RE: svn commit: r1004345 - /sling/trunk/bundles/auth/core/src/main/java/org/apache/sling/auth/core/impl/SlingAuthenticator.java

2010-10-05 Thread Mike Müller
Hi Justin You're probably right. The topic came up in [1]. As for the browsers I would dare to say there are more problems than advantages with Basic Auth: - Some browsers pass credentials even on parent paths where credentials should not be sent. - Logout is mostly a problem If the client is

Re: svn commit: r1004345 - /sling/trunk/bundles/auth/core/src/main/java/org/apache/sling/auth/core/impl/SlingAuthenticator.java

2010-10-05 Thread Carsten Ziegeler
Mike Müller wrote Hi Justin You're probably right. The topic came up in [1]. As for the browsers I would dare to say there are more problems than advantages with Basic Auth: - Some browsers pass credentials even on parent paths where credentials should not be sent. - Logout is mostly

Re: svn commit: r1004345 - /sling/trunk/bundles/auth/core/src/main/java/org/apache/sling/auth/core/impl/SlingAuthenticator.java

2010-10-05 Thread Ian Boston
On 5 Oct 2010, at 07:31, Mike Müller wrote: Hi Justin You're probably right. The topic came up in [1]. As for the browsers I would dare to say there are more problems than advantages with Basic Auth: - Some browsers pass credentials even on parent paths where credentials should not be

Re: svn commit: r1004345 - /sling/trunk/bundles/auth/core/src/main/java/org/apache/sling/auth/core/impl/SlingAuthenticator.java

2010-10-05 Thread Bertrand Delacretaz
On Tue, Oct 5, 2010 at 3:32 AM, Justin Edelson jus...@justinedelson.com wrote: I think we should put this change up for a vote. It is a major backwards compatibility issue and basically means that every tutorial everyone has ever written about how to use Sling with curl will no longer work

[jira] Reopened: (SLING-1817) switch HTTP Basic Authentication completely off by default

2010-10-05 Thread Bertrand Delacretaz (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1817?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bertrand Delacretaz reopened SLING-1817: This is a backwards incompatible change that requires a vote a discussion, please

[jira] Issue Comment Edited: (SLING-1817) switch HTTP Basic Authentication completely off by default

2010-10-05 Thread Bertrand Delacretaz (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1817?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12917897#action_12917897 ] Bertrand Delacretaz edited comment on SLING-1817 at 10/5/10 4:23 AM:

Re: svn commit: r1003926 - /sling/trunk/launchpad/integration-tests/src/main/java/org/apache/sling/launchpad/webapp/integrationtest/servlets/post/PostServletVersionableTest.java

2010-10-05 Thread Bertrand Delacretaz
On Sun, Oct 3, 2010 at 9:45 AM, fmesc...@apache.org wrote: Author: fmeschbe Date: Sun Oct  3 07:45:53 2010 New Revision: 1003926 ... Modified:    

[DISCUSS] switching off Basic Auth as default?

2010-10-05 Thread Mike Müller
Hi As of the discussion in [1] I like to start a new discussion about whether to disable or enable Basic Auth per default. The initial reason to disable it, were the problems appeared in the Sling Explorer after logging in under /system/console with Basic Auth (SLING-1765 [2]). With Basic Auth

[jira] Commented: (SLING-1817) switch HTTP Basic Authentication completely off by default

2010-10-05 Thread JIRA
[ https://issues.apache.org/jira/browse/SLING-1817?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12917901#action_12917901 ] Mike Müller commented on SLING-1817: The changes are reverted in r1004569 switch HTTP

[jira] Issue Comment Edited: (SLING-1817) switch HTTP Basic Authentication completely off by default

2010-10-05 Thread JIRA
[ https://issues.apache.org/jira/browse/SLING-1817?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12917901#action_12917901 ] Mike Müller edited comment on SLING-1817 at 10/5/10 4:46 AM: -

Re: [DISCUSS] switching off Basic Auth as default?

