Thank you max, the test was successful, then I just rearranged the openmeeting.properties file entries as per build#210 and adding the missing keys (as I did before) and upgraded to build#210 and the system was up and running. Was it not working because entries were not in the same order?

BTW, thank for introducing meld, very cool tool :-)

Ali

On 12/30/22 7:46 AM, Maxim Solodovnik wrote:
hmmm
Are you sure you sent valid logs?
Could you please try:

0) stop OM (if any)
    - - check with `ps -ef|grep java`
1) unpack to NEW empty folder
2) change nothing
3) cd to this NEW_FOLDER/apache-openmeetings-7.0.0-SNAPSHOT/
3) run `./admin.sh -i -v -user ui_admin -email someem...@gmail.com -tz "Asia/Tehran" -group "yourgroup"`
4) enter password
5) run `./bin/catalina.sh run`
6) check "https://localhost:5443/openmeetings";

If there will be errors, send me console output :)

if everything is OK

compare your openmeeting.properties file and the file from apache-openmeetings-7.0.0-SNAPSHOT
I would suggest to use some UI merge tool
for ex:
Ubuntu: meld
Win:      WinMerge

On Fri, 30 Dec 2022 at 11:10, Ali Alhaidary <ali.alhaid...@the5stars.org> wrote:

    Hi Max, it is there but blank, should I fill it with a value? what
    would the value be?

    Ali

    On 12/30/22 6:50 AM, Maxim Solodovnik wrote:
    Hello Ali,

    According to the log: "Could not resolve placeholder 'otp.issuer'
    in value "${otp.issuer}""
    Your `openmeetings.properties` doesn't have the line:

    ```
    otp.issuer=
    ```

    please add it :)

    On Fri, 30 Dec 2022 at 00:59, Ali Alhaidary
    <ali.alhaid...@the5stars.org> wrote:

        Attached log files of the latest 210 build

        Ali

        On 12/29/22 3:46 AM, Maxim Solodovnik wrote:


        from mobile (sorry for typos ;)

        On Thu, Dec 29, 2022, 01:40 Ali Alhaidary
        <ali.alhaid...@the5stars.org> wrote:

            Yes, I know that these lines were added, as you can see
            in my previous post, however, I did not change it
            assuming that the application will perform as usual
            until we set 2 factor authentication.


        Yes, this was the plan :)
        Must be some misunderstanding, I was surprised to see you
        are asking foe values while they were in your mail :)

            Is there and keys I should add to the database on
            build#205 ?


        You might add configuration value to the db if you would
        like to enable OTP
        It is disabled by default

        I can't help better without knowing actual error :(
        Please check the log (it always should be the first step :))

            Ali
            On 12/28/22 2:10 PM, Maxim Solodovnik wrote:
            The following section has been added :)


            ################## Time-based One Time Password
            ##################

            ## Please NOTE these values need to be changed BEFORE
            users will set-up OTP for themselves

            ## otherwise they can't login


            # NOTE Config->application.name
            <http://application.name> will be used if blank

            otp.issuer=

            otp.ntp.server=pool.ntp.org <http://pool.ntp.org>

            ## milliseconds

            otp.ntp.timeout=3000





            from mobile (sorry for typos ;)

            On Wed, Dec 28, 2022, 16:25 Ali Alhaidary
            <ali.alhaid...@the5stars.org> wrote:

                Is it possible just to pint it out please?

                Ali

                On 12/27/22 6:53 PM, Maxim Solodovnik wrote:
                I would start with examine the logs

                and will add missing key-value part to
                openmeetings.properties :)

                On Tue, 27 Dec 2022 at 19:00, Ali Alhaidary
                <ali.alhaid...@the5stars.org> wrote:

                    Where and what ? :-)

                    Ali

                    On 12/27/22 8:13 AM, Maxim Solodovnik wrote:
                    you have to add new values to your config :)

                    #206 is at demo-next
                    seems to work as expected :)

                    On Tue, 27 Dec 2022 at 10:37, Ali Alhaidary
                    <ali.alhaid...@the5stars.org> wrote:

                        No, I did not change anything in
                        openmeetings.properties as we want to use
                        om as before initially...

