Re: [xwiki-users] Login cookie validation hash mismatch! Cookies have been tampered with

2016-03-09 Thread Paul Libbrecht 

Tobias Kirchhofer wrote:
> The IP-Address is not changing during a session.
Be careful. If you change from http to https or back and are on a 3g
network, the IP of the client does change!

The reason is that there's a transparent proxy run at the http level so
as to make the exchanges more efficient. Similarly, on hotspot networks,
the transparent proxy is there so that they redirect the browser to the
welcome/please-pay/read-rules page for the first connection.

paul
___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users

Re: [xwiki-users] Login cookie validation hash mismatch! Cookies have been tampered with

2016-03-09 Thread Tobias Kirchhofer 
Thanks - indeed we had our time securing tomcat, XWiki with nginx but it
worked finally. We investigated everything with Developer Tools - no
http-requests are observable.





--
View this message in context: 
http://xwiki.475771.n2.nabble.com/Login-cookie-validation-hash-mismatch-Cookies-have-been-tampered-with-tp7598282p7598398.html
Sent from the XWiki- Users mailing list archive at Nabble.com.
___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users

Re: [xwiki-users] Login cookie validation hash mismatch! Cookies have been tampered with

2016-03-09 Thread Tobias Kirchhofer 
Our XWiki is running as a Intranet in a LAN. Outside users need VPN access.

The IP-Address is not changing during a session.

We played around with xwiki.authentication.protection - no change.
xwiki.authentication.protection=none is no option because passwords in the
cookie are not encrypted anymore. Anyway we tried it with no success.

We changed xwiki.authentication.validationKey and
xwiki.authentication.encryptionKey hoping solving the issue. Deleting all
old cookies - no change.

A pity! 

 



--
View this message in context: 
http://xwiki.475771.n2.nabble.com/Login-cookie-validation-hash-mismatch-Cookies-have-been-tampered-with-tp7598282p7598397.html
Sent from the XWiki- Users mailing list archive at Nabble.com.
___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users

Re: [xwiki-users] Exporting all documents of a space

2016-03-09 Thread Bruno 


Excellent, I could repair my first wiki by comparing the rights page by 
page thanks to the extension 'Admin Tools Application' !
Anyway, I will test the import-export because the first server is 7.4.1, 
while the latter is 7.4.2.


Thanks a lot Clemens !
Signature mails
_

Bruno Joffredo

Ecole Centrale de Nantes

Centre de Ressources Informatiques - Bur. D019

1 rue de la Noë

BP 92101

F-44321 Nantes cedex 3

Tél. 02.40.37.68.06
Mail : bruno.joffr...@ec-nantes.fr 
_


Le 08/03/2016 14:19, Clemens Klein-Robbenhaar a écrit :

The Admin tools have  export / import pages, that might be useful in your use 
case, too:

http://extensions.xwiki.org/xwiki/bin/view/Extension/Admin+Tools+Application

- Ursprüngliche Nachricht -
Von: Bruno
Am:  Tuesday, 08.03.2016, 12:56
An: Xwiki Users
Betreff: [xwiki-users] Exporting all documents of a space



Hello,

I realized an export of my wiki via the tool located in the administration of 
XWiki.
But when I try to import the XAR on another instance of XWiki, just at the end, 
an error is produced and the archive is not added.

In fact, I have a problem with the first wiki, the XWikiGroup group doesn't 
work, and so all users have administrator rights until I disable thoses rights 
for each user (but each new user have admin rights).
So I installed a new XWiki server, and I try to retrieve the articles already 
created in the first one.

Is it possible to export an entire space with his daughters ?
How can I recover my first wiki pages ?

Thank you.
Signature mails

_

Bruno Joffredo

Ecole Centrale de Nantes

Centre de Ressources Informatiques - Bur. D019

1 rue de la Noë

BP 92101

F-44321 Nantes cedex 3

Tél. 02.40.37.68.06
Mail : bruno.joffr...@ec-nantes.fr 
_


___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users

mit freundlichen Grüßen
Clemens Klein-Robbenhaar



___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users

Re: [xwiki-users] Fwd: [Investigation] XWiki Notifications

2016-03-09 Thread Benjamin Lanciaux 
Hello,

This is a good analysis indeed.
I'm +1 with the UI proposal.