2010-10-05 Thread Bertrand Delacretaz
Hi Mike, Thanks for starting the discussion (and please revert the SLING-1817 changes for now as they break our integration tests). On Tue, Oct 5, 2010 at 10:44 AM, Mike Müller mike...@mysign.ch wrote: ...As of the discussion in [1] I like to start a new discussion about whether to disable or

RE: [DISCUSS] switching off Basic Auth as default?

2010-10-05 Thread Mike Müller
Hi Mike, Thanks for starting the discussion (and please revert the SLING-1817 changes for now as they break our integration tests). I already reverted them in r1004569... best regards mike

Hudson build is still unstable: sling-trun k-1.5 » Apache Sling Launchpad Testing #910

2010-10-05 Thread Apache Hudson Server
See https://hudson.apache.org/hudson/job/sling-trunk-1.5/org.apache.sling$org.apache.sling.launchpad.testing/910/

Hudson build is still unstable: sling-trunk-1.5 #910

2010-10-05 Thread Apache Hudson Server
See https://hudson.apache.org/hudson/job/sling-trunk-1.5/changes

Re: [DISCUSS] switching off Basic Auth as default?

2010-10-05 Thread Ian Boston
On 5 Oct 2010, at 09:44, Mike Müller wrote: With Basic Auth on we've got serveral issues in the browsers: - Some browsers pass credentials even on parent paths where credentials should not be sent. - Logout is mostly a problem We have hit exactly this problem with users logging into the

Hudson build became unstable: sling-contrib-1.5 #601

2010-10-05 Thread Apache Hudson Server
See https://hudson.apache.org/hudson/job/sling-contrib-1.5/601/changes

Hudson build is still unstable: sling-trun k-1.5 » Apache Sling Launchpad Testing #911

2010-10-05 Thread Apache Hudson Server
See https://hudson.apache.org/hudson/job/sling-trunk-1.5/org.apache.sling$org.apache.sling.launchpad.testing/911/

Hudson build is still unstable: sling-trunk-1.5 #911

2010-10-05 Thread Apache Hudson Server
See https://hudson.apache.org/hudson/job/sling-trunk-1.5/changes

Hudson build is still unstable: sling-trun k-1.6 » Apache Sling Launchpad Testing #597

2010-10-05 Thread Apache Hudson Server
See https://hudson.apache.org/hudson/job/sling-trunk-1.6/org.apache.sling$org.apache.sling.launchpad.testing/597/

Hudson build is still unstable: sling-trunk-1.6 #597

2010-10-05 Thread Apache Hudson Server
See https://hudson.apache.org/hudson/job/sling-trunk-1.6/changes

Re: [VOTE] Release Sling Servlets Resolver 2.1.0, Servlets GET 2.1.0, Servlets POST 2.1.0

2010-10-05 Thread Eric Norman
+1 On Oct 3, 2010 11:48 AM, Felix Meschberger fmesc...@gmail.com wrote: Hi, I hereby start the vote for the release of the Servlet support bundles: Sling Servlets Resolver 2.1.0, Sling Servlets GET 2.1.0, and Sling Servlets POST 2.1.0. All bundles include some kind of extended functionalities

[jira] Commented: (SLING-1793) JSP Java Standard Tag Library support

2010-10-05 Thread JIRA
[ https://issues.apache.org/jira/browse/SLING-1793?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12917949#action_12917949 ] Róbert Csákány commented on SLING-1793: --- @Felix: the org.xml.apache package for the

Re: svn commit: r1003926 - /sling/trunk/launchpad/integration-tests/src/main/java/org/apache/sling/launchpad/webapp/integrationtest/servlets/post/PostServletVersionableTest.java

2010-10-05 Thread Felix Meschberger
Hi, On 05.10.2010 10:37, Bertrand Delacretaz wrote: On Sun, Oct 3, 2010 at 9:45 AM, fmesc...@apache.org wrote: Author: fmeschbe Date: Sun Oct 3 07:45:53 2010 New Revision: 1003926 ... Modified:

