Re: Crash when logging is set to Verbose

[Jacques Le Roux]

Emad,

Please create a Jira issue for that. Here is how:
https://cwiki.apache.org/confluence/display/OFBIZ/OFBiz+Contributors+Best+Practices

Jacques

Le 25/03/2024 à 22:38, Emad Radwan a écrit :

Hello Community,

I noticed that - even in the online demo - that if logging is set to
verbose and while calling 'Quick receive order' for an approved purchase
order that it crashes the whole session.

Regards,
Emad

Re: Online Demo UI Language

[Jacques Le Roux]

Hi Emad,

On demo if you see another language than yours (or English if there is no translation for your language) then someone else changed for his/her own 
language.
So yes it's annoying but you can change back to another language and it will be stored in the user you use preferences (only as long as the data don't 
change, on demo they often change for security reason)


For changing look for a flag in user preferences UI (at right top for recent themes) or a language word (like german), location and how it's shown 
depend on the theme you use.


It's the same for themes. In other words user preferences are shared, as are all data for a logged in user (because of preferences). We share all on 
demo, it's sometimes indeed disturbing :)


HTH

Jacques


Le 26/03/2024 à 20:28, Emad Radwan a écrit :

Hello Community,

I checked every where to change the current german to english with no luck.
How to do that? Also any restriction to play with this to not disturb other
users?

Regards,
Emad

Re: what is expected date for apache ofbiz 24.0.0

[Jacques Le Roux]

Le 22/03/2024 à 17:24, Sameer Alwosaby a écrit :

what is expected date for apache ofbiz 24.0.0?

Hi Sameer,

We are not sure yet, we are currently discussing about that.

Note that we don't use semantic versioning. We use one similar to Ubuntu's 
(year/month) where we add the release number after (year/month).

So for instance* 18.12.12 means the 18.12 branch was freezed in 2018 December.
Then only bugs are backported from the trunk to this branch.
And the 1st 18.12 release is 18.12.01**

* https://ofbiz.apache.org/download.html
** https://ofbiz.apache.org/release-notes-18.12.01.html

Hope it's clear :)

Jacques

Re: Data Migration

[Jacques Le Roux]

It's the privilege of mature projects, less updates ;)

Le 12/03/2024 à 09:51, Ravee Bandaru a écrit :

Hello Jac.

Thanks so much for the valuable information !!
So, We will continue to use both the Releases - 18 and 22.

Cheers,
Ravee


On Mon, 11 Mar 2024 at 22:26, Jacques Le Roux 
wrote:


Vivek,

We are not quite ready yet for 24.xx.

There should be no problem migrating from/to any of 18/22/24. Only the
code changed not the data.

HTH

Jacques

Le 11/03/2024 à 13:03, Vivek Kumar Prasad a écrit :

Thanks, Jac for your response and such valuable information.

We have been using version 22.01 as a backup since last year and have

data

in it also, so wanted to know if the migration path for version 24.xx is
from
(a)18.12 - 22.01 - 24.xx, or
(b)18.12 - 24.xx (Direct Migration)

Is there any timeline to follow for the release of version 24?

Thanks and Regards,
Vivek Kumar Prasad

On Mon, 11 Mar 2024 at 16:04, Vivek Kumar Prasad <
vivek.pra...@brrsoftwares.com> wrote:


Hello Community,

We were using OfBiz version 18.12 and have a lot of data in the database
and now we want to upgrade to version 22.01, I would appreciate if

someone

could help us with the data migration process, or guide us to

documentation

for the same.

Thanks, and regards,
[image:https://brrsoftwares.com/careers.html]
<https://brrsoftwares.com/careers.html>

   [image: brr.softwares]<https://www.facebook.com/brr.softwares>

  [image:

brrsoftwares]<https://www.linkedin.com/company/brrsoftwares>

[image:

BRRSoftwareSys]<https://twitter.com/BRRSoftwareSys>

*Vivek Kumar Prasad *

Software Engineer

#652, Amrutha Nilayam
<

https://www.google.com/maps/place/Amrutha+Nilayam/@17.4592936,78.3467271,17z/data=!3m1!4b1!4m5!3m4!1s0x3bcb93ae15743eed:0xba5bdf9105717979!8m2!3d17.4592936!4d78.3489158

,

B - Block,

Sriramnagar, Kondapur, Hyderabad-500081


   +91 9650427648

   https://brrsoftwares.com

Re: Data Migration

[Jacques Le Roux]

Vivek,

We are not quite ready yet for 24.xx.

There should be no problem migrating from/to any of 18/22/24. Only the code 
changed not the data.

HTH

Jacques

Le 11/03/2024 à 13:03, Vivek Kumar Prasad a écrit :

Thanks, Jac for your response and such valuable information.

We have been using version 22.01 as a backup since last year and have data
in it also, so wanted to know if the migration path for version 24.xx is
from
(a)18.12 - 22.01 - 24.xx, or
(b)18.12 - 24.xx (Direct Migration)

Is there any timeline to follow for the release of version 24?

Thanks and Regards,
Vivek Kumar Prasad

On Mon, 11 Mar 2024 at 16:04, Vivek Kumar Prasad <
vivek.pra...@brrsoftwares.com> wrote:


Hello Community,

We were using OfBiz version 18.12 and have a lot of data in the database
and now we want to upgrade to version 22.01, I would appreciate if someone
could help us with the data migration process, or guide us to documentation
for the same.

Thanks, and regards,
[image:https://brrsoftwares.com/careers.html]


  [image: brr.softwares]   [image:
brrsoftwares]  [image:
BRRSoftwareSys]

*Vivek Kumar Prasad *

Software Engineer

#652, Amrutha Nilayam
,
B - Block,

Sriramnagar, Kondapur, Hyderabad-500081


  +91 9650427648

  https://brrsoftwares.com

Re: Data Migration

[Jacques Le Roux]

Hi Vivek,

FYI: the 22.01 is not officially deprecated but at 90% it will be abandoned and 
replaced by a new 24.xx version yet to come.
For instance we are mostly no longer backporting bug to 22.01, notably security 
ones.

Jacques

Le 11/03/2024 à 11:34, Vivek Kumar Prasad a écrit :

Hello Community,

We were using OfBiz version 18.12 and have a lot of data in the database
and now we want to upgrade to version 22.01, I would appreciate if someone
could help us with the data migration process, or guide us to documentation
for the same.

Thanks, and regards,
[image: https://brrsoftwares.com/careers.html]


  [image: brr.softwares]   [image:
brrsoftwares]  [image:
BRRSoftwareSys] 

*Vivek Kumar Prasad *

Software Engineer

#652, Amrutha Nilayam
,
B - Block,

Sriramnagar, Kondapur, Hyderabad-500081


  +91 9650427648

  https://brrsoftwares.com

CVE-2024-25065: Apache OFBiz: Path traversal allowing authentication bypass.

[Jacques Le Roux]

Severity: critical

Affected versions:

- Apache OFBiz before 18.12.12

Description:

Possible path traversal in Apache OFBiz allowing authentication bypass.
Users are recommended to upgrade to version 18.12.12, that fixes the issue.

Credit:

YunPeng - 郭 运鹏  (finder)

References:

https://ofbiz.apache.org/download.html
https://ofbiz.apache.org/security.html
https://ofbiz.apache.org/release-notes-18.12.12.html
https://issues.apache.org/jira/browse/OFBIZ-12887
https://ofbiz.apache.org/
https://www.cve.org/CVERecord?id=CVE-2024-25065

https://ofbiz.apache.org/security.html: CVE-2024-23946: Apache OFBiz: Path traversal or file inclusion

[Jacques Le Roux]

Severity: critical

Affected versions:

- Apache OFBiz before 18.12.12

Description:

Possible path traversal in Apache OFBiz allowing file inclusion.
Users are recommended to upgrade to version 18.12.12, that fixes the issue.

Credit:

Arun Shaji from trendmicro.com (finder)

References:

https://ofbiz.apache.org/download.html
https://ofbiz.apache.org/security.html
https://ofbiz.apache.org/release-notes-18.12.12.html
https://issues.apache.org/jira/browse/OFBIZ-12884
https://ofbiz.apache.org/
https://www.cve.org/CVERecord?id=CVE-2024-23946

Re: Anyone familiar with CalcTax errors?

[Jacques Le Roux]

It was that, the patch is at 
https://github.com/apache/ofbiz-framework/commit/2bb296de52.patch

HTH

Jacques

Le 21/02/2024 à 09:31, Jacques Le Roux a écrit :

Hi Steve,

I believe it's related to https://issues.apache.org/jira/browse/OFBIZ-12686
I then did not backport to 118.12. I'll check the reason, maybe a simple 
oversight

So You don't need to create a Jira for now.

Jacques

Le 21/02/2024 à 07:16, Jacques Le Roux a écrit :

Hi Steve,

OK, I'll have a look

Jacques

Le 20/02/2024 à 20:59, Steven Selverston a écrit :

Hi Jacques,
Thank you, great find, looks like it was fixed in Trunk!! I had been playing 
with 18.12 only.
Best,
Steve




Sent with Proton Mail secure email.

