Re: Trying to authenticate sling with Keycloak

Hi Gokul If you’re using SAML2, then perhaps look at this saml2-handler project https://github.com/apache/sling-whiteboard/tree/master/saml-handler and the example project

Sling Content Distribution (another attempt)

Hi all Still trying to find a way to track the status of SCD jobs. Specifically, if a browser client needs to poll an endpoint to follow the status of forward distribution, how is this done? https://stackoverflow.com/questions/63291898/how-to-track-status-of-sling-content-distribution

Can use of Deep Path in forward distribution replace content?

Question about forward distribution. In my scenario, the jcr:content has been changed since it was last distributed. My SimpleDistributionRequest looks like this SimpleDistributionRequest simpleDistributionRequest = new SimpleDistributionRequest(DistributionRequestType.ADD, shallowPaths,

Sling Content Distribution (Forward) Event Monitoring for Testing and Client Notice

Hi all In a forward SCD scenario, the process of resource distribution from source A to target instance B comprises a series of Sling Events [1] as configured in the forward agent settings[2]. In my scenario, the user should be informed about the success or failure of the distribution process

How to test other System User Access

o find it in a bundle provided by Sling 12 Does anyone have a recommendation? Thanks Cris Rockwell

Add license to package

I’m trying to build a JCR package using maven. The config below builds the package, but I also get an error related to verify-legal-files [ERROR] Failed to execute goal org.codehaus.mojo:ianal-maven-plugin:1.0-alpha-1:verify-legal-files (verify-legal-files) on project

Re: Sling Slack Channel

Hello again I apologize my insensitive remarks. When I stated "every non-Adobe responder in the thread wanted Slack,” while an accurate observation, I was wrong for saying it that way. I didn’t mean anything nasty by it. Teammates within any organization have a natural communication advantage

Re: Sling Slack Channel

lready a slack org for the ASF: the-asf.slack.com > <http://the-asf.slack.com/> we could use > rather than setting up another slack org > - We probably should call a formal vote rather than asking for replies in > this thread > > Regards, > Dan > > > On Tue,

Re: Sling Slack Channel

to vote against. Don’t join unless you want to! Cris Rockwell Applications Architect Sr College of Literature, Science, and the Arts | University of Michigan LSA Technology Services | 301 E Liberty Suite 500 | Ann Arbor, MI 48104 Desk: 734.763.6818 | Email: cmroc...@umich.edu <mailto:cm

Sling Slack Channel

Hi Sling Users Is there a community chat platform like Slack or gitter for Sling users and developers? Cris

Using Oak External User Sync for a SAML2 Use Case?

l SyncManagerImpl ExternalPrincipalConfiguration Thank you! Cris Rockwell Applications Architect Sr College of Literature, Science, and the Arts | University of Michigan LSA Technology Services | Suite 505 | 301 E. Libery | Ann Arbor, MI I 48109

Composum 1.7 Packaging: JcrPackageManager acquired w/o service!

Hi all Peregrine CMS uses the Sling 9 launchpad and adds org.apache.jackrabbit.vault version 3.2.0. When I try using Composum Packaging (1.7) (http://localhost:8080/bin/packages.html ) there are log messages similar to what is discussed here

Re: Everyone ACL Read on /

everyone can read everything under /content. Cris > On Mar 11, 2020, at 3:42 PM, Oliver Lietz wrote: > > On Wednesday, March 11, 2020 8:34:12 PM CET Cris Rockwell wrote: >> Hi Oliver >> >> Thanks for the fast reply. Can I ask the exact same set of questions about

Re: Everyone ACL Read on /

Hi Oliver Thanks for the fast reply. Can I ask the exact same set of questions about default jcr:read access for everyone on /content? Is that required? Cris Rockwell Applications Architect Sr College of Literature, Science, and the Arts | University of Michigan LSA Technology Services

Everyone ACL Read on /

ACL jcr:read rule was deleted from root, what problems should be expected? Many thanks! Cris Rockwell Applications Architect Sr College of Literature, Science, and the Arts | University of Michigan LSA Technology Services | 6503 Haven Hall | 505 S. State Street | Ann Arbor, MI I 48109

Re: OIDC or SAML2 for Sling

://jackrabbit.apache.org/oak/docs/security/authentication/external/dynamic.html > > Hope this helps and thanks for taking this on! > > On Tue, Feb 25, 2020 at 5:14 AM Robert Munteanu wrote: > >> Hi Cris, >> >> I am away until 9/3, I'll only be able to look into this then.

Re: OIDC or SAML2 for Sling

implementation in step 1 uses SOAP bindings It would be an honor if any you experienced Sling developers and security professionals would review and contribute your thoughts. Best regards Cris Rockwell Applications Architect Sr College of Literature, Science, and the Arts | University of Michigan

Re: OIDC or SAML2 for Sling

TTP Redirect Binding * Assertion transported using HTTP Artifact Binding * SAML Artifact transported using HTTP Redirect Binding If you or others have thoughts or recommendations for me about how to make this happen, please let me know. Thanks Cris Rockwell, App Sys Analyst/Programmer

Re: OIDC or SAML2 for Sling

curity/authentication/externalloginmodule.html <https://jackrabbit.apache.org/oak/docs/security/authentication/externalloginmodule.html> Thanks all. Cris R > On Dec 11, 2019, at 11:58 AM, Robert Munteanu wrote: > > On Wed, 2019-12-11 at 11:38 -0500, Cris Rockwell wrote: &

Re: OIDC or SAML2 for Sling

oak JCR repository without knowing the > password. > > The impl for #2 also dealt with linking the verified external account > identity with a local jackrabbit.oak user and copying any required > attributes from the external account to the local user profile. > > Regards, >

Re: OIDC or SAML2 for Sling

es updated and the user should be added or removed from Sling group membership. Once the user has signed in, then access is granted as usual using JCR-based ACL’s applied for the groups. Thanks Cris Rockwell, App Sys Analyst/Programmer Sr College of Literature, Science, and the Arts | University of Mic

OIDC or SAML2 for Sling

Hello Sling Users Does anyone know of a solution for SSO for Apache Sling using OIDC, OAuth2 or SAML2 using JCR-based access controls, user creation and attribute synchronization, and group membership? This one looks interesting, but is it dead?

