[jira] [Updated] (SLING-8946) Non-deterministic shadowing of resource observation

2020-02-10 Thread Sonal Gupta (Jira)
[ https://issues.apache.org/jira/browse/SLING-8946?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Sonal Gupta updated SLING-8946: --- Attachment: (was: test.zip) > Non-deterministic shadowing of resource observation > -

[GitHub] [sling-slingfeature-maven-plugin] sonarcloud[bot] commented on issue #49: Replacement PR for #41 with a clean set of changes

2020-02-10 Thread GitBox
sonarcloud[bot] commented on issue #49: Replacement PR for #41 with a clean set of changes URL: https://github.com/apache/sling-slingfeature-maven-plugin/pull/49#issuecomment-584405861 SonarCloud Quality Gate failed. [](https://sonarcloud.io/project/issues?id=apache_sling-slingfeatu

[GitHub] [sling-slingfeature-maven-plugin] schaefa opened a new pull request #49: Replacement PR for #41 with a clean set of changes

2020-02-10 Thread GitBox
schaefa opened a new pull request #49: Replacement PR for #41 with a clean set of changes URL: https://github.com/apache/sling-slingfeature-maven-plugin/pull/49 This is a redo of the PR #41 with a clean set of changes. Any project that wants to assemble a Project FM by including exis

[GitHub] [sling-slingfeature-maven-plugin] schaefa commented on issue #41: SLING-8875 - Created new Goal to create an FM Descriptor from its POM

2020-02-10 Thread GitBox
schaefa commented on issue #41: SLING-8875 - Created new Goal to create an FM Descriptor from its POM URL: https://github.com/apache/sling-slingfeature-maven-plugin/pull/41#issuecomment-584400891 I am closing this PR to reset the changes into a clean set of commits ---

[GitHub] [sling-slingfeature-maven-plugin] schaefa closed pull request #41: SLING-8875 - Created new Goal to create an FM Descriptor from its POM

2020-02-10 Thread GitBox
schaefa closed pull request #41: SLING-8875 - Created new Goal to create an FM Descriptor from its POM URL: https://github.com/apache/sling-slingfeature-maven-plugin/pull/41 This is an automated message from the Apache Git S

[GitHub] [sling-slingfeature-maven-plugin] schaefa commented on issue #33: Integrated the Convert Content Package Maven Plugin into this plugin

2020-02-10 Thread GitBox
schaefa commented on issue #33: Integrated the Convert Content Package Maven Plugin into this plugin URL: https://github.com/apache/sling-slingfeature-maven-plugin/pull/33#issuecomment-584391469 Not needed as the cpconverter was integrated into its own plugin -

[GitHub] [sling-slingfeature-maven-plugin] schaefa closed pull request #33: Integrated the Convert Content Package Maven Plugin into this plugin

2020-02-10 Thread GitBox
schaefa closed pull request #33: Integrated the Convert Content Package Maven Plugin into this plugin URL: https://github.com/apache/sling-slingfeature-maven-plugin/pull/33 This is an automated message from the Apache Git Se

Re: Error migrating to latest version of the bundles - Can neither derive user name nor principal names (was: Slow queries and unexpected results)

2020-02-10 Thread Carlos Munoz
Thanks Sergiu, I will give that a shot (removing that configuration item I mean). I actually managed to replicate some of the weird symptoms locally. It required me to set up a local mongo replica set. (I used podman, so let me know if you need the steps I followed to do this). The first time I ra

Re: Error migrating to latest version of the bundles - Can neither derive user name nor principal names (was: Slow queries and unexpected results)

2020-02-10 Thread Sergiu Dumitriu
This provisioning snippet triggered it for me, but in a more customized instance, so I'm not sure if it is enough by itself to cause issues: [configurations] org.apache.sling.auth.form.FormAuthenticationHandler form.login.form="/login" On 2/10/20 4:48 AM, Robert Munteanu wrote: > I t

[jira] [Commented] (SLING-9032) Problem releaseing with Parent 36: NoClassDefFoundError: org/apache/maven/shared/release/env/ReleaseEnvironment

2020-02-10 Thread Stefan Seifert (Jira)
[ https://issues.apache.org/jira/browse/SLING-9032?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17033738#comment-17033738 ] Stefan Seifert commented on SLING-9032: --- bq. Any idea why this should have been res