On Tuesday, February 20th, 2024 at 6:21 AM, Jacques Le Roux 
 wrote:


Hi Steven,

I can't reproduce in trunk. I'm able to create the purchase order. What version 
did you use?

You need to give us more information. The best way to do that is to create a 
Jira issue, just follow
https://cwiki.apache.org/confluence/display/OFBIZ/OFBiz+Contributors+Best+Practices

You may reproduce on demo server: https://ofbiz.apache.org/ofbiz-demos.html

TIA

Jacques

Le 06/02/2024 à 16:23, Steven Selverston a écrit :


Dear OFBiz Users,

I am trying to work through a basic purchase order process (as might be used to order stock for inventory), using the demo version of OFBiz. I 
replicated this using the live demo at apache.org as well so I know it does not have anything to do with my installation.


How can I address this? Here are the basic steps I am taking and the error 
message I get (below).

Thank you for any advice!

Best,

Steve

1.) Order

2.) Order Entry

3.) Purchase Order from Demo Supplier (Internal Organization = "Company")

4.) Add product to order (GS-1000 Tiny Gizmo)

5.) Finalize

6.) Continue

7.) Continue

8.) Continue

Error!

The Following Errors Occurred:

Problem occurred in tax service (Service [calcTax] target threw an unexpected exception (null)) (Service [calcTax] target threw an unexpected 
exception (null))

Re: Anyone familiar with CalcTax errors?

[Jacques Le Roux]

Hi Steve,

I believe it's related to https://issues.apache.org/jira/browse/OFBIZ-12686
I then did not backport to 118.12. I'll check the reason, maybe a simple 
oversight

So You don't need to create a Jira for now.

Jacques

Le 21/02/2024 à 07:16, Jacques Le Roux a écrit :

Hi Steve,

OK, I'll have a look

Jacques

Le 20/02/2024 à 20:59, Steven Selverston a écrit :

Hi Jacques,
Thank you, great find, looks like it was fixed in Trunk!! I had been playing 
with 18.12 only.
Best,
Steve




Sent with Proton Mail secure email.

On Tuesday, February 20th, 2024 at 6:21 AM, Jacques Le Roux 
 wrote:


Hi Steven,

I can't reproduce in trunk. I'm able to create the purchase order. What version 
did you use?

You need to give us more information. The best way to do that is to create a 
Jira issue, just follow
https://cwiki.apache.org/confluence/display/OFBIZ/OFBiz+Contributors+Best+Practices

You may reproduce on demo server: https://ofbiz.apache.org/ofbiz-demos.html

TIA

Jacques

Le 06/02/2024 à 16:23, Steven Selverston a écrit :


Dear OFBiz Users,

I am trying to work through a basic purchase order process (as might be used to order stock for inventory), using the demo version of OFBiz. I 
replicated this using the live demo at apache.org as well so I know it does not have anything to do with my installation.


How can I address this? Here are the basic steps I am taking and the error 
message I get (below).

Thank you for any advice!

Best,

Steve

1.) Order

2.) Order Entry

3.) Purchase Order from Demo Supplier (Internal Organization = "Company")

4.) Add product to order (GS-1000 Tiny Gizmo)

5.) Finalize

6.) Continue

7.) Continue

8.) Continue

Error!

The Following Errors Occurred:

Problem occurred in tax service (Service [calcTax] target threw an unexpected exception (null)) (Service [calcTax] target threw an unexpected 
exception (null))

Re: Anyone familiar with CalcTax errors?

[Jacques Le Roux]

Hi Steve,

OK, I'll have a look

Jacques

Le 20/02/2024 à 20:59, Steven Selverston a écrit :

Hi Jacques,
Thank you, great find, looks like it was fixed in Trunk!! I had been playing 
with 18.12 only.
Best,
Steve




Sent with Proton Mail secure email.

On Tuesday, February 20th, 2024 at 6:21 AM, Jacques Le Roux 
 wrote:


Hi Steven,

I can't reproduce in trunk. I'm able to create the purchase order. What version 
did you use?

You need to give us more information. The best way to do that is to create a 
Jira issue, just follow
https://cwiki.apache.org/confluence/display/OFBIZ/OFBiz+Contributors+Best+Practices

You may reproduce on demo server: https://ofbiz.apache.org/ofbiz-demos.html

TIA

Jacques

Le 06/02/2024 à 16:23, Steven Selverston a écrit :


Dear OFBiz Users,

I am trying to work through a basic purchase order process (as might be used to 
order stock for inventory), using the demo version of OFBiz. I replicated this 
using the live demo at apache.org as well so I know it does not have anything 
to do with my installation.

How can I address this? Here are the basic steps I am taking and the error 
message I get (below).

Thank you for any advice!

Best,

Steve

1.) Order

2.) Order Entry

3.) Purchase Order from Demo Supplier (Internal Organization = "Company")

4.) Add product to order (GS-1000 Tiny Gizmo)

5.) Finalize

6.) Continue

7.) Continue

8.) Continue

Error!

The Following Errors Occurred:

Problem occurred in tax service (Service [calcTax] target threw an unexpected 
exception (null)) (Service [calcTax] target threw an unexpected exception 
(null))

Re: Anyone familiar with CalcTax errors?

[Jacques Le Roux]

Hi Steven,

I can't reproduce in trunk. I'm able to create the purchase order. What version 
did you use?

You need to give us more information. The best way to do that is to create a 
Jira issue, just follow
https://cwiki.apache.org/confluence/display/OFBIZ/OFBiz+Contributors+Best+Practices

You may reproduce on demo server: https://ofbiz.apache.org/ofbiz-demos.html

TIA

Jacques

Le 06/02/2024 à 16:23, Steven Selverston a écrit :

Dear OFBiz Users,

I am trying to work through a basic purchase order process (as might be used to 
order stock for inventory), using the demo version of OFBiz. I replicated this 
using the live demo at apache.org as well so I know it does not have anything 
to do with my installation.

How can I address this? Here are the basic steps I am taking and the error 
message I get (below).

Thank you for any advice!

Best,

Steve

1.) Order

2.) Order Entry

3.) Purchase Order from Demo Supplier (Internal Organization = "Company")

4.) Add product to order (GS-1000 Tiny Gizmo)

5.) Finalize

6.) Continue

7.) Continue

8.) Continue

Error!

The Following Errors Occurred:

Problem occurred in tax service (Service [calcTax] target threw an unexpected 
exception (null)) (Service [calcTax] target threw an unexpected exception 
(null))

Re: A question about issues encountered on Ofbiz trunk

[Jacques Le Roux]

Hi Ernest,

The best way is to follow 
https://cwiki.apache.org/confluence/display/OFBIZ/OFBiz+Contributors+Best+Practices
When it's a bug we fix the trunk and backport in release branches

HTH

Jacques

Le 20/02/2024 à 05:33, Ernest Hocking a écrit :

Good morning

Can I seek some clarification about how to report issues encountered on
OIfbiz trunk?

If I try to run find on
"facility/control/ViewFacilityInventoryByProduct?facilityId=MyRetailStore"
I get an error message:

java.lang.IllegalArgumentException: Error running script at location
[component://product/src/main/groovy/org/apache/ofbiz/product/facility/facility/ViewFacilityInventoryByProduct.groovy]:
groovy.lang.MissingMethodException: No signature of method:
org.apache.ofbiz.product.facility.facility.ViewFacilityInventoryByProduct.from()
is applicable for argument types:
(org.apache.ofbiz.entity.model.DynamicViewEntity) values:
[org.apache.ofbiz.entity.model.DynamicViewEntity@330fa6e9] Possible
solutions: from(java.lang.String), run(), run(), find(), grep(),
error(java.lang.String)

I tried pulling the latest version and still get the error message.

SImilarly when I try the facility reports page:

facility/control/InventoryReports?facilityId=MyRetailStore

Should I report this sort of issue here or is there a preferred  method for
reporting trunk related issues?

thanks and kind regards

Ernest

Re: css in form fields

[Jacques Le Roux]

Hi Ernest,

In 2010, while working on a custom project with David E. Jones and Andrew Zeneski (the OFBiz founders), I learnt a lot in a short time. With their 
inspiration I got the idea. Then the team improved it multiple times.


At this same moment, I also put in the currently still misnamed "Multiple 
drop-downs"*.
You can find it at 
https://demo-trunk.ofbiz.apache.org/example/control/FormWidgetExamples.
As selecting multiple lines in a dropdown is not a very good UI experience, I then used https://select2.github.io to transform it to "Multiple Select" 
which is a better option.


* I have just pushed the label changes.

HTH

Jacques

Le 18/02/2024 à 06:18, Ernest Hocking a écrit :

Good morning Florian

I eventually got around to this and it works a treat - thanks for
the pointer

Also thanks to the team that developed the extension that allows dependent
field look up - these days it's high on user expectations that the system
thinks for them like this.  I saw Jaques name on one of the items but
suspect that there must be others.

Thanks and kind regards

Ernest

On Thu, Jan 18, 2024 at 5:11 PM Florian Motteau
wrote:


I guess that would be your 2 options if you don't want to modify the core.

Glad to help :)

Le 18/01/2024 à 10:33, Ernest Hocking a écrit :

Good afternoon Florian

Many thanks for the quick response and cl;arification  - it's good to

know

rather than trying things in the hope that it might work .  I'll check

out

the references.