Best,

Benjamin


2016-03-04 19:02 GMT+01:00 Eduard Moraru :

> Hi,
>
> A couple of days ago, Nicolas Lemoine (and Jean Coury, as far as I
> understood) from XWiki SAS did a nice analysis on what XWiki should offer
> in terms of notifications, from a more general and user-focused point of
> view.
>
> They had a look of how other applications, services or even operating
> systems handle user notifications and produced an interesting overview [1],
> extracted a list of use cases [2] and created an UI proposal [3] that might
> be useful when we start working on it for XWiki.
>
> They`ve asked me to send the mail for them on the community and maybe get
> some opinions on the conclusions and even new ideas to where we could take
> it.
>
> WDYT?
>
> Thanks,
> Eduard
>
> P.S.: I`ve forwarded this mail to the users list, at Vincent's suggestion,
> in the hopes of getting some input from our users as well ;)
>
> --
> [1]
>
> http://design.xwiki.org/xwiki/bin/view/Proposal/NotificationSystemforApps_Analysis
> [2]
> http://design.xwiki.org/xwiki/bin/view/Proposal/NotificationSystemforApps
> [3]
>
> http://design.xwiki.org/xwiki/bin/view/Proposal/NotificationSystemforApps#HUserInterfaceProposal
> ___
> users mailing list
> users@xwiki.org
> http://lists.xwiki.org/mailman/listinfo/users
>
___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users

Re: [xwiki-users] Changing Global Text Style Settings

2016-03-09 Thread Jesse Bright 
Thanks for the idea. Using Chrome's inspect element to look at the CSS and a 
little grepping in the skins folder; I found the file I was looking for here:

/usr/lib/xwiki/skins/flamingo/less/bootstrap/variables.less

Within this file you can easily update the preferred fonts and size, including 
switching between sarif and sans-sarif font styles. I edited the file directly 
but I suppose good form would be to use the skin override options to make the 
change stick after an upgrade. Also I had to restart the tomcat server to get 
the LESS to rebuild, though as I recall there is a more sophisticated way to 
make that happen while the server is up.

Thanks again for your help!

Regards,

Jesse

> On Mar 3, 2016, at 4:29 AM, Pascal BASTIEN  wrote:
> 
> Hello,
> 
> You can use a stylesheetextension object + CSS instruction (and firebug to 
> identify id/class elements to modify)
> http://platform.xwiki.org/xwiki/bin/view/DevGuide/SkinExtensionsTutorial#HMinimalStyleSheeteXtension
> 
> Pascal B
> 
> 
> 
> En date de : Jeu 3.3.16, Personal  a écrit :
> 
> Objet: [xwiki-users] Changing Global Text Style Settings
> À: "XWiki Users" 
> Date: Jeudi 3 mars 2016, 7h04
> 
> I have been looking around for this
> but coming up blank. Can anyone point me in the right
> direction as to how you change the default text styles? I am
> just looking to tweak the header and body font sizes and
> font family across the entire wiki. I don’t want to change
> the text for other elements like the drawer, buttons, panels
> etc.
> 
> Thanks for any information that you can provide.
> 
> regards,
> 
> Jesse
> ___
> users mailing list
> users@xwiki.org
> http://lists.xwiki.org/mailman/listinfo/users
___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users

Re: [xwiki-users] Translation problems

2016-03-09 Thread vinc...@massol.net 

On 9 Mar 2016 at 12:12:57, Mark Sack 
(mark.s...@secti.al.gov.br(mailto:mark.s...@secti.al.gov.br)) wrote:

> I've started doing that. But I could not figure out how to set multi-line
> values in the translation wiki page - for example, the Sandbox test pages.
> For those ones, I exported the Sandbox page in a xar file, added in the new
> translation xml file, and then imported the new xar file.
>  
> Thank you for your patience in explaining all of this.

The syntax is “\”

For example:

keyname=line 1\
\
\line3


Thanks
-Vincent

> Mark Sack

___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users

Re: [xwiki-users] Login cookie validation hash mismatch! Cookies have been tampered with

2016-03-09 Thread Paul Libbrecht 
Can there be a mix of http and https here?
At least this was confusing this cookie on the curriki side in some
network configurations where the http and https endpoints are different
due to local network configs (3g optimizers, hotspot networks).

