiswal a écrit :

Hi,
      I was looking into performance issues in ofbiz. I looked around the docs and found a mention of cache.properties. Can someone point me any 
docs or links that would help to understand the performance bottlenecks and how to go about the same.


*Thanks & Regards,*

*Vikas Jaiswal*

Technical Lead

Work (IN): +91-9371626126

_www.solveda.com _





_solveda _

Simplify. Solve. Succeed.

_facebook icon _



_twitter icon _



_twitter icon _

Re: Manufacturing - Dependent. Production Runs

[Jacques Le Roux]

Hi Emad,

As a start, have you read
https://cwiki.apache.org/confluence/display/OFBIZ/Running+and+Debugging+OFBiz+in+Eclipse
or
https://cwiki.apache.org/confluence/display/OFBIZ/Running+and+Debugging+OFBiz+in+Intellij+IDEA
?

HTH

Jacques


Le 26/09/2024 à 13:00, Emad Radwan a écrit :

Hello Omar,

I appreciate your willingness to help, yes please, we can do that.  But a
more priority item for me right now is your help in setting up a local
Ofbiz system for debugging.

I only understand the code by reading it, checking database tables, and
checking logs which you know is very hard to understand how the
system works.

The problem is that Java and related ecosystems are not my area, so your
help on that would be greatly appreciated.

Regards,
Emad

On Mon, Sep 16, 2024 at 10:11 PM Omar Abdullwahhab <
omar.abdullwah...@gmail.com> wrote:


Hi Haywood,
Thank you for your viewpoint that also helps,
If this meeting happen , We really can summarize and share
in the mailing list.

Hi Emad,
To add more clarity to my words, what I really mean for the meeting
Is that you explain to me the manufacturing business features you want to
add, use, or improve.
Then I can implement it for you, or at least show you how you can implement
it.
Later we can share with the ofbiz if they accepted it they can implement
it, and one of the committers
can add it to the official OFBIZ repository.
Regards

On Mon, Sep 16, 2024 at 12:59 PM Emad Radwan 
wrote:


Hello Omar,

I believe my statement for someone to point out where to look in the code
was incorrect, as most - if not all - of the related services related to
what I want are in ProductionRunServices.java and related classes. What

I'm

really missing is an example case even using the format in the XML demo
files to double-check my understanding.

Regards,
Emad

On Mon, Sep 16, 2024 at 10:54 AM G.W. Haywood 
wrote:


Hi there,

On Mon, 16 Sep 2024, Omar Abdullwahhab wrote:

On Tue, Sep 10, 2024, 6:24 AM Emad Radwan 

wrote:

Would you please share a data example of dependent workefforts if

you

have

one or point to where in the code I can understand how it's

processed?

I believe demo data is missing such a case.

...
... we can make a meeting together and share it
here also with users if they are interested.
...

I can assure you that at least some of them are interested. :)

In my view it is very important to make sure that, even if the majority
of your discussion takes place elsewhere, at least the main points of
your discussion will be summarized here on the mailing list.

--

73,
Ged.



--
Omar Abu-Arab
Java Engineer

Re: Proposal: Move towards developer friendly Ofbiz

[Jacques Le Roux]

Hi Groza,

Inline...

Le 18/09/2024 à 15:55, Groza Danut a écrit :

Hi all,

My proposal comes from my personal observations so far. I believe currently
the 'customer' of the Ofbiz Project should be the developer, not the end
user. I say this because of the following reasons:


This is what somehow explained at https://ofbiz.apache.org/mailing-lists.html
Though not exactly with the difference you mention. See below at point 3.

We (OFBiz team) did not invent but followed a scheme used by TLP (Top Level 
Projects) at the ASF.
See the "Available projects" dropdown at 
https://lists.apache.org/list.html?d...@ofbiz.apache.org
BTW, OFBiz (born in 2001) was the 26th TLP to join the ASF (in mid 2006).


1. There is no SaaS offering for Ofbiz. That means, if you are an end user,
you will not be able to use Ofbiz if you don't know how to install it.
2. If there are some bugs or minor modifications needed in Ofbiz to make it
work for the specific case of the company that is using it, there is still
a need for a developer to make the changes.
3. You will most definitely need support as an end user.

For these reasons I believe the end user will actually benefit most from
Ofbiz when there is a company that supplies Ofbiz as a service, as is the
case for example with Hot Wax Systems.


We have a list of service providers, maybe not always up to date (as you are a 
contributor you could update it ;)
https://cwiki.apache.org/confluence/display/OFBIZ/Apache+OFBiz+Service+Providers



In this regard I believe the Ofbiz Project itself should focus on the
developer as it's main 'customer', or user, and use this information when
there is a need to make decisions.


As long as a developer is not involved in developing OFBiz itself, the user ML 
should be used, simple as that.



If the project would decide to move towards a more developer friendly
approach, then I have the following improvements/practices to propose:

1. Simplicity: Focus on simple code, avoiding unnecessary complexity.
- This could translate as taking a service implementation and breaking it
up in several classes, or methods, each with it's own scope and objective.
This would make unit testing a specific component feasible. As an example
the createOrder method from the OrderServices has 970 lines. Those could be
split up in multiple classes and methods.


Advices are always welcomed, implementation even more :)



2. Feedback: Continuous feedback from the system. Are tests run after each
commit? Is there a place where we can see the test results, so we can find
out if our commit(or PR) broke something?


Our CI takes care of that. Particularly BuildBot, look for "ofb" at 
https://ci2.apache.org/#/builders
More information at 
https://github.com/apache/ofbiz-tools/blob/master/documentation/BuildBot/BuildBot.md



3. Test-Driven Development (TDD): Writing tests before the actual code to
ensure that it meets the required functionality.
- In the current state it is quite hard to write unit tests. Splitting up
services into smaller classes that can be mocked would make the code a lot
easier to test.


That sounds like a good idea.



4. Refactoring: Encourage refactoring.
- This of course assumes that there are proper tests in place. Also in
order to encourage refactoring I propose to add another item to the OFBiz
commit message template: 'Refactored', to aid the committers when reviewing
a PR, and to encourage developers to refactor code.


We had a discussion once where one of the main committer then said that all keywords used 
in the commit comment template could be replaced by "Improved".
When you fix a bug you improve the code, etc. :).
This said adding  "Refactored" to the template could be indeed helpful when 
nothing else but refactoring as been done.



Feedback or other proposals are welcomed.


Thanks for the ideas

Jacques

Re: GeoAssoc id and idTo

[Jacques Le Roux]

Hi Groza,

Good quesiton, it's rather GeoAssoc definitions that are reversed.

This was done 13 years ago by https://svn.apache.org/viewvc?view=revision&revision=1162940 (text changed 
)


For the data I would rather trust GeoData_US.xml which was the 1st created file 
(pre-Apache era between 2001 and 2006)

If you look at https://svn.apache.org/viewvc?view=revision&revision=1170061 (text changed 
)


You will see



Also

was imported David "Initial OFBiz import from revision 7923 of the old svn.ofbiz.org 
SVN repository."
byhttps://svn.apache.org/viewvc?view=revision&revision=418498

This region did not change since.

So I suggest to fix theGeoAssoc definitions. Actually, it's logical to have a 
relation from country to regions.

HTH

Jacques

Le 10/09/2024 à 13:34, Groza Danut a écrit :

Hi all,

As stated in the entitymodel of GeoAssoc:
geoId - The enclosed geo
geoIdTo - The enclosing geo

When I look at an example(framework/common/data/GeoData_FR.xml), I see the
following data:




Basically the id's are reversed.
- For REGIONS the geoId is the country(enclosing geo), and the geoIdTo is
the region
- For COUNTY_SEAT the geoId is the city(enclosed geo), and the geoIdTo is
the county

Is that on purpose?

Re: 回复：Re: 回复：Re: 回复：Re: ofibz causes system extremely slow after one night

[Jacques Le Roux]

Hi Yang,

I'd try with more, but a priori it's not necessary.

I'm not sure the problem below (Transaction has timed ou) is related to memory.

The root cause seems to be
Caused by: java.sql.SQLTransactionRollbackException: A lock could not be 
obtained within the time requested

You use Derby, right? Maybe you could try Postgres.

HTH

Jacques

Le 06/09/2024 à 09:52, 雷咩咩 a écrit :


hi Jacques,

Didn't change anything except must ones,

framework/catalina/ofbiz-component.xml change certificate path and password
framework/security/config/security.properties allowedProtocols add domain
framework/security/config/security.properties host-headers-allowed add domain
framework/base/config/cache.properties rm as the comment

is 1 core 2 GB memeroy os sufficient? I rarely operate the website and just let 
it stay there...

Regards,
Yang

原始邮件

发件人："Jacques Le Roux"< jacques.le.r...@les7arts.com >;

发件时间：2024/9/6 15:22

收件人："dev"< d...@ofbiz.apache.org >;

主题：Re: 回复：Re: 回复：Re: ofibz causes system extremely slow after one night


What did you change exactly? I mean not only in cache.properties.

Also please rather send to the user ML. You are not developing OFBiz, you are 
asking for help.

TIA

Jacques

Le 06/09/2024 à 02:56, 雷咩咩 a écrit :
> Bad news is the updated config only extended life span of ofbiz websites(and 
also my system) to 2 days.
> today i see same issue again. only restarting os can solve.
>
>
> org.apache.ofbiz.widget.renderer.ScreenRenderException: Error rendering screen [component://common/widget/CommonScreens.xml#login]: 
org.apache.ofbiz.entity.transaction.GenericTransactionException: Roll back error (with no rollbackOnly cause found), could not commit transaction, 
was rolled back instead: java.lang.Exception: Transaction has timed out (Transaction has timed out) (Roll back error (with no rollbackOnly cause 
found), could not commit transaction, was rolled back instead: java.lang.Exception: Transaction has timed out (Transaction has timed out))  at 
org.apache.ofbiz.widget.model.ModelScreen.renderScreenString(ModelScreen.java:176) ~[main/:?]

> ...
>   at 
org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:63) 
[tomcat-util-9.0.91.jar:9.0.91]
>   at java.lang.Thread.run(Thread.java:840) [?:?]
> Caused by: org.apache.ofbiz.entity.transaction.GenericTransactionException: Roll back error (with no rollbackOnly cause found), could not commit 
transaction, was rolled back instead: java.lang.Exception: Transaction has timed out (Transaction has timed out)

>   at 
org.apache.ofbiz.entity.transaction.TransactionUtil.commit(TransactionUtil.java:279)
 ~[main/:?]
>   at 
org.apache.ofbiz.entity.transaction.TransactionUtil.commit(TransactionUtil.java:233)
 ~[main/:?]
>   at 
org.apache.ofbiz.widget.model.ModelScreen.renderScreenString(ModelScreen.java:160) 
~[main/:?]
>   ... 40 more
> Caused by: java.lang.Exception: Transaction has timed out
>   at 
org.apache.geronimo.transaction.manager.TransactionImpl.commit(TransactionImpl.java:266)
 ~[geronimo-transaction-3.1.5.jar:3.1.5]
>   at org.apache.geronimo.transaction.manager.TransactionManagerImpl.commit(TransactionManagerImpl.java:263) 
~[geronimo-transaction-3.1.5.jar:3.1.5]

>   at 
org.apache.ofbiz.entity.transaction.TransactionUtil.commit(TransactionUtil.java:250)
 ~[main/:?]
>   at 
org.apache.ofbiz.entity.transaction.TransactionUtil.commit(TransactionUtil.java:233)
 ~[main/:?]
>   at 
org.apache.ofbiz.widget.model.ModelScreen.renderScreenString(ModelScreen.java:160) 
~[main/:?]
>   ... 40 more
>
>
>
>
>
>
>
>
> Original Email
>
>
>
> From:"雷咩咩"< 675686...@qq.com >;
>
> Sent Time:2024/9/5 7:47
>
> To:"ofbiz user"< user@ofbiz.apache.org >;"dev"< d...@ofbiz.apache.org >;
>
> Subject:回复：Re: 回复：Re: ofibz causes system extremely slow after one night
>
>
>
>
>
>
>
> Good news is under this config ofbiz endured last night, will monitor more 
few days.
>
>
>
> 原始邮件
>
>
>
> 发件人："Jacques Le Roux"< jacques.le.r...@les7arts.com >;
>
> 发件时间：2024/9/4 15:36
>
> 收件人："dev"< d...@ofbiz.apache.org >;"雷咩咩"< 675686...@qq.com.INVALID >;"ofbiz 
user"< user@ofbiz.apache.org >;
>
> 主题：Re: 回复：Re: ofibz causes system extremely slow after one night
>
>
> Yes indeed
>
> Good day
>
> Le 04/09/2024 à 09:06, 雷咩咩 a écrit :
> > hi Jacques,
> >
> >
> > You mean framework\base\config\cache.properties, right?
> > I was not touching this file.
> > Just looked into, and found two possible section that 'can comment this out 
or increase for better performance'
> >
> >
> > Do you mean

Re: 回复：Re: ofibz causes system extremely slow after one night

[Jacques Le Roux]

Yes indeed

Good day

Le 04/09/2024 à 09:06, 雷咩咩 a écrit :

hi Jacques,


You mean framework\base\config\cache.properties, right?
I was not touching this file.
Just looked into, and found two possible section that 'can comment this out or 
increase for better performance'


Do you mean proceed like this?


Regards,
Yang







原始邮件

  


发件人："Jacques Le Roux"< jacques.le.r...@les7arts.com >;

发件时间：2024/9/4 14:36

收件人："dev"< d...@ofbiz.apache.org >;

主题：Re: ofibz causes system extremely slow after one night


Hi Yang,

Have you looked at cache.properties?

HTH

Jacques

Le 04/09/2024 à 04:48, 雷咩咩 a écrit :
> Hi ofbiz users,
>
>
> I run ofbiz trunk with default configurations(jdk17, local derby) in my 
ubuntu. Within the 1 hour or so after starting it is just working fine(most ui 
response in 1s). But after one night, when I try to access, the server seems to not 
respond, or repond only after very long time(as long as 141s), and what's worse, 
causes my system very slow, even blocking my ssh login.If I run `pkill -f ofbiz` 
then the system is recovered and fast.
> Below is result of `top` command when this happens:
>
>
>     PID USER      PR  NI    VIRT    RES 
   SHR S  %CPU  %MEM     TIME+ COMMAND
>      85 root      20   0       0     
 0      0 S   2.4   0.0   4:31.32 kswapd0
>    9528 ci        20   0 3188120 386636     
 0 S   1.5  22.6   9:27.48 java
>   11612 root      20   0  260628  31332   3144 
D   1.5   1.8   5:40.27 unattended-upgr
>   12081 root      20   0 1319708   9596     
 0 S   1.5   0.6   0:19.68 snapd
>    9645 ci        20   0 3294024 838056     
 0 S   1.2  48.9   8:10.07 java
>      83 root       0 -20       0     
 0      0 I   1.0   0.0   0:15.96 kworker/0:1H-kblockd
>     992 root      20   0  135468  10004   
   0 D   1.0   0.6  14:20.39 AliYunDunMonito
>     974 root      20   0   96968   2736   
   0 S   0.5   0.2   9:06.76 AliYunDun
>     674 root      20   0  685632   3156   
   0 S   0.2   0.2   1:56.29 aliyun-service
>     770 root      20   0   32216    888   
   0 S   0.2   0.1   1:28.89 AliYunDunUpdate
>    9498 ci        20   0 2150920  79592   
   0 S   0.2   4.6   1:11.93 java
>
>
> This issue happen every day, and many times I had to force reboot my OS to 
solve, and is really painful.
>
>
> Could anyone help analyze what's wrong, is it my OS not meet system 
requirements, or potential bug in ofbiz?
>
>
> I have uploaded my ofbiz logs athttps://leiyang.icu/ofbiz.trunk.slow.log
>
>
> Also copied some of the typical issue log lines:
>
>
> 2024-09-04 09:51:14,281 |jsse-nio-8443-exec-1 |ConfigXMLReader             
  |I| controller loaded: 73.232s, 539 requests, 178 views 
infile:/home/ci/g/ofbiz-framework/applications/product/webapp/catalog/WEB-INF/controller.xml2024-09-04  09:51:14,281 |jsse-nio-8443-exec-9 
|ConfigXMLReader               |I| controller loaded: 73.04s, 539 requests, 
178 views infile:/home/ci/g/ofbiz-framework/applications/product/webapp/catalog/WEB-INF/controller.xml
> 2024-09-04 09:51:41,583 |jsse-nio-8443-exec-4 |ConfigXMLReader       
        |I| controller loaded: 53.201s, 539 requests, 178 views 
infile:/home/ci/g/ofbiz-framework/applications/product/webapp/catalog/WEB-INF/controller.xml
> 2024-09-04 09:54:47,096 |jsse-nio-8443-exec-4 |ConfigXMLReader       
        |I| controller loaded: 52.922s, 4 requests, 0 views 
infile:/home/ci/g/ofbiz-framework/applications/commonext/webapp/WEB-INF/controller.xml
> 2024-09-04 09:54:48,200 |jsse-nio-8443-exec-4 |ConfigXMLReader       
        |I| controller loaded: 141.023s, 539 requests, 178 views 
infile:/home/ci/g/ofbiz-framework/applications/product/webapp/catalog/WEB-INF/controller.xml
> 2024-09-04 09:54:56,009 |sse-nio-8443-exec-18 |ConfigXMLReader       
        |I| controller lo
> aded: 63.708s, 51 requests, 22 views 
infile:/home/ci/g/ofbiz-framework/framework/common/webcommon/WEB-INF/common-controller.xml
> 2024-09-04 09:55:44,106 |sse-nio-8443-exec-18 |ConfigXMLReader       
        |I| controller loaded: 122.632s, 539 requests, 178 views 
infile:/home/ci/g/ofbiz-framework/applications/product/webapp/catalog/WEB-INF/controller.xml
>
>
> 2024-09-04 09:01:36,440 |sse-nio-8443-exec-12 |TransactionUtil       
        |W| In getSetRollbackOnlyCause no stack placeholder was in place, 
here is the current location:
> java.lang.Exception: Current Stack Trace
>   at 
org.apache.ofbiz.entity.transaction.TransactionUtil.getSetRollbackOnlyCause(TransactionUtil.java:849)
 [main/:?]
>   at 
org.apache.ofbiz.entity.transaction.TransactionUtil.commit(TransactionUtil.java:265)
 [main/:?]
>
>
>
>
> 2024-09-04 09:01:36,632 |sse-nio-8443-exec-12 |ControlServlet         
       |E| Error in request handler:
> org.apache.ofbiz

Re: What is the status of the BIRT plugin?

[Jacques Le Roux]

Hi Groza,

I suggest to have a look at:
https://lists.apache.org/list?user@ofbiz.apache.org:gte=1d:birt%20plugin
https://lists.apache.org/list?user@ofbiz.apache.org:gte=1d:birt%20security

Summary: as long as you don't create reports yourself there is no problems with 
Birt in OFBiz as it's OOTB set.

This said if you have still some questions I can help more

HTH

Jacques

Le 03/09/2024 à 11:59, Groza Danut a écrit :

Hi all,

Does anybody know what the current status of the BIRT plugin is?

If I look at the docker documentation I see that for
property OFBIZ_DISABLE_COMPONENTS the default
is plugins/birt/ofbiz-component.xml, which means the birt plugin is
disabled.

Also I remember seeing some discussions on the ML about a security issue
with the birt plugin.

Should this plugin not be used in production? And if not, how are reports
displayed to the end user?

CVE-2024-45507: Apache OFBiz: Prevent use of URLs in files when loading them from Java or Groovy, leading to a RCE

[Jacques Le Roux]

Severity: important

Affected versions:

- Apache OFBiz before 18.12.16

Description:

Server-Side Request Forgery (SSRF), Improper Control of Generation of Code 
('Code Injection') vulnerability in Apache OFBiz.

This issue affects Apache OFBiz: before 18.12.16.

Users are recommended to upgrade to version 18.12.16, which fixes the issue.

Credit:

孙相 (Sun Xiang) (finder)

References:

https://ofbiz.apache.org/download.html
https://ofbiz.apache.org/security.html
https://issues.apache.org/jira/browse/OFBIZ-13132
https://ofbiz.apache.org/
https://www.cve.org/CVERecord?id=CVE-2024-45507

CVE-2024-45195: Apache OFBiz: Confused controller-view authorization logic (forced browsing)

[Jacques Le Roux]

Severity: important

Affected versions:

- Apache OFBiz before 18.12.16

Description:

Direct Request ('Forced Browsing') vulnerability in Apache OFBiz.

This issue affects Apache OFBiz: before 18.12.16.

Users are recommended to upgrade to version 18.12.16, which fixes the issue.

Credit:

shin24 from National Cyber Security Vietnam (finder)
LuanPV from National Cyber Security Vietnam (finder)
Ryan Emmons, Lead Security Researcher at Rapid7 (finder)
Hasib Vhora, Senior Threat Researcher, SonicWall (finder)
Xenc from SGLAB of Legendsec at Qi'anxin Group (finder)

References:

https://ofbiz.apache.org/download.html
https://ofbiz.apache.org/security.html
https://issues.apache.org/jira/browse/OFBIZ-13130
https://ofbiz.apache.org/
https://www.cve.org/CVERecord?id=CVE-2024-45195

Re: 回复：unauthorized SSRF and RCE vulnerability for Apache OFBiz under 18.12.16

[Jacques Le Roux]

Sure thing, thanks for the feedback

Le 02/09/2024 à 09:17, sunxiang0...@163.com a écrit :

it's ok,credit just 孙相（Sun Xiang）




发自我的手机


 原始邮件 
发件人： Jacques Le Roux 
日期： 2024年9月2日周一 下午2:51
收件人： secur...@ofbiz.apache.org, 孙相，0386 
主 题： Re: unauthorized SSRF and RCE vulnerability for Apache OFBiz under
18.12.16

Hi 孙相 (Sun Xiang),

On behalf of the OFBiz security team we thank you for your report and
care in alerting us to the vulnerability mentioned herein.

We have issued the CVE-2024-45507 and applied a patch for the vulnerability 
[1].
The draft of the announcement is listed below [2] for your review and
feedback. Thank you in advance for your reply.

We just want to mention that it's not related to 18.12.16.
We created the tag but finally decided to not release it yet.
We will rather associate the CVE it with 18.12.15

[1] https://github.com/apache/ofbiz-framework/commit/ffb1bc4879
[2] Announcement Draft:


--

Subject: CVE-2024-45507: Apache OFBiz: Prevent use of URLs in files when 
loading them from Java or Groovy, leading to a RCE

Severity: important

Affected versions: Apache OFBiz before 18.12.15

Description:
Server-Side Request Forgery (SSRF), Improper Control of Generation of Code 
('Code Injection') vulnerability in Apache OFBiz.
This issue affects Apache OFBiz: before 18.12.15.
Users are recommended to upgrade to version 18.12.15, which fixes the issue.

Credit: 孙相 (Sun Xiang), 0386 (finder)

References:
https://ofbiz.apache.org/download.html
https://ofbiz.apache.org/security.html
https://issues.apache.org/jira/browse/OFBIZ-13132
https://ofbiz.apache.org/
https://www.cve.org/CVERecord?id=CVE-2024-45507


--

Jacques on behalf of the Apache OFBiz security team


Le 29/08/2024 à 11:29, 孙相，0386 a écrit :

hello,here is a security vulnerability for Apache OFBiz under version 
18.12.16

Re: 回复： 回复：Re: want to be apache contributor

[Jacques Le Roux]

Yes, it's OK, you can see "you" at bottom of 
https://cwiki.apache.org/confluence/display/OFBIZ/Apache+OFBiz+Contributors
We are still waiting the ICLA confirmation, should not be long now...

Le 01/09/2024 à 13:39, 雷咩咩 a écrit :

hi Jacques,


account created just now after receive another automatic mail from self serve 
portal.
problem solved.
Thanks for your quick help so many times!


Regards,
Yang


-- 原始邮件 --
发件人: 
   "user"  
  https://issues.apache.org/jira/browse/INFRA-26082) you said

mail:675686...@qq.com
user name: leiyang

I tried both in case.