As the comparative cash flow report is part of the core accounting
application (rather than a plug in) I didn't want to make too many

changes

I guess the two options are

 1. a plugin with freemarker templates,
 2. just replace the 4 grids in the core accounting application with
 freemarker and migrate the change during upgrades.


thanks and kind regards

Ernest




On Thu, Jan 18, 2024 at 4:17 PM Florian Motteau <

flor...@motteau-martins.net>

wrote:


Hello Ernest,

Happy new year to you !

Currently "title-area-style" attribute on field element cannot be set
dynamically in XML through a groovy snippet or a simple expression. You
can compare its implementation with the "disabled" attribute in
ModelFormFieldBuilder, which involves a FlexibleStringExpander :




https://github.com/apache/ofbiz-framework/blob/d17d06fd7c654621446320a98b45b3ebb859c648/framework/widget/src/main/java/org/apache/ofbiz/widget/model/ModelFormFieldBuilder.java#L108

vs




https://github.com/apache/ofbiz-framework/blob/d17d06fd7c654621446320a98b45b3ebb859c648/framework/widget/src/main/java/org/apache/ofbiz/widget/model/ModelFormFieldBuilder.java#L119

IMHO it would be a great improvement to switch widget-style,
widget-area-style, tooltip-style, title-style and title-area-style (from
a front-end developer perspective at least :), this kind of conditionnal
HTML rendering should be a given), but we may have to consider a
potential performance impact.

"red-when" has a specific behavior : it checks a condition on the
thruDate field value (the field would be red if now < entity.thruDate,
or the other way around).

You can checkhttps://github.com/apache/ofbiz-framework/pull/548  for an
implementation example.

Le 18/01/2024 à 09:47, Ernest Hocking a écrit :

Happy New Year everyone

a question:  "is it possible to conditionally colour a field in a form"

Based on the grid ComparativeCashFlowBalanceTotals in
ReportFinancialSummaryForms.xml

I tried the following groovy



but get the error:

The value of attribute "title-area-style" associated with an element

type

"field" must not contain the '<'

character.org.xml.sax.SAXParseException;

I tried using alternatives such as

if (Maths.signum(balance1).equals(-1) )

etc but had no success to date.  Is there a number equivalent of

"red-when"

that is available for date fields.

Any suggestions on how this could be implemented would be appreciated

I suspect I've overlooked something very obvious

thanks and kind regards

Ernest

Re: ./gradlew pullAllPluginsSource FAILURE: Build failed with an exception.

[Jacques Le Roux]

)
at org.gradle.util.Swapper.swap(Swapper.java:38)
at
org.gradle.launcher.daemon.server.exec.ForwardClientInput.execute(ForwardClientInput.java:72)
at
org.gradle.launcher.daemon.server.api.DaemonCommandExecution.proceed(DaemonCommandExecution.java:122)
at
org.gradle.launcher.daemon.server.exec.LogAndCheckHealth.execute(LogAndCheckHealth.java:55)
at
org.gradle.launcher.daemon.server.api.DaemonCommandExecution.proceed(DaemonCommandExecution.java:122)
at
org.gradle.launcher.daemon.server.exec.LogToClient.doBuild(LogToClient.java:62)
at
org.gradle.launcher.daemon.server.exec.BuildCommandOnly.execute(BuildCommandOnly.java:36)
at
org.gradle.launcher.daemon.server.api.DaemonCommandExecution.proceed(DaemonCommandExecution.java:122)
at
org.gradle.launcher.daemon.server.exec.EstablishBuildEnvironment.doBuild(EstablishBuildEnvironment.java:81)
at
org.gradle.launcher.daemon.server.exec.BuildCommandOnly.execute(BuildCommandOnly.java:36)
at
org.gradle.launcher.daemon.server.api.DaemonCommandExecution.proceed(DaemonCommandExecution.java:122)
at
org.gradle.launcher.daemon.server.exec.StartBuildOrRespondWithBusy$1.run(StartBuildOrRespondWithBusy.java:50)
at
org.gradle.launcher.daemon.server.DaemonStateCoordinator$1.run(DaemonStateCoordinator.java:295)
at
org.gradle.internal.concurrent.ExecutorPolicy$CatchAndRecordFailures.onExecute(ExecutorPolicy.java:63)
at
org.gradle.internal.concurrent.ManagedExecutorImpl$1.run(ManagedExecutorImpl.java:46)
at
org.gradle.internal.concurrent.ThreadFactoryImpl$ManagedThreadRunnable.run(ThreadFactoryImpl.java:55)


* Get more help athttps://help.gradle.org

BUILD FAILED in 0s
ofbiz@ApacheOfBiz:~/ofbiz-framework$



On Tue, Feb 6, 2024 at 9:43 AM Jacques Le Roux
wrote:


Nevermind, as long as it works, all is OK ;)

Le 06/02/2024 à 15:30, BK a écrit :

Looks like I fixed the java, still working through some other things
though. My apologies on this... I never quite learned how to set these
environments up properly and it's a wrestling match every time.

Re: ./gradlew pullAllPluginsSource FAILURE: Build failed with an exception.

[Jacques Le Roux]

Nevermind, as long as it works, all is OK ;)

Le 06/02/2024 à 15:30, BK a écrit :

Looks like I fixed the java, still working through some other things
though. My apologies on this... I never quite learned how to set these
environments up properly and it's a wrestling match every time.

Re: ./gradlew pullAllPluginsSource FAILURE: Build failed with an exception.

[Jacques Le Roux]

Hi Ryan,

First which OFBiz version are you using? R18 needs JDK 8. Later (trunk or R22) 
uses JDK 17, IIRW JDK 11 works also.

What is the failure you cross? Please past the console log (text). Also before try a 
"update-alternatives --list java" in case...

You should not have any problem with your OS.
For instance I still mostly use Win7 (yep).
And even recent OFBiz versions work on almost all Ubuntu versions.

Allow me an advice, keep you notes as a treasure.
Like you would keep a daily and a different weekly backups.
They can "save your life" sometimes, especially a complete weekly backup, shits 
happen...
That's my experience ;)

HTH

Jacques

Le 06/02/2024 à 12:38, BK a écrit :

Hello. First I tried to install following github readme stating only java
17 needs installed.

Next I tried the wiki which suggests to install openjdk-8-jdk, so I
installed temurin-8-jdk and updated java home environment variable.

Both ways I seem to produce a failure with gradle. I had gotten it to work
some time ago with openjdk8, but it's been a while since I did the install
and I lost my notes.

Any suggestions? This is on Debian 12. I suppose I'm open to a different
distribution if it's easier.

Best,
Ryan

Re: Use of the grid widget

[Jacques Le Roux]

Hi Ernest,

Most of the time there are no differences between grids and forms. It seems you 
crossed one.
Please create a Jira with the information below and we will try to understand 
and maybe fix it.

The best would be to upload the complete work you did for us to test in trunk.
BTW, which OFBiz version are you using?

TIA

Jacques

Le 31/01/2024 à 02:32, Ernest Hocking a écrit :

Good morning everyone

I've been trying to use the grid widget and have some questions. I've
basically copied the product ListProduct grid from ProductForms.xml, and
added the target to the controller.xml  into a plugin but encountered some
issues:

1.   Next/previous pagination seemes not to work:  Page 2,3,.. just repeat
page 1.  If I set the "items per page" to a value greater than the
number of returned records the grid shows all of them.  How do I fix
pagination so tjhat ?

2.  The product example uses:  list-name="list" in the grid
specification and the performFInd:

 
 
 
 

I tried to rename the list to something else e.g. ListDetail in the grid
specification and the service call but then no records are returned.

Any thoughts on how to fix the pagination would be welcome.  Is there a
document describing how to use the grid widget?  I did a search online but
did not find anything.

thanks and kind regards

Ernest

Re: Error in calling SOAPServices

[Jacques Le Roux]

Hi Ansari,

Unfortunately images are not accepted by this ML. You may create a related Jira 
and put images there for people to see them.

Jacques

Le 02/02/2024 à 10:15, ansariBE a écrit :

Dear Experts,

With any version of ofbiz tried with 17 and 18.12.05, whenever invoking SOAPService getting the following error. Required services are configured 
with export set to true. With Ofbiz UI, in servicelist able to see the service and download wsdl. But when the url to download to wsdl is invoked or 
through SOAPUI, it is not working.


image.png

image.png

image.png
Mit freundlichen Grüßen
*Ansari*

Re: Ofbiz for use a core System for indigenous States

[Jacques Le Roux]

Hi Andreas,

Apart if you are interested in history, the German Empire is maybe a large 
versatile example for management of indigenous states and federations :).

Anyway, I'd say that, as OFBiz especially depends on its DB, it also depends of the material you put in it. So that should be possible if you put 
enough material.


This may interest you: 
https://cwiki.apache.org/confluence/display/OFBIZ/Distributed+Entity+Cache+Clear+%28DCC%29+Mechanism

This said I don't really know what "bitemporal data" means.