Paul


> Clemens Klein-Robbenhaar 
> 9 March 2016 at 14:29
> The code where this happens is in:
>
> https://github.com/xwiki/xwiki-platform/blob/master/xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/user/impl/xwiki/MyPersistentLoginManager.java#L564
>
> I have to admit that I do not know much about that corner of XWiki code
>
>
> some random pointers:
>
> There is some hint that switching IP's might cause the problem, as in:
>
> http://jira.xwiki.org/browse/XWIKI-2463
>
> so maybe setting:
>
> xwiki.authentication.useip=false
>
> in WEB-INF/xwiki.cfg could help.
>
>
> Then, you can set
>
> xwiki.authentication.protection=none
>
> which should make the problem go away, but of course at the cost that
> the authenticator does not check the cookie is encrypted with the
> given key in xwiki.cfg.
>
>
> Aside of that I remember having a similar problem some time ago after
> changing the xwiki.authentication.validationKey /
> xwiki.authentication.encryptionKey in xwiki.cfg;
> but that vanished after clearing *all* cookies in the browser once. As
> I understood your users have already done this, so it is probably not
> related to this problem.
>
>
>
> - Ursprüngliche Nachricht -
> Von: Tobias Kirchhofer
> Am: Wednesday, 09.03.2016, 13:40
> An: Xwiki Users
> Betreff: Re: [xwiki-users] Login cookie validation hash mismatch!
> Cookies have been tampered with
>
>
>
> ___
> users mailing list
> users@xwiki.org
> http://lists.xwiki.org/mailman/listinfo/users
> Tobias Kirchhofer 
> 9 March 2016 at 13:40
> This is the message which appears after 30 minutes:
>
> 
>
> "You do not have permission to view the document or to perform that
> action."
>
> The we have to actively logout and close the browser window. By opening a
> new window and navigating to the wiki we can login again.
>
> Our developers say this is most likely a bug in the application. How
> can we
> debug this one?
>
>
>
>
>
> --
> View this message in context:
> http://xwiki.475771.n2.nabble.com/Login-cookie-validation-hash-mismatch-Cookies-have-been-tampered-with-tp7598282p7598389.html
> Sent from the XWiki- Users mailing list archive at Nabble.com.
> ___
> users mailing list
> users@xwiki.org
> http://lists.xwiki.org/mailman/listinfo/users
> Tobias Kirchhofer 
> 3 March 2016 at 12:48
> We set up a new Box with a fresh install of a 7.4.1 version. While
> configuring and testing (permissions) everything all was perfect and
> clean.
> Then we migrated the pages from the old wiki (also 7.4.1 - we wanted a
> fresh
> install) - precisely only content pages, nothing else. Then we
> switched the
> IP for the old domain and all of our LDAP user populated the new wiki, one
> by one.
>
> Since the fresh start all users experience the trouble that after the
> end of
> the tomcat session (30 minutes) a re-login is required. After re-login a
> XWiki message appears "you do not have the appropriate rights" (or
> similar).
> Deletion of the cookie ~or closing the browser window and login again
> reestablishes normal functions until the tomcat session is over again.
>
> catalina.out: 2016-03-03 11:55:26,813
> [https://wiki.sub.domain/xwiki/bin/view/Main/] WARN
> u.i.x.MyPersistentLoginManager - Login cookie validation hash mismatch!
> Cookies have been tampered with
>
> Research in this forum did bring up discussions about the mess from
> 2010 and
> bevor without any valuable pointers.
>
> We updated to 7.4.2 without any change for the situation.
>
> The site ist secure with a nginx proxy.
>
> Any ideas?
>
>
>
> --
> View this message in context:
> http://xwiki.475771.n2.nabble.com/Login-cookie-validation-hash-mismatch-Cookies-have-been-tampered-with-tp7598282.html
> Sent from the XWiki- Users mailing list archive at Nabble.com.
> ___
> users mailing list
> users@xwiki.org
> http://lists.xwiki.org/mailman/listinfo/users

___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users

Re: [xwiki-users] Login cookie validation hash mismatch! Cookies have been tampered with

2016-03-09 Thread Clemens Klein-Robbenhaar 

The code where this happens is in:

   
https://github.com/xwiki/xwiki-platform/blob/master/xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/user/impl/xwiki/MyPersistentLoginManager.java#L564

I have to admit that I do not know much about that corner of XWiki code


some random pointers:

There is some hint that switching IP's might cause the problem, as in:

   http://jira.xwiki.org/browse/XWIKI-2463

so maybe setting:

 xwiki.authentication.useip=false

in WEB-INF/xwiki.cfg  could help.