Are you sure your Confluence usernameis leiyang?

Also your ICLA have not been registered yet. I guess because it's the weekend, 
anyway (unrelated to Confluence and not blocking, just to say.

Jacques

Le 01/09/2024 à 02:57, 雷咩咩 a écrit :
> hi Jacques,
>
>
> Requested using current mail, and got confirmation
>
>
>
> Request a Confluence account
> Your Confluence account request has been successfully verified, and will 
be reviewed by the project you indicated. Please allow up to a few days for the 
project to review this request. If you do not receive a reply from the project 
within seven days, you can contact the project management committee privately 
atpriv...@ofbiz.apache.org. If the project is still unable to respond, you can then 
escalate the matter to the ASF Infrastructure team atus...@infra.apache.org
>
>
>
>
> Regards,
> Yang
>
>
>
>
>
>
>    
> 原始邮件
>
>  
>
> 发件人："Jacques Le Roux"https://issues.apache.org/jira/browse/INFRA-26082
>
> Le 31/08/2024 à 16:09, Jacques Le Roux a écrit :
> > Wait Yang,
> >
> > All documentation is useful ;) The problem is to maintained it...
> >
> > Le 31/08/2024 à 16:01, 雷咩咩 a écrit :
> >> hi Jacques,
> >>
> >>
> >> I had created account in atlassian and can found my 
profile in https://id.atlassian.com/manage-profile/profile-and-visibility
> >> then i saw your new mail.
> >> So seems i'll just wait. No hurry!
> >>
> >>
> >> I'm new to ofbiz yet. I only have some experience of how 
to deploy it in China(most of main tools set networking blocked and need proxy).
> >> So my main purpose was to share some steps to build and 
run in China, should not be as useful for normal users.
> >>
> >>
> >> Regards,
> >> Yang
> >>
> >>
> >>
> >>
> >>
> >>
> >> 
                       
 Original Email
> >>
> >> From:"Jacques Le Roux"https://lists.apache.org/thread/r7yfsl7lt76828lx7z2xkfg8h9m0yo9j
> >>
> >> I'll check that with Infra (things change quickly)
> >>
> >> Jacques
> >>
> >> Le 31/08/2024 à 10:13, Jacques Le Roux a écrit :
> >> > Hi Yang,
> >> >
> >> > You need to create a Confluence account (Jira 
ans Confluence are separated) with one email that works there (maybe .invalid will not) and 
tell us
> >> > the Confluence Id you choose (the email is 
easier I guess, but that's up to you)
> >> >
> >> > Something has changed (temporarily I hope) in Confluence, 
it's not as easy as before to create an account. I did not find the "signup" button.
> >> >
> >> > Please try that
> >> 
>https://id.atlassian.com/signup?continue=https://confluence.atlassian.com/login.action?os_destination=/conf719/get-started-1157466040.html
> >> >
> >> > Jacques
> >> >
> >> > Le 30/08/2024 à 10:23, 雷咩咩 a écrit :
> >> >>
> >> >> hi admins,
> >> >>
> >> >>
> >> >> I'd like to be apache ofbiz contributor, 
so that I can edit confluence wiki or even code.
> >> >>
> >> >> attached the ICLA scans.
> >> >>
> >> >> I already registered 2 jira accounts 
today,
> >> >>
> >> >>  1. this mail, name leiyang
> >> >>  2.leiyanghe...@gmai.com, name 
yang.lei
> >> >>
> >> >> I'm not sure what 'Create confluence 
user id' means in this document
> 
>>https://cwiki.apache.org/confluence/display/OFBIZ/Apache+OFBiz+Contributors
> >> >> but if my above two names can be used, 
then please help add, thanks!
> >> >>
> >> >> Regard,
> >> >> Yang

Re: Attribute 'auth' is not allowed to appear in element 'view-map' for ecommerce plugin

[Jacques Le Roux]

Hi Yang,

I'm not quite sure why you get that. It's not a big deal, has no other effects 
than this information in log.

It's due to inconsistency with your code and 
http://ofbiz.apache.org/dtds/site-conf.xsd

As you can see, it has been changed last week: 
https://github.com/apache/ofbiz-site/blame/master/dtds/site-conf.xsd#L779

Apparently your code is up-to-date since you have the "Attribute 'auth' " in 
'view-map' occurrences.

Maybe you have the "old" site-conf.xsd somewhere in a cache, or can't read the 
current one?

Jacques

Le 01/09/2024 à 03:30, 雷咩咩 a écrit :

hi ofbiz users,




I use the framework trunk and ecommerce plugin of almost latest 
version(1~2 week ago?), and I got a lot of such warnings as the title.

for example:




2024-09-01 09:05:57,781 |sse-nio-8443-exec-14 |UtilXml             
          |E| XmlFileLoader: 
Filefile:/home/ofbiz-user/ofbiz-framework/plugins/ecommerce/webapp/ecommerce/WEB-INF/controller.xml  process error. Line: 
1928. Error message: cvc-complex-type.3.2.2: Attribute 'auth' is not allowed to appear in element 'view-map'.
2024-09-01 09:05:57,781 |sse-nio-8443-exec-14 |UtilXml             
          |E| XmlFileLoader: 
Filefile:/home/ofbiz-user/ofbiz-framework/plugins/ecommerce/webapp/ecommerce/WEB-INF/controller.xml  process error. Line: 
1929. Error message: cvc-complex-type.3.2.2: Attribute 'auth' is not allowed to appear in element 'view-map'.
2024-09-01 09:05:57,781 |sse-nio-8443-exec-14 |UtilXml             
          |E| XmlFileLoader: 
Filefile:/home/ofbiz-user/ofbiz-framework/plugins/ecommerce/webapp/ecommerce/WEB-INF/controller.xml  process error. Line: 
1930. Error message: cvc-complex-type.3.2.2: Attribute 'auth' is not allowed to appear in element 'view-map'.
2024-09-01 09:05:57,791 |sse-nio-8443-exec-14 |UtilXml             
          |E| XmlFileLoader: 
Filefile:/home/ofbiz-user/ofbiz-framework/plugins/ecommerce/webapp/ecommerce/WEB-INF/controller.xml  process error. Line: 
1931. Error message: cvc-complex-type.3.2.2: Attribute 'auth' is not allowed to appear in element 'view-map'.
2024-09-01 09:05:57,791 |sse-nio-8443-exec-14 |UtilXml             
          |E| XmlFileLoader: 
Filefile:/home/ofbiz-user/ofbiz-framework/plugins/ecommerce/webapp/ecommerce/WEB-INF/controller.xml  process error. Line: 
1934. Error message: cvc-complex-type.3.2.2: Attribute 'auth' is not allowed to appear in element 'view-map'.




Should I configure somewhere to avoid these warings? or should the plugin 
itself should be updated(remove the auth attribute)?




Regards,

Yang

Re: 回复：Re: want to be apache contributor

[Jacques Le Roux]

Hi Yang,

I can't find your "Confluence username". In the Jira 
(https://issues.apache.org/jira/browse/INFRA-26082) you said

mail:675686...@qq.com
user name: leiyang

I tried both in case.

Are you sure your Confluence usernameis leiyang?

Also your ICLA have not been registered yet. I guess because it's the weekend, 
anyway (unrelated to Confluence and not blocking, just to say.

Jacques

Le 01/09/2024 à 02:57, 雷咩咩 a écrit :

hi Jacques,


Requested using current mail, and got confirmation



Request a Confluence account
Your Confluence account request has been successfully verified, and will be 
reviewed by the project you indicated. Please allow up to a few days for the 
project to review this request. If you do not receive a reply from the project 
within seven days, you can contact the project management committee privately 
atpriv...@ofbiz.apache.org. If the project is still unable to respond, you can 
then escalate the matter to the ASF Infrastructure team atus...@infra.apache.org




Regards,
Yang







原始邮件

          


发件人："Jacques Le Roux"https://issues.apache.org/jira/browse/INFRA-26082

Le 31/08/2024 à 16:09, Jacques Le Roux a écrit :
> Wait Yang,
>
> All documentation is useful ;) The problem is to maintained it...
>
> Le 31/08/2024 à 16:01, 雷咩咩 a écrit :
>> hi Jacques,
>>
>>
>> I had created account in atlassian and can found my profile 
in https://id.atlassian.com/manage-profile/profile-and-visibility
>> then i saw your new mail.
>> So seems i'll just wait. No hurry!
>>
>>
>> I'm new to ofbiz yet. I only have some experience of how to deploy it 
in China(most of main tools set networking blocked and need proxy).
>> So my main purpose was to share some steps to build and run in China, 
should not be as useful for normal users.
>>
>>
>> Regards,
>> Yang
>>
>>
>>
>>
>>
>>
>> 
   
 Original Email
>>
>> From:"Jacques Le Roux"https://lists.apache.org/thread/r7yfsl7lt76828lx7z2xkfg8h9m0yo9j
>>
>> I'll check that with Infra (things change quickly)
>>
>> Jacques
>>
>> Le 31/08/2024 à 10:13, Jacques Le Roux a écrit :
>> > Hi Yang,
>> >
>> > You need to create a Confluence account (Jira ans Confluence are 
separated) with one email that works there (maybe .invalid will not) and tell us
>> > the Confluence Id you choose (the email is easier I guess, but 
that's up to you)
>> >
>> > Something has changed (temporarily I hope) in Confluence, it's not as easy 
as before to create an account. I did not find the "signup" button.
>> >
>> > Please try that
>> 
>https://id.atlassian.com/signup?continue=https://confluence.atlassian.com/login.action?os_destination=/conf719/get-started-1157466040.html
>> >
>> > Jacques
>> >
>> > Le 30/08/2024 à 10:23, 雷咩咩 a écrit :
>> >>
>> >> hi admins,
>> >>
>> >>
>> >> I'd like to be apache ofbiz contributor, so that I can edit 
confluence wiki or even code.
>> >>
>> >> attached the ICLA scans.
>> >>
>> >> I already registered 2 jira accounts today,
>> >>
>> >>  1. this mail, name leiyang
>> >>  2.leiyanghe...@gmai.com, name yang.lei
>> >>
>> >> I'm not sure what 'Create confluence user id' means in this 
document
>>https://cwiki.apache.org/confluence/display/OFBIZ/Apache+OFBiz+Contributors
>> >> but if my above two names can be used, then please help add, 
thanks!
>> >>
>> >> Regard,
>> >> Yang

Re: want to be apache contributor

[Jacques Le Roux]

Here is the solution: https://issues.apache.org/jira/browse/INFRA-26082

Le 31/08/2024 à 16:09, Jacques Le Roux a écrit :

Wait Yang,

All documentation is useful ;) The problem is to maintained it...

Le 31/08/2024 à 16:01, 雷咩咩 a écrit :

hi Jacques,


I had created account in atlassian and can found my profile 
in https://id.atlassian.com/manage-profile/profile-and-visibility
then i saw your new mail.
So seems i'll just wait. No hurry!


I'm new to ofbiz yet. I only have some experience of how to deploy it in 
China(most of main tools set networking blocked and need proxy).
So my main purpose was to share some steps to build and run in China, should 
not be as useful for normal users.


Regards,
Yang






    Original Email

From:"Jacques Le Roux"< jacques.le.r...@les7arts.com >;

Sent Time:2024/8/31 21:35

To:"雷咩咩"< 675686...@qq.com >;"user@ofbiz.apache.org"< user@ofbiz.apache.org 
>;

Subject:Re: want to be apache contributor


Oops, sorry that's wrong. It's not for "Apache's" Confluence but Atlassian (I 
did not use it, was just trying a way).

  From this message it seems an Infra action is required
https://lists.apache.org/thread/r7yfsl7lt76828lx7z2xkfg8h9m0yo9j

I'll check that with Infra (things change quickly)

Jacques

Le 31/08/2024 à 10:13, Jacques Le Roux a écrit :
> Hi Yang,
>
> You need to create a Confluence account (Jira ans Confluence are 
separated) with one email that works there (maybe .invalid will not) and tell us
> the Confluence Id you choose (the email is easier I guess, but that's up 
to you)
>
> Something has changed (temporarily I hope) in Confluence, it's not as easy as before 
to create an account. I did not find the "signup" button.
>
> Please try that
> 
https://id.atlassian.com/signup?continue=https://confluence.atlassian.com/login.action?os_destination=/conf719/get-started-1157466040.html
>
> Jacques
>
> Le 30/08/2024 à 10:23, 雷咩咩 a écrit :
>>
>> hi admins,
>>
>>
>> I'd like to be apache ofbiz contributor, so that I can edit confluence 
wiki or even code.
>>
>> attached the ICLA scans.
>>
>> I already registered 2 jira accounts today,
>>
>>  1. this mail, name leiyang
>>  2. leiyanghe...@gmai.com, name yang.lei
>>
>> I'm not sure what 'Create confluence user id' means in this document 
https://cwiki.apache.org/confluence/display/OFBIZ/Apache+OFBiz+Contributors

>> but if my above two names can be used, then please help add, thanks!
>>
>> Regard,
>> Yang

Re: 回复：URL Issue

[Jacques Le Roux]

That's interesting. Because locally I initially did not find any on mine, but 
finally found one (and only one among 9 logs):

127.0.0.1 - - [28/Aug/2024:20:59:40 +0200] "GET /common/js/jquery/plugins/jsTree/themes/default/d.png HTTP/2.0" 200 7635 
"https://localhost:8443/common/js/jquery/plugins/jsTree/themes/default/style.css"; "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 
Firefox/56.0"
127.0.0.1 - - [28/Aug/2024:21:00:10 +0200] "GET 
/example/control/FindExample%3FexternalLoginKey=EL8b0c355f-d7a6-4a59-9b34-bb0fa6bd0d05&sortField=description&noConditionFind=N;jsessionid=7C492ACEDE914E38A49E17F9151F02B2.jvm1 
HTTP/2.0" 500 1169 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0"
127.0.0.1 - - [28/Aug/2024:21:00:11 +0200] "GET /favicon.ico HTTP/2.0" 404 682 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 
Firefox/56.0"
127.0.0.1 - - [28/Aug/2024:21:00:11 +0200] "GET /favicon.ico HTTP/2.0" 404 682 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 
Firefox/56.0"
127.0.0.1 - - [28/Aug/2024:21:00:12 +0200] "GET /favicon.ico HTTP/2.0" 404 682 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 
Firefox/56.0"


As others, it's a HTTP 500, rejected for security reason, actually unrelated to jsessionid. The log stops there. So could be a side effect. The 
session should no longer exists after. It's the end of the day. Closing OFBiz, not sure how, maybe just putting the computer off.


Still a mystery, an annoying one it's not good to see the jsessionid in log :/

Jacques

Le 31/08/2024 à 15:56, Omar Abdullwahhab a écrit :

I didn't understand well,
But it's a local development machine.
Not hosted in web or cloud servers.

On Sat, Aug 31, 2024, 4:21 PM Jacques Le Roux 
wrote:


Thanks Omar,

Is that local or on a server?

Jacques

Le 31/08/2024 à 14:17, Omar Abdullwahhab a écrit :

HI Jacques ,
Here are a few lines of the logs containing jsessionid

127.0.0.1 - - [26/Aug/2024:20:51:14 +0300] "GET
/accounting/control/ListCompanies HTTP/2.0" 200 5147 "
https://localhost:8443/accounting/control/globalGLSettings"; "Mozilla/5.0
(X11; Linux x86_64; rv:129.0) Gecko/20100101 Firefox/129.0"
127.0.0.1 - - [26/Aug/2024:20:51:18 +0300] "GET
/rainbowstone/RAINBOWSTONE_SAPHIR.less HTTP/2.0" 200 1560 "


https://localhost:8443/ordermgr/control/main?externalLoginKey=ELd87879e0-9c8b-45e4-8c51-efc0d40748f4
"

"Mozilla/5.0 (X11; Linux x86_64; rv:129.0) Gecko/20100101 Firefox/129.0"
127.0.0.1 - - [26/Aug/2024:20:51:19 +0300] "GET


/ordermgr/control/main?externalLoginKey=ELd87879e0-9c8b-45e4-8c51-efc0d40748f4

HTTP/2.0" 200 4571 "

https://localhost:8443/accounting/control/ListCompanies";

"Mozilla/5.0 (X11; Linux x86_64; rv:129.0) Gecko/20100101 Firefox/129.0"
127.0.0.1 - - [26/Aug/2024:20:51:24 +0300] "GET


/facility/control/main?externalLoginKey=ELf5b96d38-f415-4bdf-94d4-7666a2445a03

HTTP/2.0" 200 4327 "


https://localhost:8443/ordermgr/control/main?externalLoginKey=ELd87879e0-9c8b-45e4-8c51-efc0d40748f4
"

"Mozilla/5.0 (X11; Linux x86_64; rv:129.0) Gecko/20100101 Firefox/129.0"
127.0.0.1 - - [26/Aug/2024:20:51:29 +0300] "POST


/facility/control/EditFacility;jsessionid=132931D4CDCAC10AC958ED9DD3F6511A.jvm1

HTTP/2.0" 500 2038 "


https://localhost:8443/facility/control/main?externalLoginKey=ELf5b96d38-f415-4bdf-94d4-7666a2445a03
"

"Mozilla/5.0 (X11; Linux x86_64; rv:129.0) Gecko/20100101 Firefox/129.0"
127.0.0.1 - - [26/Aug/2024:20:51:36 +0300] "POST


/facility/control/EditFacility;jsessionid=132931D4CDCAC10AC958ED9DD3F6511A.jvm1

HTTP/2.0" 500 2038 "


https://localhost:8443/facility/control/main?externalLoginKey=ELf5b96d38-f415-4bdf-94d4-7666a2445a03
"

"Mozilla/5.0 (X11; Linux x86_64; rv:129.0) Gecko/20100101 Firefox/129.0"
127.0.0.1 - - [26/Aug/2024:20:51:42 +0300] "GET
/rainbowstone/RAINBOWSTONE_SAPHIR.less HTTP/2.0" 200 1560 "
https://localhost:8443/facility/control/FindFacility"; "Mozilla/5.0 (X11;
Linux x86_64; rv:129.0) Gecko/20100101 Firefox/129.0"
127.0.0.1 - - [26/Aug/2024:20:51:42 +0300] "GET
/facility/control/FindFacility HTTP/2.0" 200 4274 "


https://localhost:8443/facility/control/main?externalLoginKey=ELf5b96d38-f415-4bdf-94d4-7666a2445a03
"

"Mozilla/5.0 (X11; Linux x86_64; rv:129.0) Gecko/20100101 Firefox/129.0"

Regards

On Sat, Aug 31, 2024 at 2:30 PM Jacques Le Roux <
jacques.le.r...@les7arts.com> wrote:


Hi Omar,

Since Java 7 :


https://docs.oracle.com/javaee/7/api/javax/servlet/annotation/WebListener.html

In OFBiz, ControlEventListener implemen

Re: want to be apache contributor

[Jacques Le Roux]

Wait Yang,

All documentation is useful ;) The problem is to maintained it...

Le 31/08/2024 à 16:01, 雷咩咩 a écrit :

hi Jacques,


I had created account in atlassian and can found my profile 
in https://id.atlassian.com/manage-profile/profile-and-visibility
then i saw your new mail.
So seems i'll just wait. No hurry!


I'm new to ofbiz yet. I only have some experience of how to deploy it in 
China(most of main tools set networking blocked and need proxy).
So my main purpose was to share some steps to build and run in China, should 
not be as useful for normal users.


Regards,
Yang







Original Email

  


From:"Jacques Le Roux"< jacques.le.r...@les7arts.com >;

Sent Time:2024/8/31 21:35

To:"雷咩咩"< 675686...@qq.com >;"user@ofbiz.apache.org"< user@ofbiz.apache.org 
>;

Subject:Re: want to be apache contributor


Oops, sorry that's wrong. It's not for "Apache's" Confluence but Atlassian (I 
did not use it, was just trying a way).

  From this message it seems an Infra action is required
https://lists.apache.org/thread/r7yfsl7lt76828lx7z2xkfg8h9m0yo9j

I'll check that with Infra (things change quickly)

Jacques

Le 31/08/2024 à 10:13, Jacques Le Roux a écrit :
> Hi Yang,
>
> You need to create a Confluence account (Jira ans Confluence are 
separated) with one email that works there (maybe .invalid will not) and tell us
> the Confluence Id you choose (the email is easier I guess, but that's up 
to you)
>
> Something has changed (temporarily I hope) in Confluence, it's not as easy as before 
to create an account. I did not find the "signup" button.
>
> Please try that
> 
https://id.atlassian.com/signup?continue=https://confluence.atlassian.com/login.action?os_destination=/conf719/get-started-1157466040.html
>
> Jacques
>
> Le 30/08/2024 à 10:23, 雷咩咩 a écrit :
>>
>> hi admins,
>>
>>
>> I'd like to be apache ofbiz contributor, so that I can edit confluence 
wiki or even code.
>>
>> attached the ICLA scans.
>>
>> I already registered 2 jira accounts today,
>>
>>  1. this mail, name leiyang
>>  2. leiyanghe...@gmai.com, name yang.lei
>>
>> I'm not sure what 'Create confluence user id' means in this document 
https://cwiki.apache.org/confluence/display/OFBIZ/Apache+OFBiz+Contributors
>> but if my above two names can be used, then please help add, thanks!
>>
>> Regard,
>> Yang

Re: want to be apache contributor

[Jacques Le Roux]

Oops, sorry that's wrong. It's not for "Apache's" Confluence but Atlassian (I 
did not use it, was just trying a way).

From this message it seems an Infra action is required
https://lists.apache.org/thread/r7yfsl7lt76828lx7z2xkfg8h9m0yo9j

I'll check that with Infra (things change quickly)

Jacques

Le 31/08/2024 à 10:13, Jacques Le Roux a écrit :

Hi Yang,

You need to create a Confluence account (Jira ans Confluence are separated) with one email that works there (maybe .invalid will not) and tell us 
the Confluence Id you choose (the email is easier I guess, but that's up to you)


Something has changed (temporarily I hope) in Confluence, it's not as easy as before to 
create an account. I did not find the "signup" button.

Please try that 
https://id.atlassian.com/signup?continue=https://confluence.atlassian.com/login.action?os_destination=/conf719/get-started-1157466040.html


Jacques

Le 30/08/2024 à 10:23, 雷咩咩 a écrit :


hi admins,


I'd like to be apache ofbiz contributor, so that I can edit confluence wiki or 
even code.

attached the ICLA scans.

I already registered 2 jira accounts today,

 1. this mail, name leiyang
 2. leiyanghe...@gmai.com, name yang.lei

I'm not sure what 'Create confluence user id' means in this document 
https://cwiki.apache.org/confluence/display/OFBIZ/Apache+OFBiz+Contributors
but if my above two names can be used, then please help add, thanks!

Regard,
Yang

Re: 回复：URL Issue

[Jacques Le Roux]

Thanks Omar,

Is that local or on a server?