HTH

Jacques

Le 31/01/2024 à 09:54, Andreas von Preußen a écrit :

Dear List,

I wonder to what degree ofbiz is allready usable as a core system for the 
management of indigenous states and federations.

As an examble, I would like to mention the German Empire:

- ~30 crown companies
- 60-80 million home right owners
- 20-40 million foreigners
- 1 Empire Crown company
- up to 7 billion foreign clients

All files, at minimum files related to partner related data including  workflow 
definitions should be held as bitemporal data.

What do you think?

Re: Error in Ofbiz login

[Jacques Le Roux]

Hi Ansari,

Unfortunately images are not accepted by this ML. You may refer to the related Jira for people to see these images. By putting them there if they are 
not already.


Jacques

Le 02/02/2024 à 10:09, ansariBE a écrit :

Dear experts,

I tried to setup ofbiz 18.12.11 in my laptop and I have issues in login.

Software Versions:
OS: Windows 11 pro
Java: 1.8.0_401
Powershell: 7.4

Issue snaps:
image.png

image.png

image.png

image.png

image.png

Mit freundlichen Grüßen
*Ansari*

Re: CVE-2023-51467-release18.12.11

[Jacques Le Roux]

It's not ready yet. We had to restart the vote. It should be available in a 
week or 2

Jacques

Le 25/01/2024 à 16:02, Sameer Alwosaby a écrit :

Where we can find 18.12.12 version please?

On Thu, 18 Jan 2024, 13:42 Jacques Le Roux, 
wrote:


Hi Vikas,

There is currently a vote for the 18.12.12 version. Better wait for this
new version

HTH

Jacques

Le 12/01/2024 à 08:21, Vikas Jaiswal a écrit :

Hello,
I don’t see the tag for release18.12.11 where the

vulnerability Active Exploitation of Apache OFBiz Zero-day Vulnerability -
NHS Digital<https://digital.nhs.uk/cyber-alerts/2024/cc-4430>  is fixed.

Regards,
Vikas

Sent from Mail<https://go.microsoft.com/fwlink/?LinkId=550986>  for

Windows

Re: CVE-2023-51467-release18.12.11

[Jacques Le Roux]

Hi Vikas,

There is currently a vote for the 18.12.12 version. Better wait for this new 
version

HTH

Jacques

Le 12/01/2024 à 08:21, Vikas Jaiswal a écrit :

Hello,
   I don’t see the tag for release18.12.11 where the vulnerability Active 
Exploitation of Apache OFBiz Zero-day Vulnerability - NHS 
Digital  is fixed.
Regards,
Vikas

Sent from Mail  for Windows

Re: upgrade ofbiz version

[Jacques Le Roux]

Hi Vikas,

Mostly 
https://cwiki.apache.org/confluence/display/OFBIZ/Revisions+Requiring+Data+Migration+-+upgrade+ofbiz
 for data changes

The rest depends on how you have handled your own changes in OFBiz OOTB (Out Of The Box) code. As you may know plugins are the recommended way. If you 
made changes in framework and applications it becomes more complicated. Also a themes main sub-dir has been put in...


That's often some work, good luck

Jacques

Le 26/12/2023 à 09:15, Vikas Jaiswal a écrit :

Hi,
  I am new to ofbiz. Can someone please point to the resources that would 
be helpful in migrating ofbiz app from 12.X to 18.X.


Thanks,
Vikas

Sent from Mail  for Windows

Re: Looking for expertise in OFBIZ 18.2 and FrontEnd JQuery based + SOAP

[Jacques Le Roux]

Hi Mohammed,

Your message has been moderated, else it would not have reached this Mailing 
List.

Please subscribe to the user ML for questions and then use your email client.
See why here http://ofbiz.apache.org/mailing-lists.html.

You will get a better support, people can answer you on the ML.
The wider the audience the better the answers you might get.

Also it's more work for moderators who have to accept your messages as long as 
you have not subscribed.
I'll personally no longer accept them (other moderators still could).

Thanks

This, said hopefully someone on this ML will be interested by your request...

Jacques

Le 24/12/2023 à 15:25, Mohammed Fadili a écrit :

Hi All,

I hope this is the right channel to request support from experts.

We are using Ofbiz in multitenant mode as a backend with a client App on
JQuery. We use SOAP to call ofbiz services from the frontend with an
external login key.

At the moment we are migrating to ofbiz 18.2.

We are looking for help from an expert who will provide us with:
- an example of JQuery app with a Login screen
- after login, the app will request an ofbiz service using soap

Please submit a quote, your references and availability to provide such a
service.

Looking forward to hearing from you.

M. Fadili
www.ajiel.com

CVE-2023-49070: Pre-auth RCE in Apache Ofbiz 18.12.09 due to XML-RPC still present

[Jacques Le Roux]

Severity: moderate

Affected versions:

- Apache OFBiz before 18.12.10

Description:

Pre-auth RCE in Apache Ofbiz 18.12.09.

It's due to XML-RPC no longer maintained still present.
This issue affects Apache OFBiz: before 18.12.10. 
Users are recommended to upgrade to version 18.12.10

This issue is being tracked as OFBIZ-12812 

Credit:

Siebene@ (finder)

References:

https://ofbiz.apache.org/download.html
https://ofbiz.apache.org/security.html
https://ofbiz.apache.org/release-notes-18.12.10.html
https://ofbiz.apache.org/
https://www.cve.org/CVERecord?id=CVE-2023-49070
https://issues.apache.org/jira/browse/OFBIZ-12812

Re: Order manager PDF not working

[Jacques Le Roux]

Fixed with https://issues.apache.org/jira/browse/OFBIZ-12867

Le 20/11/2023 à 11:48, Ernest Hocking a écrit :

Thanks Jacques

Kind regards

Ernest

On Mon, 20 Nov 2023, 17:09 Jacques Le Roux, 
wrote:


Hi Ernest,

It works in next, so I guess in stable too. So must be a change since.
I'll have a look...

Jacques

Le 20/11/2023 à 05:08, Ernest Hocking a écrit :

Good morning everyone,

I've noticed that the print PDF link in orderview is not working and

fails

with the message.  Error "Error: failed to load PDF document"

I've tried on both trunk, and on the demo site:



https://demo-trunk.ofbiz.apache.org/ordermgr/control/orderview?orderId=DEMO10090

Has any else seen this and knows of a fix.]

thanks in advance

Ernest

Re: Order manager PDF not working

[Jacques Le Roux]

Hi Ernest,

It works in next, so I guess in stable too. So must be a change since. I'll 
have a look...

Jacques

Le 20/11/2023 à 05:08, Ernest Hocking a écrit :

Good morning everyone,

I've noticed that the print PDF link in orderview is not working and fails
with the message.  Error "Error: failed to load PDF document"

I've tried on both trunk, and on the demo site:

https://demo-trunk.ofbiz.apache.org/ordermgr/control/orderview?orderId=DEMO10090

Has any else seen this and knows of a fix.]

thanks in advance

Ernest

Re: REST API plugin won't build under 18.12.08

[Jacques Le Roux]

Hi Ernest,

It should not be a problem. You can checkhttps://s.apache.org/x4pk8 Jacques

Le 08/11/2023 à 05:42, Ernest Hocking a écrit :

Good morning Jacques

Many thanks for your insights into truck,   22.01 etc.

I've tried the trunk REST-Api and it works (y) so subject to the obvious
question - does migrating from 18.12.08 to trunk require any database
changes or is it as per your last advice on upgrading to 18.12.08 that its
mainly function and security?

If its a simple upgrade then I'll move to trunk from 18.12.08

thanks and kind regards

Ernbest



On Tue, Nov 7, 2023 at 8:22 PM Jacques Le Roux
wrote:


Actually the 22.01 branch is eventually not expected to be released . We
would pass directly to 23.xx, if ever exists. Else we would create a 24.xx
branch.

For now only the 18.12 branch is official.

HTH

Le 07/11/2023 à 10:56, Ernest Hocking a écrit :

Good evening Jacques,

Thanks for the response.  When you suggest using the 22.01 branch can I

ask

how close this might be to general availability so that I can
decide whether to use that.  I have a friend that would like to try Ofbiz
in his factory so I am looking to reassure him that Ofbiz meets all of

his

business requirements.  I

thanks and kind regards

Ernest

On Tue, Nov 7, 2023 at 4:25 PM Jacques Le Roux <

jacques.le.r...@les7arts.com>

wrote:


Hi Ernest,

Indeed, the REST API plugin has been added after the creation of the

18.12

branch :https://issues.apache.org/jira/browse/OFBIZ-11328

So you will need to use the trunk or the 22.01 branch. We expect to

create

a 23.xx branch, but that's not quite sure.

Jacques

Le 07/11/2023 à 04:50, Ernest Hocking a écrit :

Good morning everyone

I've tried to install the REST API plugin into 18.,12.08.   Running
./gradlew build I get a series of errors similar to:



/home/ernest/ofbiz-18.12.08/plugins/rest-api/src/main/java/org/apache/ofbiz/ws/rs/resources/OFBizServiceResource.java:9

3: error: cannot find symbol
   if (service != null && service.isExport() &&
UtilValidate.isNotEmpty(service.getAction())) {
 ^
 symbol:   method isExport()
 location: variable service of type ModelService

in OFBizServiceResource.java I see:

ModelService service = context.getModelService(serviceName);
   if (service != null && service.isExport() &&
UtilValidate.isNotEmpty(service.getAction())) {

checking the class definition for ModelService  there appears to be no
method definitions for the isExport(),

getAction(),isAuth(),getName().

so it appear that the plugin has not provided these additional methods.