                        ################## Time-based One Time
                        Password ##################
                        ## Please NOTE these values need to be
                        changed BEFORE users will set-up OTP for
                        themselves
                        ## otherwise they can't login

                        # NOTE Config->application.name
                        <http://application.name> will be used if
                        blank
                        otp.issuer=
                        otp.ntp.server=pool.ntp.org
                        <http://pool.ntp.org>
                        ## milliseconds
                        otp.ntp.timeout=3000


                        On 12/27/22 4:44 AM, Maxim Solodovnik wrote:
                        Anything suspicious in the log?
                        Have you updated openmeetings.properties
                        with "otp" specific values?

                        from mobile (sorry for typos ;)

                        On Mon, Dec 26, 2022, 22:54 Ali
                        Alhaidary <ali.alhaid...@the5stars.org>
                        wrote:

                            Could not login from moodle plugin,
                            and (HTTP Status 404 – Not Found) in
                            stand alone app.

                            Ali

                            On 12/26/22 5:18 PM, Ali Alhaidary
                            wrote:

                            Seems ok, and translated...

                            Ali

                            On 12/26/22 8:37 AM, Maxim
                            Solodovnik wrote:
                            Seems to be implemented
                            I would appreciate if someone can
                            test this new functionality
                            (And wording :)))

                            On Thu, 22 Dec 2022 at 14:14,
                            Maxim Solodovnik
                            <solomax...@gmail.com> wrote:



                                On Thu, 22 Dec 2022 at 14:01,
                                seba.wag...@gmail.com
                                <seba.wag...@gmail.com> wrote:

                                    Sry I did not have enough
                                    time. But it would be a
                                    good feature to add.

                                    Also a good message we can
                                    share around enhancing
                                    OpenMeetings security.
                                    Relevant for many
                                    education/public environments.


                                I agree :))
                                Will update JIRA/demo-next
                                when will have something
                                working :)


                                    Thx
                                    Seb

                                    Sebastian Wagner
                                    Director Arrakeen
                                    Solutions, OM-Hosting.com
                                    http://arrakeen-solutions.co.nz/
                                    https://om-hosting.com -
                                    Cloud & Server Hosting for
                                    HTML5 Video-Conferencing
                                    OpenMeetings
                                    
<https://www.youracclaim.com/badges/da4e8828-743d-4968-af6f-49033f10d60a/public_url><https://www.youracclaim.com/badges/b7e709c6-aa87-4b02-9faf-099038475e36/public_url>


                                    On Thu, 22 Dec 2022 at
                                    18:37, Maxim Solodovnik
                                    <solomax...@gmail.com> wrote:

                                        
https://issues.apache.org/jira/browse/OPENMEETINGS-2755

                                        will try to implement
                                        it :)

                                        On Wed, 3 Aug 2022 at
                                        13:45, Ali Alhaidary
                                        <ali.alhaid...@the5stars.org>
                                        wrote:

                                            +1

                                            Yes, why not...

                                            Ali

                                            On 8/3/22 8:34 AM,
                                            Maxim Solodovnik
                                            wrote:
                                            we already have
                                            BSD 3-clause:
                                            
https://github.com/apache/openmeetings/blob/master/LICENSE#L2479

                                            will need to add
                                            one line only :)

                                            On Wed, 3 Aug
                                            2022 at 12:25,
                                            seba.wag...@gmail.com
                                            <seba.wag...@gmail.com>
                                            wrote:

                                                There seem to
                                                be a few
                                                options for
                                                Google using
                                                Java
                                                E.g.
                                                
https://github.com/wstrange/GoogleAuth


                                                I don't quite
                                                see in that
                                                lib how it
                                                generates the
                                                QR code for
                                                scanning but
                                                there should
                                                be a way :)

                                                The BSD
                                                license would
                                                require us to
                                                add a copy
                                                left into our
                                                License file,
                                                but in
                                                general it
                                                would be
                                                compatible imho.