Jacques

Le 31/08/2024 à 14:17, Omar Abdullwahhab a écrit :

HI Jacques ,
Here are a few lines of the logs containing jsessionid

127.0.0.1 - - [26/Aug/2024:20:51:14 +0300] "GET
/accounting/control/ListCompanies HTTP/2.0" 200 5147 "
https://localhost:8443/accounting/control/globalGLSettings"; "Mozilla/5.0
(X11; Linux x86_64; rv:129.0) Gecko/20100101 Firefox/129.0"
127.0.0.1 - - [26/Aug/2024:20:51:18 +0300] "GET
/rainbowstone/RAINBOWSTONE_SAPHIR.less HTTP/2.0" 200 1560 "
https://localhost:8443/ordermgr/control/main?externalLoginKey=ELd87879e0-9c8b-45e4-8c51-efc0d40748f4";
"Mozilla/5.0 (X11; Linux x86_64; rv:129.0) Gecko/20100101 Firefox/129.0"
127.0.0.1 - - [26/Aug/2024:20:51:19 +0300] "GET
/ordermgr/control/main?externalLoginKey=ELd87879e0-9c8b-45e4-8c51-efc0d40748f4
HTTP/2.0" 200 4571 "https://localhost:8443/accounting/control/ListCompanies";
"Mozilla/5.0 (X11; Linux x86_64; rv:129.0) Gecko/20100101 Firefox/129.0"
127.0.0.1 - - [26/Aug/2024:20:51:24 +0300] "GET
/facility/control/main?externalLoginKey=ELf5b96d38-f415-4bdf-94d4-7666a2445a03
HTTP/2.0" 200 4327 "
https://localhost:8443/ordermgr/control/main?externalLoginKey=ELd87879e0-9c8b-45e4-8c51-efc0d40748f4";
"Mozilla/5.0 (X11; Linux x86_64; rv:129.0) Gecko/20100101 Firefox/129.0"
127.0.0.1 - - [26/Aug/2024:20:51:29 +0300] "POST
/facility/control/EditFacility;jsessionid=132931D4CDCAC10AC958ED9DD3F6511A.jvm1
HTTP/2.0" 500 2038 "
https://localhost:8443/facility/control/main?externalLoginKey=ELf5b96d38-f415-4bdf-94d4-7666a2445a03";
"Mozilla/5.0 (X11; Linux x86_64; rv:129.0) Gecko/20100101 Firefox/129.0"
127.0.0.1 - - [26/Aug/2024:20:51:36 +0300] "POST
/facility/control/EditFacility;jsessionid=132931D4CDCAC10AC958ED9DD3F6511A.jvm1
HTTP/2.0" 500 2038 "
https://localhost:8443/facility/control/main?externalLoginKey=ELf5b96d38-f415-4bdf-94d4-7666a2445a03";
"Mozilla/5.0 (X11; Linux x86_64; rv:129.0) Gecko/20100101 Firefox/129.0"
127.0.0.1 - - [26/Aug/2024:20:51:42 +0300] "GET
/rainbowstone/RAINBOWSTONE_SAPHIR.less HTTP/2.0" 200 1560 "
https://localhost:8443/facility/control/FindFacility"; "Mozilla/5.0 (X11;
Linux x86_64; rv:129.0) Gecko/20100101 Firefox/129.0"
127.0.0.1 - - [26/Aug/2024:20:51:42 +0300] "GET
/facility/control/FindFacility HTTP/2.0" 200 4274 "
https://localhost:8443/facility/control/main?externalLoginKey=ELf5b96d38-f415-4bdf-94d4-7666a2445a03";
"Mozilla/5.0 (X11; Linux x86_64; rv:129.0) Gecko/20100101 Firefox/129.0"

Regards

On Sat, Aug 31, 2024 at 2:30 PM Jacques Le Roux <
jacques.le.r...@les7arts.com> wrote:


Hi Omar,

Since Java 7 :
https://docs.oracle.com/javaee/7/api/javax/servlet/annotation/WebListener.html

In OFBiz, ControlEventListener implements HttpSessionListener

Did you check locally or on a server your access_logs if you find a
jsessionid there (trunk)?

Jacques

Le 31/08/2024 à 13:07, Omar Abdullwahhab a écrit :

Hi Jacques, Johan,

According to my investigation to this class (
WebAppServletContextListener.java
<

https://github.com/apache/ofbiz-framework/blame/31eb051326bcec29f4c932a6d829e0d7c9979a16/framework/webapp/src/main/java/org/apache/ofbiz/webapp/control/WebAppServletContextListener.java#L41

)

It seems to be that this listener is never registered , so that it has no
effect.
Note that its annotated with
@WebListener

So confirm that I am correct, or wrong.

Regards

On Fri, Aug 30, 2024 at 6:30 PM Jacques Le Roux <
jacques.le.r...@les7arts.com> wrote:


Hi,

Actually it's not related to embedded Tomcat in OFBiz.

Since we 2017 in WebAppServletContextListener.java we use this line




<>




https://github.com/apache/ofbiz-framework/blame/31eb051326bcec29f4c932a6d829e0d7c9979a16/framework/webapp/src/main/java/org/apache/ofbiz/webapp/control/WebAppServletContextListener.java#L41

If you test locally or maybe in another server than demo one, you will

not

find in access_logs files any line similar to the one below. At least I

did

not, and that's logical since we use cookies for that.

I'm not sure what's the reason yet. If you could confirm that it's not
reproductible but in demo server that would help to restrain the
possibilities

TIA

Jacques

Le 29/08/2024 à 10:17, Jacques Le Roux a écrit :

Hi,

Finally it's not that clear.

As can be found in trunk demo access_logs, such URLs exist at least

since June 17 2024.

 access_log.2024-06-17:28:66.249.75.98 - - [17/Jun/2024:00:11:51

+] "GET


/partymgr/control/main%3FexternalLoginKey=ELf5183769-2759-476b-946c-2a70afe3c42d&sortField=partyId;jsessionid=EBB57C6C3C345E70501827509E05744C.jvm1

 HTTP/1.1" 500 1165 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X

Build/MMB29P) AppleWebKit/537.36 (KHTM

Re: 回复：URL Issue

[Jacques Le Roux]

Hi Omar,

Since Java 7 : 
https://docs.oracle.com/javaee/7/api/javax/servlet/annotation/WebListener.html

In OFBiz, ControlEventListener implements HttpSessionListener

Did you check locally or on a server your access_logs if you find a jsessionid 
there (trunk)?

Jacques

Le 31/08/2024 à 13:07, Omar Abdullwahhab a écrit :

Hi Jacques, Johan,

According to my investigation to this class (
WebAppServletContextListener.java
<https://github.com/apache/ofbiz-framework/blame/31eb051326bcec29f4c932a6d829e0d7c9979a16/framework/webapp/src/main/java/org/apache/ofbiz/webapp/control/WebAppServletContextListener.java#L41>)

It seems to be that this listener is never registered , so that it has no
effect.
Note that its annotated with
@WebListener

So confirm that I am correct, or wrong.

Regards

On Fri, Aug 30, 2024 at 6:30 PM Jacques Le Roux <
jacques.le.r...@les7arts.com> wrote:


Hi,

Actually it's not related to embedded Tomcat in OFBiz.

Since we 2017 in WebAppServletContextListener.java we use this line


<>


https://github.com/apache/ofbiz-framework/blame/31eb051326bcec29f4c932a6d829e0d7c9979a16/framework/webapp/src/main/java/org/apache/ofbiz/webapp/control/WebAppServletContextListener.java#L41

If you test locally or maybe in another server than demo one, you will not
find in access_logs files any line similar to the one below. At least I did
not, and that's logical since we use cookies for that.

I'm not sure what's the reason yet. If you could confirm that it's not
reproductible but in demo server that would help to restrain the
possibilities

TIA

Jacques

Le 29/08/2024 à 10:17, Jacques Le Roux a écrit :

Hi,

Finally it's not that clear.

As can be found in trunk demo access_logs, such URLs exist at least

since June 17 2024.

access_log.2024-06-17:28:66.249.75.98 - - [17/Jun/2024:00:11:51

+] "GET
/partymgr/control/main%3FexternalLoginKey=ELf5183769-2759-476b-946c-2a70afe3c42d&sortField=partyId;jsessionid=EBB57C6C3C345E70501827509E05744C.jvm1

HTTP/1.1" 500 1165 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X

Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.175

Mobile Safari/537.36 (compatible; Googlebot/2.1; +

http://www.google.com/bot.html)"

As you can see they are rejected (HTTP 500) since then too. Actually I

guess they exist for a very long time. Have yet no idea why and how these

URLs are generated.

The rejection is "new" and due to a security fix done in May 20 2024

with (OFBIZ-13092) "Prevent special encoded characters sequences in URLs"

So we need to clearly define steps to manually generate these URLs.

Then, if it's OK, we could allow URLs containing ";jsessionid=" to bypass
the

security filter.

I copy this email to the dev ML because of its importance

Jacques


Le 28/08/2024 à 15:27, Jacques Le Roux a écrit :

Thanks Guys,

I could not reproduce yet, but I think we have already enough clues to

fix that.

Also I can find a lot of in trunk demo log. That will be helpful too.

Jacques

Le 27/08/2024 à 16:20, 雷咩咩 a écrit :

i can reproduce by login with admin, randomly click severl places,

then when click logout, see such error:


HTTP Status 500 – Internal Server Error
Type Exception Report


Message For security reason this URL is not accepted


Description The server encountered an unexpected condition that

prevented it from fulfilling the request.


Exception


java.lang.RuntimeException: For security reason this URL is not

accepted
 
org.apache.ofbiz.webapp.control.ControlFilter.doFilter(ControlFilter.java:144)
 
org.apache.logging.log4j.web.Log4jServletFilter.doFilter(Log4jServletFilter.java:71)

Note The full stack trace of the root cause is available in the server

logs.


Apache Tomcat/9.0.91




Regards,
Yang


-- 原始邮件 --
发件人: "user" 
which

can also be replicated within the demo.
This issue normally occurs as you navigate to a module after login. It

is

not easily replicable, once you refresh it works and does not occur

again.

Replicated the issue in multiple modules.
It usually adds ;jsessionid=##.jvm1 to all the

URLs and

this causes a navigation issue.
Once you submit a form or try to click the logout link, an Internal 500
Internal Server Error is being returned
As an example:
https://demo-stable.ofbiz.apache.org/partymgr/control/main

I have screenshots available, however I am not able to attach to this

mail.

Please let me know if you need me to upload it somewhere.

Kind Regards,
Johan Cronjé

Re: want to be apache contributor

[Jacques Le Roux]

Hi Yang,

You need to create a Confluence account (Jira ans Confluence are separated) with one email that works there (maybe .invalid will not) and tell us the 
Confluence Id you choose (the email is easier I guess, but that's up to you)


Something has changed (temporarily I hope) in Confluence, it's not as easy as before to 
create an account. I did not find the "signup" button.

Please try that 
https://id.atlassian.com/signup?continue=https://confluence.atlassian.com/login.action?os_destination=/conf719/get-started-1157466040.html


Jacques

Le 30/08/2024 à 10:23, 雷咩咩 a écrit :


hi admins,


I'd like to be apache ofbiz contributor, so that I can edit confluence wiki or 
even code.

attached the ICLA scans.

I already registered 2 jira accounts today,

 1. this mail, name leiyang
 2. leiyanghe...@gmai.com, name yang.lei

I'm not sure what 'Create confluence user id' means in this document 
https://cwiki.apache.org/confluence/display/OFBIZ/Apache+OFBiz+Contributors
but if my above two names can be used, then please help add, thanks!

Regard,
Yang

Re: 回复：URL Issue

[Jacques Le Roux]

Hi,

Actually it's not related to embedded Tomcat in OFBiz.

Since we 2017 in WebAppServletContextListener.java we use this line

   
<>

   
https://github.com/apache/ofbiz-framework/blame/31eb051326bcec29f4c932a6d829e0d7c9979a16/framework/webapp/src/main/java/org/apache/ofbiz/webapp/control/WebAppServletContextListener.java#L41

If you test locally or maybe in another server than demo one, you will not find in access_logs files any line similar to the one below. At least I did 
not, and that's logical since we use cookies for that.


I'm not sure what's the reason yet. If you could confirm that it's not 
reproductible but in demo server that would help to restrain the possibilities

TIA

Jacques

Le 29/08/2024 à 10:17, Jacques Le Roux a écrit :

Hi,

Finally it's not that clear.

As can be found in trunk demo access_logs, such URLs exist at least since June 
17 2024.

   access_log.2024-06-17:28:66.249.75.98 - - [17/Jun/2024:00:11:51 +] "GET
/partymgr/control/main%3FexternalLoginKey=ELf5183769-2759-476b-946c-2a70afe3c42d&sortField=partyId;jsessionid=EBB57C6C3C345E70501827509E05744C.jvm1
   HTTP/1.1" 500 1165 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X 
Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.175
   Mobile Safari/537.36 (compatible; Googlebot/2.1; 
+http://www.google.com/bot.html)"

As you can see they are rejected (HTTP 500) since then too. Actually I guess they exist for a very long time. Have yet no idea why and how these 
URLs are generated.


The rejection is "new" and due to a security fix done in May 20 2024 with (OFBIZ-13092) 
"Prevent special encoded characters sequences in URLs"

So we need to clearly define steps to manually generate these URLs. Then, if it's OK, we could allow URLs containing ";jsessionid=" to bypass the 
security filter.


I copy this email to the dev ML because of its importance

Jacques


Le 28/08/2024 à 15:27, Jacques Le Roux a écrit :

Thanks Guys,

I could not reproduce yet, but I think we have already enough clues to fix that.
Also I can find a lot of in trunk demo log. That will be helpful too.

Jacques

Le 27/08/2024 à 16:20, 雷咩咩 a écrit :

i can reproduce by login with admin, randomly click severl places, then when 
click logout, see such error:


HTTP Status 500 – Internal Server Error
Type Exception Report


Message For security reason this URL is not accepted


Description The server encountered an unexpected condition that prevented it 
from fulfilling the request.


Exception


java.lang.RuntimeException: For security reason this URL is not accepted

org.apache.ofbiz.webapp.control.ControlFilter.doFilter(ControlFilter.java:144)

org.apache.logging.log4j.web.Log4jServletFilter.doFilter(Log4jServletFilter.java:71)
Note The full stack trace of the root cause is available in the server logs.


Apache Tomcat/9.0.91




Regards,
Yang


-- 原始邮件 --
发件人: "user" https://demo-stable.ofbiz.apache.org/partymgr/control/main

I have screenshots available, however I am not able to attach to this mail.
Please let me know if you need me to upload it somewhere.

Kind Regards,
Johan Cronjé

Re: 回复：Re: 回复： configured jks certificate but browser said insecure

[Jacques Le Roux]

Hi Yang,

As says the automated answer, someone from the PMC (Project Management Committee) must create the accounts. I'll now create both in case you prefer 
one and/or it has no ".invalid" issue.


For Confluence it's separated, please have a look at 
https://cwiki.apache.org/confluence/display/OFBIZ/Apache+OFBiz+Contributors

Jacques

Le 30/08/2024 à 03:58, 雷咩咩 a écrit :

Hi Jacques,


Thanks for taking time to investigate.
I've just sent request to create ofbiz jira account, with current mail, and 
another gmail(leiyanghe...@gmail.com), both received some verification mails, 
content like below:



Request a Jira account
Your Jira account request has been successfully verified, and will be reviewed 
by the project you indicated. Please allow up to a few days for the project to 
review this request. If you do not receive a reply from the project within 
seven days, you can contact the project management committee privately at 
priv...@ofbiz.apache.org. If the project is still unable to respond, you can 
then escalate the matter to the ASF Infrastructure team at 
us...@infra.apache.org


But i didn't receive further mails, do i just need wait, or you can help? And 
are the jira accounts automatically become confluence account?
Another is about confluence, I cannot find a page of confluence account 
registration, only found the login/reset options.(and i had said i couldn't 
receive reset mails, including the gmail one)







Regards,
Yang



原始邮件

      


发件人："Jacques Le Roux"< jacques.le.r...@les7arts.com >;

发件时间：2024/8/29 22:24

收件人："user"< user@ofbiz.apache.org >;

主题：Re: 回复： configured jks certificate but browser said insecure


Hi Yang,

I did not find your 163.com address in the user ML. About 
675686...@qq.com.INVALID it's maybe done by an ASF service related to MLs 
intercepting your
emails in relation withDMARC and/or dkim protocols

I found this one you can read 
https://lists.apache.org/list?d...@community.apache.org:gte=1d:%22.Invalid%20suffix%22
 It was related to this article
(2014) 
https://www.pcworld.com/article/444768/yahoo-email-antispoofing-policy-breaks-mailing-lists.html

We later crossed something similar when we were still working with Nabble 
(2017) It took us (I, Infra team, Comcast, Nabble) 4 months to fix it. It
was eventually a Nabble issue.
Here is the link: 
https://support.nabble.com/DKIM-header-does-not-comply-with-DMARC-td7598182.html

Maybe you have an issue with your ISP or something else. At least between the 
moment you send your email and its arrival in OFBiz user ML. I can say
you more because I don't know what's the problem is.

Can't you change your email, or use a specific one to correspond with us?

HTH

Jacques

Le 29/08/2024 à 11:09, 雷咩咩 a écrit :
> Hi Jacques, 
> Not  yet. I even don't have a valid account yet.
> My current mail as well as my another mail(163.com) cannot receive apache 
reset password mails, despite it says it sent successfully.
>
>
> Could anyone help with my account?
> I noticed when i reply all,  my mail address is marked 
as675686066@qq.cominvalid
>
>
> Regards,
> Yang
>
>
>
>
>
>
>
> Original Email
>
>
>
> From:"Jacques Le Roux">
> Sent Time:2024/8/29 14:01
>
> To:"user">
> Subject:Re: 回复： configured jks certificate but browser said insecure
>
>
> Hi Yang,
>
> Yes please, are you already a Confluence 
contributor?https://cwiki.apache.org/confluence/display/OFBIZ/Apache+OFBiz+Contributors
>
> Jacques
>
> Le 29/08/2024 à 03:22, 雷咩咩 a écrit :
> > I think I can add my steps to set it up in the confluence wiki, if 
you'd
> >   like Apache OFBiz Technical Production Setup Guide - OFBiz
> > Project Open Wiki - Apache Software Foundation
> >

Re: Product configuration

[Jacques Le Roux]

Sorry Groza,

I have not the time at the moment to look at your issue.
It seems Giulio's suggestion is one to think about ;)

Cheers

Jacques

Le 28/08/2024 à 21:56, Groza Danut a écrit :

Hi Jacques,

No, I didn't found a solution yet, I also didn't really had much time to
further test this in Ofbiz.

I haven't found these discussions in ML, do you have some links?

I made a video where you could better understand the requirements that I
have. See here:https://vimeo.com/1003774437/0cf5310a01?share=copy

Since the uom conversion table is only related to 2 uom items, we don't
have product information(how many sqm per box there are for this model) so
I cannot directly convert between sqm to box using just the conversion
factor.

Groza Danut

On Wed, Aug 28, 2024 at 4:59 PM Jacques Le Roux <
jacques.le.r...@les7arts.com> wrote:


Hi Groza,

Have you been able to find the solution by your one?
There is some related discussions in user ML.

Jacques

Le 11/08/2024 à 09:29, Groza Danut a écrit :

Hello all,

Sorry if this is a too basic question, but I have a product

configuration I

don't know how to model in Ofbiz.

I have a store where we sell floor and wall tiles. The pricing for there
tiles is always per square meter. But when we sell them, we need to round
the quantity.

For example, let's say we have a tile called 'Lorinzo'. A piece has a
dimension of 0.6x0.6 meters and there are 4 pieces per box. So the box

has

1.44 square meters. The price is 65/sqm, but we either sell the whole

box,

so 1.44x65, or individual pieces(0.36x65). The problem is that the

quantity

needs to be either a multiplier of 0.36 or 1.44. If the seller makes a
wrong calculation, he might sell a fraction of a piece.

How do I configure the product so that the seller can only select the
quantity in number of boxes and/or pieces?

I tried adding product dimension features, but no selectable option is
displayed on the product page.

How would you approach this?

Best regards,
Groza Danut

Re: 回复： configured jks certificate but browser said insecure

[Jacques Le Roux]

Hi Yang,

I did not find your 163.com address in the user ML. About 675686...@qq.com.INVALID it's maybe done by an ASF service related to MLs intercepting your 
emails in relation withDMARC and/or dkim protocols


I found this one you can read https://lists.apache.org/list?d...@community.apache.org:gte=1d:%22.Invalid%20suffix%22 It was related to this article 
(2014) https://www.pcworld.com/article/444768/yahoo-email-antispoofing-policy-breaks-mailing-lists.html


We later crossed something similar when we were still working with Nabble (2017) It took us (I, Infra team, Comcast, Nabble) 4 months to fix it. It 
was eventually a Nabble issue.

Here is the link: 
https://support.nabble.com/DKIM-header-does-not-comply-with-DMARC-td7598182.html

Maybe you have an issue with your ISP or something else. At least between the moment you send your email and its arrival in OFBiz user ML. I can say 
you more because I don't know what's the problem is.


Can't you change your email, or use a specific one to correspond with us?

HTH

Jacques

Le 29/08/2024 à 11:09, 雷咩咩 a écrit :

Hi Jacques, 
Not  yet. I even don't have a valid account yet.
My current mail as well as my another mail(163.com) cannot receive apache reset 
password mails, despite it says it sent successfully.


Could anyone help with my account?
I noticed when i reply all,  my mail address is marked 
as675686066@qq.cominvalid


Regards,
Yang







Original Email

          


From:"Jacques Le Roux"https://cwiki.apache.org/confluence/display/OFBIZ/Apache+OFBiz+Contributors

Jacques

Le 29/08/2024 à 03:22, 雷咩咩 a écrit :
> I think I can add my steps to set it up in the confluence wiki, if you'd
>   like Apache OFBiz Technical Production Setup Guide - OFBiz
> Project Open Wiki - Apache Software Foundation
>

Re: 回复：URL Issue

[Jacques Le Roux]

Hi,

Finally it's not that clear.

As can be found in trunk demo access_logs, such URLs exist at least since June 
17 2024.

   access_log.2024-06-17:28:66.249.75.98 - - [17/Jun/2024:00:11:51 +] "GET
   
/partymgr/control/main%3FexternalLoginKey=ELf5183769-2759-476b-946c-2a70afe3c42d&sortField=partyId;jsessionid=EBB57C6C3C345E70501827509E05744C.jvm1
   HTTP/1.1" 500 1165 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X 
Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.175
   Mobile Safari/537.36 (compatible; Googlebot/2.1; 
+http://www.google.com/bot.html)"

As you can see they are rejected (HTTP 500) since then too. Actually I guess they exist for a very long time. Have yet no idea why and how these URLs 
are generated.


The rejection is "new" and due to a security fix done in May 20 2024 with (OFBIZ-13092) 
"Prevent special encoded characters sequences in URLs"

So we need to clearly define steps to manually generate these URLs. Then, if it's OK, we could allow URLs containing ";jsessionid=" to bypass the 
security filter.


I copy this email to the dev ML because of its importance

Jacques


Le 28/08/2024 à 15:27, Jacques Le Roux a écrit :

Thanks Guys,

I could not reproduce yet, but I think we have already enough clues to fix that.
Also I can find a lot of in trunk demo log. That will be helpful too.

Jacques

Le 27/08/2024 à 16:20, 雷咩咩 a écrit :

i can reproduce by login with admin, randomly click severl places, then when 
click logout, see such error:


HTTP Status 500 – Internal Server Error
Type Exception Report


Message For security reason this URL is not accepted


Description The server encountered an unexpected condition that prevented it 
from fulfilling the request.


Exception


java.lang.RuntimeException: For security reason this URL is not accepted

org.apache.ofbiz.webapp.control.ControlFilter.doFilter(ControlFilter.java:144)

org.apache.logging.log4j.web.Log4jServletFilter.doFilter(Log4jServletFilter.java:71)
Note The full stack trace of the root cause is available in the server logs.


Apache Tomcat/9.0.91




Regards,
Yang


-- 原始邮件 --
发件人: "user" https://demo-stable.ofbiz.apache.org/partymgr/control/main

I have screenshots available, however I am not able to attach to this mail.
Please let me know if you need me to upload it somewhere.

Kind Regards,
Johan Cronjé

Re: 回复： configured jks certificate but browser said insecure

[Jacques Le Roux]

Hi Yang,

Yes please, are you already a Confluence contributor? 
https://cwiki.apache.org/confluence/display/OFBIZ/Apache+OFBiz+Contributors

Jacques

Le 29/08/2024 à 03:22, 雷咩咩 a écrit :

I think I can add my steps to set it up in the confluence wiki, if you'd
  like Apache OFBiz Technical Production Setup Guide - OFBiz
Project Open Wiki - Apache Software Foundation

Re: configured jks certificate but browser said insecure

[Jacques Le Roux]

Hi Yang,

You should have a look at https://letsencrypt.org/zh-cn/

HTH

Jacques

Le 28/08/2024 à 17:30, 雷咩咩 a écrit :

hi ofbiz users,




I've successfully started ofbiz and reverse proxied by nginx, can visit 
by https://leiyang.icu/accounting/control/login.