Any help in locating a fix would be appreciated

thanks in advance

Ernest

Re: REST API plugin won't build under 18.12.08

[Jacques Le Roux]

Actually the 22.01 branch is eventually not expected to be released . We would pass directly to 23.xx, if ever exists. Else we would create a 24.xx 
branch.


For now only the 18.12 branch is official.

HTH

Le 07/11/2023 à 10:56, Ernest Hocking a écrit :

Good evening Jacques,

Thanks for the response.  When you suggest using the 22.01 branch can I ask
how close this might be to general availability so that I can
decide whether to use that.  I have a friend that would like to try Ofbiz
in his factory so I am looking to reassure him that Ofbiz meets all of his
business requirements.  I

thanks and kind regards

Ernest

On Tue, Nov 7, 2023 at 4:25 PM Jacques Le Roux 
wrote:


Hi Ernest,

Indeed, the REST API plugin has been added after the creation of the 18.12
branch : https://issues.apache.org/jira/browse/OFBIZ-11328

So you will need to use the trunk or the 22.01 branch. We expect to create
a 23.xx branch, but that's not quite sure.

Jacques

Le 07/11/2023 à 04:50, Ernest Hocking a écrit :

Good morning everyone

I've tried to install the REST API plugin into 18.,12.08.   Running
./gradlew build I get a series of errors similar to:



/home/ernest/ofbiz-18.12.08/plugins/rest-api/src/main/java/org/apache/ofbiz/ws/rs/resources/OFBizServiceResource.java:9

3: error: cannot find symbol
  if (service != null && service.isExport() &&
UtilValidate.isNotEmpty(service.getAction())) {
^
symbol:   method isExport()
location: variable service of type ModelService

in OFBizServiceResource.java I see:

   ModelService service = context.getModelService(serviceName);
  if (service != null && service.isExport() &&
UtilValidate.isNotEmpty(service.getAction())) {

checking the class definition for ModelService  there appears to be no
method definitions for the isExport(),

getAction(),isAuth(),getName().

so it appear that the plugin has not provided these additional methods.

Any help in locating a fix would be appreciated

thanks in advance

Ernest

CVE-2023-46819: Apache OFBiz: Execution of Solr plugin queries without authentication

[Jacques Le Roux]

Severity: moderate

Affected versions:

- Apache OFBiz before 18.12.09

Description:

Missing Authentication in Apache Software Foundation Apache OFBiz when using 
the Solr plugin.
This issue affects Apache OFBiz: before 18.12.09. 

Users are recommended to upgrade to version 18.12.09

Credit:

Anonymous by demand (finder)

References:

https://ofbiz.apache.org/download.html
https://ofbiz.apache.org/security.html
https://ofbiz.apache.org/release-notes-18.12.09.html
https://ofbiz.apache.org/
https://www.cve.org/CVERecord?id=CVE-2023-46819

Re: REST API plugin won't build under 18.12.08

[Jacques Le Roux]

Hi Ernest,

Indeed, the REST API plugin has been added after the creation of the 18.12 
branch : https://issues.apache.org/jira/browse/OFBIZ-11328

So you will need to use the trunk or the 22.01 branch. We expect to create a 
23.xx branch, but that's not quite sure.

Jacques

Le 07/11/2023 à 04:50, Ernest Hocking a écrit :

Good morning everyone

I've tried to install the REST API plugin into 18.,12.08.   Running
./gradlew build I get a series of errors similar to:

/home/ernest/ofbiz-18.12.08/plugins/rest-api/src/main/java/org/apache/ofbiz/ws/rs/resources/OFBizServiceResource.java:9
3: error: cannot find symbol
 if (service != null && service.isExport() &&
UtilValidate.isNotEmpty(service.getAction())) {
   ^
   symbol:   method isExport()
   location: variable service of type ModelService

in OFBizServiceResource.java I see:

  ModelService service = context.getModelService(serviceName);
 if (service != null && service.isExport() &&
UtilValidate.isNotEmpty(service.getAction())) {

checking the class definition for ModelService  there appears to be no
method definitions for the isExport(), getAction(),isAuth(),getName().

so it appear that the plugin has not provided these additional methods.

Any help in locating a fix would be appreciated

thanks in advance

Ernest

Re: Enabling imap inbound email in 18.12.05

[Jacques Le Roux]

Hi Ernest,

It exists commented out at this location since this commit: 
http://svn.apache.org/viewvc?view=revision=1365889
The initial form is very old (pre Apache era) and has not changed much since. I 
guess only by https://issues.apache.org/jira/browse/OFBIZ-1967

It seems you spotted something that changed since. I suggest to create a Jira. 
And a patch, or a PR if you prefer.

TIA

Jacques

Le 15/10/2023 à 12:15, Ernest Hocking a écrit :

   Good afternoon everyone


I have now resolved this issue.  Checking the configuration in
framework/service/ofbiz-component.xml it seems that the line

   is incomplete .
Based on the config for the container  rmi-disaptcher there seemed to be a
missing loaders option. .

  After adding the additional parameter *"loaders="main"*  as below.

  

inbound mail now works.  I checked back and this option seems to have been
missing back to at  least version 17.12.

Once the change is made , then ofbiz starts up  and once the container
parameters have been entered inbound email is processed as expected.


kind regards

Ernest

On Wed, Mar 8, 2023 at 2:19 PM Ernest Hocking 
wrote:


Hi everyone,

I'm trying to configure inbound email. .  Outbound mail is working so the
username, password etc that I'm using in example config hafe been tested.



I've uncommented the javamail listener in
ofbiz/framework/service/ofbiz-component.xml
as suggested in the article at
https://motalibbd.wordpress.com/2016/06/16/mail-server-configure-ofbiz/

This is the example config:


















On trying to restart ofbiz I now get the following error message.  Has
anyone else seen this, or is there something else that I need to configure
to get this working

Thanks in advance for any assistance that you can provide?

Ernest


Error report that the ./gradlew ofbiz stop at:

2023-03-08 14:04:29,092 |main |ComponentContainer
|I| Added class path for component : [webpos]
2023-03-08 14:04:29,094 |main |ComponentContainer
|I| All components loaded
2023-03-08 14:04:29,094 |main |ContainerLoader
   |I| Loaded container: component-container
2023-03-08 14:04:29,094 |main |ContainerLoader
   |I| [Startup] Loading component containers...
Exception in thread "main" java.lang.NullPointerException
at
org.apache.ofbiz.base.container.ContainerLoader.lambda$filterContainersHavingMatchingLoaders$1(ContainerLoader.java:89)
at
java.base/java.util.stream.ReferencePipeline$2$1.accept(ReferencePipeline.java:176)
at
java.base/java.util.ArrayList$ArrayListSpliterator.forEachRemaining(ArrayList.java:1655)
at
java.base/java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:484)
at
java.base/java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:474)
at
java.base/java.util.stream.ReduceOps$ReduceOp.evaluateSequential(ReduceOps.java:913)
at
java.base/java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234)
at
java.base/java.util.stream.ReferencePipeline.collect(ReferencePipeline.java:578)
at
org.apache.ofbiz.base.container.ContainerLoader.filterContainersHavingMatchingLoaders(ContainerLoader.java:90)
at
org.apache.ofbiz.base.container.ContainerLoader.load(ContainerLoader.java:67)
at
org.apache.ofbiz.base.start.StartupControlPanel.loadStartupLoaders(StartupControlPanel.java:218)
at
org.apache.ofbiz.base.start.StartupControlPanel.start(StartupControlPanel.java:71)
at org.apache.ofbiz.base.start.Start.main(Start.java:85)

Re: Small report from ASF Conference

[Jacques Le Roux]

Hi Nicola,

Thanks for your report.

Also, I allow myself, as a non English mother tongue speaker, to say that your 
English is, at least for me, excellent :)

Cheers

Jacques

Le 12/10/2023 à 20:01, Nicola Mazzoni a écrit :

Hi OFBiz users,
I'm returning from Halifax, where the Apache "community over code" conference 
just ended.
Some negative notes, compared to last year I think there was less participants. One of the causes is probably political, given that many Indian 
citizens have had problems reaching Canada for the reasons we know.
However, the atmosphere is always very familiar and pleasant, it is the third Apachecon for me and I can only confirm that it is a very enriching 
experience from a human, cultural and not just strictly technological point of view.
The speeches were mainly focused on a limited group of projects, so only a small part of the more than 300 Apache projects were "represented". To 
put it very simply: the focus was on big data. This year there was also visibility for a business-related project (and not just frameworks for other 
developers), specifically Fineract which received many talks and a fair amount of interest. I think that OFBiz and Fineract are among the few Apache 
projects not aimed at developers but "concretely" at business users.
As a result, it was no surprise to me to find that almost none of the participants I spoke to were familiar with OFBiz; many were unaware of what an 
ERP was, being focused on developments of another nature.
In any case, it is an experience that I recommend everyone to have, even if you cannot have direct feedback on your business. However, it is an 
experience that I hope to repeat. Even though I worked on ERP/business software and not "frameworks" or "big data", I had the opportunity to learn 
about new projects and understand the trends of certain technologies. This certainly helps me to "see from above" and to have a different approach 
to certain problems that I encounter in my professional life. Sorry if my English is poor, but it seemed right to me to give a little feedback to 
the OFBiz community as I am the only OFBiz committer present (excluding my colleague Giulio Speri).