                                                Thanks
                                                Seb

                                                Sebastian Wagner
                                                Director
                                                Arrakeen
                                                Solutions,
                                                OM-Hosting.com
                                                http://arrakeen-solutions.co.nz/
                                                https://om-hosting.com
                                                - Cloud &
                                                Server
                                                Hosting for
                                                HTML5
                                                Video-Conferencing
                                                OpenMeetings
                                                
<https://www.youracclaim.com/badges/da4e8828-743d-4968-af6f-49033f10d60a/public_url><https://www.youracclaim.com/badges/b7e709c6-aa87-4b02-9faf-099038475e36/public_url>


                                                On Wed, 3 Aug
                                                2022 at
                                                16:12, Maxim
                                                Solodovnik
                                                <solomax...@gmail.com>
                                                wrote:

                                                    Hello Seb,

                                                    Sorry for
                                                    a late
                                                    response,
                                                    I'm on
                                                    vacation :)

                                                    I would
                                                    +1 this
                                                    feature :)

                                                    The
                                                    problems
                                                    we'll
                                                    need to solve
                                                    - add 2fa
                                                    mechanisms
                                                    other
                                                    than
                                                    email
                                                    (not sure
                                                    if apps
                                                    like
                                                    "Google
                                                    authenticator"
                                                    has open
                                                    source
                                                    API :(,
                                                    we can
                                                    use
                                                    telegram
                                                    API ....)
                                                    - we'll
                                                    need to
                                                    move this
                                                    out of
                                                    om_user
                                                    db table
                                                    (maybe
                                                    with
                                                    activation_hash
                                                    and
                                                    *reset-password-hash*

                                                    Need to
                                                    be
                                                    investigated
                                                    and
                                                    carefully
                                                    refactored :)

                                                    from
                                                    mobile
                                                    (sorry
                                                    for typos ;)

                                                    On Wed,
                                                    Aug 3,
                                                    2022,
                                                    10:15
                                                    seba.wag...@gmail.com
                                                    <seba.wag...@gmail.com>
                                                    wrote:

                                                        Not
                                                        many
                                                        pros
                                                        or
                                                        cons
                                                        in
                                                        this
                                                        discussion.


                                                        But I
                                                        think
                                                        it
                                                        would
                                                        be a
                                                        good
                                                        option
                                                        to
                                                        have
                                                        available
                                                        for
                                                        users.
                                                        As
                                                        well
                                                        as a
                                                        good
                                                        feature
                                                        to
                                                        advertise
                                                        for.
                                                        Especially
                                                        in
                                                        order
                                                        to
                                                        use
                                                        OpenMeetings
                                                        in a
                                                        Gov/Education
                                                        environment
                                                        where
                                                        compliance
                                                        may
                                                        require
                                                        to
                                                        have
                                                        2
                                                        factor
                                                        auth
                                                        for
                                                        applications
                                                        in
                                                        order
                                                        for
                                                        using
                                                        it.

                                                        So I
                                                        assume
                                                        I can
                                                        create
                                                        some
                                                        tickets
                                                        and
                                                        get
                                                        this
                                                        on
                                                        the way.