However, as I also have other websites using this domain(on some other 
locations), I'd like to configure ssl certificate for ofbiz on port 8443,

and want to visit it by https://leiyang.icu:8443/accounting/control/login

is it possible?




I read the docs which says:




...omitted previous steps since my jks cert can be directly downloaded from my 
vendor, also has a password file containing the plain text password.

5. Import the Certificate into the keystore by running:
"keytool -import -alias ssl -trustcacerts -file mysignedcert.cer -keystore [keystore 
name]"
6. Configure the framework\catalina\ofbiz-component.xml file to point to your 
new keystore and password:
If using Tomcat (Catalina), which is the default, find the "catalina-container" -> "https-connector" 
-> "keystoreFile" and "keystorePass" properties
and set them.






I have configured framework\catalina\ofbiz-component.xml to be like this:

        

Re: First pull request

[Jacques Le Roux]

Hi,

You should be able to get to this link without any specific privileges.

Jacques

Le 26/08/2024 à 16:26, 雷咩咩 a écrit :

Hi


I'm new user too but seems you missed the link? 
https://github.com/apache/ofbiz-plugins/pull/127/commits/9186a4527300cbc8bd4e6b76325925e0b52b62b8

and maybe need add developers mail list?


d...@ofbiz.apache.org



yang







Original Email

  


From:"Groza Danut"< grozadanu...@gmail.com >;

Sent Time:2024/8/26 21:55

To:"user"< user@ofbiz.apache.org >;

Subject:First pull request


Hi all,

Just created my first pull request for ecommerce labels for the 'ro'
locale. See:

Improved: Romanian localization for EcommerceUiLabels #127

Could any commiter check it and let me know if everything looks good?

Thank you,
Groza Danut

Re: Contribution to ecommerce labels

[Jacques Le Roux]

Hi Tomislav,

I have added a note about your tool in
https://cwiki.apache.org/confluence/display/OFBIZ/Text+Translation
https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=199533364

Thanks !

Jacques

Le 22/08/2024 à 08:46, Jacques Le Roux a écrit :

Hi Tomislav,

Thanks so much, I was not aware of this tools. Would you mind putting this 
information in OFBiz documentation?

TIA

Jacques

Le 21/08/2024 à 17:58, Tomislav Preksavec a écrit :

Hi Groza,

actually I made a tool for OfBiz labels translation a few years ago. It's a python3 script, it runs in terminal and utilizes Google Translate API 
to suggest translations. It helped me translate all of the OfBiz UI label files (~14.5K labels) to Croatian in approx 60 hours.


You pass it the UI label filename (no path needed if you start it in the OfBiz root directory) and locale you want to use (default locale is 'hr', 
change it in utils.py file to make your life easier ;-)) and it goes through the xml finding the labels which don't have the translation for the 
given locale. It displays property name, EN locale label and GT suggested translation.


If you agree with the suggestion all you have to do is hit ENTER and it moves to the next label. Else, you can edit the suggested label and then 
hit ENTER to move on. This is a very fast workflow, you can easily hit 200+ translations per hour.


There are some other tools included too - you can analyze UI label file for given locale, search for label in the UI label file and transfer 
translations (if you do your work on the trunk branch, you can use it to transfer translations to some other branch, e.g. release18.12). It has 
simple help system integrated in the script, and there are some usage examples in the Github repo: 
https://github.com/mikrotron-zg/poslotron-tools/tree/main/translatr


Please be sure to read the 'Known issues' section before starting, especially be aware of the fact that your work won't be saved until you quit the 
tool, so make sure to quit regularly :-) Also, I've used it on Linux only, so there might be some issues on Win/Mac platforms I'm not aware of.


Hope this helps,
Tomislav Preksavec

On 21. 08. 2024. 14:29, Groza Danut wrote:

Hello community,

I want to contribute Romanian translations for ecommerce labels, because a
lot of them are missing and a lot of them are wrong.

Do I need to open a Jira issue, since this is only going to touch one
file: ofbiz-plugins\ecommerce\config\EcommerceUiLabels.xml ?

Also, are there any tools you are using to make the editing of labels
faster?

PS: should I send these kind of messages to the dev ML?

Groza Danut

Re: Product configuration

[Jacques Le Roux]

Hi Groza,

Have you been able to find the solution by your one?
There is some related discussions in user ML.

Jacques

Le 11/08/2024 à 09:29, Groza Danut a écrit :

Hello all,

Sorry if this is a too basic question, but I have a product configuration I
don't know how to model in Ofbiz.

I have a store where we sell floor and wall tiles. The pricing for there
tiles is always per square meter. But when we sell them, we need to round
the quantity.

For example, let's say we have a tile called 'Lorinzo'. A piece has a
dimension of 0.6x0.6 meters and there are 4 pieces per box. So the box has
1.44 square meters. The price is 65/sqm, but we either sell the whole box,
so 1.44x65, or individual pieces(0.36x65). The problem is that the quantity
needs to be either a multiplier of 0.36 or 1.44. If the seller makes a
wrong calculation, he might sell a fraction of a piece.

How do I configure the product so that the seller can only select the
quantity in number of boxes and/or pieces?

I tried adding product dimension features, but no selectable option is
displayed on the product page.

How would you approach this?

Best regards,
Groza Danut

Re: 回复：URL Issue

[Jacques Le Roux]

Thanks Guys,

I could not reproduce yet, but I think we have already enough clues to fix that.
Also I can find a lot of in trunk demo log. That will be helpful too.

Jacques

Le 27/08/2024 à 16:20, 雷咩咩 a écrit :

i can reproduce by login with admin, randomly click severl places, then when 
click logout, see such error:


HTTP Status 500 – Internal Server Error
Type Exception Report


Message For security reason this URL is not accepted


Description The server encountered an unexpected condition that prevented it 
from fulfilling the request.


Exception


java.lang.RuntimeException: For security reason this URL is not accepted

org.apache.ofbiz.webapp.control.ControlFilter.doFilter(ControlFilter.java:144)

org.apache.logging.log4j.web.Log4jServletFilter.doFilter(Log4jServletFilter.java:71)
Note The full stack trace of the root cause is available in the server logs.


Apache Tomcat/9.0.91




Regards,
Yang


-- 原始邮件 --
发件人: 
   "user"  
  https://demo-stable.ofbiz.apache.org/partymgr/control/main

I have screenshots available, however I am not able to attach to this mail.
Please let me know if you need me to upload it somewhere.

Kind Regards,
Johan Cronjé

Re: Want to register as Contributor

[Jacques Le Roux]

Hi Srinivas,

Your message has been moderated, else it would not have reached this Mailing 
List.

Please subscribe to the user ML and then use your email client.
See why here http://ofbiz.apache.org/mailing-lists.html.

You will get a better support, people can answer you on the ML.
The wider the audience the better the answers you might get.

Also it's more work for moderators who have to accept your messages as long as 
you have not subscribed.
I'll personally no longer accept them (other moderators still could).

Thanks

This said, do you want to be a Confluence contributor or a 
code/documentation/etc. contributor?

Jacques

Le 26/08/2024 à 20:48, Srinivas Varada a écrit :


Want to register as a Contributor

 With Regards

*Srinivas Varada*

Email: srinivas.var...@groupfio.com 

Mobile: +1 587-576-4422

www.groupfio.com 

Please consider the environment before printing

The information contained in this transmission may include confidential and privileged, or otherwise protected material. If you are not the intended 
recipient, you are at this moment notified that any disclosure, copying, distribution, or use of the information contained herein or in any 
attachments is STRICTLY PROHIBITED. If you have received this transmission in error, please immediately contact the sender by return e-mail and 
delete this e-mail from your computer system. Group FIO, Inc. reserves the right to retain, monitor, and intercept e-mail messages to and from its 
systems to the extent permitted by applicable law..

Re: First pull request

[Jacques Le Roux]

Hi Groza,

Thanks for your contribution. I just pushed it after checking that the form what OK (I can't really verify Romanian but translated 2 or 3 long 
sentences ;) We did not receive confirmation for documentation contribution from Tomislav but as it does not need an ICLA I'll put itin documentation


Jacques

Le 26/08/2024 à 15:55, Groza Danut a écrit :

Hi all,

Just created my first pull request for ecommerce labels for the 'ro'
locale. See:

Improved: Romanian localization for EcommerceUiLabels #127

Could any commiter check it and let me know if everything looks good?

Thank you,
Groza Danut

Re: how to enable login account

[Jacques Le Roux]

Hi 雷咩咩,

Don't expect more direct answers from me. Continue rather to only use the OFBiz 
user ML

You will get a better support, people can answer you on the ML.
The wider the audience the better the answers you might get.

TIA

This said, to start the conversation, how did you set your data? Because for 
sure that's not something that you can get OOTB.
I suggest to look for "data" at 
https://nightlies.apache.org/ofbiz/trunk/readme/html5/README.html
Without missing 
https://nightlies.apache.org/ofbiz/trunk/readme/html5/README.html#data-loading-tasks

HTH

Jacques

Le 25/08/2024 à 14:21, 雷咩咩 a écrit :


Jacques,

Thanks for response! Should be what you said but I'm really confused. Too many 
entities and relationships to understand and check.
https://leiyang.icu/partymgr/control/findVisits shows 4 'democustomers'. aret 
they built in data of the trunk?


Original Email

From:"Jacques Le Roux"< jacques.le.r...@les7arts.com >;

Sent Time:2024/8/25 18:09

To:"675686066"< 675686...@qq.com >;

Subject:Re: how to enable login account


Hi 雷咩咩,

You must have made a wrong association between demoCustomer and his security 
group

Jacques

Le 25/08/2024 à 03:05, 雷咩咩 a écrit :
> but then by the democustomer account i can modify the login password of admin.
> how can that be? anyone can explain?
> currently the democustomer password is 'password'
>
>
>
>
>
>
>
> Original Email
>
>
>
> From:"雷咩咩"<675686...@qq.com >;
>
> Sent Time:2024/8/25 8:48
>
> To:"ofbiz user">
> Subject:Re:how to enable login account
>
>
> solved mysefl, i had to assign it to paticular security group first in 
https://leiyang.icu/partymgr/control/main
> but i'm wondering why the built in data not automatically done that.
> also the default UI of democustomer wasn't as expected, it all looked like 
the admin's style, with limited menus.
>
>
>
>
>
>
>
> Original Email
>
>
>
> From:"雷咩咩"<675686...@qq.com >;
>
> Sent Time:2024/8/23 23:04
>
> To:"ofbiz user">
> Subject:how to enable login account
>
>
>
> hi ofbiz users,
>
>
>
>
> I've set up ofbiz in my personal website, if you're interested 
https://leiyang.icu/accounting/control/login
>
> By default I can login with admin, ofbiz.
>
>
>
>
> But I want to enable some other accounts and try login.
>
> For example, when open the derby database I can see user DemoCustomer in 
table USER_LOGIN, by deafult ENABLED is null.
>
>
>
>
> I've searched user manuals but cannot find a way to enable it(verify login by 
above login link).
>
> as admin, I go to this page https://leiyang.icu/partymgr/control/updatePassword and selected enable 'Y', and input password and saved, no any 
error message prompt.

>
>
>
>
> Could anyone give me steps to enable specific user? I want to see the UI as a 
customer, to view products and add to cart.
>
> If you can enable it, feel free to change the settings, and tell me the url 
of customer ui and user name and password, thanks!
>
>
>
>
> Regards,
>
> Yang

Re: how to enable login account

[Jacques Le Roux]

Hi 雷咩咩,

You must have made a wrong association between demoCustomer and his security 
group

Jacques

Le 25/08/2024 à 03:05, 雷咩咩 a écrit :

but then by the democustomer account i can modify the login password of admin.
how can that be? anyone can explain?
currently the democustomer password is 'password'







Original Email

  


From:"雷咩咩"<675686...@qq.com  >;

Sent Time:2024/8/25 8:48

To:"ofbiz user"https://leiyang.icu/partymgr/control/main
but i'm wondering why the built in data not automatically done that.
also the default UI of democustomer wasn't as expected, it all looked like the 
admin's style, with limited menus.







Original Email

  


From:"雷咩咩"<675686...@qq.com  >;

Sent Time:2024/8/23 23:04

To:"ofbiz user"https://leiyang.icu/accounting/control/login

By default I can login with admin, ofbiz.




But I want to enable some other accounts and try login.

For example, when open the derby database I can see user DemoCustomer in 
table USER_LOGIN, by deafult ENABLED is null.




I've searched user manuals but cannot find a way to enable it(verify login by 
above login link).

as admin, I go to this 
page https://leiyang.icu/partymgr/control/updatePassword and  
selected enable 'Y', and input password and saved, no any error message prompt.




Could anyone give me steps to enable specific user? I want to see the UI as a 
customer, to view products and add to cart.

If you can enable it, feel free to change the settings, and tell me the url of 
customer ui and user name and password, thanks!




Regards,

Yang

Re: Contribution to ecommerce labels

[Jacques Le Roux]

Hi Tomislav,

Thanks so much, I was not aware of this tools. Would you mind putting this 
information in OFBiz documentation?

TIA

Jacques

Le 21/08/2024 à 17:58, Tomislav Preksavec a écrit :

Hi Groza,

actually I made a tool for OfBiz labels translation a few years ago. It's a python3 script, it runs in terminal and utilizes Google Translate API to 
suggest translations. It helped me translate all of the OfBiz UI label files (~14.5K labels) to Croatian in approx 60 hours.


You pass it the UI label filename (no path needed if you start it in the OfBiz root directory) and locale you want to use (default locale is 'hr', 
change it in utils.py file to make your life easier ;-)) and it goes through the xml finding the labels which don't have the translation for the 
given locale. It displays property name, EN locale label and GT suggested translation.


If you agree with the suggestion all you have to do is hit ENTER and it moves to the next label. Else, you can edit the suggested label and then hit 
ENTER to move on. This is a very fast workflow, you can easily hit 200+ translations per hour.


There are some other tools included too - you can analyze UI label file for given locale, search for label in the UI label file and transfer 
translations (if you do your work on the trunk branch, you can use it to transfer translations to some other branch, e.g. release18.12). It has 
simple help system integrated in the script, and there are some usage examples in the Github repo: 
https://github.com/mikrotron-zg/poslotron-tools/tree/main/translatr


Please be sure to read the 'Known issues' section before starting, especially be aware of the fact that your work won't be saved until you quit the 
tool, so make sure to quit regularly :-) Also, I've used it on Linux only, so there might be some issues on Win/Mac platforms I'm not aware of.


Hope this helps,
Tomislav Preksavec

On 21. 08. 2024. 14:29, Groza Danut wrote:

Hello community,

I want to contribute Romanian translations for ecommerce labels, because a
lot of them are missing and a lot of them are wrong.

Do I need to open a Jira issue, since this is only going to touch one
file: ofbiz-plugins\ecommerce\config\EcommerceUiLabels.xml ?

Also, are there any tools you are using to make the editing of labels
faster?

PS: should I send these kind of messages to the dev ML?

Groza Danut

Re: 回复： gradle build fail due to npm timeout

[Jacques Le Roux]

Thanks too,

Indeed, I'll add this information

Le 13/08/2024 à 13:14, 雷咩咩 a écrit :

thanks for reply.
i'm using truck version. And I think regarding how to build truck version, the 
tutorial you provided doesn't have significant difference from that I 
mentioned(https://ofbiz.apache.org/developers.html).
Neither mentions possibilities of network issue or proxy setting at all.


-- 原始邮件 --
发件人: 
   "user"  
  https://nightlies.apache.org/ofbiz/trunk/readme/html5/README.html (Gradle 7.6)
18.12.15: follow 
https://nightlies.apache.org/ofbiz/stable/readme/html5/README.html (Gradle 
gradle-5.0-rc-5)

HTH

Jacques

Le 13/08/2024 à 11:18, 雷咩咩 a écrit :
>
> hi ofbiz users,
>
>
> I'm very glad to be added to the mailing list and this is my first time 
asking a question.
>
> Today is my first time trying to build the project locally on windows.
>
> I'm in China and many of the gradle/maven/google/github/npm like websites 
are too slow or even not accessible directly.
>
> I added some gradle repository proxies before build and run `gradle 
cleanAll loadAll --info` following https://ofbiz.apache.org/developers.html,
>
> Seems all necessary pom packages have been downloaded.
>
>
> but build step stuck on npm step, seems the node itself is downloaded as a 
maven package, and I have no chance to setup its mirror/proxy(like
> https://registry.npmmirror.com, or https://npmmirror.com/mirrors/npm)
>
>
> detailed message before errors:
>
> Starting process 'command 
'C:\G\ofbiz-framework\themes\common-theme\.gradle\nodejs\node-v20.11.1-win-x64\npm.cmd''.
 Working directory:
> C:\G\ofbiz-framework\themes\common-theme\webapp\common-theme\js Command:
> 
C:\G\ofbiz-framework\themes\common-theme\.gradle\nodejs\node-v20.11.1-win-x64\npm.cmd
 install
> Successfully started process 'command 
'C:\G\ofbiz-framework\themes\common-theme\.gradle\nodejs\node-v20.11.1-win-x64\npm.cmd''
>
>
> can anyone with similiar networking issue experience tell me how to solve? 
thanks in advance!
>
> I'm not sure whether it is proper to attach the build logs, but if it 
helps I already attached.
>
>
> gradle -v
> 
> Gradle 8.9
> Groovy:        3.0.21
> Launcher JVM:  17
> Daemon JVM:    C:\j17 (no JDK specified, using current Java home)
> OS:            Windows 10 10.0 amd64
>
> Regards,
> Yang Lei

Re: gradle build fail due to npm timeout

[Jacques Le Roux]

Hi,

Not sure it's of much help, but it may also depends on the OFBiz version your 
are using
trunk : follow 
https://nightlies.apache.org/ofbiz/trunk/readme/html5/README.html (Gradle 7.6)
18.12.15: follow 
https://nightlies.apache.org/ofbiz/stable/readme/html5/README.html (Gradle 
gradle-5.0-rc-5)

HTH

Jacques

Le 13/08/2024 à 11:18, 雷咩咩 a écrit :


hi ofbiz users,


I'm very glad to be added to the mailing list and this is my first time asking 
a question.

Today is my first time trying to build the project locally on windows.

I'm in China and many of the gradle/maven/google/github/npm like websites are 
too slow or even not accessible directly.

I added some gradle repository proxies before build and run `gradle cleanAll 
loadAll --info` following https://ofbiz.apache.org/developers.html,

Seems all necessary pom packages have been downloaded.


but build step stuck on npm step, seems the node itself is downloaded as a maven package, and I have no chance to setup its mirror/proxy(like 
https://registry.npmmirror.com, or https://npmmirror.com/mirrors/npm)



detailed message before errors:

Starting process 'command 'C:\G\ofbiz-framework\themes\common-theme\.gradle\nodejs\node-v20.11.1-win-x64\npm.cmd''. Working directory: 
C:\G\ofbiz-framework\themes\common-theme\webapp\common-theme\js Command: 
C:\G\ofbiz-framework\themes\common-theme\.gradle\nodejs\node-v20.11.1-win-x64\npm.cmd install

Successfully started process 'command 
'C:\G\ofbiz-framework\themes\common-theme\.gradle\nodejs\node-v20.11.1-win-x64\npm.cmd''


can anyone with similiar networking issue experience tell me how to solve? 
thanks in advance!

I'm not sure whether it is proper to attach the build logs, but if it helps I 
already attached.


gradle -v

Gradle 8.9
Groovy:        3.0.21
Launcher JVM:  17
Daemon JVM:    C:\j17 (no JDK specified, using current Java home)
OS:            Windows 10 10.0 amd64

Regards,
Yang Lei

Re: apache-ofbiz-18.12.14 with PostgreSQL db .

[Jacques Le Roux]

Was related to Docker, answered by Daniel at 
https://issues.apache.org/jira/browse/OFBIZ-13129

Jacques

Le 01/08/2024 à 16:12, Sameer Alwosaby a écrit :

The issues start in SecurityPermissionSeedData.xml file  , we try many time
to solve

2024-08-01 17:00:49,311 |main |EntitySaxReader
   |I| Beginning import from URL:
file:/E:/opensource/apache-ofbiz-18.12.14/framework/security/data/SecurityPermissionSeedData.xml
2024-08-01 17:00:49,327 |main |EntitySaxReader
   |I| Transaction Timeout set to 2 hours (7200 seconds)
2024-08-01 17:00:49,342 |main |GenericDelegator
  |E| Failure in storeAll operation:
org.apache.ofbiz.entity.GenericDataSourceException: Unable to establish a
connection with the database. (Unable to acquire a new connection from the
pool). Rolling back transaction.

On Tue, Jul 30, 2024 at 10:34 PM Sameer Alwosaby 
wrote:



Hello Community

We received the below issues  when we try to configure when
apache-ofbiz-18.12.14 with PostgreSQL db 13  ,but when we try with
  apache-ofbiz-18.12.10  with the same PostgreSQL db 13  configuration ,it's
working property.




new connection from the pool). Rolling back transaction.
org.apache.ofbiz.entity.GenericDataSourceException: Unable to establish a
connection with the database. (Unable to acquire a new connection from the
pool)
 at
org.apache.ofbiz.entity.jdbc.SQLProcessor.getConnection(SQLProcessor.java:264)
~[ofbiz.jar:?]
 at
org.apache.ofbiz.entity.jdbc.SQLProcessor.prepareStatement(SQLProcessor.java:367)
~[ofbiz.jar:?]
 at
org.apache.ofbiz.entity.jdbc.SQLProcessor.prepareStatement(SQLProcessor.java:351)
~[ofbiz.jar:?]
 at
org.apache.ofbiz.entity.datasource.GenericDAO.select(GenericDAO.java:488)
~[ofbiz.jar:?]
 at
org.apache.ofbiz.entity.datasource.GenericDAO.select(GenericDAO.java:466)
~[ofbiz.jar:?]
 at
org.apache.ofbiz.entity.datasource.GenericHelperDAO.findByPrimaryKey(GenericHelperDAO.java:81)
~[ofbiz.jar:?]
 at
org.apache.ofbiz.entity.GenericDelegator.storeAll(GenericDelegator.java:1314)
~[ofbiz.jar:?]
 at
org.apache.ofbiz.entity.util.EntitySaxReader.writeValues(EntitySaxReader.java:258)
~[ofbiz.jar:?]
 at
org.apache.ofbiz.entity.util.EntitySaxReader.parse(EntitySaxReader.java:228)
~[ofbiz.jar:?]
 at
org.apache.ofbiz.entity.util.EntitySaxReader.parse(EntitySaxReader.java:205)
~[ofbiz.jar:?]
 at
org.apache.ofbiz.entity.util.EntityDataLoader.loadData(EntityDataLoader.java:268)
~[ofbiz.jar:?]
 at
org.apache.ofbiz.entityext.data.EntityDataLoadContainer.loadData(EntityDataLoadContainer.java:437)
~[ofbiz.jar:?]
 at
org.apache.ofbiz.entityext.data.EntityDataLoadContainer.loadDataForDelegator(EntityDataLoadContainer.java:184)
~[ofbiz.jar:?]
 at
org.apache.ofbiz.entityext.data.EntityDataLoadContainer.init(EntityDataLoadContainer.java:116)
~[ofbiz.jar:?]
 at
org.apache.ofbiz.base.container.ContainerLoader.loadContainer(ContainerLoader.java:134)
~[ofbiz.jar:?]
 at
org.apache.ofbiz.base.container.ContainerLoader.loadContainersFromConfigurations(ContainerLoader.java:99)
~[ofbiz.jar:?]
 at
org.apache.ofbiz.base.container.ContainerLoader.load(ContainerLoader.java:69)
~[ofbiz.jar:?]
 at
org.apache.ofbiz.base.start.StartupControlPanel.loadStartupLoaders(StartupControlPanel.java:218)
~[ofbiz.jar:?]
 at
org.apache.ofbiz.base.start.StartupControlPanel.start(StartupControlPanel.java:71)
~[ofbiz.jar:?]
 at org.apache.ofbiz.base.start.Start.main(Start.java:85)
~[ofbiz.jar:?]
Caused by: java.sql.SQLException: Unable to acquire a new connection from
the pool
 at
org.apache.commons.dbcp2.managed.ManagedConnection.updateTransactionStatus(ManagedConnection.java:145)
~[commons-dbcp2-2.5.0.jar:2.5.0]
 at
org.apache.commons.dbcp2.managed.ManagedConnection.(ManagedConnection.java:75)
~[commons-dbcp2-2.5.0.jar:2.5.0]
 at
org.apache.commons.dbcp2.managed.ManagedDataSource.getConnection(ManagedDataSource.java:80)
~[commons-dbcp2-2.5.0.jar:2.5.0]
 at
org.apache.ofbiz.entity.connection.DebugManagedDataSource.getConnection(DebugManagedDataSource.java:51)
~[ofbiz.jar:?]
 at
org.apache.ofbiz.entity.connection.DBCPConnectionFactory.getConnection(DBCPConnectionFactory.java:66)
~[ofbiz.jar:?]
 at
org.apache.ofbiz.entity.transaction.GeronimoTransactionFactory.getConnection(GeronimoTransactionFactory.java:79)
~[ofbiz.jar:?]
 at
org.apache.ofbiz.entity.jdbc.SQLProcessor.getConnection(SQLProcessor.java:261)
~[ofbiz.jar:?]
 ... 19 more
Caused by: java.util.NoSuchElementException: Unable to activate object
 at
org.apache.commons.pool2.impl.GenericObjectPool.borrowObject(GenericObjectPool.java:474)
~[commons-pool2-2.6.0.jar:2.6.0]
 at
org.apache.commons.pool2.impl.GenericObjectPool.borrowObject(GenericObjectPool.java:365)
~[commons-pool2-2.6.0.jar:2.6.0]
 at
org.apache.commons.dbcp2.manage

CVE-2024-38856: Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code

[Jacques Le Roux]

Severity: important

Affected versions:

- Apache OFBiz through 18.12.14

Description:

Incorrect Authorization vulnerability in Apache OFBiz.

