[Tracker-discuss] [issue566] Google login not working on bugs.python.org

2015-05-25 Thread Martin v . Löwis
Martin v. Löwis added the comment: I think I fixed it. Please try again, and report whether it works. -- nosy: +loewis ___ PSF Meta Tracker metatrac...@psf.upfronthosting.co.za http://psf.upfronthosting.co.za/roundup/meta/issue566

Re: [Tracker-discuss] [Infrastructure-staff] bugs.python.org

2014-09-19 Thread Martin v. Löwis
Am 19.09.14 17:19, schrieb Benjamin Peterson: +tracker-discuss where people with access more likely reside. On Fri, Sep 19, 2014, at 06:23, Donald Stufft wrote: Hey, Is it possible for me to get access to the current server hosting bugs.p.o? Is that a possibility? I have now added ssh

[Tracker-discuss] [issue523] Spam tracker accounts

2014-07-29 Thread Martin v . Löwis
Martin v. Löwis added the comment: I have now removed the notices about SourceForge. As for spam accounts: it doesn't appear to be an urgent issue (remaining untreated for a year). There is spam protection already in place, preventing registration from bots who fill out the form too quickly

[Tracker-discuss] [issue549] myopenid.com image no longer works

2014-07-29 Thread Martin v . Löwis
Martin v. Löwis added the comment: I have now removed it from the tracker. -- status: chatting - resolved ___ PSF Meta Tracker metatrac...@psf.upfronthosting.co.za http://psf.upfronthosting.co.za/roundup/meta/issue549

[Tracker-discuss] [issue505] Abuse Message

2014-07-29 Thread Martin v . Löwis
Martin v. Löwis added the comment: It's actually simpler than that. Roundup reports the value of _file._type for Content-type when a file is downloaded. This is what the auditor sets, but it remains unchanged for the already-uploaded files. I have now changed it for all existing files

[Tracker-discuss] [issue546] Add notice of setuptools tracker relocation

2014-07-29 Thread Martin v . Löwis
Martin v. Löwis added the comment: I have now moved the notice to the page level. -- nosy: +loewis status: chatting - resolved ___ PSF Meta Tracker metatrac...@psf.upfronthosting.co.za http://psf.upfronthosting.co.za/roundup/meta

[Tracker-discuss] [issue488] Broken RSS links on Rietveld

2014-07-29 Thread Martin v . Löwis
Martin v. Löwis added the comment: The official way seems to be the SQL shell of django, so I did roundup@psf:~/trackers/tracker/rietveld$ python manage.py shell from django.contrib.sites.models import Site Site.objects.create(name='bugs.python.org', domain='bugs.python.org') Site

[Tracker-discuss] [issue535] Spam entry/entries

2014-03-23 Thread Martin v . Löwis
Martin v. Löwis added the comment: I have changed the type of all html files in this tracker to text/plain. I'll also look into turning off the setuptools tracker; I doubt it is active still. -- nosy: +loewis ___ PSF Meta Tracker

[Tracker-discuss] [issue458] editing homepage field is not possible

2014-03-23 Thread Martin v . Löwis
Martin v. Löwis added the comment: I don't think that the spam risk is high, so I think it might still be desirable to have it. Given that I had no time to work on this for the last two years, chances are that I won't have time in the coming two years, either

[Tracker-discuss] [issue527] HTTPS / SSL / Secure access

2013-12-26 Thread Martin v . Löwis
Martin v. Löwis added the comment: I have now installed a CACert certificate, so https is available for bugs.python.org ___ PSF Meta Tracker metatrac...@psf.upfronthosting.co.za http://psf.upfronthosting.co.za/roundup/meta/issue527

[Tracker-discuss] [issue528] bugs.python.org unreachable with IPv6

2013-11-07 Thread Martin v . Löwis
Martin v. Löwis added the comment: Now that Izak has restored connectivity, I have restored the DNS entry. -- status: chatting - resolved ___ PSF Meta Tracker metatrac...@psf.upfronthosting.co.za http://psf.upfronthosting.co.za

[Tracker-discuss] [issue527] HTTPS / SSL / Secure access

2013-09-30 Thread Martin v . Löwis
Martin v. Löwis added the comment: techtonik specifically asked for FreeSSL, so I still wonder what that is. I'm familiar with StartSSL, and the PSF infrastructure group indeed does have access to such certificates. The problem with the StartSSL certificate is that it has python.org

[Tracker-discuss] [issue519] XSS issues

2013-07-19 Thread Martin v . Löwis
Martin v. Löwis added the comment: iwontbecreative: your conclusion is incorrect. The database doesn't store plain text passwords, but hashes, so it sorts on hash. With that, it is not possible to recover a user's password. -- nosy: +loewis

[Tracker-discuss] [issue520] Security : password sorting issue that might allow to recover passwords.