Re: Redirect Provider

2020-02-10 Thread Ian Boston
> Let me know whether that is enough or it needs expansions. +1, works. Interestingly it did need all occurrences of bundles pointing to SNAPSHOT Sling API bundles to be updated, and for those bundles to depend on the latest snapshot of the API. scripting.core and servlets.resolver had to be fixe

[jira] [Commented] (SLING-8946) Non-deterministic shadowing of resource observation

2020-02-10 Thread Dirk Rudolph (Jira)
[ https://issues.apache.org/jira/browse/SLING-8946?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17033730#comment-17033730 ] Dirk Rudolph commented on SLING-8946: - [~sonagupt] even with a compiled version of yo

[GitHub] [sling-org-apache-sling-security] rombert commented on issue #1: SLING-8838 - Add HEAD support to ContentDispositionFilter

2020-02-10 Thread GitBox
rombert commented on issue #1: SLING-8838 - Add HEAD support to ContentDispositionFilter URL: https://github.com/apache/sling-org-apache-sling-security/pull/1#issuecomment-584198889 @yesil - yes, please This is an automated

[GitHub] [sling-org-apache-sling-security] yesil commented on issue #1: SLING-8838 - Add HEAD support to ContentDispositionFilter

2020-02-10 Thread GitBox
yesil commented on issue #1: SLING-8838 - Add HEAD support to ContentDispositionFilter URL: https://github.com/apache/sling-org-apache-sling-security/pull/1#issuecomment-584185049 @rombert should I squash my commits on my local and push force? ---

[jira] [Resolved] (SLING-8735) Ignore bundle version baselining messages

2020-02-10 Thread Konrad Windszus (Jira)
[ https://issues.apache.org/jira/browse/SLING-8735?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Konrad Windszus resolved SLING-8735. Resolution: Fixed Fixed in https://github.com/apache/sling-parent/commit/b63b9a41f54bb2731

[GitHub] [sling-org-apache-sling-security] rombert commented on issue #1: SLING-8838 - Add HEAD support to ContentDispositionFilter

2020-02-10 Thread GitBox
rombert commented on issue #1: SLING-8838 - Add HEAD support to ContentDispositionFilter URL: https://github.com/apache/sling-org-apache-sling-security/pull/1#issuecomment-584150472 @kwin - Right, but squash and rebase is what we are looking for ---

[Jenkins] Sling » sling-org-apache-sling-launchpad-testing » master #578 is FIXED

2020-02-10 Thread Apache Jenkins Server
Please see https://builds.apache.org/job/Sling/job/sling-org-apache-sling-launchpad-testing/job/master/578/ for details. No further emails will be sent until the status of the build is changed.

[GitHub] [sling-org-apache-sling-security] kwin commented on issue #1: SLING-8838 - Add HEAD support to ContentDispositionFilter

2020-02-10 Thread GitBox
kwin commented on issue #1: SLING-8838 - Add HEAD support to ContentDispositionFilter URL: https://github.com/apache/sling-org-apache-sling-security/pull/1#issuecomment-584117870 @rombert Squash and merge should work. At least for me it is provided as an option in the GitHub UI!

[jira] [Commented] (SLING-8946) Non-deterministic shadowing of resource observation

2020-02-10 Thread Konrad Windszus (Jira)
[ https://issues.apache.org/jira/browse/SLING-8946?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17033510#comment-17033510 ] Konrad Windszus commented on SLING-8946: [~sonagupt] Sorry, open source does not

[jira] [Commented] (SLING-8946) Non-deterministic shadowing of resource observation

2020-02-10 Thread Sonal Gupta (Jira)
[ https://issues.apache.org/jira/browse/SLING-8946?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17033509#comment-17033509 ] Sonal Gupta commented on SLING-8946: [~diru] Can you please suggest were you able to

[jira] [Commented] (SLING-9061) Evaluate ORIGIN header in addition to Referer header in CSRFFilter

2020-02-10 Thread Konrad Windszus (Jira)
[ https://issues.apache.org/jira/browse/SLING-9061?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17033504#comment-17033504 ] Konrad Windszus commented on SLING-9061: For Ajax based attacks the Origin header