This issue affects Apache OFBiz: through 18.12.14.

Users are recommended to upgrade to version 18.12.15, which fixes the issue.

Unauthenticated endpoints could allow execution of screen rendering code of 
screens if some preconditions are met (such as when the screen definitions 
don't explicitly check user's permissions because they rely on the 
configuration of their endpoints).

This issue is being tracked as OFBIZ-13128 

Credit:

unam4 (finder)
ruozhi (finder)
m1sn0w (finder)
kuiplatain (finder)
PaperPen@Timeline Sec (finder)
RacerZ (finder)
e0mlja (finder)
Donghyun (finder)
4ra1n (finder)
godspeed (finder)
Hasib Vhora (finder)
pwnull (finder)
blckder02-YHLab (finder)
Xenc from SGLAB of Legendsec at Qi'anxin Group (finder)
Nicholas Zubrisky. (finder)
Y4tacker  (finder)

References:

https://ofbiz.apache.org/download.html
https://ofbiz.apache.org/security.html
https://ofbiz.apache.org/
https://www.cve.org/CVERecord?id=CVE-2024-38856
https://issues.apache.org/jira/browse/OFBIZ-13128

Re: Problem installing/enabling birt plugin

[Jacques Le Roux]

Hi Jeff,

Unfortunately not, but I see no problem with the solution you used as long as 
you don't reuse any OOTB credentials, only yours.

You should also be aware of that about "birt.runtime:viewservlets": https://github.com/eclipse-birt/birt/issues/625 In other words there is very poor 
chances that birt.runtime:viewservlets upgrades above 4.5.0


Also note that for Flexible reports we need the BIRT designer.

About createFlexibleReportFromMaster, dit you put in the BirtMasterData and BirtTypeData? If it continues to fail with them, send us the related log 
part, ie around the error.


HTH

Jacques

Le 25/07/2024 à 01:40, Jeff Christensen a écrit :

Hi,

It turns out that I was having problems with using the correct version. I have 
now tried to make this work with both 18.12 and 22.01

Jacques, per your suggestion I can confirm that the Birt plugin works with the 
Demo data loaded.

On the 22.01 branch I got some level of success.

I added the following line to birt/ofbiz-component.xml :



>From what I can understand without the call to the demo reader this config is not loaded. 


Then all I had to do was assign the now available BIRT permissions to the users.

I am still getting the following if I try to create a flexible report:

The Following Errors Occurred:
You haven't the permission for the service 
createFlexibleReportFromMaster, reason : Access refused

  I will keep plugging away but I will repeat my more general question.

Is there any recipe for getting the BIRT reports plugin working without the 
demo data?

-Original Message-
From: Jeff Christensen  
Sent: Monday, July 22, 2024 9:10 AM

To:user@ofbiz.apache.org
Subject: RE: Problem installing/enabling birt plugin

Hi Jacques,

Yes, I'm using 18.12

I did as you suggested and loaded the demo data. I no longer get the error 
message and the BIRT option is in the main menu.

I will continue to explore this as I am really trying to move towards a real 
production build with no demo data.

Thanks for your reply.

  


-Original Message-
From: Jacques Le Roux
Sent: Friday, July 19, 2024 6:27 AM
To:user@ofbiz.apache.org
Subject: Re: Problem installing/enabling birt plugin

Hi Jeff,

I'll not ask if you use the last 18.12 release (18.12.14) or the trunk (22.01 
is unofficially //abandoned). They are very similar (almost same).

I just did a fast try with the trunk version that I have available under 
framework both from their respective repos.

Just after making the plugin enable I did not reproduce the error you reported.

On the other hand I was not able to get to the "Flexible report". Because it 
depends on demo data visible in ofbiz-component.xml. After loading them all worked as 
expected.

Try, for now, to load all demo data to see if it has an influence on the error 
you reported.

Then we will see...

HTH

Jacques

Le 19/07/2024 à 01:12, Jeff Christensen a écrit :

Hi,

I am trying to enable the birt plugin on a new instance of OFBiz without the 
demo data.


1.  I copied the plugin to the ofbiz-framework/plugin directory
2.  I edited the plugin/birt/ofbiz-component.xml and changed enabled="true"
3.  I installed the plugin via "gradlew installPlugin -PpluginId=myplugin"

Now when I go to any menu that has been touched by the birt plugin I get the 
following message:

java.lang.RuntimeException: Error rendering included menu named
[MainActionMenu] at location []: java.lang.IllegalArgumentException:
Could not find menu file in location []

Is there anything else I need to do?

I have also tried running ./gradlew "ofbiz --load-data 
readers=seed,seed-initial" in case there is any data that needs to be set up.

Thanks.

Re: Job Run Scheduling

[Jacques Le Roux]

Hi Emad,

What is the new status after pushing the "Schedule" button, none?

Jacques

Le 06/07/2024 à 18:03, Emad Radwan a écrit :

Hello Community,

After creating a production run a button with 'Schedule' is available. I
have noticed that it only stamps the relevant records in WorkEffort entity
with the new status. Am I missing something?

>From a business perspective, what is the value of this?

In other words, creating the job run adds a lot of artifacts in many tables
and the other status changes like 'Confirm', 'Complete', etc. But when I
look at 'Schedule' if all it does is stamping the. production run, then
maybe I can just 'Confirm' directly!

Regards,
Emad

Re: Problem installing/enabling birt plugin

[Jacques Le Roux]

Hi Jeff,

I'll not ask if you use the last 18.12 release (18.12.14) or the trunk (22.01 
is unofficially //abandoned). They are very similar (almost same).

I just did a fast try with the trunk version that I have available under 
framework both from their respective repos.

Just after making the plugin enable I did not reproduce the error you reported.

On the other hand I was not able to get to the "Flexible report". Because it depends on demo data visible in ofbiz-component.xml. After loading them 
all worked as expected.


Try, for now, to load all demo data to see if it has an influence on the error 
you reported.

Then we will see...

HTH

Jacques

Le 19/07/2024 à 01:12, Jeff Christensen a écrit :

Hi,

I am trying to enable the birt plugin on a new instance of OFBiz without the 
demo data.


   1.  I copied the plugin to the ofbiz-framework/plugin directory
   2.  I edited the plugin/birt/ofbiz-component.xml and changed enabled="true"
   3.  I installed the plugin via "gradlew installPlugin -PpluginId=myplugin"

Now when I go to any menu that has been touched by the birt plugin I get the 
following message:

java.lang.RuntimeException: Error rendering included menu named 
[MainActionMenu] at location []: java.lang.IllegalArgumentException: Could not 
find menu file in location []

Is there anything else I need to do?

I have also tried running ./gradlew "ofbiz --load-data 
readers=seed,seed-initial" in case there is any data that needs to be set up.

Thanks.

Re: Error with executeMRP service

[Jacques Le Roux]

According to Infra, it turned out that your Jira username is emad1967 not 
eradwan1967, try again...

Le 03/07/2024 à 15:38, Emad Radwan a écrit :

Hi. The provided password didn't work and I notified the gentleman from
jira.

On Wed, 3 Jul 2024, 3:32 pm Jacques Le Roux, 
wrote:


Hi Emad,

Still there?

TIA

Jacques

Le 02/07/2024 à 18:48, Jacques Le Roux a écrit :

You should have received a new password. Let me know if all is now OK

with you.

TIA

Le 02/07/2024 à 13:44, Jacques Le Roux a écrit :

I'll ask Infra team about that...

Le 02/07/2024 à 12:34, Emad Radwan a écrit :

This is what i'm saying, the site responds if you request username but

not

for password!!

Sorry, for my ignorance but I don't have a Jira administrator!!



On Tue, Jul 2, 2024 at 1:29 PM Jacques Le Roux <

jacques.le.r...@les7arts.com>

wrote:


Oops my bad, I used the wrong button, correctly done now


Reset password link sent successfully

  A reset password link has been sent to you via email.

  You can follow that link and select a new password.

  If the email does not arrive, please contact your Jira

administrators.

Le 02/07/2024 à 12:24, Jacques Le Roux a écrit :

Hi Emad,

I just tried for you and got this answer:

 Your username has been sent to you via email.

 You can then request a new password with that usernamehere <

https://issues.apache.org/jira/secure/ForgotLoginDetails.jspa>.

 If the email does not arrive, please contact your Jira

administrators.

Tell me if you don't receive an answer. I'll then ask the Infra team.


Jacques


Le 02/07/2024 à 12:15, Emad Radwan a écrit :

Hello Jacques,

I'm trying to get a Jira account since then but waiting for their

email

for

password reset that never arrived! If I select forget username they

reply

but for password I didn't get it although having tried many times.

Can

you

help with this, please?

https://issues.apache.org/jira/secure/ForgotLoginDetails.jspa

Username: eradwan1967

Regards,
Emad

On Mon, May 27, 2024 at 1:07 PM Jacques Le Roux <
jacques.le.r...@les7arts.com> wrote:


Ah forgot, you may use your message (or adapt it) below as the
description...

TIA

Le 27/05/2024 à 12:02, Jacques Le Roux a écrit :

Hi Emad,

As I suggested to Yannong, please create a Jira issue. This may

help

if

you never did:


https://cwiki.apache.org/confluence/display/OFBIZ/OFBiz+Contributors+Best+Practices#OFBizContributorsBestPractices-HowtocreateaJiraissue

Jacques

Le 27/05/2024 à 10:14, Emad Radwan a écrit :

Hello Community,

I'm working with the Manufacturing tutorial on Sharan's book -

making

tables with wood, nails and varnish - when I run the MRP and as

guided I

got the authentication error that - when searched - found that

this

was

reported before in the following thread but unfortunately when I

applied

the workaround - noticed that the problem still there in the

online

demo -

it didn't work for me and I got the following error message

which is

not

describing exactly what is happening as I entered the

'facilityId' in

the

params.

facilityId and facilityGroupId cannot be both null



https://lists.apache.org/list?user@ofbiz.apache.org:2022-11:User%20authorization%20is%20required%20for%20this%20service:%20executeMrp

Regards,
Emad

Re: Error with executeMRP service

[Jacques Le Roux]

Hi Emad,

Still there?

TIA

Jacques

Le 02/07/2024 à 18:48, Jacques Le Roux a écrit :

You should have received a new password. Let me know if all is now OK with you.

TIA

Le 02/07/2024 à 13:44, Jacques Le Roux a écrit :

I'll ask Infra team about that...

Le 02/07/2024 à 12:34, Emad Radwan a écrit :

This is what i'm saying, the site responds if you request username but not
for password!!

Sorry, for my ignorance but I don't have a Jira administrator!!



On Tue, Jul 2, 2024 at 1:29 PM Jacques Le Roux 
wrote:


Oops my bad, I used the wrong button, correctly done now


   Reset password link sent successfully

 A reset password link has been sent to you via email.

 You can follow that link and select a new password.

 If the email does not arrive, please contact your Jira administrators.

Le 02/07/2024 à 12:24, Jacques Le Roux a écrit :

Hi Emad,

I just tried for you and got this answer:

    Your username has been sent to you via email.

    You can then request a new password with that usernamehere <

https://issues.apache.org/jira/secure/ForgotLoginDetails.jspa>.

    If the email does not arrive, please contact your Jira administrators.

Tell me if you don't receive an answer. I'll then ask the Infra team.


Jacques


Le 02/07/2024 à 12:15, Emad Radwan a écrit :

Hello Jacques,

I'm trying to get a Jira account since then but waiting for their email

for

password reset that never arrived! If I select forget username they

reply

but for password I didn't get it although having tried many times. Can

you

help with this, please?

https://issues.apache.org/jira/secure/ForgotLoginDetails.jspa

Username: eradwan1967

Regards,
Emad

On Mon, May 27, 2024 at 1:07 PM Jacques Le Roux <
jacques.le.r...@les7arts.com> wrote:


Ah forgot, you may use your message (or adapt it) below as the
description...

TIA

Le 27/05/2024 à 12:02, Jacques Le Roux a écrit :

Hi Emad,

As I suggested to Yannong, please create a Jira issue. This may help

if

you never did:


https://cwiki.apache.org/confluence/display/OFBIZ/OFBiz+Contributors+Best+Practices#OFBizContributorsBestPractices-HowtocreateaJiraissue

Jacques

Le 27/05/2024 à 10:14, Emad Radwan a écrit :

Hello Community,

I'm working with the Manufacturing tutorial on Sharan's book - making
tables with wood, nails and varnish - when I run the MRP and as

guided I

got the authentication error that - when searched - found that this

was

reported before in the following thread but unfortunately when I

applied

the workaround - noticed that the problem still there in the online

demo -

it didn't work for me and I got the following error message which is

not

describing exactly what is happening as I entered the 'facilityId' in

the

params.

facilityId and facilityGroupId cannot be both null



https://lists.apache.org/list?user@ofbiz.apache.org:2022-11:User%20authorization%20is%20required%20for%20this%20service:%20executeMrp

Regards,
Emad

Re: Error with executeMRP service

[Jacques Le Roux]

You should have received a new password. Let me know if all is now OK with you.

TIA

Le 02/07/2024 à 13:44, Jacques Le Roux a écrit :

I'll ask Infra team about that...

Le 02/07/2024 à 12:34, Emad Radwan a écrit :

This is what i'm saying, the site responds if you request username but not
for password!!

Sorry, for my ignorance but I don't have a Jira administrator!!



On Tue, Jul 2, 2024 at 1:29 PM Jacques Le Roux 
wrote:


Oops my bad, I used the wrong button, correctly done now


   Reset password link sent successfully

 A reset password link has been sent to you via email.

 You can follow that link and select a new password.

 If the email does not arrive, please contact your Jira administrators.

Le 02/07/2024 à 12:24, Jacques Le Roux a écrit :

Hi Emad,

I just tried for you and got this answer:

    Your username has been sent to you via email.

    You can then request a new password with that usernamehere <

https://issues.apache.org/jira/secure/ForgotLoginDetails.jspa>.

    If the email does not arrive, please contact your Jira administrators.

Tell me if you don't receive an answer. I'll then ask the Infra team.


Jacques


Le 02/07/2024 à 12:15, Emad Radwan a écrit :

Hello Jacques,

I'm trying to get a Jira account since then but waiting for their email

for

password reset that never arrived! If I select forget username they

reply

but for password I didn't get it although having tried many times. Can

you

help with this, please?

https://issues.apache.org/jira/secure/ForgotLoginDetails.jspa

Username: eradwan1967

Regards,
Emad

On Mon, May 27, 2024 at 1:07 PM Jacques Le Roux <
jacques.le.r...@les7arts.com> wrote:


Ah forgot, you may use your message (or adapt it) below as the
description...

TIA

Le 27/05/2024 à 12:02, Jacques Le Roux a écrit :

Hi Emad,

As I suggested to Yannong, please create a Jira issue. This may help

if

you never did:


https://cwiki.apache.org/confluence/display/OFBIZ/OFBiz+Contributors+Best+Practices#OFBizContributorsBestPractices-HowtocreateaJiraissue

Jacques

Le 27/05/2024 à 10:14, Emad Radwan a écrit :

Hello Community,

I'm working with the Manufacturing tutorial on Sharan's book - making
tables with wood, nails and varnish - when I run the MRP and as

guided I

got the authentication error that - when searched - found that this

was

reported before in the following thread but unfortunately when I

applied

the workaround - noticed that the problem still there in the online

demo -

it didn't work for me and I got the following error message which is

not

describing exactly what is happening as I entered the 'facilityId' in

the

params.

facilityId and facilityGroupId cannot be both null



https://lists.apache.org/list?user@ofbiz.apache.org:2022-11:User%20authorization%20is%20required%20for%20this%20service:%20executeMrp

Regards,
Emad

Re: Error with executeMRP service

[Jacques Le Roux]

I'll ask Infra team about that...

Le 02/07/2024 à 12:34, Emad Radwan a écrit :

This is what i'm saying, the site responds if you request username but not
for password!!

Sorry, for my ignorance but I don't have a Jira administrator!!



On Tue, Jul 2, 2024 at 1:29 PM Jacques Le Roux 
wrote:


Oops my bad, I used the wrong button, correctly done now


   Reset password link sent successfully

 A reset password link has been sent to you via email.

 You can follow that link and select a new password.

 If the email does not arrive, please contact your Jira administrators.

Le 02/07/2024 à 12:24, Jacques Le Roux a écrit :

Hi Emad,

I just tried for you and got this answer:

Your username has been sent to you via email.

You can then request a new password with that usernamehere <

https://issues.apache.org/jira/secure/ForgotLoginDetails.jspa>.

If the email does not arrive, please contact your Jira administrators.

Tell me if you don't receive an answer. I'll then ask the Infra team.


Jacques


Le 02/07/2024 à 12:15, Emad Radwan a écrit :

Hello Jacques,

I'm trying to get a Jira account since then but waiting for their email

for

password reset that never arrived!  If I select forget username they

reply

but for password I didn't get it although having tried many times. Can

you

help with this, please?

https://issues.apache.org/jira/secure/ForgotLoginDetails.jspa

Username: eradwan1967

Regards,
Emad

On Mon, May 27, 2024 at 1:07 PM Jacques Le Roux <
jacques.le.r...@les7arts.com> wrote:


Ah forgot, you may use your message (or adapt it) below as the
description...

TIA

Le 27/05/2024 à 12:02, Jacques Le Roux a écrit :

Hi Emad,

As I suggested to Yannong, please create a Jira issue. This may help

if

you never did:


https://cwiki.apache.org/confluence/display/OFBIZ/OFBiz+Contributors+Best+Practices#OFBizContributorsBestPractices-HowtocreateaJiraissue

Jacques

Le 27/05/2024 à 10:14, Emad Radwan a écrit :

Hello Community,

I'm working with the Manufacturing tutorial on Sharan's book - making
tables with wood, nails and varnish - when I run the MRP and as

guided I

got the authentication error that - when searched - found that this

was

reported before in the following thread but unfortunately when I

applied

the workaround - noticed that the problem still there in the online

demo -

it didn't work for me and I got the following error message which is

not

describing exactly what is happening as I entered the 'facilityId' in

the

params.

facilityId and facilityGroupId cannot be both null



https://lists.apache.org/list?user@ofbiz.apache.org:2022-11:User%20authorization%20is%20required%20for%20this%20service:%20executeMrp

Regards,
Emad

Re: ReST support

[Jacques Le Roux]

Hi San,

The 22.01 version has been unofficially abandoned because we want to create a 
new 24.xx branch with some work to be completed, for now:
https://cwiki.apache.org/confluence/display/OFBIZ/Release+24.xx+Roadmap

If you really need REST, I'd rather use the trunk and when possible "update" (trunk is always ahead) to 24.xx when available. If you know the Minilang 
and Groovy you could even contribute to remaining OFBIZ-9350 subtasks...


HTH

Jacques

Le 02/07/2024 à 05:21, Sankatha Bamunuge a écrit :

Hi All

I want to use the rest api in ofbiz and it seems the plugin is only available 
in ofbiz version 22. Is ofbiz 22 officially supported yet or is it still under 
development ? Is version 22  recommended to use in a production environment 
yet? Please let me know. I’m very new to ofbiz.

Kind regards
San

Re: Error with executeMRP service

[Jacques Le Roux]

Oops my bad, I used the wrong button, correctly done now


 Reset password link sent successfully

   A reset password link has been sent to you via email.

   You can follow that link and select a new password.

   If the email does not arrive, please contact your Jira administrators.

Le 02/07/2024 à 12:24, Jacques Le Roux a écrit :

Hi Emad,

I just tried for you and got this answer:

   Your username has been sent to you via email.

   You can then request a new password with that usernamehere 
<https://issues.apache.org/jira/secure/ForgotLoginDetails.jspa>.

   If the email does not arrive, please contact your Jira administrators.

Tell me if you don't receive an answer. I'll then ask the Infra team.


Jacques


Le 02/07/2024 à 12:15, Emad Radwan a écrit :

Hello Jacques,

I'm trying to get a Jira account since then but waiting for their email for
password reset that never arrived!  If I select forget username they reply
but for password I didn't get it although having tried many times. Can you
help with this, please?

https://issues.apache.org/jira/secure/ForgotLoginDetails.jspa

Username: eradwan1967

Regards,
Emad

On Mon, May 27, 2024 at 1:07 PM Jacques Le Roux <
jacques.le.r...@les7arts.com> wrote:


Ah forgot, you may use your message (or adapt it) below as the
description...

TIA

Le 27/05/2024 à 12:02, Jacques Le Roux a écrit :

Hi Emad,

As I suggested to Yannong, please create a Jira issue. This may help if

you never did:
https://cwiki.apache.org/confluence/display/OFBIZ/OFBiz+Contributors+Best+Practices#OFBizContributorsBestPractices-HowtocreateaJiraissue

Jacques

Le 27/05/2024 à 10:14, Emad Radwan a écrit :

Hello Community,

I'm working with the Manufacturing tutorial on Sharan's book - making
tables with wood, nails and varnish - when I run the MRP and as guided I
got the authentication error that - when searched - found that this was
reported before in the following thread but unfortunately when I applied
the workaround - noticed that the problem still there in the online

demo -

it didn't work for me and I got the following error message which is not
describing exactly what is happening as I entered the 'facilityId' in

the

params.

facilityId and facilityGroupId cannot be both null



https://lists.apache.org/list?user@ofbiz.apache.org:2022-11:User%20authorization%20is%20required%20for%20this%20service:%20executeMrp

Regards,
Emad

Re: Error with executeMRP service

[Jacques Le Roux]

Hi Emad,

I just tried for you and got this answer:

   Your username has been sent to you via email.

   You can then request a new password with that usernamehere 
<https://issues.apache.org/jira/secure/ForgotLoginDetails.jspa>.

   If the email does not arrive, please contact your Jira administrators.

Tell me if you don't receive an answer. I'll then ask the Infra team.


Jacques


Le 02/07/2024 à 12:15, Emad Radwan a écrit :

Hello Jacques,

I'm trying to get a Jira account since then but waiting for their email for
password reset that never arrived!  If I select forget username they reply
but for password I didn't get it although having tried many times. Can you
help with this, please?

https://issues.apache.org/jira/secure/ForgotLoginDetails.jspa

Username: eradwan1967

Regards,
Emad

On Mon, May 27, 2024 at 1:07 PM Jacques Le Roux <
jacques.le.r...@les7arts.com> wrote:


Ah forgot, you may use your message (or adapt it) below as the
description...