2013-07-19 Thread Martin v . Löwis
Martin v. Löwis added the comment: iwontbecreative: your conclusion is incorrect. The database doesn't store plain text passwords, but hashes, so it sorts on hash. With that, it is not possible to recover a user's password. -- nosy: +loewis status: unread - resolved

[Tracker-discuss] [issue514] packet loss to bugs.python.org

2013-04-06 Thread Martin v . Löwis
Martin v. Löwis added the comment: I can't reproduce this in the reverse direction; pinging 195.5.228.255 works fine. If the problem persists, please report your source IP. For the record, here is the reverse trace traceroute to 195.5.228.255 (195.5.228.255), 30 hops max, 60 byte packets 1

[Tracker-discuss] [issue511] openid login isn't remembered

2013-03-14 Thread Martin v . Löwis
Martin v. Löwis added the comment: I fail to see the issue. Whether or not the browser saves the form value is a browser issue (and possible a user issue, for configuring the browser appropriately), not one of Roundup. The OpenID specification defines that Roundup should give a hint

[Tracker-discuss] [issue511] openid login isn't remembered

2013-03-14 Thread Martin v . Löwis
Martin v. Löwis added the comment: follow-up: apparently, there are browser-specific plugins (like OpenID for Firefox or OpenID Autofill for Chrome) which you may want to used. As for having to relogin: I cannot reproduce this. With Chrome, the session happily survives a browser restart

[Tracker-discuss] [issue503] OpenID provider discovery failed

2013-03-06 Thread Martin v . Löwis
Martin v. Löwis added the comment: Exactly that. ___ PSF Meta Tracker metatrac...@psf.upfronthosting.co.za http://psf.upfronthosting.co.za/roundup/meta/issue503

[Tracker-discuss] Password reset

2013-02-19 Thread Martin v. Löwis
As you know, wiki.python.org was broken into, which means that there is a risk that the passwords were stolen (although it's uncertain whether that actually happened). There is a chance that some users were using the same passwords on different services, which caused PyPI maintainers to force a

Re: [Tracker-discuss] tracker access

2013-02-18 Thread Martin v. Löwis
Am 17.02.13 20:41, schrieb fwierzbi...@gmail.com: Hi all, Having played around with a local tracker, I think I should be able to fix Jython's version problems with the roundup admin tool. How do I access the Jython tracker instance? Has it been moved to the VM infrastructure? No. Your account

[Tracker-discuss] [issue492] make Failed issue tracker submission e-mails to python-dev less cryptic

2012-11-16 Thread Martin v . Löwis
Martin v. Löwis added the comment: -1 on the entire issue - no action should be taken. The real problem is that there is a bug in roundup in each and every case where the email is sent. So the proper action is to fix the bug, not to massage the error message. python-dev readers should easily

[Tracker-discuss] [issue412] Allow for more than one attach file

2012-10-03 Thread Martin v . Löwis
Martin v. Löwis added the comment: storchaka: is deleting multiple files in one action really desirable? If so, create a separate issue: this issue is about attaching multiple files. -- nosy: +loewis ___ PSF Meta Tracker metatrac

[Tracker-discuss] [issue473] Cannot edit (eg) component: No such action editcsv

2012-09-08 Thread Martin v . Löwis
Martin v. Löwis added the comment: It was temporarily disabled in r70258 (Mar 9 06:19:15 2009) http://svn.python.org/view/tracker/roundup-src/roundup/cgi/client.py?r1=70258r2=70388pathrev=88900 but re-enabled in r70388 (Mar 15 21:43:30 2009) http://svn.python.org/view/tracker/roundup-src

[Tracker-discuss] [issue478] Cannot enter issue # in tracker

2012-09-06 Thread Martin v . Löwis
Martin v. Löwis added the comment: Indeed. barry: can you please report the exact URL your browser was pointing to when you entered the number? Performing your instructions fails to reproduce the issue; entering 4194 after typing bugs.python.org in the URL bar in Chrome works just fine

[Tracker-discuss] [issue474] User cannot register with bugs.python.org - no registration email