I hope to meet many of you in Bratislava for the 2024 "community over code" EU 
conference.

Best

Nicola

Re: password Configuration in scource code Regards

[Jacques Le Roux]

Here you go: 
https://github.com/apache/ofbiz-framework/blob/trunk/framework/security/data/PasswordSecurityDemoData.xml

Le 04/10/2023 à 09:43, Nithin P a écrit :

I am looking to implement a feature that auto-generates a password every time 
instead of using the default password for administrator login. In pursuit of 
this, I have been delving into the source code of Apache OFBiz to identify the 
configuration file associated with the admin password. Could you kindly provide 
assistance in identifying the location of the admin password configuration 
files within the Apache OFBiz application?
This message contains confidential information and is intended only for the 
individual named. If you are not the named addressee you should not 
disseminate, distribute or copy this e-mail. You cannot use or forward any 
attachments in the email. Please notify the sender immediately by e-mail if you 
have received this e-mail by mistake and delete this e-mail from your system. 
Finally, the opinions disclosed by the sender do not have to reflect those of 
the company, therefore the company refuses to take any liability for the damage 
caused by the content of this email. Yobitel Communications Limited,  #11, 
Kingsley Mews, Ley Street, Ilford, London - IG1 4BT, United Kingdom.   
www.yobitel.com

Re: CVE-2020-1938 as regards

[Jacques Le Roux]

Hi,

Don't expect direct answers from me. Please use rather the OFBiz user ML.
There I may  help you (sharing with the community) or some others might do...

This said, it's easy: logout and use "Forgot Your Password? 
<https://demo-trunk.ofbiz.apache.org:443/catalog/control/forgotPassword>" to create 
a new one.

HTH

Jacques


Le 03/10/2023 à 13:24, Nithin P a écrit :


Thanks, Jacques
   And having one more issue is can't find a password configuration file for 
updating the password . Hope you help me

--- On Tue, 03 Oct 2023 16:14:01 +0530 *Jacques Le Roux 
* wrote ---

Hi Nithin,

Your message has been moderated, else it would not have reached this 
Mailing List.

Please subscribe to the user ML for such questions and then use your email 
client.
See why here http://ofbiz.apache.org/mailing-lists.html 
<http://ofbiz.apache.org/mailing-lists.html>.

You will get a better support, people can answer you on the ML.
The wider the audience the better the answers you might get.

Also it's more work for moderators who have to accept your messages as long 
as you have not subscribed.
I'll personally no longer accept them (other moderators still could).

Thanks

This said, we have fixed this CVE with
https://issues.apache.org/jira/browse/OFBIZ-11407 
<https://issues.apache.org/jira/browse/OFBIZ-11407>
and later with
https://issues.apache.org/jira/browse/OFBIZ-12558 
<https://issues.apache.org/jira/browse/OFBIZ-12558>

If you want to disable the ajp 8009 protocol have a look for "8009" in 
framework/catalina/ofbiz-component.xml

HTH

Jacques

Le 03/10/2023 à 11:33, Nithin P a écrit :

Hi,



I'm using Apache Ofbiz v18.12.06 While I'm trying to upload an image 
for vulnerability scanning it shows CVE-2020-1938. I have tried to update to 
the latest version having the same issue, Does Anyone know where the tomcat 
conf files are stored in the Apache OFBiz application or how to disable ajp 
8009 protocol in Apache OFBiz thanks in advance.
This message contains confidential information and is intended only for the 
individual named. If you are not the named addressee you should not disseminate, 
distribute or copy this e-mail. You cannot use or forward any attachments in the 
email. Please notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system. Finally, the opinions 
disclosed by the sender do not have to reflect those of the company, therefore the 
company refuses to take any liability for the damage caused by the content of this 
email. Yobitel Communications Limited,  #11, Kingsley Mews, Ley Street, Ilford, 
London - IG1 4BT, United Kingdom.www.yobitel.com  <http://www.yobitel.com>





/This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not 
disseminate, distribute or copy this e-mail. You cannot use or forward any attachments in the email. Please notify the sender immediately by e-mail 
if you have received this e-mail by mistake and delete this e-mail from your system. /Finally, the opinions disclosed by the sender do not have to 
reflect those of the company, therefore the company refuses to take any liability for the damage caused by the content of this email. /Yobitel 
Communications Limited,  #11, Kingsley Mews, Ley Street, Ilford, London - IG1 4BT, United Kingdom. www.yobitel.com <http://www.company.com>/

Re: CVE-2020-1938 as regards

[Jacques Le Roux]

Hi Nithin,

Your message has been moderated, else it would not have reached this Mailing 
List.

Please subscribe to the user ML for such questions and then use your email 
client.
See why here http://ofbiz.apache.org/mailing-lists.html.

You will get a better support, people can answer you on the ML.
The wider the audience the better the answers you might get.

Also it's more work for moderators who have to accept your messages as long as 
you have not subscribed.
I'll personally no longer accept them (other moderators still could).

Thanks

This said, we have fixed this CVE with
https://issues.apache.org/jira/browse/OFBIZ-11407
and later with
https://issues.apache.org/jira/browse/OFBIZ-12558

If you want to disable the ajp 8009 protocol have a look for "8009" in 
framework/catalina/ofbiz-component.xml

HTH

Jacques

Le 03/10/2023 à 11:33, Nithin P a écrit :

Hi,



I'm using Apache Ofbiz v18.12.06 While I'm trying to upload an image for 
vulnerability scanning it shows CVE-2020-1938. I have tried to update to the 
latest version having the same issue, Does Anyone know where the tomcat conf 
files are stored in the Apache OFBiz application or how to disable ajp 8009 
protocol in Apache OFBiz thanks in advance.
This message contains confidential information and is intended only for the 
individual named. If you are not the named addressee you should not 
disseminate, distribute or copy this e-mail. You cannot use or forward any 
attachments in the email. Please notify the sender immediately by e-mail if you 
have received this e-mail by mistake and delete this e-mail from your system. 
Finally, the opinions disclosed by the sender do not have to reflect those of 
the company, therefore the company refuses to take any liability for the damage 
caused by the content of this email. Yobitel Communications Limited,  #11, 
Kingsley Mews, Ley Street, Ilford, London - IG1 4BT, United 
Kingdom.www.yobitel.com

Re: https://ofbiz.markmail.org/

[Jacques Le Roux]

Hi Emad,

I made the link long ago. I got no news but I guess it's down forever now.

You can still use https://lists.apache.org/list.html?user@ofbiz.apache.org

HTH

Jacques

Le 01/10/2023 à 15:13, Emad Radwan a écrit :

Hello Community,

Why this site is always down recently?

Regards,
Emad

Re: Demos unavailable

[Jacques Le Roux]

Le 26/09/2023 à 09:41, Jacques Le Roux a écrit :

Hi,

Our demos are currently unavailable. We and Infra are looking for a solution.

Thanks for your patience...

Jacques


The demos are restarting...

Demos unavailable

[Jacques Le Roux]

Hi,

Our demos are currently unavailable. We and Infra are looking for a solution.

Thanks for your patience...

Jacques

Re: Birt flexible reports

[Jacques Le Roux]

Hi Ernest,

There is a bunch of Birt reports that are no longer working for a long time 
despite efforts made.

You may find them among other Jira issues at https://s.apache.org/ey17v

HTH

Jacques

Le 18/09/2023 à 08:53, Daniel Watford a écrit :

Hi Ernest,

I haven't dealt with the BIRT plugin yet, so cannot offer any advice there
at the moment, sorry.

Hopefully someone else can jump in with some information for you.

Dan.

On Mon, 18 Sept 2023 at 02:00, Ernest Hocking 
wrote:


Good morning Dan,

Excellent. that worked (y) so I can now try running some local Birt reports
from within Ofbiz.

However I see that some of the accounting reports that I thought might be
associated with Birt are not visible (trail balance, and profit and loss)
.  Am I missing something or just not looking for them in the right place?

thanks and kind regards

Ernest



On Sat, Sep 16, 2023 at 5:11 PM Daniel Watford  wrote:


Hi Ernest,

The BIRT OFBiz component can be enabled by modifying file,
$OFBIZ/plugins/birt/ofbiz-component.xml.

In that file you should see a line similar to:


ernest.hock...@computer.org

wrote:


Good morning everyone

Birt flexible reports were disabled as noted

The Birt component is disabled by default in all branches (including

trunk)

since 18.12.06 because of CVE-2022-25371,


please

check !

I'm running 18.12.06 as suggested by Jacques in a previous email.