TIA

Le 27/05/2024 à 12:02, Jacques Le Roux a écrit :

Hi Emad,

As I suggested to Yannong, please create a Jira issue. This may help if

you never did:
https://cwiki.apache.org/confluence/display/OFBIZ/OFBiz+Contributors+Best+Practices#OFBizContributorsBestPractices-HowtocreateaJiraissue

Jacques

Le 27/05/2024 à 10:14, Emad Radwan a écrit :

Hello Community,

I'm working with the Manufacturing tutorial on Sharan's book - making
tables with wood, nails and varnish - when I run the MRP and as guided I
got the authentication error that - when searched - found that this was
reported before in the following thread but unfortunately when I applied
the workaround - noticed that the problem still there in the online

demo -

it didn't work for me and I got the following error message which is not
describing exactly what is happening as I entered the 'facilityId' in

the

params.

facilityId and facilityGroupId cannot be both null



https://lists.apache.org/list?user@ofbiz.apache.org:2022-11:User%20authorization%20is%20required%20for%20this%20service:%20executeMrp

Regards,
Emad

Re: Inquiry Regarding UI Changes for [ofbiz-framework + ofbiz-plugins]

[Jacques Le Roux]

Hi Steve,

Please, if not done yet, rather than messaging me directly subscribe to the 
user ML for such questions.
See why here http://ofbiz.apache.org/mailing-lists.html.

You will get a better support, people can answer you on the ML.
The wider the audience the better the answers you might get.

This said, if you did not already, I'd start by looking at: 
https://cwiki.apache.org/confluence/display/OFBIZ/Framework+Introduction+Videos+and+Diagrams

Hope it will help you answer your questions and put you on the right track :)

Jacques


Le 26/06/2024 à 18:56, serge steve Mamendja a écrit :

Hello Mr. Jacques Le Roux,

My name is Steve Mamendja, and I am a fifth-year software engineering student. 
As part of my final year project, I have chosen the Apache OFBiz project.
After several attempts, I have tried to modify the user interface of the 'party' module, but unfortunately, I was unsuccessful. How can I customize 
the forms and various containers ( fields, forms, grids) in terms of their HTML Structure and final style?


Thank you in advance for your assistance!
Best regards, Steve Mamendja

Re: The number of threads used to run services in async mode

[Jacques Le Roux]

Hi Tomek,

If you did not already, I'd look at:

https://cwiki.apache.org/confluence/display/OFBIZ/Service+Engine+Guide
https://cwiki.apache.org/confluence/display/OFBIZ/Service+Engine+Configuration+Guide

https://github.com/apache/ofbiz-framework/blob/trunk/framework/service/dtd/service-config.xsd

https://demo-trunk.ofbiz.apache.org/webtools/control/threadList

Hope it will help you answer your questions

Jacques

Le 23/06/2024 à 14:30, Tomek a écrit :

I have a few questions about executing services in async mode.

1. Is there a thread pool that limits number of threads during executing the services? Let's assume that I run a service 1000 times. How many 
threads will be created in this scenario? 1000 or less?


2. If a thread pool is used to execute services: can I manipulate thread pool 
size? How?

Tomek

Re: Owasp dependencycheck task is not getting build successfully

[Jacques Le Roux]

Hi Sumesh,

We have abandoned this feature for years as it was no longer usable (too much 
false positive in large numbers).
https://cwiki.apache.org/confluence/display/OFBIZ/About+OWASP+Dependency+Check

The last time I tried to use it was after the last commit for
https://issues.apache.org/jira/browse/OFBIZ-10700
http://svn.apache.org/viewvc/ofbiz/ofbiz-framework/trunk/build.gradle?r1=1854818&r2=1854817&pathrev=1854818

I just tried and got this:
C:\projectsASF\Git\ofbiz-framework>gradlew -PenableOwasp dependencyCheckAnalyze
Starting a Gradle Daemon (subsequent builds will be faster)
[...]
> Task :dependencyCheckAnalyze
Verifying dependencies for project ofbiz
Checking for updates and analyzing dependencies for vulnerabilities
An NVD API Key was not provided - it is highly recommended to use an NVD API 
key as the update can take a VERY long time without an API Key

Actually nothing happens in a reasonable time and I bet it would be mostly 
unusable. You though may try to follow the NVD API key way, whatever it is.

I forgot to remove this information in the main README files (actually in all 
OFBiz versions supported). You see the README trunk version GH repo.

Thanks to your report I'll remove this information and the related code in a 
week, except if you come back with something positive.

Jacques


Le 17/06/2024 à 14:40, Sumesh Acharya a écrit :

Hello Community,



I tried executing the command given in the github repo for starting the task 
but it is getting failed after sometime with non-200 status code. i have added 
the logs from the terminal please let me know how to resolved it.




--


$ gradle -PenableOwasp dependencyCheckAnalyze



  










Starting a Gradle Daemon (subsequent builds will be faster)




Task :dependencyCheckAnalyze

Verifying dependencies for project ofbiz

Checking for updates and analyzing vulnerabilities for dependencies



IO Exception: HEAD request returned a non-200 status code

IO Exception: HEAD request returned a non-200 status code

IO Exception: HEAD request returned a non-200 status code

IO Exception: HEAD request returned a non-200 status code

IO Exception: HEAD request returned a non-200 status code

IO Exception: HEAD request returned a non-200 status code

IO Exception: HEAD request returned a non-200 status code

IO Exception: HEAD request returned a non-200 status code

IO Exception: HEAD request returned a non-200 status code

IO Exception: HEAD request returned a non-200 status code

IO Exception: HEAD request returned a non-200 status code

IO Exception: HEAD request returned a non-200 status code

IO Exception: HEAD request returned a non-200 status code

IO Exception: HEAD request returned a non-200 status code

IO Exception: HEAD request returned a non-200 status code

IO Exception: HEAD request returned a non-200 status code

IO Exception: HEAD request returned a non-200 status code

IO Exception: HEAD request returned a non-200 status code




Task :dependencyCheckAnalyze FAILED

Unable to download the NVD CVE data; the results may not include the most 
recent CPE/CVEs from the NVD.

Unable to update Cached Web DataSource, using local data instead. Results may 
not include recent vulnerabilities.

No documents exist



Unable to continue dependency-check analysis.



FAILURE: Build failed with an exception.



* What went wrong:

Execution failed for task ':dependencyCheckAnalyze'.


Analysis failed.



* Try:

Run with --stacktrace option to get the stack trace. Run with --info or --debug 
option to get more log output. Run with --scan to get full insights.



* Get more help athttps://help.gradle.org



BUILD FAILED in 2m 52s

1 actionable task: 1 executed





Regards,

Sumesh

Re: New User with a Jira Question

[Jacques Le Roux]

Hi Bill,

Thanks for your report, it has been implement with 
https://issues.apache.org/jira/browse/OFBIZ-13116

Jacques

Le 07/06/2024 à 17:09, Bill Harder a écrit :

https://issues.apache.org/jira/browse/OFBIZ-11725

I am new to this, but have been tracking the jira mail list for close to 6+
months and trying to figure out OFBiz.  I spent 10+ hours trying to figure
out why this drop down agreements list was not showing.  I finally traced
it back to Stores-Payments.  You see, I am trying to set up OFBiz with no
demo data from scratch.  So I am not sure why this Jira is being closed.  I
personally would like to see the drop down with None.  So how are these
tasks assigned/prioritized/closed?  Please forgive my ignorance and
advise.  TIA.

Bill

Re: AW: Ofbiz starting slow

[Jacques Le Roux]

Forgot to tell about image.server.path in catalog.properties. I guess you are 
already setting it?

Le 05/06/2024 à 07:58, Jacques Le Roux a écrit :

Hi Ingo,

After reading https://lists.apache.org/thread/ymbjbf4r6tlcj5r8grh9dsrdhnfkj2tp

Are you putting your images on a dedicated server as suggested here 
https://lists.apache.org/thread/k2zj0hkf4sr2rdb90s6s8x2jfzb256lb ?

HTH

Jacques

Le 04/06/2024 à 16:22, Ingo Wolfmayr a écrit :

Hi Johan,

I have already excluded these tasks. In my case, Ofbiz is ready to take requests. I can see the requests in the log, but nothing seems to happen 
after showing the information mentioned below. If I remove the images and restart the instance, everything works as expected. I can make the images 
available afterwards, and it will work just fine.


I thought it could be something with loading images into the cache or indexing?

Best regards,
Ingo
-Ursprüngliche Nachricht-
Von: Johan Cronje 
Gesendet: Dienstag, 4. Juni 2024 15:41
An: user@ofbiz.apache.org
Betreff: Re: Ofbiz starting slow

Hi Ingo,

Not sure if this would be of help.
Since we did not need it on our local instance we made zip and tar gradle tasks 
optional based on arguments.

Added the below within the build.gradle:

tasks.named('distTar').configure {
 onlyIf {
 project.hasProperty('includeDistTar')
 }
}
tasks.named('distZip').configure {
 onlyIf {
 project.hasProperty('includeDistZip')
 }
}

This made our startup significantly faster.

Kind Regards,
Johan

On Tue, 4 Jun 2024 at 14:32, Ingo Wolfmayr  wrote:

Hi everybody,

I have an OFBiz installation (multiple tenants, trunk) with many products and therefore many images. When I start OFBiz, it takes forever until it 
can be accessed via the interface. The log stops with the following entry: "This is the first request in this visit. Hidden sessionId by default."


If I remove the images (unmount the path) and restart, OFBiz is quickly 
available as usual.

What could be the problem here? During the waiting time, hardly any resources 
are used - neither CPU, memory, nor HDD read.

Best regards,
Ingo

Re: AW: Ofbiz starting slow

[Jacques Le Roux]

Hi Ingo,

After reading https://lists.apache.org/thread/ymbjbf4r6tlcj5r8grh9dsrdhnfkj2tp

Are you putting your images on a dedicated server as suggested here 
https://lists.apache.org/thread/k2zj0hkf4sr2rdb90s6s8x2jfzb256lb ?

HTH

Jacques

Le 04/06/2024 à 16:22, Ingo Wolfmayr a écrit :

Hi Johan,

I have already excluded these tasks. In my case, Ofbiz is ready to take 
requests. I can see the requests in the log, but nothing seems to happen after 
showing the information mentioned below. If I remove the images and restart the 
instance, everything works as expected. I can make the images available 
afterwards, and it will work just fine.

I thought it could be something with loading images into the cache or indexing?

Best regards,
Ingo
-Ursprüngliche Nachricht-
Von: Johan Cronje 
Gesendet: Dienstag, 4. Juni 2024 15:41
An: user@ofbiz.apache.org
Betreff: Re: Ofbiz starting slow

Hi Ingo,

Not sure if this would be of help.
Since we did not need it on our local instance we made zip and tar gradle tasks 
optional based on arguments.

Added the below within the build.gradle:

tasks.named('distTar').configure {
 onlyIf {
 project.hasProperty('includeDistTar')
 }
}
tasks.named('distZip').configure {
 onlyIf {
 project.hasProperty('includeDistZip')
 }
}

This made our startup significantly faster.

Kind Regards,
Johan

On Tue, 4 Jun 2024 at 14:32, Ingo Wolfmayr  wrote:

Hi everybody,

I have an OFBiz installation (multiple tenants, trunk) with many products and therefore 
many images. When I start OFBiz, it takes forever until it can be accessed via the 
interface. The log stops with the following entry: "This is the first request in 
this visit. Hidden sessionId by default."

If I remove the images (unmount the path) and restart, OFBiz is quickly 
available as usual.

What could be the problem here? During the waiting time, hardly any resources 
are used - neither CPU, memory, nor HDD read.

Best regards,
Ingo

Re: Configure SSL-only connection to postgres database in ofbiz

[Jacques Le Roux]

Hi Sumesh,

Your message has been moderated, else it would not have reached this Mailing 
List.

Please subscribe to the user ML for such questions and then use your email 
client.
See why here http://ofbiz.apache.org/mailing-lists.html.

You will get a better support, people can answer you on the ML.
The wider the audience the better the answers you might get.

Also it's more work for moderators who have to accept your messages as long as 
you have not subscribed.
I'll personally no longer accept them (other moderators still could).

Thanks

This said, did you follow an OFBiz tuto?

Jacques

Le 04/06/2024 à 13:00, Sumesh Acharya a écrit :

Hello Community,

I have configured the ssl certificates and enabled the ssl mode in the postgresql 
database side now i need to enable it in the ofbiz side also i don't to mention the 
username & password for the postgres database connection.

Can any one help me with the configuration syntax for datasource part in the 
framework/entity/config/entityengine.xml file.

Regards,

Sumesh

CVE-2024-36104: Apache OFBiz: Path traversal leading to a RCE

[Jacques Le Roux]

Severity: important

Affected versions:

- Apache OFBiz before 18.12.14

Description:

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 
vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.14.

Users are recommended to upgrade to version 18.12.14, which fixes the issue.

Credit:

godspeed (AAA@ZJU) (finder)

References:

https://ofbiz.apache.org/download.html
https://ofbiz.apache.org/security.html
https://issues.apache.org/jira/browse/OFBIZ-13092
https://lists.apache.org/thread/sv0xr8b1j7mmh5p37yldy9vmnzbodz2o
https://ofbiz.apache.org/
https://www.cve.org/CVERecord?id=CVE-2024-36104

Re: Error with executeMRP service

[Jacques Le Roux]

Ah forgot, you may use your message (or adapt it) below as the description...

TIA

Le 27/05/2024 à 12:02, Jacques Le Roux a écrit :

Hi Emad,

As I suggested to Yannong, please create a Jira issue. This may help if you 
never did:
https://cwiki.apache.org/confluence/display/OFBIZ/OFBiz+Contributors+Best+Practices#OFBizContributorsBestPractices-HowtocreateaJiraissue

Jacques

Le 27/05/2024 à 10:14, Emad Radwan a écrit :

Hello Community,

I'm working with the Manufacturing tutorial on Sharan's book - making
tables with wood, nails and varnish - when I run the MRP and as guided I
got the authentication error that - when searched - found that this was
reported before in the following thread but unfortunately when I applied
the workaround - noticed that the problem still there in the online demo -
it didn't work for me and I got the following error message which is not
describing exactly what is happening as I entered the 'facilityId' in the
params.

facilityId and facilityGroupId cannot be both null

https://lists.apache.org/list?user@ofbiz.apache.org:2022-11:User%20authorization%20is%20required%20for%20this%20service:%20executeMrp

Regards,
Emad

Re: Error with executeMRP service

[Jacques Le Roux]

Hi Emad,

As I suggested to Yannong, please create a Jira issue. This may help if you 
never did:
https://cwiki.apache.org/confluence/display/OFBIZ/OFBiz+Contributors+Best+Practices#OFBizContributorsBestPractices-HowtocreateaJiraissue

Jacques

Le 27/05/2024 à 10:14, Emad Radwan a écrit :

Hello Community,

I'm working with the Manufacturing tutorial on Sharan's book - making
tables with wood, nails and varnish - when I run the MRP and as guided I
got the authentication error that - when searched - found that this was
reported before in the following thread but unfortunately when I applied
the workaround - noticed that the problem still there in the online demo -
it didn't work for me and I got the following error message which is not
describing exactly what is happening as I entered the 'facilityId' in the
params.

facilityId and facilityGroupId cannot be both null

https://lists.apache.org/list?user@ofbiz.apache.org:2022-11:User%20authorization%20is%20required%20for%20this%20service:%20executeMrp

Regards,
Emad

Re: An odd behavior in Payments

[Jacques Le Roux]

Hi Emad,

Please open a Jira issue
https://cwiki.apache.org/confluence/display/OFBIZ/OFBiz+Contributors+Best+Practices

TIA

Jacques

Le 27/04/2024 à 13:28, Emad Radwan a écrit :

Hello Community,

While creating a new incoming payment if the 'Payment Method Id' dropdown I
select one that is linked to a financial account, a financial account
transaction is created which is fine. But if I try to create a payment
where the paymentMethodId is not linked to a financial account - like Cash
- then no financial account transaction is created which is also fine till
now. The issue is that Ofbiz after creating the payment displays the 'edit'
form for the payment allowing a user to change the paymentMethodId which if
was created with "Cash' and then changed to a one based on a Financial
Account, then no financial account transaction is created.

Regards,
Emad

Re: Performance scale up Thread

[Jacques Le Roux]

I suggest you use YourKit Java Profiler

BTW, it's free for Apache committers
https://svn.apache.org/repos/private/committers/donated-licenses/yourkit-java-profiler.txt

HTH

Jacques

Le 08/05/2024 à 20:30, Mandar K a écrit :

Dear All, related to performance scale up thread wanted to share one
observation :

Everytime there is an increase in memory it gets filled up. This may be due
to a memory management bug in any code. Some processes are creating a lot
of objects and not clearing afterwards.

Requesting inputs on the below

1. How to identify those objects / code which is causing memory leak
2. Any suggestions for GC

We are facing a challenge on the performance issue. Any strong assistance
will really help.

Thanks a lot.

CVE-2024-32113: Apache OFBiz: Path traversal leading to RCE

[Jacques Le Roux]

Severity: important

Affected versions:

- Apache OFBiz before 18.12.13

Description:

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 
vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13.

Users are recommended to upgrade to version 18.12.13, which fixes the issue.

Credit:

Qiyi Zhang (RacerZ) @secsys from Fudan (finder)

References:

https://ofbiz.apache.org/download.html
https://ofbiz.apache.org/security.html
https://issues.apache.org/jira/browse/OFBIZ-13006
https://lists.apache.org/thread/np8vgzr06z6cwm3tz7cs3609bdrj8526
https://ofbiz.apache.org/
https://www.cve.org/CVERecord?id=CVE-2024-32113

Re: Creating a new tenant errors for version 22.01

[Jacques Le Roux]

Hi Ivan,

Your message has been moderated, else it would not have reached this Mailing 
List.

Please subscribe to the user ML for such questions and then use your email 
client.
See why here http://ofbiz.apache.org/mailing-lists.html.

You will get a better support, people can answer you on the ML.
The wider the audience the better the answers you might get.

Also it's more work for moderators who have to accept your messages as long as 
you have not subscribed.
I'll personally no longer accept them (other moderators still could).

This said, I suggest that you create at Jira issue where you give us more 
information.

Notably what you exactly did, including detailed steps to reproduce. Also the 
OFBiz version you used.
To create a Jira please follow https://s.apache.org/yp9d0

Before doing that, did you load the demo data using "gradlew loadAll"?
For more information you may refer to
https://nightlies.apache.org/ofbiz/trunk/readme/html5/README.html

Thanks

Jacques

Le 30/04/2024 à 04:45, Ivan Drinks Sr a écrit :

Trying to create a new tenant produces the following error:

  Detail: Key (group_id)=(SUPER) is not present in table "security_group".))). 
Rolling back transaction.
org.apache.ofbiz.entity.GenericEntityException: org.apache.ofbiz.entity.GenericEntityException: 
Error while inserting: [GenericEntity:UserLoginSecurityGroup][createdStamp,2024-04-30 
02:20:48.57(java.sql.Timestamp)][createdTxStamp,2024-04-30 
02:20:48.562(java.sql.Timestamp)][fromDate,2001-01-01 
12:00:00.0(java.sql.Timestamp)][groupId,SUPER(java.lang.String)][lastUpdatedStamp,2024-04-30 
02:20:48.57(java.sql.Timestamp)][lastUpdatedTxStamp,2024-04-30 
02:20:48.562(java.sql.Timestamp)][userLoginId,rti-admin(java.lang.String)] (SQL Exception while 
executing the following:INSERT INTO public.USER_LOGIN_SECURITY_GROUP (USER_LOGIN_ID, GROUP_ID, 
FROM_DATE, THRU_DATE, LAST_UPDATED_STAMP, LAST_UPDATED_TX_STAMP, CREATED_STAMP, CREATED_TX_STAMP) 
VALUES (?, ?, ?, ?, ?, ?, ?, ?) (ERROR: insert or update on table 
"user_login_security_group" violates foreign key constraint "user_secgrp_grp"
   Detail: Key (group_id)=(SUPER) is not present in table "security_group".)) (Error while 
inserting: [GenericEntity:UserLoginSecurityGroup][createdStamp,2024-04-30 
02:20:48.57(java.sql.Timestamp)][createdTxStamp,2024-04-30 
02:20:48.562(java.sql.Timestamp)][fromDate,2001-01-01 
12:00:00.0(java.sql.Timestamp)][groupId,SUPER(java.lang.String)][lastUpdatedStamp,2024-04-30 
02:20:48.57(java.sql.Timestamp)][lastUpdatedTxStamp,2024-04-30 
02:20:48.562(java.sql.Timestamp)][userLoginId,rti-admin(java.lang.String)] (SQL Exception while executing the 
following:INSERT INTO public.USER_LOGIN_SECURITY_GROUP (USER_LOGIN_ID, GROUP_ID, FROM_DATE, THRU_DATE, 
LAST_UPDATED_STAMP, LAST_UPDATED_TX_STAMP, CREATED_STAMP, CREATED_TX_STAMP) VALUES (?, ?, ?, ?, ?, ?, ?, ?) 
(ERROR: insert or update on table "user_login_security_group" violates foreign key constraint 
"user_secgrp_grp"
   Detail: Key (group_id)=(SUPER) is not present in table "security_group".)))
  at 
org.apache.ofbiz.entity.GenericDelegator.create(GenericDelegator.java:921) 
~[main/:?]
  at 
org.apache.ofbiz.entity.GenericDelegator.storeAll(GenericDelegator.java:1357) 
~[main/:?]
  at 
org.apache.ofbiz.entity.util.EntitySaxReader.writeValues(EntitySaxReader.java:314)
 ~[main/:?]
  at 
org.apache.ofbiz.entity.util.EntitySaxReader.parse(EntitySaxReader.java:284) 
~[main/:?]
  at 
org.apache.ofbiz.entity.util.EntitySaxReader.parse(EntitySaxReader.java:261) 
~[main/:?]
  at 
org.apache.ofbiz.entity.util.EntityDataLoader.loadData(EntityDataLoader.java:267)
 ~[main/:?]
  at 
org.apache.ofbiz.entityext.data.EntityDataLoadContainer.loadData(EntityDataLoadContainer.java:432)
 ~[main/:?]
  at 
org.apache.ofbiz.entityext.data.EntityDataLoadContainer.loadDataForDelegator(EntityDataLoadContainer.java:184)
 ~[main/:?]
  at 
org.apache.ofbiz.entityext.data.EntityDataLoadContainer.init(EntityDataLoadContainer.java:115)
 ~[main/:?]
  at 
org.apache.ofbiz.base.container.ContainerLoader.loadContainer(ContainerLoader.java:140)
 ~[main/:?]
  at 
org.apache.ofbiz.base.container.ContainerLoader.loadContainersFromConfigurations(ContainerLoader.java:104)
 ~[main/:?]
  at 
org.apache.ofbiz.base.container.ContainerLoader.load(ContainerLoader.java:74) 
~[main/:?]
  at 
org.apache.ofbiz.base.start.StartupControlPanel.loadContainers(StartupControlPanel.java:146)
 ~[main/:?]
  at 
org.apache.ofbiz.base.start.StartupControlPanel.start(StartupControlPanel.java:70)
 ~[main/:?]
  at org.apache.ofbiz.base.start.Start.main(Start.java:89) ~[main/:?]
Caused by: org.apache.ofbiz.entity.GenericEntityException: Error while inserting: 
[GenericEntity:UserLoginSecurityGroup][createdStamp,2024-04-30 
02:20:48.57(java.sql.Timestamp)][createdTxStamp,2024-04-30 
02:20:48.562(java.sql.Timestamp)][fromDate,2001-01-01 
12:00:00.0(java.sql.Timestamp)][groupId,SUPER(java.lang.String)][lastUpdatedSta

Re: Crash when logging is set to Verbose

[Jacques Le Roux]

Emad,

Please create a Jira issue for that. Here is how:
https://cwiki.apache.org/confluence/display/OFBIZ/OFBiz+Contributors+Best+Practices

Jacques

Le 25/03/2024 à 22:38, Emad Radwan a écrit :

Hello Community,

I noticed that - even in the online demo - that if logging is set to
verbose and while calling 'Quick receive order' for an approved purchase
order that it crashes the whole session.