2012-08-05 Thread Martin v . Löwis
Martin v. Löwis added the comment: There is a problem delivering email to hotmail.com. We have three messages to this email address pending in the outgoing queue; postfix says Connection timed out. A plain telnet to mx2.hotmail.com gives a TCP timeout. I have filed a support request

[Tracker-discuss] [issue466] google reports bugs.jython.org as hosting malware

2012-06-14 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: The critical thing really is that the spam was accumulating over quite some time and nobody was looking into it. This, in turn, is because the Jython tracker is (was?) unmaintained. I have now despammed it, and requested Google to rescan

[Tracker-discuss] [issue463] HTTPS only version for login for this tracker

2012-05-25 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: The risk isn't really high. Just chose a password that you don't use anywhere else, and the threat of somebody stealing it can be safely ignored. Somebody might be posting in your name, but that doesn't scare me at all. -- nosy

[Tracker-discuss] [issue418] Change background color if an issue is closed

2012-05-22 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: It seems that the key issue is that people want to avoid commenting on a closed issue. I think this is best achieved by hiding any edit UI first, only enabling editing on explicit request. I suggest to put a text like This issue is closed

[Tracker-discuss] [issue462] Logging in with OpenID delegate doesn't work

2012-05-19 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: I see. You need to change your openid.server from http://openid.yandex.ru/server.xml; to http://openid.yandex.ru/server/;, since this is what openid.yandex.ru says is the official endpoint URL. The Python bug tracker notices that the reply

[Tracker-discuss] [issue462] Logging in with OpenID delegate doesn't work

2012-05-19 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: But does this mean that other consumers are not so strict and allow cheating? I'm not sure how serious this is, but the OpenID spec (http://openid.net/specs/openid-authentication-2_0.html) seems to say in section 11 that this MUST

[Tracker-discuss] [issue372] Default search missed matching issue title for capi

2012-04-21 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: rmtew: search is definitely case insensitive. I cannot reproduce your report; the search for UDP yields plenty results. The issue here is that the search only looks for whole words indeed, with words being defined by r'(?u)\b\w{%d,%d}\b

[Tracker-discuss] [issue448] Login not working (mostly)

2012-04-18 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: Why is 'action=logout' in the url? It has already happened Wrong. The URL you are seeing is the very one that did the logout. This is how web browsers work: they show you the URL that corresponds to the page you are seeing. Likewise

[Tracker-discuss] [issue448] Login not working (mostly)

2012-04-17 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: Ezio: but you would have a green bar You are logged out - clear this message, right? And if you follow the clear this message link, you get to a URL with no action, right? So I doubt this is what Terry did. Terry: can you reproduce this (I

[Tracker-discuss] [issue456] Add user links to roundup users

2012-04-11 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: Thanks for the report. This is now implemented in r88945 -- nosy: +loewis status: unread - chatting ___ PSF Meta Tracker metatrac...@psf.upfronthosting.co.za http

[Tracker-discuss] [issue455] Patch review in some issues is not working

2012-04-08 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: I had to delete a lot of rietveld issues due to performance reasons after the initial setup. I have now also removed the dangling links. -- nosy: +loewis status: chatting - resolved

[Tracker-discuss] [issue450] ia64-hp-hpux11.31 won't compile Python-2.6.8rc2 without -D_TERMIOS_INCLUDED

2012-04-07 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: This is not the bug tracker for Python, but the bug tracker for Python's bug tracker, which can be found at bugs.python.org. -- nosy: +loewis status: unread - resolved ___ PSF

[Tracker-discuss] [issue452] Python-2.6.8rc2 test never finishes ia64-hp-hpux11.31

2012-04-07 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: This is not the bug tracker for Python, but the bug tracker for Python's bug tracker, which can be found at bugs.python.org. -- nosy: +loewis status: unread - resolved ___ PSF

[Tracker-discuss] [issue453] Can't build Python-2.7.3rc2 _ctypes module on ia64-hp-hpux11.31 even using --with-system-ffi

2012-04-07 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: This is not the bug tracker for Python, but the bug tracker for Python's bug tracker, which can be found at bugs.python.org. -- nosy: +loewis status: unread - resolved ___ PSF

[Tracker-discuss] [issue443] The quick search appears to be broken

2012-03-28 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: Can you provide a specific example? What did you search for, and what should the result have included? -- nosy: +loewis ___ PSF Meta Tracker metatrac...@psf.upfronthosting.co.za