Re: svn commit: r1003926 - /sling/trunk/launchpad/integration-tests/src/main/java/org/apache/sling/launchpad/webapp/integrationtest/servlets/post/PostServletVersionableTest.java

2010-10-05 Thread Bertrand Delacretaz
Hi, On Tue, Oct 5, 2010 at 2:39 PM, Felix Meschberger fmesc...@gmail.com wrote: ...     sling/trunk/launchpad/integration-tests/src/main/java/org/apache/sling/launchpad/webapp/integrationtest/servlets/post/PostServletVersionableTest.java ...     @Override     protected void setUp() throws

Re: svn commit: r1003926 - /sling/trunk/launchpad/integration-tests/src/main/java/org/apache/sling/launchpad/webapp/integrationtest/servlets/post/PostServletVersionableTest.java

2010-10-05 Thread Felix Meschberger
Hi, On 05.10.2010 14:46, Bertrand Delacretaz wrote: Hi, On Tue, Oct 5, 2010 at 2:39 PM, Felix Meschberger fmesc...@gmail.com wrote: ... sling/trunk/launchpad/integration-tests/src/main/java/org/apache/sling/launchpad/webapp/integrationtest/servlets/post/PostServletVersionableTest.java

[jira] Commented: (SLING-1793) JSP Java Standard Tag Library support

2010-10-05 Thread Justin Edelson (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1793?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12917965#action_12917965 ] Justin Edelson commented on SLING-1793: --- Robert - this bundle depends on and embeds

[jira] Updated: (SLING-1818) [explorer] Should not be prompted to delete the root node

2010-10-05 Thread Justin Edelson (JIRA)
[ https://issues.apache.org/jira/browse/SLING-1818?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Justin Edelson updated SLING-1818: -- Attachment: screenshot0.png [explorer] Should not be prompted to delete the root node

[jira] Created: (SLING-1818) [explorer] Should not be prompted to delete the root node

2010-10-05 Thread Justin Edelson (JIRA)
[explorer] Should not be prompted to delete the root node - Key: SLING-1818 URL: https://issues.apache.org/jira/browse/SLING-1818 Project: Sling Issue Type: Improvement

Re: [DISCUSS] switching off Basic Auth as default?

2010-10-05 Thread Justin Edelson
On 10/5/10 4:44 AM, Mike Müller wrote: Hi As of the discussion in [1] I like to start a new discussion about whether to disable or enable Basic Auth per default. The initial reason to disable it, were the problems appeared in the Sling Explorer after logging in under /system/console with

Re: svn commit: r1003926 - /sling/trunk/launchpad/integration-tests/src/main/java/org/apache/sling/launchpad/webapp/integrationtest/servlets/post/PostServletVersionableTest.java

2010-10-05 Thread Justin Edelson
Just committed r1004649 which uses the :autoCheckout parameter instead of setting the default value via ConfigAdmin. I think we probably need some better ConfigAdmin integration with our tests, but in this context it seems like overkill. Justin On 10/5/10 9:16 AM, Felix Meschberger wrote: Hi,

WebConsole Authentication (was: [DISCUSS] switching off Basic Auth as default?)

2010-10-05 Thread Felix Meschberger
Hi, Let me just answer this side-track: On 05.10.2010 15:57, Justin Edelson wrote: On 10/5/10 4:44 AM, Mike Müller wrote: Hi As of the discussion in [1] I like to start a new discussion about whether to disable or enable Basic Auth per default. The initial reason to disable it, were the

Hudson build is back to stable : sling-trun k-1.6 » Apache Sling Launchpad Testing #598

2010-10-05 Thread Apache Hudson Server
See https://hudson.apache.org/hudson/job/sling-trunk-1.6/org.apache.sling$org.apache.sling.launchpad.testing/598/

Hudson build is back to stable : sling-trunk-1.6 #598

2010-10-05 Thread Apache Hudson Server
See https://hudson.apache.org/hudson/job/sling-trunk-1.6/598/changes