Regards,
Emad

Re: Online Demo UI Language

[Jacques Le Roux]

Hi Emad,

On demo if you see another language than yours (or English if there is no translation for your language) then someone else changed for his/her own 
language.
So yes it's annoying but you can change back to another language and it will be stored in the user you use preferences (only as long as the data don't 
change, on demo they often change for security reason)


For changing look for a flag in user preferences UI (at right top for recent themes) or a language word (like german), location and how it's shown 
depend on the theme you use.


It's the same for themes. In other words user preferences are shared, as are all data for a logged in user (because of preferences). We share all on 
demo, it's sometimes indeed disturbing :)


HTH

Jacques


Le 26/03/2024 à 20:28, Emad Radwan a écrit :

Hello Community,

I checked every where to change the current german to english with no luck.
How to do that? Also any restriction to play with this to not disturb other
users?

Regards,
Emad

Re: what is expected date for apache ofbiz 24.0.0

[Jacques Le Roux]

Le 22/03/2024 à 17:24, Sameer Alwosaby a écrit :

what is expected date for apache ofbiz 24.0.0?

Hi Sameer,

We are not sure yet, we are currently discussing about that.

Note that we don't use semantic versioning. We use one similar to Ubuntu's 
(year/month) where we add the release number after (year/month).

So for instance* 18.12.12 means the 18.12 branch was freezed in 2018 December.
Then only bugs are backported from the trunk to this branch.
And the 1st 18.12 release is 18.12.01**

* https://ofbiz.apache.org/download.html
** https://ofbiz.apache.org/release-notes-18.12.01.html

Hope it's clear :)

Jacques

Re: Data Migration

[Jacques Le Roux]

It's the privilege of mature projects, less updates ;)

Le 12/03/2024 à 09:51, Ravee Bandaru a écrit :

Hello Jac.

Thanks so much for the valuable information !!
So, We will continue to use both the Releases - 18 and 22.

Cheers,
Ravee


On Mon, 11 Mar 2024 at 22:26, Jacques Le Roux 
wrote:


Vivek,

We are not quite ready yet for 24.xx.

There should be no problem migrating from/to any of 18/22/24. Only the
code changed not the data.

HTH

Jacques

Le 11/03/2024 à 13:03, Vivek Kumar Prasad a écrit :

Thanks, Jac for your response and such valuable information.

We have been using version 22.01 as a backup since last year and have

data

in it also, so wanted to know if the migration path for version 24.xx is
from
(a)18.12 - 22.01 - 24.xx, or
(b)18.12 - 24.xx (Direct Migration)

Is there any timeline to follow for the release of version 24?

Thanks and Regards,
Vivek Kumar Prasad

On Mon, 11 Mar 2024 at 16:04, Vivek Kumar Prasad <
vivek.pra...@brrsoftwares.com> wrote:


Hello Community,

We were using OfBiz version 18.12 and have a lot of data in the database
and now we want to upgrade to version 22.01, I would appreciate if

someone

could help us with the data migration process, or guide us to

documentation

for the same.

Thanks, and regards,
[image:https://brrsoftwares.com/careers.html]
<https://brrsoftwares.com/careers.html>

   [image: brr.softwares]<https://www.facebook.com/brr.softwares>

  [image:

brrsoftwares]<https://www.linkedin.com/company/brrsoftwares>

[image:

BRRSoftwareSys]<https://twitter.com/BRRSoftwareSys>

*Vivek Kumar Prasad *

Software Engineer

#652, Amrutha Nilayam
<

https://www.google.com/maps/place/Amrutha+Nilayam/@17.4592936,78.3467271,17z/data=!3m1!4b1!4m5!3m4!1s0x3bcb93ae15743eed:0xba5bdf9105717979!8m2!3d17.4592936!4d78.3489158

,

B - Block,

Sriramnagar, Kondapur, Hyderabad-500081


   +91 9650427648

   https://brrsoftwares.com

Re: Data Migration

[Jacques Le Roux]

Vivek,

We are not quite ready yet for 24.xx.

There should be no problem migrating from/to any of 18/22/24. Only the code 
changed not the data.

HTH

Jacques

Le 11/03/2024 à 13:03, Vivek Kumar Prasad a écrit :

Thanks, Jac for your response and such valuable information.

We have been using version 22.01 as a backup since last year and have data
in it also, so wanted to know if the migration path for version 24.xx is
from
(a)18.12 - 22.01 - 24.xx, or
(b)18.12 - 24.xx (Direct Migration)

Is there any timeline to follow for the release of version 24?

Thanks and Regards,
Vivek Kumar Prasad

On Mon, 11 Mar 2024 at 16:04, Vivek Kumar Prasad <
vivek.pra...@brrsoftwares.com> wrote:


Hello Community,

We were using OfBiz version 18.12 and have a lot of data in the database
and now we want to upgrade to version 22.01, I would appreciate if someone
could help us with the data migration process, or guide us to documentation
for the same.

Thanks, and regards,
[image:https://brrsoftwares.com/careers.html]


  [image: brr.softwares]   [image:
brrsoftwares]  [image:
BRRSoftwareSys]

*Vivek Kumar Prasad *

Software Engineer

#652, Amrutha Nilayam
,
B - Block,

Sriramnagar, Kondapur, Hyderabad-500081


  +91 9650427648

  https://brrsoftwares.com

Re: Data Migration

[Jacques Le Roux]

Hi Vivek,

FYI: the 22.01 is not officially deprecated but at 90% it will be abandoned and 
replaced by a new 24.xx version yet to come.
For instance we are mostly no longer backporting bug to 22.01, notably security 
ones.

Jacques

Le 11/03/2024 à 11:34, Vivek Kumar Prasad a écrit :

Hello Community,

We were using OfBiz version 18.12 and have a lot of data in the database
and now we want to upgrade to version 22.01, I would appreciate if someone
could help us with the data migration process, or guide us to documentation
for the same.

Thanks, and regards,
[image: https://brrsoftwares.com/careers.html]


  [image: brr.softwares]   [image:
brrsoftwares]  [image:
BRRSoftwareSys] 

*Vivek Kumar Prasad *

Software Engineer

#652, Amrutha Nilayam
,
B - Block,

Sriramnagar, Kondapur, Hyderabad-500081


  +91 9650427648

  https://brrsoftwares.com

CVE-2024-25065: Apache OFBiz: Path traversal allowing authentication bypass.

[Jacques Le Roux]

Severity: critical

Affected versions:

- Apache OFBiz before 18.12.12

Description:

Possible path traversal in Apache OFBiz allowing authentication bypass.
Users are recommended to upgrade to version 18.12.12, that fixes the issue.

Credit:

YunPeng - 郭 运鹏  (finder)

References:

https://ofbiz.apache.org/download.html
https://ofbiz.apache.org/security.html
https://ofbiz.apache.org/release-notes-18.12.12.html
https://issues.apache.org/jira/browse/OFBIZ-12887
https://ofbiz.apache.org/
https://www.cve.org/CVERecord?id=CVE-2024-25065

https://ofbiz.apache.org/security.html: CVE-2024-23946: Apache OFBiz: Path traversal or file inclusion

[Jacques Le Roux]

Severity: critical

Affected versions:

- Apache OFBiz before 18.12.12

Description:

Possible path traversal in Apache OFBiz allowing file inclusion.
Users are recommended to upgrade to version 18.12.12, that fixes the issue.

Credit:

Arun Shaji from trendmicro.com (finder)

References:

https://ofbiz.apache.org/download.html
https://ofbiz.apache.org/security.html
https://ofbiz.apache.org/release-notes-18.12.12.html
https://issues.apache.org/jira/browse/OFBIZ-12884
https://ofbiz.apache.org/
https://www.cve.org/CVERecord?id=CVE-2024-23946

Re: Anyone familiar with CalcTax errors?

[Jacques Le Roux]

It was that, the patch is at 
https://github.com/apache/ofbiz-framework/commit/2bb296de52.patch

HTH

Jacques

Le 21/02/2024 à 09:31, Jacques Le Roux a écrit :

Hi Steve,

I believe it's related to https://issues.apache.org/jira/browse/OFBIZ-12686
I then did not backport to 118.12. I'll check the reason, maybe a simple 
oversight

So You don't need to create a Jira for now.

Jacques

Le 21/02/2024 à 07:16, Jacques Le Roux a écrit :

Hi Steve,

OK, I'll have a look

Jacques

Le 20/02/2024 à 20:59, Steven Selverston a écrit :

Hi Jacques,
Thank you, great find, looks like it was fixed in Trunk!! I had been playing 
with 18.12 only.
Best,
Steve




Sent with Proton Mail secure email.

On Tuesday, February 20th, 2024 at 6:21 AM, Jacques Le Roux 
 wrote:


Hi Steven,

I can't reproduce in trunk. I'm able to create the purchase order. What version 
did you use?

You need to give us more information. The best way to do that is to create a 
Jira issue, just follow
https://cwiki.apache.org/confluence/display/OFBIZ/OFBiz+Contributors+Best+Practices

You may reproduce on demo server: https://ofbiz.apache.org/ofbiz-demos.html

TIA

Jacques

Le 06/02/2024 à 16:23, Steven Selverston a écrit :


Dear OFBiz Users,

I am trying to work through a basic purchase order process (as might be used to order stock for inventory), using the demo version of OFBiz. I 
replicated this using the live demo at apache.org as well so I know it does not have anything to do with my installation.


How can I address this? Here are the basic steps I am taking and the error 
message I get (below).

Thank you for any advice!

Best,

Steve

1.) Order

2.) Order Entry

3.) Purchase Order from Demo Supplier (Internal Organization = "Company")

4.) Add product to order (GS-1000 Tiny Gizmo)

5.) Finalize

6.) Continue

7.) Continue

8.) Continue

Error!

The Following Errors Occurred:

Problem occurred in tax service (Service [calcTax] target threw an unexpected exception (null)) (Service [calcTax] target threw an unexpected 
exception (null))

Re: Anyone familiar with CalcTax errors?

[Jacques Le Roux]

Hi Steve,

I believe it's related to https://issues.apache.org/jira/browse/OFBIZ-12686
I then did not backport to 118.12. I'll check the reason, maybe a simple 
oversight

So You don't need to create a Jira for now.

Jacques

Le 21/02/2024 à 07:16, Jacques Le Roux a écrit :

Hi Steve,

OK, I'll have a look

Jacques

Le 20/02/2024 à 20:59, Steven Selverston a écrit :

Hi Jacques,
Thank you, great find, looks like it was fixed in Trunk!! I had been playing 
with 18.12 only.
Best,
Steve




Sent with Proton Mail secure email.

On Tuesday, February 20th, 2024 at 6:21 AM, Jacques Le Roux 
 wrote:


Hi Steven,

I can't reproduce in trunk. I'm able to create the purchase order. What version 
did you use?

You need to give us more information. The best way to do that is to create a 
Jira issue, just follow
https://cwiki.apache.org/confluence/display/OFBIZ/OFBiz+Contributors+Best+Practices

You may reproduce on demo server: https://ofbiz.apache.org/ofbiz-demos.html

TIA

Jacques

Le 06/02/2024 à 16:23, Steven Selverston a écrit :


Dear OFBiz Users,

I am trying to work through a basic purchase order process (as might be used to order stock for inventory), using the demo version of OFBiz. I 
replicated this using the live demo at apache.org as well so I know it does not have anything to do with my installation.


How can I address this? Here are the basic steps I am taking and the error 
message I get (below).

Thank you for any advice!

Best,

Steve

1.) Order

2.) Order Entry

3.) Purchase Order from Demo Supplier (Internal Organization = "Company")

4.) Add product to order (GS-1000 Tiny Gizmo)

5.) Finalize

6.) Continue

7.) Continue

8.) Continue

Error!

The Following Errors Occurred:

Problem occurred in tax service (Service [calcTax] target threw an unexpected exception (null)) (Service [calcTax] target threw an unexpected 
exception (null))

Re: Anyone familiar with CalcTax errors?

[Jacques Le Roux]

Hi Steve,

OK, I'll have a look

Jacques

Le 20/02/2024 à 20:59, Steven Selverston a écrit :

Hi Jacques,
Thank you, great find, looks like it was fixed in Trunk!! I had been playing 
with 18.12 only.
Best,
Steve




Sent with Proton Mail secure email.

On Tuesday, February 20th, 2024 at 6:21 AM, Jacques Le Roux 
 wrote:


Hi Steven,

I can't reproduce in trunk. I'm able to create the purchase order. What version 
did you use?

You need to give us more information. The best way to do that is to create a 
Jira issue, just follow
https://cwiki.apache.org/confluence/display/OFBIZ/OFBiz+Contributors+Best+Practices

You may reproduce on demo server: https://ofbiz.apache.org/ofbiz-demos.html

TIA

Jacques

Le 06/02/2024 à 16:23, Steven Selverston a écrit :


Dear OFBiz Users,

I am trying to work through a basic purchase order process (as might be used to 
order stock for inventory), using the demo version of OFBiz. I replicated this 
using the live demo at apache.org as well so I know it does not have anything 
to do with my installation.

How can I address this? Here are the basic steps I am taking and the error 
message I get (below).

Thank you for any advice!

Best,

Steve

1.) Order

2.) Order Entry

3.) Purchase Order from Demo Supplier (Internal Organization = "Company")

4.) Add product to order (GS-1000 Tiny Gizmo)

5.) Finalize

6.) Continue

7.) Continue

8.) Continue

Error!

The Following Errors Occurred:

Problem occurred in tax service (Service [calcTax] target threw an unexpected 
exception (null)) (Service [calcTax] target threw an unexpected exception 
(null))

Re: Anyone familiar with CalcTax errors?

[Jacques Le Roux]

Hi Steven,

I can't reproduce in trunk. I'm able to create the purchase order. What version 
did you use?

You need to give us more information. The best way to do that is to create a 
Jira issue, just follow
https://cwiki.apache.org/confluence/display/OFBIZ/OFBiz+Contributors+Best+Practices

You may reproduce on demo server: https://ofbiz.apache.org/ofbiz-demos.html

TIA

Jacques

Le 06/02/2024 à 16:23, Steven Selverston a écrit :

Dear OFBiz Users,

I am trying to work through a basic purchase order process (as might be used to 
order stock for inventory), using the demo version of OFBiz. I replicated this 
using the live demo at apache.org as well so I know it does not have anything 
to do with my installation.

How can I address this? Here are the basic steps I am taking and the error 
message I get (below).

Thank you for any advice!

Best,

Steve

1.) Order

2.) Order Entry

3.) Purchase Order from Demo Supplier (Internal Organization = "Company")

4.) Add product to order (GS-1000 Tiny Gizmo)

5.) Finalize

6.) Continue

7.) Continue

8.) Continue

Error!

The Following Errors Occurred:

Problem occurred in tax service (Service [calcTax] target threw an unexpected 
exception (null)) (Service [calcTax] target threw an unexpected exception 
(null))

Re: A question about issues encountered on Ofbiz trunk

[Jacques Le Roux]

Hi Ernest,

The best way is to follow 
https://cwiki.apache.org/confluence/display/OFBIZ/OFBiz+Contributors+Best+Practices
When it's a bug we fix the trunk and backport in release branches

HTH

Jacques

Le 20/02/2024 à 05:33, Ernest Hocking a écrit :

Good morning

Can I seek some clarification about how to report issues encountered on
OIfbiz trunk?

If I try to run find on
"facility/control/ViewFacilityInventoryByProduct?facilityId=MyRetailStore"
I get an error message:

java.lang.IllegalArgumentException: Error running script at location
[component://product/src/main/groovy/org/apache/ofbiz/product/facility/facility/ViewFacilityInventoryByProduct.groovy]:
groovy.lang.MissingMethodException: No signature of method:
org.apache.ofbiz.product.facility.facility.ViewFacilityInventoryByProduct.from()
is applicable for argument types:
(org.apache.ofbiz.entity.model.DynamicViewEntity) values:
[org.apache.ofbiz.entity.model.DynamicViewEntity@330fa6e9] Possible
solutions: from(java.lang.String), run(), run(), find(), grep(),
error(java.lang.String)

I tried pulling the latest version and still get the error message.

SImilarly when I try the facility reports page:

facility/control/InventoryReports?facilityId=MyRetailStore

Should I report this sort of issue here or is there a preferred  method for
reporting trunk related issues?

thanks and kind regards

Ernest

Re: css in form fields

[Jacques Le Roux]

Hi Ernest,

In 2010, while working on a custom project with David E. Jones and Andrew Zeneski (the OFBiz founders), I learnt a lot in a short time. With their 
inspiration I got the idea. Then the team improved it multiple times.


At this same moment, I also put in the currently still misnamed "Multiple 
drop-downs"*.
You can find it at 
https://demo-trunk.ofbiz.apache.org/example/control/FormWidgetExamples.
As selecting multiple lines in a dropdown is not a very good UI experience, I then used https://select2.github.io to transform it to "Multiple Select" 
which is a better option.


* I have just pushed the label changes.

HTH

Jacques

Le 18/02/2024 à 06:18, Ernest Hocking a écrit :

Good morning Florian

I eventually got around to this and it works a treat - thanks for
the pointer

Also thanks to the team that developed the extension that allows dependent
field look up - these days it's high on user expectations that the system
thinks for them like this.  I saw Jaques name on one of the items but
suspect that there must be others.

Thanks and kind regards

Ernest

On Thu, Jan 18, 2024 at 5:11 PM Florian Motteau
wrote:


I guess that would be your 2 options if you don't want to modify the core.

Glad to help :)

Le 18/01/2024 à 10:33, Ernest Hocking a écrit :

Good afternoon Florian

Many thanks for the quick response and cl;arification  - it's good to

know

rather than trying things in the hope that it might work .  I'll check

out

the references.

As the comparative cash flow report is part of the core accounting
application (rather than a plug in) I didn't want to make too many

changes

I guess the two options are

 1. a plugin with freemarker templates,
 2. just replace the 4 grids in the core accounting application with
 freemarker and migrate the change during upgrades.


thanks and kind regards

Ernest




On Thu, Jan 18, 2024 at 4:17 PM Florian Motteau <

flor...@motteau-martins.net>

wrote:


Hello Ernest,

Happy new year to you !

Currently "title-area-style" attribute on field element cannot be set
dynamically in XML through a groovy snippet or a simple expression. You
can compare its implementation with the "disabled" attribute in
ModelFormFieldBuilder, which involves a FlexibleStringExpander :




https://github.com/apache/ofbiz-framework/blob/d17d06fd7c654621446320a98b45b3ebb859c648/framework/widget/src/main/java/org/apache/ofbiz/widget/model/ModelFormFieldBuilder.java#L108

vs




https://github.com/apache/ofbiz-framework/blob/d17d06fd7c654621446320a98b45b3ebb859c648/framework/widget/src/main/java/org/apache/ofbiz/widget/model/ModelFormFieldBuilder.java#L119

IMHO it would be a great improvement to switch widget-style,
widget-area-style, tooltip-style, title-style and title-area-style (from
a front-end developer perspective at least :), this kind of conditionnal
HTML rendering should be a given), but we may have to consider a
potential performance impact.

"red-when" has a specific behavior : it checks a condition on the
thruDate field value (the field would be red if now < entity.thruDate,
or the other way around).

You can checkhttps://github.com/apache/ofbiz-framework/pull/548  for an
implementation example.

Le 18/01/2024 à 09:47, Ernest Hocking a écrit :

Happy New Year everyone

a question:  "is it possible to conditionally colour a field in a form"

Based on the grid ComparativeCashFlowBalanceTotals in
ReportFinancialSummaryForms.xml

I tried the following groovy



but get the error:

The value of attribute "title-area-style" associated with an element

type

"field" must not contain the '<'

character.org.xml.sax.SAXParseException;

I tried using alternatives such as

if (Maths.signum(balance1).equals(-1) )

etc but had no success to date.  Is there a number equivalent of

"red-when"

that is available for date fields.

Any suggestions on how this could be implemented would be appreciated

I suspect I've overlooked something very obvious

thanks and kind regards

Ernest

Re: ./gradlew pullAllPluginsSource FAILURE: Build failed with an exception.

[Jacques Le Roux]

e(SessionFailureReportingActionExecuter.java:44)
at
org.gradle.tooling.internal.provider.SetupLoggingActionExecuter.execute(SetupLoggingActionExecuter.java:46)
at
org.gradle.tooling.internal.provider.SetupLoggingActionExecuter.execute(SetupLoggingActionExecuter.java:30)
at
org.gradle.launcher.daemon.server.exec.ExecuteBuild.doBuild(ExecuteBuild.java:67)
at
org.gradle.launcher.daemon.server.exec.BuildCommandOnly.execute(BuildCommandOnly.java:36)
at
org.gradle.launcher.daemon.server.api.DaemonCommandExecution.proceed(DaemonCommandExecution.java:122)
at
org.gradle.launcher.daemon.server.exec.WatchForDisconnection.execute(WatchForDisconnection.java:37)
at
org.gradle.launcher.daemon.server.api.DaemonCommandExecution.proceed(DaemonCommandExecution.java:122)
at
org.gradle.launcher.daemon.server.exec.ResetDeprecationLogger.execute(ResetDeprecationLogger.java:26)
at
org.gradle.launcher.daemon.server.api.DaemonCommandExecution.proceed(DaemonCommandExecution.java:122)
at
org.gradle.launcher.daemon.server.exec.RequestStopIfSingleUsedDaemon.execute(RequestStopIfSingleUsedDaemon.java:34)
at
org.gradle.launcher.daemon.server.api.DaemonCommandExecution.proceed(DaemonCommandExecution.java:122)
at
org.gradle.launcher.daemon.server.exec.ForwardClientInput$2.call(ForwardClientInput.java:74)
at
org.gradle.launcher.daemon.server.exec.ForwardClientInput$2.call(ForwardClientInput.java:72)
at org.gradle.util.Swapper.swap(Swapper.java:38)
at
org.gradle.launcher.daemon.server.exec.ForwardClientInput.execute(ForwardClientInput.java:72)
at
org.gradle.launcher.daemon.server.api.DaemonCommandExecution.proceed(DaemonCommandExecution.java:122)
at
org.gradle.launcher.daemon.server.exec.LogAndCheckHealth.execute(LogAndCheckHealth.java:55)
at
org.gradle.launcher.daemon.server.api.DaemonCommandExecution.proceed(DaemonCommandExecution.java:122)
at
org.gradle.launcher.daemon.server.exec.LogToClient.doBuild(LogToClient.java:62)
at
org.gradle.launcher.daemon.server.exec.BuildCommandOnly.execute(BuildCommandOnly.java:36)
at
org.gradle.launcher.daemon.server.api.DaemonCommandExecution.proceed(DaemonCommandExecution.java:122)
at
org.gradle.launcher.daemon.server.exec.EstablishBuildEnvironment.doBuild(EstablishBuildEnvironment.java:81)
at
org.gradle.launcher.daemon.server.exec.BuildCommandOnly.execute(BuildCommandOnly.java:36)
at
org.gradle.launcher.daemon.server.api.DaemonCommandExecution.proceed(DaemonCommandExecution.java:122)
at
org.gradle.launcher.daemon.server.exec.StartBuildOrRespondWithBusy$1.run(StartBuildOrRespondWithBusy.java:50)
at
org.gradle.launcher.daemon.server.DaemonStateCoordinator$1.run(DaemonStateCoordinator.java:295)
at
org.gradle.internal.concurrent.ExecutorPolicy$CatchAndRecordFailures.onExecute(ExecutorPolicy.java:63)
at
org.gradle.internal.concurrent.ManagedExecutorImpl$1.run(ManagedExecutorImpl.java:46)
at
org.gradle.internal.concurrent.ThreadFactoryImpl$ManagedThreadRunnable.run(ThreadFactoryImpl.java:55)


* Get more help athttps://help.gradle.org

BUILD FAILED in 0s
ofbiz@ApacheOfBiz:~/ofbiz-framework$



On Tue, Feb 6, 2024 at 9:43 AM Jacques Le Roux
wrote:


Nevermind, as long as it works, all is OK ;)

Le 06/02/2024 à 15:30, BK a écrit :

Looks like I fixed the java, still working through some other things
though. My apologies on this... I never quite learned how to set these
environments up properly and it's a wrestling match every time.