[Tracker-discuss] [issue443] The quick search appears to be broken

2012-03-28 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: I think I know what happened. I need to take the tracker offline again for reindexing. ___ PSF Meta Tracker metatrac...@psf.upfronthosting.co.za http://psf.upfronthosting.co.za/roundup

[Tracker-discuss] [issue443] The quick search appears to be broken

2012-03-28 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: What happened is this: before the Debian upgrade, we were using indexer_dbm. The upgrade installed the Python xapian module, which made indexer_xapian import correctly, making roundup switch to xapian. There still was a xapian index around

[Tracker-discuss] [issue442] Upgrade Debian

2012-03-28 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: I have now run pg_upgradecluster. At first it would fail because it ran out of disk space. I deleted old log files and backups and seefeld's copy of roundup, so postgres upgrading eventually succeeded. It turned out that I also had

[Tracker-discuss] [issue442] Upgrade Debian

2012-03-27 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: Upgrading the actual virtual host is next. I should be available most of the day tomorrow. So if you can fix a UTC time, I can try to be available. Else you proceed at your own pace, and we'll clean up afterwards

[Tracker-discuss] [issue442] Upgrade Debian

2012-03-27 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: Upgrading the actual virtual host is next. I notified python-dev about the upcoming outage. ___ PSF Meta Tracker metatrac...@psf.upfronthosting.co.za http://psf.upfronthosting.co.za

[Tracker-discuss] [issue442] Upgrade Debian

2012-03-27 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: Re: init scripts. I added LSB headers to /etc/init.d/roundup (from the Debian package), and disabled spambayes altogether. ___ PSF Meta Tracker metatrac...@psf.upfronthosting.co.za http

[Tracker-discuss] [issue442] Upgrade Debian

2012-03-25 Thread Martin v . Löwis
New submission from Martin v. Löwis mar...@v.loewis.de: We would like to update the psf machine to Squeeze. What is the best procedure for that? -- messages: 2394 nosy: izak, loewis, roche priority: bug status: unread title: Upgrade Debian

[Tracker-discuss] [issue428] Patch generator and dependent feature branches

2011-11-30 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: So what do you propose should roundup do here? I propose that the current behavior is actually correct, and that mismatches with user expectations should be dealt with by education. For the patch generation to work in the expected manner

[Tracker-discuss] [issue427] Time synchronization defect

2011-11-24 Thread Martin v . Löwis
New submission from Martin v. Löwis mar...@v.loewis.de: http://psf.upfronthosting.co.za is currently off by ca 15s from UTC. This broke my new OpenID login procedure, which assume a maximum offset of 10s. I worked around by allowing up to 5 minutes. Can time synchronization be improved

[Tracker-discuss] [issue415] Mercurial integration: regression in diff generation

2011-11-24 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: Using the mercurial diff format is intentional - the git format is utterly broken and must not be used. As for changes that are reverted: what changes specifically? (or: what versions should it have compared instead of comparing

[Tracker-discuss] [issue426] ctypeslib codegenerator chokes on CvQualifiedType

2011-11-20 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: This is the bug tracker for issues with the Python roundup installation, not for bugs in Python. For bugs in Python, use bugs.python.org. -- nosy: +loewis status: unread - resolved

[Tracker-discuss] [issue407] bug in revision linking code

2011-10-18 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: Seems like there is another test-case for that - http://bugs.python.org/issue13196 A test case for what? Be specific: what do you see, what do you expect to see instead? -- nosy: +loewis status: unread - chatting

[Tracker-discuss] [issue418] Change background color if an issue is closed

2011-08-21 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: The most intrusive approach to prevent posting to a closed issue is to have an additional check box that needs to be checked if the issue is closed. The check box would only appear if the issue is closed, and an auditor would prevent

[Tracker-discuss] [issue416] Show bug status with a nice colour/image

2011-08-14 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: I also think that adding icons would be no improvement. In addition, I find the proposed icons counter-intuitive: an open bug report is open in a different way than an open folder. Resolving this as won't fix. feth: if you find people

[Tracker-discuss] [issue392] source linking for meta-tracker

2011-07-26 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: Resolving as rejected. Anatoly, please don't reopen, and don't post any further messages on this issue. -- nosy: +loewis status: chatting - resolved ___ PSF Meta Tracker metatrac

[Tracker-discuss] [issue410] More useful filenames for patches generated from hg

2011-07-21 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: As a consequence of that change, if somebody presses the create patch button again and again, it would create a new patch each time. Currently, it finds that it already has a patch for a given revision, and aborts

[Tracker-discuss] [issue409] Spam on jython tracker.