Is there a way that I can re-enable the Birt component?  Pulling
/installing the plugin does not

thanks in advance

Ernest



--
Daniel Watford

Re: UI/UX question on the Facility module

[Jacques Le Roux]

Hi Emad,

Here you go: https://issues.apache.org/jira/browse/OFBIZ-5321

HTH

Jacques

Le 15/09/2023 à 17:09, Emad Radwan a écrit :

Hello Community,

1- Why in Facility Manager we've to select a facility first before doing
anything else even if there's only one facility defined; this is even
highlighted with a remark in that screen. '
If there is only one facility, you need to select it to continue, no search
available'

2 -  This is related to having the Facility LOV available in the search
parameters for related screens; in the Inventory screen such LOV isn't
available and the search result is for the previously selected facility
only, while in 'Inventory Items' and 'Inventory Item Details' we have the
Facility LOV available.

I believe there's some wisdom in this design and would appreciate it if you
share it with me.

Regards,
Emad

Re: Demos down

[Jacques Le Roux]

Thanks Daniel,

That sound like a good idea to possibly apply it to 18.12 too

Jacques

Le 05/09/2023 à 21:40, Daniel Watford a écrit :

Hello Jacques and all,

A restart policy has been applied to the demo-trunk and demo-next
containers under https://issues.apache.org/jira/browse/OFBIZ-12853.

We'll have to wait for the next VM restart to confirm correct behaviour,
but I did test by stopping and starting the docker service which
successfully brought the container based demo containers back online.

If this change is proven to work, perhaps we should consider making a
docker version of 18.10 too, particularly since 18.10 will remain the
stable OFBiz version for a little while longer.

Thanks,

Dan.

On Tue, 5 Sept 2023 at 10:05, Jacques Le Roux 
wrote:


Hi,

Same today, when asking for "ps aux | grep ofbiz" no processes at all.

The last information we got for stable demo (18.12 branch) is (UTC time)

2023-09-05 06:40:16,234 |7.0.0.1-18009-exec-9
|LoginWorker   |W| Received a null Security object from
HttpServletRequest
2023-09-05 06:40:20,157 |7.0.0.1-18009-exec-4
|LoginWorker   |W| Received a null Security object from
HttpServletRequest
2023-09-05 06:40:29,855 |Catalina-utility-2
|ControlEventListener  |I| Destroying session:  hidden sessionId by
default.
2023-09-05 06:40:59,863 |Catalina-utility-2
|ControlEventListener  |I| Destroying session:  hidden sessionId by
default.
2023-09-05 06:40:59,864 |Catalina-utility-2
|ControlEventListener  |I| Destroying session:  hidden sessionId by
default.
2023-09-05 06:40:59,866 |Catalina-utility-2
|ControlEventListener  |I| Destroying session:  hidden sessionId by
default.
2023-09-05 06:40:59,868 |Catalina-utility-2
|ControlEventListener  |I| Destroying session:  hidden sessionId by
default.
2023-09-05 06:41:29,877 |Catalina-utility-2
|ControlEventListener  |I| Destroying session:  hidden sessionId by
default.
2023-09-05 06:41:59,891 |Catalina-utility-2
|ControlEventListener  |I| Destroying session:  hidden sessionId by
default.
2023-09-05 06:41:59,893 |Catalina-utility-2
|ControlEventListener  |I| Destroying session:  hidden sessionId by
default.
2023-09-05 06:41:59,894 |Catalina-utility-2
|ControlEventListener  |I| Destroying session:  hidden sessionId by
default.
2023-09-05 06:41:59,895 |Catalina-utility-2
|ControlEventListener  |I| Destroying session:  hidden sessionId by
default.
2023-09-05 06:41:59,895 |Catalina-utility-2
|ControlEventListener  |I| Could not find visit value object in
session [ hidden sessionId by default.] that is being destroyed
2023-09-05 06:41:59,895 |Catalina-utility-2
|ControlEventListener  |I| Destroying session:  hidden sessionId by
default.
2023-09-05 06:41:59,896 |Catalina-utility-2
|ControlEventListener  |I| Destroying session:  hidden sessionId by
default.

So I again suspect someone (Infra or the VM provider or someone in the
middle) has restarted the VM.

I restart manually all the demos , wait 5 to 10 mins...

Jacques
Le 31/08/2023 à 17:08, Daniel Watford a écrit :

Hi Eugen,

It's still on my list to address these issues, but I have not been able to
spend time on them yet. If someone else is able to address them in the
meantime, that would be great, but I think access to the host is needed to
apply and test those changes.

 From memory, version 3 didn't support some of the features we are using
such as memory limits - but can't be sure.   There was a problem with using
version 3 which prompted a downgrade to 2.4.

Thanks,

Dan.

On Thu, 31 Aug 2023 at 15:33,  wrote:


Hi,

It seems that some services have _restart: "no"_  and some are missing
this option.

The docs for restart policy are here:
https://docs.docker.com/compose/compose-file/compose-file-v2/#restart

I did notice the compose version is 2.4. Any idea why not use version 3
(which is closer to swarm stack IMO)?


https://github.com/apache/ofbiz-tools/blob/a20f9f3c750600164d08b54b80865093399a24de/demo-backup/ofbizdocker/home/ofbizdocker/demo-next/docker-compose.yml#L9

On 31.08.2023 13:43, Jacques Le Roux 
wrote:

Le 31/08/2023 à 11:25, Eugen Stan a écrit :

La 30.08.2023 11:00, Jacques Le Roux a scris:

Hi,

All demos are down (no processes running). I suspect a restart of

the

VM. I restart them all manually, wait 5 to 10 mins...

Jacques


Hello Jacques,

I presume you are talking about docker deployments.
Can I take a look at how they are deployed ?

I keep reading about them being down because of restarts or some

other

reason.
I believe I can help. Docker has options to restart automatically:


https://docs.docker.com/config/containers/start-containers-automatically/

I think adding `unless-stopped` restart policy should do it.
You can also go with `always`.

docker run -d --restart unless-stopped redis

Regards,

Hi Eugen,

Actually, this time at least, Docker is not concerned. When I said (no
proces

Re: Demos down

[Jacques Le Roux]

Hi,

Same today, when asking for "ps aux | grep ofbiz" no processes at all.

The last information we got for stable demo (18.12 branch) is (UTC time)

2023-09-05 06:40:16,234 |7.0.0.1-18009-exec-9 |LoginWorker   
|W| Received a null Security object from HttpServletRequest
2023-09-05 06:40:20,157 |7.0.0.1-18009-exec-4 |LoginWorker   
|W| Received a null Security object from HttpServletRequest
2023-09-05 06:40:29,855 |Catalina-utility-2 |ControlEventListener  |I| 
Destroying session:  hidden sessionId by default.
2023-09-05 06:40:59,863 |Catalina-utility-2 |ControlEventListener  |I| 
Destroying session:  hidden sessionId by default.
2023-09-05 06:40:59,864 |Catalina-utility-2 |ControlEventListener  |I| 
Destroying session:  hidden sessionId by default.
2023-09-05 06:40:59,866 |Catalina-utility-2 |ControlEventListener  |I| 
Destroying session:  hidden sessionId by default.
2023-09-05 06:40:59,868 |Catalina-utility-2 |ControlEventListener  |I| 
Destroying session:  hidden sessionId by default.
2023-09-05 06:41:29,877 |Catalina-utility-2 |ControlEventListener  |I| 
Destroying session:  hidden sessionId by default.
2023-09-05 06:41:59,891 |Catalina-utility-2 |ControlEventListener  |I| 
Destroying session:  hidden sessionId by default.
2023-09-05 06:41:59,893 |Catalina-utility-2 |ControlEventListener  |I| 
Destroying session:  hidden sessionId by default.
2023-09-05 06:41:59,894 |Catalina-utility-2 |ControlEventListener  |I| 
Destroying session:  hidden sessionId by default.
2023-09-05 06:41:59,895 |Catalina-utility-2 |ControlEventListener  |I| 
Destroying session:  hidden sessionId by default.
2023-09-05 06:41:59,895 |Catalina-utility-2 |ControlEventListener  |I| Could not find visit value object in session [ hidden sessionId by 
default.] that is being destroyed

2023-09-05 06:41:59,895 |Catalina-utility-2 |ControlEventListener  |I| 
Destroying session:  hidden sessionId by default.
2023-09-05 06:41:59,896 |Catalina-utility-2 |ControlEventListener  |I| 
Destroying session:  hidden sessionId by default.

So I again suspect someone (Infra or the VM provider or someone in the middle) 
has restarted the VM.

I restart manually all the demos , wait 5 to 10 mins...

Jacques

Le 31/08/2023 à 17:08, Daniel Watford a écrit :

Hi Eugen,

It's still on my list to address these issues, but I have not been able to spend time on them yet. If someone else is able to address them in the 
meantime, that would be great, but I think access to the host is needed to apply and test those changes.


From memory, version 3 didn't support some of the features we are using such as memory limits - but can't be sure.  There was a problem with using 
version 3 which prompted a downgrade to 2.4.


Thanks,

Dan.

On Thu, 31 Aug 2023 at 15:33,  wrote:

Hi,

It seems that some services have _restart: "no"_  and some are missing this 
option.