Re: A maven archetype for apache sling cms

ng cms, please let us know. Thank you Cris Rockwell > On Feb 20, 2019, at 7:46 AM, Robert Munteanu wrote: > > Hi Mahsum, > > On Thu, 2019-02-07 at 12:19 +, Mahsum Demir wrote: >> Hi, >> >> I think having a Maven archetype which generates a si

Re: Can Suffix be used in the Sling Filter Pattern?

: > On Fri, 2019-03-29 at 14:27 -0400, Cris Rockwell wrote: > > Ok. Thanks. It must be a version thing, because > > org.apache.sling.engine.EngineConstants.SLING_FILTER_SUFFIX_PATTERN > > is not found in my local maven repository or IDE. > > Maybe it is not found due to

Re: Can Suffix be used in the Sling Filter Pattern?

details, I see lower versions. Bundle Location launchpad:resources/install/0/org.apache.sling.engine-2.6.6.jar Exported Packages org.apache.sling.engine,version=2.3.0 > On Mar 29, 2019, at 12:07 PM, Robert Munteanu wrote: > > On Fri, 2019-03-29 at 10:47 -0400, Cris Rockw

Re: Can Suffix be used in the Sling Filter Pattern?

but I cannot find it. Please send a link if you can. Thanks! Cris > On Jul 11, 2018, at 4:45 AM, Nicolas Peltier > wrote: > > Hi Cris, > > Not there is not, you have to test the suffix in the filter itself. > > Nicolas > > On 11/07/2018 03:26, "Cris Rockwell&qu

Re: Apache Sling Content Disposition Filter

Yea well... I was trying to avoid disclosing that. > On Feb 19, 2019, at 2:07 PM, Joey Smith wrote: > > tch the

Re: Apache Sling Content Disposition Filter

_location":""}]% curl -vfs -u admin:admin http://localhost:4502/content/dam/path/robots.txt * Trying ::1... * TCP_NODELAY set * Connected to localhost (::1) port 4502 (#0) * Server auth using Basic with user 'admin' > GET /content/dam/michigan-lsa/admin/robots.txt HTTP/1.1 > Host:

Re: Apache Sling Content Disposition Filter

ava/org/apache/sling/security/impl/ContentDispositionFilterConfiguration.java > > HTH > > Andres > > > El 2019-02-18 22:00, Cris Rockwell escribió: >> Hello Sling Users >> I am working on an upgrade and have found the changes to >> org.apache.sling.security

Apache Sling Content Disposition Filter

Hello Sling Users I am working on an upgrade and have found the changes to org.apache.sling.security.impl.ContentDispositionFilter present problems with rendering robots.txt (text/plain) from a location managed under the dam. After the upgrade it has the header Content-Disposition: attachment.

Re: users@sling.apache.org

However, I suspect there may be some limitations (or additional >> configuration) if you are intend to use some newer technologies like http/2 >> or websocket with another web server sitting between the client and >> sling/jetty. >> >> Regards, >> -Eric >>

users@sling.apache.org

Hello Sling as an application server should work well behind an httpd web-server acting as a firewall, proxy and cache layer. Given Sling and Httpd are both Apache projects for the web, it seems they are pieces in the same stack. But I'm having trouble finding documentation other than Adobe's

Can Suffix be used in the Sling Filter Pattern?

lt;https://issues.apache.org/jira/browse/SLING-7759> So as of now, there is no way to include a suffix in a Servlet Filter pattern? Thanks Cris Rockwell

Re: SlingHttpServletRequestWrapper Example?

pting to access > the input stream after it has been opened. The parameters already exist when > you're wrapping it and you just need to make sure your additional parameters > are accessible as well. > > - Jason > > On Mon, Jun 25, 2018, at 3:55 PM, Cris Rockwell wrote:

SlingHttpServletRequestWrapper Example?

g/apidocs/sling10/org/apache/sling/api/wrappers/SlingHttpServletRequestWrapper.html>. I would appreciate any ideas or suggestions. Thanks! Cris Rockwell

Re: Runmode property for Filter

s.SLING_FILTER_PATTERN from Activate? } } > On May 10, 2018, at 3:54 PM, Wim Symons <wim.sym...@gmail.com> wrote: > > Cris, > > See the explanation at > http://www.computepatterns.com/43/osgi-component-in-aem-that-is-active-only-in-specific-run-mode-say-publ

Runmode property for Filter

ING_FILTER_SCOPE + "=" + EngineConstants.FILTER_SCOPE_REQUEST, Constants.SERVICE_RANKING + "=-700", EngineConstants.SLING_FILTER_PATTERN + "=/content/my-project/.*" }) public final class OpenIDConnectFilter implements Filter { } Thanks! Cris Rockwell App Sy