2011-07-17 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: You should already have Developer privileges on the Jython bug tracker for the 'amak' account. Usually you just close the issue, remove the message(s) and change the title to e.g. spam. That's not appropriate. If the message is removed

[Tracker-discuss] [issue405] Mercurial integration - Create Patch fails with No such file or directory

2011-06-19 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: I was hesitant to add another field into the UI, which is already overloaded, and it would make people assume that they have to fill out the branch field. I assumed that using named branches would be uncommon enough to let people who use

[Tracker-discuss] [issue405] Mercurial integration - Create Patch fails with No such file or directory

2011-06-19 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: This is now fixed in r88855 -- status: chatting - resolved ___ PSF Meta Tracker metatrac...@psf.upfronthosting.co.za http://psf.upfronthosting.co.za/roundup/meta/issue405

[Tracker-discuss] [issue403] please allow post editing

2011-06-02 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: Why is that necessary? Notice that the post was also sent by email, and you can't edit the email copies, either. -- nosy: +loewis status: unread - chatting ___ PSF Meta Tracker

[Tracker-discuss] [issue400] when replying by email, don't send another one

2011-05-28 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: I'm not sure. When you enter a message in the web browser, would you want to receive an email with it or not? ___ PSF Meta Tracker metatrac...@psf.upfronthosting.co.za http

[Tracker-discuss] [issue378] Merge OpenID login feature upstream

2011-05-16 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: There aren't really any changes yet (it's just an extension of roundup, not a patch to roundup). If a patch was developed based on that extension, I'd be willing to license it under whatever conditions are desired

[Tracker-discuss] [issue381] default mime-type for attachments should be text/plain

2011-04-26 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: That file was deliberately not marked text/plain: it has funny control characters in it. ___ PSF Meta Tracker metatrac...@psf.upfronthosting.co.za http://psf.upfronthosting.co.za/roundup

[Tracker-discuss] [issue393] Security policy should be visible on top page of tracker, maybe every page

2011-04-18 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: Because of all these options I'd like some of the security team to state how they actually want it. There is no point in changing something proactively that is then still undesired

[Tracker-discuss] [issue381] default mime-type for attachments should be text/plain

2011-04-14 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: Heuristics adds additional maintenance burden and complicates code. Please leave that concern to the people who are *actually* maintaining the tracker. Default mime type is not a hack It's worse than a hack - it doesn't actually work

[Tracker-discuss] [issue381] default mime-type for attachments should be text/plain

2011-04-13 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: I'd use a more strict rule: it should decode as UTF-8, and should only include the standard whitespace control characters. -- nosy: +loewis ___ PSF Meta Tracker metatrac

[Tracker-discuss] [issue381] default mime-type for attachments should be text/plain

2011-04-13 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: Martin, I do not understand your concerns about text mode browser security. anatoly, I do not understand your concerns about the solution proposed by eric and me. ___ PSF Meta Tracker

Re: [Tracker-discuss] Folding issue forms

2011-03-30 Thread Martin v. Löwis
Am 28.03.2011 21:52, schrieb Georg Brandl: On 28.03.2011 21:32, Martin v. Löwis wrote: I added JavaScript to have the issue form folded, except in case of submission, following up to a request of Skip Montanaro. Please let me know what you think. -1. Just another click necessary to close

[Tracker-discuss] [issue383] Add Devguide component

2011-03-29 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: anatoly: is there actually anything wrong with the status quo? If not *please*, **PRETTY PLEASE** leave this issue closed. -- status: resolved - chatting ___ PSF Meta Tracker

Re: [Tracker-discuss] Backups for PSF

2010-11-18 Thread Martin v. Löwis
We back up /home, /etc, and all of the postgresql databases. I don't think there is anything in /var (besides the postgresql databases and perhaps some mail queues) that needs backing up, and /usr is usually mnaged by the distro. If I am missing something, please let me know. LGTM. Martin

[Tracker-discuss] [issue339] Colors for quoted text

2010-10-29 Thread Martin v . Löwis
Martin v. Löwis mar...@v.loewis.de added the comment: Can somebody propose a specific CSS that should be used? In particular, what should the colors be? -- nosy: +loewis ___ PSF Meta Tracker metatrac...@psf.upfronthosting.co.za http