Then, you can set

 xwiki.authentication.protection=none

which should make the problem go away, but of course at the cost that the 
authenticator does not check the cookie is encrypted with the given key in 
xwiki.cfg.


Aside of that I remember having a similar problem some time ago after changing 
the xwiki.authentication.validationKey / xwiki.authentication.encryptionKey in 
xwiki.cfg;
but that vanished after clearing *all* cookies in the browser once. As I 
understood your users have already done this, so it is probably not related to 
this problem.



- Ursprüngliche Nachricht -
Von: Tobias Kirchhofer
Am:  Wednesday, 09.03.2016, 13:40
An: Xwiki Users
Betreff: Re: [xwiki-users] Login cookie validation hash mismatch! Cookies have 
been tampered with


> This is the message which appears after 30 minutes:
> 
>  
> 
> "You do not have permission to view the document or to perform that action."
> 
> The we have to actively logout and close the browser window. By opening a
> new window and navigating to the wiki we can login again.
> 
> Our developers say this is most likely a bug in the application. How can we
> debug this one?
> 
> 
> 
> 
> 
> --
> View this message in context: 
> http://xwiki.475771.n2.nabble.com/Login-cookie-validation-hash-mismatch-Cookies-have-been-tampered-with-tp7598282p7598389.html
> Sent from the XWiki- Users mailing list archive at Nabble.com.
> ___
> users mailing list
> users@xwiki.org
> http://lists.xwiki.org/mailman/listinfo/users
> 

___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users

Re: [xwiki-users] Login cookie validation hash mismatch! Cookies have been tampered with

2016-03-09 Thread Tobias Kirchhofer 
This is the message which appears after 30 minutes:

 

"You do not have permission to view the document or to perform that action."

The we have to actively logout and close the browser window. By opening a
new window and navigating to the wiki we can login again.

Our developers say this is most likely a bug in the application. How can we
debug this one?





--
View this message in context: 
http://xwiki.475771.n2.nabble.com/Login-cookie-validation-hash-mismatch-Cookies-have-been-tampered-with-tp7598282p7598389.html
Sent from the XWiki- Users mailing list archive at Nabble.com.
___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users

Re: [xwiki-users] Document tree branches not translated

2016-03-09 Thread Mark Sack 
Created http://jira.xwiki.org/browse/XWIKI-13183

Just not sure if I got all the fields (priority, component) right.



--
View this message in context: 
http://xwiki.475771.n2.nabble.com/Document-tree-branches-not-translated-tp7598383p7598388.html
Sent from the XWiki- Users mailing list archive at Nabble.com.
___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users

Re: [xwiki-users] Translation problems

2016-03-09 Thread Mark Sack 
I've started doing that. But I could not figure out how to set multi-line
values in the translation wiki page - for example, the Sandbox test pages.
For those ones, I exported the Sandbox page in a xar file, added in the new
translation xml file, and then imported the new xar file.

Thank you for your patience in explaining all of this.

Mark Sack



--
View this message in context: 
http://xwiki.475771.n2.nabble.com/Translation-problems-tp7597763p7598387.html
Sent from the XWiki- Users mailing list archive at Nabble.com.
___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users

Re: [xwiki-users] Translation problems

2016-03-09 Thread vinc...@massol.net 
Hi Mark,

On 8 Mar 2016 at 13:35:16, Mark Sack 
(mark.s...@secti.al.gov.br(mailto:mark.s...@secti.al.gov.br)) wrote:

> I have been updating the translations on the l10n site and then downloading
> the resource files. My challenge is that, sometimes, I don't want to wait
> for the next release. My perception is that, for extensions, the wait until
> the next release can be quite long (not a surprise). Speaking in complete
> ignorance of the implementation challenges, I think it would be ideal if the
> translations could be updated separately from the releases.

You don’t need to wait; you could put the translations in a wiki page with a 
TranslationDocumentClass xobject, see
http://platform.xwiki.org/xwiki/bin/view/DevGuide/InternationalizingApplications#HUsingpropertieslocatedinXWikipages

Thanks
-Vincent

___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users