[GitHub] [sling-org-apache-sling-javax-activation] sonarcloud[bot] commented on issue #1: Feature/sling 9057 update javax activation

2020-02-10 Thread GitBox
sonarcloud[bot] commented on issue #1: Feature/sling 9057 update javax activation URL: https://github.com/apache/sling-org-apache-sling-javax-activation/pull/1#issuecomment-584074499 Kudos, SonarCloud Quality Gate passed! [](https://sonarcloud.io/project/issues?id=apache_sling-org-a

[jira] [Updated] (SLING-9061) Evaluate ORIGIN header in addition to Referer header in CSRFFilter

2020-02-10 Thread Konrad Windszus (Jira)
[ https://issues.apache.org/jira/browse/SLING-9061?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Konrad Windszus updated SLING-9061: --- Summary: Evaluate ORIGIN header in addition to Referer header in CSRFFilter (was: Evaluate O

[GitHub] [sling-org-apache-sling-javax-activation] sonarcloud[bot] removed a comment on issue #1: Feature/sling 9057 update javax activation

2020-02-10 Thread GitBox
sonarcloud[bot] removed a comment on issue #1: Feature/sling 9057 update javax activation URL: https://github.com/apache/sling-org-apache-sling-javax-activation/pull/1#issuecomment-583833269 Kudos, SonarCloud Quality Gate passed! [](https://sonarcloud.io/project/issues?id=apache_sli

[jira] [Commented] (SLING-9043) COPY/MOVE should be in the referer filter's default list of protected HTTP methods

2020-02-10 Thread Konrad Windszus (Jira)
[ https://issues.apache.org/jira/browse/SLING-9043?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17033503#comment-17033503 ] Konrad Windszus commented on SLING-9043: I added https://issues.apache.org/jira/b

[jira] [Created] (SLING-9061) Evaluate ORIGIN header in addition to Referer in CSRFFilter

2020-02-10 Thread Konrad Windszus (Jira)
Konrad Windszus created SLING-9061: -- Summary: Evaluate ORIGIN header in addition to Referer in CSRFFilter Key: SLING-9061 URL: https://issues.apache.org/jira/browse/SLING-9061 Project: Sling

[GitHub] [sling-org-apache-sling-security] rombert commented on issue #1: SLING-8838 - Add HEAD support to ContentDispositionFilter

2020-02-10 Thread GitBox
rombert commented on issue #1: SLING-8838 - Add HEAD support to ContentDispositionFilter URL: https://github.com/apache/sling-org-apache-sling-security/pull/1#issuecomment-584068327 @yesil - could I also ask you to squash your commits? I can't squash + rebase from the GitHub UI ... Other

[GitHub] [sling-org-apache-sling-security] sonarcloud[bot] commented on issue #1: SLING-8838 - Add HEAD support to ContentDispositionFilter

2020-02-10 Thread GitBox
sonarcloud[bot] commented on issue #1: SLING-8838 - Add HEAD support to ContentDispositionFilter URL: https://github.com/apache/sling-org-apache-sling-security/pull/1#issuecomment-584067963 Kudos, SonarCloud Quality Gate passed! [](https://sonarcloud.io/project/issues?id=apache_slin

[GitHub] [sling-org-apache-sling-security] sonarcloud[bot] commented on issue #1: SLING-8838 - Add HEAD support to ContentDispositionFilter

2020-02-10 Thread GitBox
sonarcloud[bot] commented on issue #1: SLING-8838 - Add HEAD support to ContentDispositionFilter URL: https://github.com/apache/sling-org-apache-sling-security/pull/1#issuecomment-584067918 Kudos, SonarCloud Quality Gate passed! [](https://sonarcloud.io/project/issues?id=apache_slin

[GitHub] [sling-org-apache-sling-security] sonarcloud[bot] removed a comment on issue #1: SLING-8838 - Add HEAD support to ContentDispositionFilter

2020-02-10 Thread GitBox
sonarcloud[bot] removed a comment on issue #1: SLING-8838 - Add HEAD support to ContentDispositionFilter URL: https://github.com/apache/sling-org-apache-sling-security/pull/1#issuecomment-573761373 SonarCloud Quality Gate failed. [](https://sonarcloud.io/project/issues?id=apache_sli