                                                        Thanks
                                                        Seb



                                                        Sebastian
                                                        Wagner
                                                        Director
                                                        Arrakeen
                                                        Solutions,
                                                        OM-Hosting.com
                                                        
http://arrakeen-solutions.co.nz/
                                                        https://om-hosting.com
                                                        -
                                                        Cloud
                                                        &
                                                        Server
                                                        Hosting
                                                        for
                                                        HTML5
                                                        Video-Conferencing
                                                        OpenMeetings
                                                        
<https://www.youracclaim.com/badges/da4e8828-743d-4968-af6f-49033f10d60a/public_url><https://www.youracclaim.com/badges/b7e709c6-aa87-4b02-9faf-099038475e36/public_url>


                                                        On
                                                        Mon,
                                                        1 Aug
                                                        2022
                                                        at
                                                        09:31,
                                                        seba.wag...@gmail.com
                                                        <seba.wag...@gmail.com>
                                                        wrote:

                                                            I
                                                            would
                                                            like
                                                            to
                                                            add
                                                            a
                                                            ticket
                                                            to
                                                            investigate
                                                            and
                                                            look
                                                            into
                                                            adding
                                                            2
                                                            factor
                                                            authentication
                                                            to
                                                            OpenMeetings.
                                                            As
                                                            an
                                                            optional feature,
                                                            default
                                                            would
                                                            be
                                                            turned
                                                            off.

                                                            There
                                                            are
                                                            various
                                                            libraries
                                                            to
                                                            achieve
                                                            2
                                                            factor auth.
                                                            I
                                                            would
                                                            probably prefer
                                                            using
                                                            the
                                                            Google
                                                            Authenticator
                                                            as
                                                            a
                                                            method
                                                            since
                                                            it
                                                            seems
                                                            the
                                                            most
                                                            widely adopted
                                                            authenticator.


                                                            In
                                                            terms
                                                            of
                                                            turning
                                                            it
                                                            on/off
                                                            I
                                                            would
                                                            add
                                                            2
                                                            flags:
                                                             -
                                                            On
                                                            a
                                                            per
                                                            server
                                                            basis
                                                            a
                                                            flag
                                                            to
                                                            generally
                                                            turn
                                                            2
                                                            factor
                                                            auth
                                                            on
                                                            or
                                                            off
                                                             -
                                                            On
                                                            a
                                                            per
                                                            individual
                                                            account basis
                                                            so
                                                            you
                                                            can
                                                            turn
                                                            2
                                                            factor
                                                            auth on/off
                                                            for
                                                            an
                                                            individual
                                                            user

                                                            This
                                                            would
                                                            not
                                                            affect
                                                            past
                                                            installations.
                                                            This
                                                            would
                                                            not
                                                            affect
                                                            logging
                                                            in
                                                            via
                                                            Soap/Rest.

                                                            I
                                                            think
                                                            this
                                                            would
                                                            be
                                                            a
                                                            good
                                                            feature
                                                            to
                                                            improve
                                                            security.

                                                            Let
                                                            me
                                                            know
                                                            what
                                                            you
                                                            think,
                                                            and
                                                            I
                                                            will
                                                            add
                                                            a
                                                            ticket and
                                                            look
                                                            into
                                                            adding
                                                            this
                                                            over
                                                            the
                                                            next
                                                            few
                                                            weeks.

                                                            Thanks
                                                            Seb

                                                            Sebastian
                                                            Wagner
                                                            Director
                                                            Arrakeen
                                                            Solutions,
                                                            OM-Hosting.com
                                                            
http://arrakeen-solutions.co.nz/
                                                            
https://om-hosting.com
                                                            -
                                                            Cloud
                                                            &
                                                            Server
                                                            Hosting
                                                            for
                                                            HTML5
                                                            Video-Conferencing
                                                            OpenMeetings
                                                            
<https://www.youracclaim.com/badges/da4e8828-743d-4968-af6f-49033f10d60a/public_url><https://www.youracclaim.com/badges/b7e709c6-aa87-4b02-9faf-099038475e36/public_url>



-- Best regards,
                                            Maxim



-- Best regards,
                                        Maxim



-- Best regards,
                                Maxim



-- Best regards,
                            Maxim



-- Best regards,
                    Maxim



-- Best regards,
                Maxim



-- Best regards,
    Maxim



--
Best regards,
Maxim

Reply via email to