Re: Password reset for admin?

2011-08-04 Thread Mike
Sorry for the late response (vacation). I understand what you saying that it is not a good idea to use generic or group accounts as much as possible.. However, it should not be so easy for users of an ERP to shoot themselves in the foot. This sounds like a gaping security hole, or at least a

Re: Password reset for admin?

2011-08-04 Thread Mike
Thanks Ruth. Sounds like you tweaked the system to prevent this admin reset issue. I would think that the password reset should only apply to ecommerce customers. Sounds like a code change will be required. On Sat, Jul 30, 2011 at 1:24 PM, Ruth Hoffman rhoff...@aesolves.com wrote: Hi Mike:

Hello All

2011-08-04 Thread vivek mishra
Hello, *Got the following error while running Ofbiz in eclipse.* Admin socket not configured; set to port 0 Exception in thread main java.lang.ExceptionInInitializerError at org.ofbiz.base.util.Debug.clinit(Debug.java:86) at

RE: Hello All

2011-08-04 Thread Hardik Handa
U need to do some changes while running ofbiz from eclipse, edit base/config/ofbiz-containers.xml comment commons-vfs-container and webslinger container This should solve the purpose Regards, Hardik Handa hardik.ha...@hcl.com -Original Message- From: vivek mishra

Re: Hello All

2011-08-04 Thread Sumit Pandit
Hi Vivek, I am running and debuggin ofbiz in eclipse by very simple steps given in following link - https://cwiki.apache.org/confluence/display/OFBIZ/Running+and+Debugging+OFBiz+in+Eclipse#RunningandDebuggingOFBizinEclipse-debuggingInEclipse I hope you are also trying same ?? On Thu, Aug

Re: Hello All

2011-08-04 Thread vivek mishra
Hello Sumit Thanks a lot buddy able to run OFBiz using eclipse finally. Thanks Regards *Vivek Mishra * On Thu, Aug 4, 2011 at 1:32 PM, Sumit Pandit meetsumit...@gmail.com wrote: Hi Vivek, I am running and debuggin ofbiz in eclipse by very simple steps given in following link -

Hello

2011-08-04 Thread vivek mishra
Hello Want to use only HR module in OFBiz...how can i hide the others? Thanks Regards Vivek Mishra* *

Re: Hello

2011-08-04 Thread Hans Bakker
Please use a proper subject for your email request? Check into the security...you can allow people only to use the HR component and other components do not disable any components as other suggested Regards. Hans -- Ofbiz on twitter: http://twitter.com/apache_ofbiz Myself on twitter:

Re: Password reset for admin?

2011-08-04 Thread BJ Freeman
It sounds like you speaking of Ofbiz as a finished product, in which case I agree with you first paragraph. However Ofbiz is not a finished product and is meant for Consultants to setup for end users. The consultant should know this information and make the application they setup for their client

Re: Hello

2011-08-04 Thread Brian Topping
On Aug 4, 2011, at 7:37 AM, Hans Bakker wrote: Please use a proper subject for your email request? +1 I generally have to do a double-take on these messages. I don't want to mark things from the list as spam because I don't want my mail client to mark everything from the list as spam, but

Re: Password reset for admin?

2011-08-04 Thread David E Jones
On Aug 4, 2011, at 6:39 AM, BJ Freeman wrote: It sounds like you speaking of Ofbiz as a finished product, in which case I agree with you first paragraph. However Ofbiz is not a finished product and is meant for Consultants to setup for end users. The consultant should know this information

Re: Password reset for admin?

2011-08-04 Thread BJ Freeman
Yes david if it is a bug, but by your definition many times this is a fearture. My point of the second paragraph that you did not include 1)part of the solution providing a way to circomvent security isssues not part of ofbiz but how one sets up ofbiz 2)the issues are addressed if one reads the

Re: Password reset for admin?

2011-08-04 Thread Mike
BJ, I fail to see how this could possibly be a feature. Right now, I'm at the level where I fiddle around with the code. As a new user, should I be expected to have to review the code to see if it stands up to security standards? I don't know much, but I do know when something isn't right, and

Re: Password reset for admin?

2011-08-04 Thread Raj Saini
I agree with you Mike. Every week I get couple of mails from Gmail and FB telling me that I had requested to rest my password and click on a link to confirm the request and I simply ignore such mails as I know I never asked to change my password. Imagine, if Gmail changes my password every

Re: Password reset for admin?

2011-08-04 Thread BJ Freeman
Ok like the see the jira you create. Mike sent the following on 8/4/2011 4:25 PM: BJ, I fail to see how this could possibly be a feature. Right now, I'm at the level where I fiddle around with the code. As a new user, should I be expected to have to review the code to see if it stands up to