[GitHub] [sling-org-apache-sling-security] sonarcloud[bot] removed a comment on issue #1: SLING-8838 - Add HEAD support to ContentDispositionFilter

2020-02-10 Thread GitBox
sonarcloud[bot] removed a comment on issue #1: SLING-8838 - Add HEAD support to ContentDispositionFilter URL: https://github.com/apache/sling-org-apache-sling-security/pull/1#issuecomment-584067918 Kudos, SonarCloud Quality Gate passed! [](https://sonarcloud.io/project/issues?id=apa

[GitHub] [sling-org-apache-sling-security] yesil commented on issue #1: SLING-8838 - Add HEAD support to ContentDispositionFilter

2020-02-10 Thread GitBox
yesil commented on issue #1: SLING-8838 - Add HEAD support to ContentDispositionFilter URL: https://github.com/apache/sling-org-apache-sling-security/pull/1#issuecomment-584067088 @rombert I just updated my PR based on Sonar's recommendations.

[GitHub] [sling-org-apache-sling-security] rombert commented on issue #1: SLING-8838 - Add HEAD support to ContentDispositionFilter

2020-02-10 Thread GitBox
rombert commented on issue #1: SLING-8838 - Add HEAD support to ContentDispositionFilter URL: https://github.com/apache/sling-org-apache-sling-security/pull/1#issuecomment-584049183 @yesil - I would like to make a release of the Security bundle today. Do you want to update the PR so that

[jira] [Resolved] (SLING-9043) COPY/MOVE should be in the referer filter's default list of protected HTTP methods

2020-02-10 Thread Robert Munteanu (Jira)
[ https://issues.apache.org/jira/browse/SLING-9043?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robert Munteanu resolved SLING-9043. Fix Version/s: Security 1.1.18 Assignee: Robert Munteanu Resolution: Fixed

[jira] [Commented] (SLING-9043) COPY/MOVE should be in the referer filter's default list of protected HTTP methods

2020-02-10 Thread Robert Munteanu (Jira)
[ https://issues.apache.org/jira/browse/SLING-9043?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17033476#comment-17033476 ] Robert Munteanu commented on SLING-9043: PR applied, thanks [~sonagupt] > COPY/M

[jira] [Updated] (SLING-9043) COPY/MOVE should be in the referer filter's default list of protected HTTP methods

2020-02-10 Thread Robert Munteanu (Jira)
[ https://issues.apache.org/jira/browse/SLING-9043?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robert Munteanu updated SLING-9043: --- Component/s: (was: Resource Access Security) Extensions > COPY/MOVE shou

[GitHub] [sling-org-apache-sling-security] rombert commented on issue #2: SLING-9043 Adding COPY/MOVE method in default methods list of protected HTTP methods

2020-02-10 Thread GitBox
rombert commented on issue #2: SLING-9043 Adding COPY/MOVE method in default methods list of protected HTTP methods URL: https://github.com/apache/sling-org-apache-sling-security/pull/2#issuecomment-584042494 Done, thanks @sonagupt ! ---

[GitHub] [sling-org-apache-sling-security] rombert merged pull request #2: SLING-9043 Adding COPY/MOVE method in default methods list of protected HTTP methods

2020-02-10 Thread GitBox
rombert merged pull request #2: SLING-9043 Adding COPY/MOVE method in default methods list of protected HTTP methods URL: https://github.com/apache/sling-org-apache-sling-security/pull/2 This is an automated message from the

[GitHub] [sling-org-apache-sling-security] sonagupt commented on issue #2: SLING-9043 Adding COPY/MOVE method in default methods list of protected HTTP methods

2020-02-10 Thread GitBox
sonagupt commented on issue #2: SLING-9043 Adding COPY/MOVE method in default methods list of protected HTTP methods URL: https://github.com/apache/sling-org-apache-sling-security/pull/2#issuecomment-584042263 @rombert I have squashed the commits into single commit. Can you please merge t

[jira] [Closed] (SLING-9056) Adding target name=sling for MetricRegistry reference in sling-org-apache-sling-commons-scheduler

2020-02-10 Thread A. J. David Bosschaert (Jira)
[ https://issues.apache.org/jira/browse/SLING-9056?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] A. J. David Bosschaert closed SLING-9056. - > Adding target name=sling for MetricRegistry reference in > sling-org-apache-sling-