Re: ./gradlew pullAllPluginsSource FAILURE: Build failed with an exception.

[Jacques Le Roux]

Nevermind, as long as it works, all is OK ;)

Le 06/02/2024 à 15:30, BK a écrit :

Looks like I fixed the java, still working through some other things
though. My apologies on this... I never quite learned how to set these
environments up properly and it's a wrestling match every time.

Re: ./gradlew pullAllPluginsSource FAILURE: Build failed with an exception.

[Jacques Le Roux]

Hi Ryan,

First which OFBiz version are you using? R18 needs JDK 8. Later (trunk or R22) 
uses JDK 17, IIRW JDK 11 works also.

What is the failure you cross? Please past the console log (text). Also before try a 
"update-alternatives --list java" in case...

You should not have any problem with your OS.
For instance I still mostly use Win7 (yep).
And even recent OFBiz versions work on almost all Ubuntu versions.

Allow me an advice, keep you notes as a treasure.
Like you would keep a daily and a different weekly backups.
They can "save your life" sometimes, especially a complete weekly backup, shits 
happen...
That's my experience ;)

HTH

Jacques

Le 06/02/2024 à 12:38, BK a écrit :

Hello. First I tried to install following github readme stating only java
17 needs installed.

Next I tried the wiki which suggests to install openjdk-8-jdk, so I
installed temurin-8-jdk and updated java home environment variable.

Both ways I seem to produce a failure with gradle. I had gotten it to work
some time ago with openjdk8, but it's been a while since I did the install
and I lost my notes.

Any suggestions? This is on Debian 12. I suppose I'm open to a different
distribution if it's easier.

Best,
Ryan

Re: Use of the grid widget

[Jacques Le Roux]

Hi Ernest,

Most of the time there are no differences between grids and forms. It seems you 
crossed one.
Please create a Jira with the information below and we will try to understand 
and maybe fix it.

The best would be to upload the complete work you did for us to test in trunk.
BTW, which OFBiz version are you using?

TIA

Jacques

Le 31/01/2024 à 02:32, Ernest Hocking a écrit :

Good morning everyone

I've been trying to use the grid widget and have some questions. I've
basically copied the product ListProduct grid from ProductForms.xml, and
added the target to the controller.xml  into a plugin but encountered some
issues:

1.   Next/previous pagination seemes not to work:  Page 2,3,.. just repeat
page 1.  If I set the "items per page" to a value greater than the
number of returned records the grid shows all of them.  How do I fix
pagination so tjhat ?

2.  The product example uses:  list-name="list" in the grid
specification and the performFInd:

 
 
 
 

I tried to rename the list to something else e.g. ListDetail in the grid
specification and the service call but then no records are returned.

Any thoughts on how to fix the pagination would be welcome.  Is there a
document describing how to use the grid widget?  I did a search online but
did not find anything.

thanks and kind regards

Ernest

Re: Error in calling SOAPServices

[Jacques Le Roux]

Hi Ansari,

Unfortunately images are not accepted by this ML. You may create a related Jira 
and put images there for people to see them.

Jacques

Le 02/02/2024 à 10:15, ansariBE a écrit :

Dear Experts,

With any version of ofbiz tried with 17 and 18.12.05, whenever invoking SOAPService getting the following error. Required services are configured 
with export set to true. With Ofbiz UI, in servicelist able to see the service and download wsdl. But when the url to download to wsdl is invoked or 
through SOAPUI, it is not working.


image.png

image.png

image.png
Mit freundlichen Grüßen
*Ansari*

Re: Ofbiz for use a core System for indigenous States

[Jacques Le Roux]

Hi Andreas,

Apart if you are interested in history, the German Empire is maybe a large 
versatile example for management of indigenous states and federations :).

Anyway, I'd say that, as OFBiz especially depends on its DB, it also depends of the material you put in it. So that should be possible if you put 
enough material.


This may interest you: 
https://cwiki.apache.org/confluence/display/OFBIZ/Distributed+Entity+Cache+Clear+%28DCC%29+Mechanism

This said I don't really know what "bitemporal data" means.

HTH

Jacques

Le 31/01/2024 à 09:54, Andreas von Preußen a écrit :

Dear List,

I wonder to what degree ofbiz is allready usable as a core system for the 
management of indigenous states and federations.

As an examble, I would like to mention the German Empire:

- ~30 crown companies
- 60-80 million home right owners
- 20-40 million foreigners
- 1 Empire Crown company
- up to 7 billion foreign clients

All files, at minimum files related to partner related data including  workflow 
definitions should be held as bitemporal data.

What do you think?

Re: Error in Ofbiz login

[Jacques Le Roux]

Hi Ansari,

Unfortunately images are not accepted by this ML. You may refer to the related Jira for people to see these images. By putting them there if they are 
not already.


Jacques

Le 02/02/2024 à 10:09, ansariBE a écrit :

Dear experts,

I tried to setup ofbiz 18.12.11 in my laptop and I have issues in login.

Software Versions:
OS: Windows 11 pro
Java: 1.8.0_401
Powershell: 7.4

Issue snaps:
image.png

image.png

image.png

image.png

image.png

Mit freundlichen Grüßen
*Ansari*

Re: CVE-2023-51467-release18.12.11

[Jacques Le Roux]

It's not ready yet. We had to restart the vote. It should be available in a 
week or 2

Jacques

Le 25/01/2024 à 16:02, Sameer Alwosaby a écrit :

Where we can find 18.12.12 version please?

On Thu, 18 Jan 2024, 13:42 Jacques Le Roux, 
wrote:


Hi Vikas,

There is currently a vote for the 18.12.12 version. Better wait for this
new version

HTH

Jacques

Le 12/01/2024 à 08:21, Vikas Jaiswal a écrit :

Hello,
I don’t see the tag for release18.12.11 where the

vulnerability Active Exploitation of Apache OFBiz Zero-day Vulnerability -
NHS Digital<https://digital.nhs.uk/cyber-alerts/2024/cc-4430>  is fixed.

Regards,
Vikas

Sent from Mail<https://go.microsoft.com/fwlink/?LinkId=550986>  for

Windows

Re: CVE-2023-51467-release18.12.11

[Jacques Le Roux]

Hi Vikas,

There is currently a vote for the 18.12.12 version. Better wait for this new 
version

HTH

Jacques

Le 12/01/2024 à 08:21, Vikas Jaiswal a écrit :

Hello,
   I don’t see the tag for release18.12.11 where the vulnerability Active 
Exploitation of Apache OFBiz Zero-day Vulnerability - NHS 
Digital  is fixed.
Regards,
Vikas

Sent from Mail  for Windows

Re: upgrade ofbiz version

[Jacques Le Roux]

Hi Vikas,

Mostly 
https://cwiki.apache.org/confluence/display/OFBIZ/Revisions+Requiring+Data+Migration+-+upgrade+ofbiz
 for data changes

The rest depends on how you have handled your own changes in OFBiz OOTB (Out Of The Box) code. As you may know plugins are the recommended way. If you 
made changes in framework and applications it becomes more complicated. Also a themes main sub-dir has been put in...


That's often some work, good luck

Jacques

Le 26/12/2023 à 09:15, Vikas Jaiswal a écrit :

Hi,
  I am new to ofbiz. Can someone please point to the resources that would 
be helpful in migrating ofbiz app from 12.X to 18.X.


Thanks,
Vikas

Sent from Mail  for Windows

Re: Looking for expertise in OFBIZ 18.2 and FrontEnd JQuery based + SOAP

[Jacques Le Roux]

Hi Mohammed,

Your message has been moderated, else it would not have reached this Mailing 
List.

Please subscribe to the user ML for questions and then use your email client.
See why here http://ofbiz.apache.org/mailing-lists.html.

You will get a better support, people can answer you on the ML.
The wider the audience the better the answers you might get.

Also it's more work for moderators who have to accept your messages as long as 
you have not subscribed.
I'll personally no longer accept them (other moderators still could).

Thanks

This, said hopefully someone on this ML will be interested by your request...

Jacques

Le 24/12/2023 à 15:25, Mohammed Fadili a écrit :

Hi All,

I hope this is the right channel to request support from experts.

We are using Ofbiz in multitenant mode as a backend with a client App on
JQuery. We use SOAP to call ofbiz services from the frontend with an
external login key.

At the moment we are migrating to ofbiz 18.2.

We are looking for help from an expert who will provide us with:
- an example of JQuery app with a Login screen
- after login, the app will request an ofbiz service using soap

Please submit a quote, your references and availability to provide such a
service.

Looking forward to hearing from you.

M. Fadili
www.ajiel.com

CVE-2023-49070: Pre-auth RCE in Apache Ofbiz 18.12.09 due to XML-RPC still present

[Jacques Le Roux]

Severity: moderate

Affected versions:

- Apache OFBiz before 18.12.10

Description:

Pre-auth RCE in Apache Ofbiz 18.12.09.

It's due to XML-RPC no longer maintained still present.
This issue affects Apache OFBiz: before 18.12.10. 
Users are recommended to upgrade to version 18.12.10

This issue is being tracked as OFBIZ-12812 

Credit:

Siebene@ (finder)

References:

https://ofbiz.apache.org/download.html
https://ofbiz.apache.org/security.html
https://ofbiz.apache.org/release-notes-18.12.10.html
https://ofbiz.apache.org/
https://www.cve.org/CVERecord?id=CVE-2023-49070
https://issues.apache.org/jira/browse/OFBIZ-12812

Re: Order manager PDF not working

[Jacques Le Roux]

Fixed with https://issues.apache.org/jira/browse/OFBIZ-12867

Le 20/11/2023 à 11:48, Ernest Hocking a écrit :

Thanks Jacques

Kind regards

Ernest

On Mon, 20 Nov 2023, 17:09 Jacques Le Roux, 
wrote:


Hi Ernest,

It works in next, so I guess in stable too. So must be a change since.
I'll have a look...

Jacques

Le 20/11/2023 à 05:08, Ernest Hocking a écrit :

Good morning everyone,

I've noticed that the print PDF link in orderview is not working and

fails

with the message.  Error "Error: failed to load PDF document"

I've tried on both trunk, and on the demo site:



https://demo-trunk.ofbiz.apache.org/ordermgr/control/orderview?orderId=DEMO10090

Has any else seen this and knows of a fix.]

thanks in advance

Ernest

Re: Order manager PDF not working

[Jacques Le Roux]

Hi Ernest,

It works in next, so I guess in stable too. So must be a change since. I'll 
have a look...

Jacques

Le 20/11/2023 à 05:08, Ernest Hocking a écrit :

Good morning everyone,

I've noticed that the print PDF link in orderview is not working and fails
with the message.  Error "Error: failed to load PDF document"

I've tried on both trunk, and on the demo site:

https://demo-trunk.ofbiz.apache.org/ordermgr/control/orderview?orderId=DEMO10090

Has any else seen this and knows of a fix.]

thanks in advance

Ernest

Re: REST API plugin won't build under 18.12.08

[Jacques Le Roux]

Hi Ernest,

It should not be a problem. You can checkhttps://s.apache.org/x4pk8 Jacques

Le 08/11/2023 à 05:42, Ernest Hocking a écrit :

Good morning Jacques

Many thanks for your insights into truck,   22.01 etc.

I've tried the trunk REST-Api and it works (y) so subject to the obvious
question - does migrating from 18.12.08 to trunk require any database
changes or is it as per your last advice on upgrading to 18.12.08 that its
mainly function and security?

If its a simple upgrade then I'll move to trunk from 18.12.08

thanks and kind regards

Ernbest



On Tue, Nov 7, 2023 at 8:22 PM Jacques Le Roux
wrote:


Actually the 22.01 branch is eventually not expected to be released . We
would pass directly to 23.xx, if ever exists. Else we would create a 24.xx
branch.

For now only the 18.12 branch is official.

HTH

Le 07/11/2023 à 10:56, Ernest Hocking a écrit :

Good evening Jacques,

Thanks for the response.  When you suggest using the 22.01 branch can I

ask

how close this might be to general availability so that I can
decide whether to use that.  I have a friend that would like to try Ofbiz
in his factory so I am looking to reassure him that Ofbiz meets all of

his

business requirements.  I

thanks and kind regards

Ernest

On Tue, Nov 7, 2023 at 4:25 PM Jacques Le Roux <

jacques.le.r...@les7arts.com>

wrote:


Hi Ernest,

Indeed, the REST API plugin has been added after the creation of the

18.12

branch :https://issues.apache.org/jira/browse/OFBIZ-11328

So you will need to use the trunk or the 22.01 branch. We expect to

create

a 23.xx branch, but that's not quite sure.

Jacques

Le 07/11/2023 à 04:50, Ernest Hocking a écrit :

Good morning everyone

I've tried to install the REST API plugin into 18.,12.08.   Running
./gradlew build I get a series of errors similar to:



/home/ernest/ofbiz-18.12.08/plugins/rest-api/src/main/java/org/apache/ofbiz/ws/rs/resources/OFBizServiceResource.java:9

3: error: cannot find symbol
   if (service != null && service.isExport() &&
UtilValidate.isNotEmpty(service.getAction())) {
 ^
 symbol:   method isExport()
 location: variable service of type ModelService

in OFBizServiceResource.java I see:

ModelService service = context.getModelService(serviceName);
   if (service != null && service.isExport() &&
UtilValidate.isNotEmpty(service.getAction())) {

checking the class definition for ModelService  there appears to be no
method definitions for the isExport(),

getAction(),isAuth(),getName().

so it appear that the plugin has not provided these additional methods.

Any help in locating a fix would be appreciated

thanks in advance

Ernest

Re: REST API plugin won't build under 18.12.08

[Jacques Le Roux]

Actually the 22.01 branch is eventually not expected to be released . We would pass directly to 23.xx, if ever exists. Else we would create a 24.xx 
branch.


For now only the 18.12 branch is official.

HTH

Le 07/11/2023 à 10:56, Ernest Hocking a écrit :

Good evening Jacques,

Thanks for the response.  When you suggest using the 22.01 branch can I ask
how close this might be to general availability so that I can
decide whether to use that.  I have a friend that would like to try Ofbiz
in his factory so I am looking to reassure him that Ofbiz meets all of his
business requirements.  I

thanks and kind regards

Ernest

On Tue, Nov 7, 2023 at 4:25 PM Jacques Le Roux 
wrote:


Hi Ernest,

Indeed, the REST API plugin has been added after the creation of the 18.12
branch : https://issues.apache.org/jira/browse/OFBIZ-11328

So you will need to use the trunk or the 22.01 branch. We expect to create
a 23.xx branch, but that's not quite sure.

Jacques

Le 07/11/2023 à 04:50, Ernest Hocking a écrit :

Good morning everyone

I've tried to install the REST API plugin into 18.,12.08.   Running
./gradlew build I get a series of errors similar to:



/home/ernest/ofbiz-18.12.08/plugins/rest-api/src/main/java/org/apache/ofbiz/ws/rs/resources/OFBizServiceResource.java:9

3: error: cannot find symbol
  if (service != null && service.isExport() &&
UtilValidate.isNotEmpty(service.getAction())) {
^
symbol:   method isExport()
location: variable service of type ModelService

in OFBizServiceResource.java I see:

   ModelService service = context.getModelService(serviceName);
  if (service != null && service.isExport() &&
UtilValidate.isNotEmpty(service.getAction())) {

checking the class definition for ModelService  there appears to be no
method definitions for the isExport(),

getAction(),isAuth(),getName().

so it appear that the plugin has not provided these additional methods.

Any help in locating a fix would be appreciated

thanks in advance

Ernest

CVE-2023-46819: Apache OFBiz: Execution of Solr plugin queries without authentication

[Jacques Le Roux]

Severity: moderate

Affected versions:

- Apache OFBiz before 18.12.09

Description:

Missing Authentication in Apache Software Foundation Apache OFBiz when using 
the Solr plugin.
This issue affects Apache OFBiz: before 18.12.09. 

Users are recommended to upgrade to version 18.12.09

Credit:

Anonymous by demand (finder)

References:

https://ofbiz.apache.org/download.html
https://ofbiz.apache.org/security.html
https://ofbiz.apache.org/release-notes-18.12.09.html
https://ofbiz.apache.org/
https://www.cve.org/CVERecord?id=CVE-2023-46819

Re: REST API plugin won't build under 18.12.08

[Jacques Le Roux]

Hi Ernest,

Indeed, the REST API plugin has been added after the creation of the 18.12 
branch : https://issues.apache.org/jira/browse/OFBIZ-11328

So you will need to use the trunk or the 22.01 branch. We expect to create a 
23.xx branch, but that's not quite sure.

Jacques

Le 07/11/2023 à 04:50, Ernest Hocking a écrit :

Good morning everyone

I've tried to install the REST API plugin into 18.,12.08.   Running
./gradlew build I get a series of errors similar to:

/home/ernest/ofbiz-18.12.08/plugins/rest-api/src/main/java/org/apache/ofbiz/ws/rs/resources/OFBizServiceResource.java:9
3: error: cannot find symbol
 if (service != null && service.isExport() &&
UtilValidate.isNotEmpty(service.getAction())) {
   ^
   symbol:   method isExport()
   location: variable service of type ModelService

in OFBizServiceResource.java I see:

  ModelService service = context.getModelService(serviceName);
 if (service != null && service.isExport() &&
UtilValidate.isNotEmpty(service.getAction())) {

checking the class definition for ModelService  there appears to be no
method definitions for the isExport(), getAction(),isAuth(),getName().

so it appear that the plugin has not provided these additional methods.

Any help in locating a fix would be appreciated

thanks in advance

Ernest

Re: Enabling imap inbound email in 18.12.05

[Jacques Le Roux]

Hi Ernest,

It exists commented out at this location since this commit: 
http://svn.apache.org/viewvc?view=revision&revision=1365889
The initial form is very old (pre Apache era) and has not changed much since. I 
guess only by https://issues.apache.org/jira/browse/OFBIZ-1967

It seems you spotted something that changed since. I suggest to create a Jira. 
And a patch, or a PR if you prefer.

TIA

Jacques

Le 15/10/2023 à 12:15, Ernest Hocking a écrit :

   Good afternoon everyone


I have now resolved this issue.  Checking the configuration in
framework/service/ofbiz-component.xml it seems that the line

   is incomplete .
Based on the config for the container  rmi-disaptcher there seemed to be a
missing loaders option. .

  After adding the additional parameter *"loaders="main"*  as below.

  

inbound mail now works.  I checked back and this option seems to have been
missing back to at  least version 17.12.

Once the change is made , then ofbiz starts up  and once the container
parameters have been entered inbound email is processed as expected.


kind regards

Ernest

On Wed, Mar 8, 2023 at 2:19 PM Ernest Hocking 
wrote:


Hi everyone,

I'm trying to configure inbound email. .  Outbound mail is working so the
username, password etc that I'm using in example config hafe been tested.



I've uncommented the javamail listener in
ofbiz/framework/service/ofbiz-component.xml
as suggested in the article at
https://motalibbd.wordpress.com/2016/06/16/mail-server-configure-ofbiz/

This is the example config:


















On trying to restart ofbiz I now get the following error message.  Has
anyone else seen this, or is there something else that I need to configure
to get this working

Thanks in advance for any assistance that you can provide?

Ernest


Error report that the ./gradlew ofbiz stop at:

2023-03-08 14:04:29,092 |main |ComponentContainer
|I| Added class path for component : [webpos]
2023-03-08 14:04:29,094 |main |ComponentContainer
|I| All components loaded
2023-03-08 14:04:29,094 |main |ContainerLoader
   |I| Loaded container: component-container
2023-03-08 14:04:29,094 |main |ContainerLoader
   |I| [Startup] Loading component containers...
Exception in thread "main" java.lang.NullPointerException
at
org.apache.ofbiz.base.container.ContainerLoader.lambda$filterContainersHavingMatchingLoaders$1(ContainerLoader.java:89)
at
java.base/java.util.stream.ReferencePipeline$2$1.accept(ReferencePipeline.java:176)
at
java.base/java.util.ArrayList$ArrayListSpliterator.forEachRemaining(ArrayList.java:1655)
at
java.base/java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:484)
at
java.base/java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:474)
at
java.base/java.util.stream.ReduceOps$ReduceOp.evaluateSequential(ReduceOps.java:913)
at
java.base/java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234)
at
java.base/java.util.stream.ReferencePipeline.collect(ReferencePipeline.java:578)
at
org.apache.ofbiz.base.container.ContainerLoader.filterContainersHavingMatchingLoaders(ContainerLoader.java:90)
at
org.apache.ofbiz.base.container.ContainerLoader.load(ContainerLoader.java:67)
at
org.apache.ofbiz.base.start.StartupControlPanel.loadStartupLoaders(StartupControlPanel.java:218)
at
org.apache.ofbiz.base.start.StartupControlPanel.start(StartupControlPanel.java:71)
at org.apache.ofbiz.base.start.Start.main(Start.java:85)

Re: Small report from ASF Conference

[Jacques Le Roux]

Hi Nicola,

Thanks for your report.

Also, I allow myself, as a non English mother tongue speaker, to say that your 
English is, at least for me, excellent :)

Cheers

Jacques

Le 12/10/2023 à 20:01, Nicola Mazzoni a écrit :

Hi OFBiz users,
I'm returning from Halifax, where the Apache "community over code" conference 
just ended.
Some negative notes, compared to last year I think there was less participants. One of the causes is probably political, given that many Indian 
citizens have had problems reaching Canada for the reasons we know.
However, the atmosphere is always very familiar and pleasant, it is the third Apachecon for me and I can only confirm that it is a very enriching 
experience from a human, cultural and not just strictly technological point of view.
The speeches were mainly focused on a limited group of projects, so only a small part of the more than 300 Apache projects were "represented". To 
put it very simply: the focus was on big data. This year there was also visibility for a business-related project (and not just frameworks for other 
developers), specifically Fineract which received many talks and a fair amount of interest. I think that OFBiz and Fineract are among the few Apache 
projects not aimed at developers but "concretely" at business users.
As a result, it was no surprise to me to find that almost none of the participants I spoke to were familiar with OFBiz; many were unaware of what an 
ERP was, being focused on developments of another nature.
In any case, it is an experience that I recommend everyone to have, even if you cannot have direct feedback on your business. However, it is an 
experience that I hope to repeat. Even though I worked on ERP/business software and not "frameworks" or "big data", I had the opportunity to learn 
about new projects and understand the trends of certain technologies. This certainly helps me to "see from above" and to have a different approach 
to certain problems that I encounter in my professional life. Sorry if my English is poor, but it seemed right to me to give a little feedback to 
the OFBiz community as I am the only OFBiz committer present (excluding my colleague Giulio Speri).


I hope to meet many of you in Bratislava for the 2024 "community over code" EU 
conference.

Best

Nicola

Re: password Configuration in scource code Regards

[Jacques Le Roux]

Here you go: 
https://github.com/apache/ofbiz-framework/blob/trunk/framework/security/data/PasswordSecurityDemoData.xml

Le 04/10/2023 à 09:43, Nithin P a écrit :

I am looking to implement a feature that auto-generates a password every time 
instead of using the default password for administrator login. In pursuit of 
this, I have been delving into the source code of Apache OFBiz to identify the 
configuration file associated with the admin password. Could you kindly provide 
assistance in identifying the location of the admin password configuration 
files within the Apache OFBiz application?
This message contains confidential information and is intended only for the 
individual named. If you are not the named addressee you should not 
disseminate, distribute or copy this e-mail. You cannot use or forward any 
attachments in the email. Please notify the sender immediately by e-mail if you 
have received this e-mail by mistake and delete this e-mail from your system. 
Finally, the opinions disclosed by the sender do not have to reflect those of 
the company, therefore the company refuses to take any liability for the damage 
caused by the content of this email. Yobitel Communications Limited,  #11, 
Kingsley Mews, Ley Street, Ilford, London - IG1 4BT, United Kingdom.   
www.yobitel.com