[jira] [Closed] (SLING-8764) A metric named commons.scheduler.oldest.running.job.millis already exists

2020-02-10 Thread A. J. David Bosschaert (Jira)
[ https://issues.apache.org/jira/browse/SLING-8764?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] A. J. David Bosschaert closed SLING-8764. - > A metric named commons.scheduler.oldest.running.job.millis already exists > ---

[RESULT] [VOTE] Release Apache Sling Commons Scheduler 2.7.6

2020-02-10 Thread davidb
Hi all, We received the following binding +1 votes: Carsten Ziegeler, Daniel Klco, David Bosschaert and no other votes. This release succeeds. I have promoted the artifacts. Best regards, David On Thu, 6 Feb 2020 at 10:29, wrote: > Hi all, > > I would like to call the release the Sling Commo

[jira] [Closed] (SLING-9041) Converter adding .config ending of sling:OsgiConfig nodes to pid

2020-02-10 Thread A. J. David Bosschaert (Jira)
[ https://issues.apache.org/jira/browse/SLING-9041?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] A. J. David Bosschaert closed SLING-9041. - > Converter adding .config ending of sling:OsgiConfig nodes to pid >

Re: Error migrating to latest version of the bundles - Can neither derive user name nor principal names (was: Slow queries and unexpected results)

2020-02-10 Thread Robert Munteanu
I tried to reproduce this but I could not, unfortunately. What I did was 1. Build the latest Sling Starter locally 2. Started up MongoDB $ docker run --name mongo-sling -p 27017:27017 -d mongo:3.6 3. Started up Sling $ java -jar target/org.apache.sling.starter-12-SNAPSHOT.jar -Dsling.run.modes=

[GitHub] [sling-org-apache-sling-security] rombert commented on issue #2: SLING-9043 Adding COPY/MOVE method in default methods list of protected HTTP methods

2020-02-10 Thread GitBox
rombert commented on issue #2: SLING-9043 Adding COPY/MOVE method in default methods list of protected HTTP methods URL: https://github.com/apache/sling-org-apache-sling-security/pull/2#issuecomment-584032005 @sonagupt - fix LGTM and the discussion in the issue seems to have settled down.

[jira] [Commented] (SLING-8946) Non-deterministic shadowing of resource observation

2020-02-10 Thread Sonal Gupta (Jira)
[ https://issues.apache.org/jira/browse/SLING-8946?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17033460#comment-17033460 ] Sonal Gupta commented on SLING-8946: Yes I understand that but i could not reach to t

[jira] [Commented] (SLING-8946) Non-deterministic shadowing of resource observation

2020-02-10 Thread Bertrand Delacretaz (Jira)
[ https://issues.apache.org/jira/browse/SLING-8946?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17033450#comment-17033450 ] Bertrand Delacretaz commented on SLING-8946: Note that the Sling project is n

[jira] [Comment Edited] (SLING-8946) Non-deterministic shadowing of resource observation

2020-02-10 Thread Sonal Gupta (Jira)
[ https://issues.apache.org/jira/browse/SLING-8946?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17033436#comment-17033436 ] Sonal Gupta edited comment on SLING-8946 at 2/10/20 8:41 AM: -

[jira] [Updated] (SLING-8946) Non-deterministic shadowing of resource observation

2020-02-10 Thread Sonal Gupta (Jira)
[ https://issues.apache.org/jira/browse/SLING-8946?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Sonal Gupta updated SLING-8946: --- Attachment: test.zip > Non-deterministic shadowing of resource observation >

[jira] [Commented] (SLING-8946) Non-deterministic shadowing of resource observation

2020-02-10 Thread Sonal Gupta (Jira)
[ https://issues.apache.org/jira/browse/SLING-8946?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17033436#comment-17033436 ] Sonal Gupta commented on SLING-8946: [~diru] [^test.zip]Can you please use try the at

[jira] [Updated] (SLING-8946) Non-deterministic shadowing of resource observation

2020-02-10 Thread Sonal Gupta (Jira)
[ https://issues.apache.org/jira/browse/SLING-8946?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Sonal Gupta updated SLING-8946: --- Attachment: (was: test2.zip) > Non-deterministic shadowing of resource observation >