The docs for restart policy are here: 
https://docs.docker.com/compose/compose-file/compose-file-v2/#restart

I did notice the compose version is 2.4. Any idea why not use version 3 
(which is closer to swarm stack IMO)?


https://github.com/apache/ofbiz-tools/blob/a20f9f3c750600164d08b54b80865093399a24de/demo-backup/ofbizdocker/home/ofbizdocker/demo-next/docker-compose.yml#L9

On 31.08.2023 13:43, Jacques Le Roux  wrote:
> Le 31/08/2023 à 11:25, Eugen Stan a écrit :
> > La 30.08.2023 11:00, Jacques Le Roux a scris:
> >> Hi,
> >>
> >> All demos are down (no processes running). I suspect a restart of the
> >> VM. I restart them all manually, wait 5 to 10 mins...
> >>
> >> Jacques
> >>
> >
> > Hello Jacques,
> >
> > I presume you are talking about docker deployments.
> > Can I take a look at how they are deployed ?
> >
> > I keep reading about them being down because of restarts or some other
> > reason.
> > I believe I can help. Docker has options to restart automatically:
> > 
https://docs.docker.com/config/containers/start-containers-automatically/
> >
> > I think adding `unless-stopped` restart policy should do it.
> > You can also go with `always`.
> >
> > docker run -d --restart unless-stopped redis
> >
> > Regards,
>
> Hi Eugen,
>
> Actually, this time at least, Docker is not concerned. When I said (no
> processes running) I meant no OFBiz process.
> It happens from time to time. I guess this was due by a reported outage
> to Infra (even backup). Almost all VMs are externalised now.
>
> For Docker, all the information is there:
> https://github.com/apache/ofbiz-tools/tree/master/demo-backup/ofbizdocker
>
> HTH
>
> Jacques
>
>



--
Daniel Watford

Re: Demos down

[Jacques Le Roux]

Le 31/08/2023 à 11:25, Eugen Stan a écrit :

La 30.08.2023 11:00, Jacques Le Roux a scris:

Hi,

All demos are down (no processes running). I suspect a restart of the VM. I 
restart them all manually, wait 5 to 10 mins...

Jacques



Hello Jacques,

I presume you are talking about docker deployments.
Can I take a look at how they are deployed ?

I keep reading about them being down because of restarts or some other reason.
I believe I can help. Docker has options to restart automatically: 
https://docs.docker.com/config/containers/start-containers-automatically/

I think adding `unless-stopped` restart policy should do it.
You can also go with `always`.

docker run -d --restart unless-stopped redis

Regards,


Hi Eugen,

Actually, this time at least, Docker is not concerned. When I said (no 
processes running) I meant no OFBiz process.
It happens from time to time. I guess this was due by a reported outage to 
Infra (even backup). Almost all VMs are externalised now.

For Docker, all the information is there: 
https://github.com/apache/ofbiz-tools/tree/master/demo-backup/ofbizdocker

HTH

Jacques

Demos down

[Jacques Le Roux]

Hi,

All demos are down (no processes running). I suspect a restart of the VM. I 
restart them all manually, wait 5 to 10 mins...

Jacques

Re: AW: QR code creation

[Jacques Le Roux]

Hi Mandar,

Please use the ML for such questions ;)

This said, here you go:
https://cwiki.apache.org/confluence/display/OFBIZ/Apache+OFBiz+Contributors
https://cwiki.apache.org/confluence/display/OFBIZ/OFBiz+Contributors+Best+Practices

HTH

Jacques

Le 23/08/2023 à 20:35, Mandar K a écrit :

Hi Jacques, we can also contribute. Please let me know the process.

Thanks
Mandar

On Wed, Aug 23, 2023 at 12:34 PM Jacques Le Roux  
wrote:

Thanks Ingo,

If it's not working OOTB, could we have that contributed?

TIA

Jacques

Le 22/08/2023 à 20:36, Ingo Wolfmayr a écrit :
> Hi Mandar,
>
> I generate them in Java or Groovy, using the generateQRCodeImage service:
>
> Map qrMap = UtilMisc.toMap("message", 
yourData,
>                          "height", 200, "width", 200);
> Map qrCodeResult = 
this.dispatcher.runSync("generateQRCodeImage", qrMap);
> if (qrCodeResult != null && qrCodeResult.get("bufferedImage") != null) {
>        BufferedImage qrCode = (BufferedImage) 
qrCodeResult.get("bufferedImage");
> ...
> }
>
> Then use this image in the xsl-fo code.
>
> Best regards,
> Ingo
>
> -Ursprüngliche Nachricht-
> Von: Mandar K 
> Gesendet: Dienstag, 22. August 2023 19:51
> An: ofbizuser 
> Betreff: QR code creation
>
> Hi Team, requesting urgent input.
>
> How to create QR code in pdf.
>
> The one shown in the demo example is not working.
>
> Thank you.
>



--
Regards
Mandar Kulkarni
Adaptability is the whole mystery of life - Swami Vivekanand

Re: AW: QR code creation

[Jacques Le Roux]

Thanks Ingo,

If it's not working OOTB, could we have that contributed?

TIA

Jacques

Le 22/08/2023 à 20:36, Ingo Wolfmayr a écrit :

Hi Mandar,

I generate them in Java or Groovy, using the generateQRCodeImage service:

Map qrMap = UtilMisc.toMap("message", yourData,
 "height", 200, "width", 200);
Map qrCodeResult = 
this.dispatcher.runSync("generateQRCodeImage", qrMap);
if (qrCodeResult != null && qrCodeResult.get("bufferedImage") != null) {
 BufferedImage qrCode = (BufferedImage) 
qrCodeResult.get("bufferedImage");
...
}

Then use this image in the xsl-fo code.

Best regards,
Ingo

-Ursprüngliche Nachricht-
Von: Mandar K 
Gesendet: Dienstag, 22. August 2023 19:51
An: ofbizuser 
Betreff: QR code creation

Hi Team, requesting urgent input.

How to create QR code in pdf.

The one shown in the demo example is not working.

Thank you.

Demos down

[Jacques Le Roux]

Hi,

I guess the demos VM has been restarted because the 3 demos stopped around 7 
UTC. I just restarted them.

Jacques

Stable demo was down since "this morning"

[Jacques Le Roux]

It's OK now

Re: Upgrade from 18.12.05 to 18.12.08

[Jacques Le Roux]

Typo of mine also (w/o the excuse of cellular)

I know_W_hat a manual operation is... ;)

Have a good day

Le 26/07/2023 à 10:16, Ernest Hocking a écrit :

Thanks Jacques.

The word "city" is a typo.  Trying to email on the phone isn't good.  Large
fingers small keys with auto correction

Kind regards

Ernest

On Wed, 26 Jul 2023, 14:33 Jacques Le Roux,
wrote:


Hi Ernest,

I know that a manual operation is, but not a manual city operation :)

Anyway, all is in the DB and there are no differences in the data model.
Only few code changes, few security issues and bug fixes.
So you would only need to replace the code. Of course beware of your own
code changes...

HTH

Jacques

Le 26/07/2023 à 06:41, Ernest Hocking a écrit :

Probably a question for Jacques

following your suggestion to migrate to 18.12.08  is there a

recommendation

on the best way to patch/ upgrade so that things like product images,
config changes, u labels etc get migrated or it's it a manual city

operation

Thanks and kind regards

Ernest

Re: Upgrade from 18.12.05 to 18.12.08

[Jacques Le Roux]

Hi Ernest,

I know that a manual operation is, but not a manual city operation :)

Anyway, all is in the DB and there are no differences in the data model.
Only few code changes, few security issues and bug fixes.
So you would only need to replace the code. Of course beware of your own code 
changes...

HTH

Jacques

Le 26/07/2023 à 06:41, Ernest Hocking a écrit :

Probably a question for Jacques

following your suggestion to migrate to 18.12.08  is there a recommendation
on the best way to patch/ upgrade so that things like product images,
config changes, u labels etc get migrated or it's it a manual city operation

Thanks and kind regards

Ernest

Re: The demos are down

[Jacques Le Roux]

All is back and well

Enjoy :)

Le 26/07/2023 à 09:25, Jacques Le Roux a écrit :

Hi,

I guess due to an Infra restart of the VM.
I restart the demos as well

Jacques

The demos are down

[Jacques Le Roux]

Hi,

I guess due to an Infra restart of the VM.
I restart the demos as well

Jacques

Re: running ofbiz 18.12.05 on ubuntu 23.04

[Jacques Le Roux]

Ernest,

Actually you should follow the INSTALL file in root.

Jacques

Le 25/07/2023 à 16:33, Ernest Hocking a écrit :

Thanks Krzystof

I tried various "apt install gradle " versions.  Did you use this method or
something else

Thanks and kind regards

Ernest


On Tue, 25 Jul 2023, 18:19 krzysztof karnauch,  wrote:


Hi,

I had same issue when gradle was not downloaded with full release.

He should check if gradle is down loaded and if not download separately.


Regards/Pozdrawiam
Krzysztof Karnauch
m:+48 784 633 244

--
HSU Sp. z o.o., ul. Kleeberga 74, 83-200 Starogard Gdański,
Polska,  wpisana do Krajowego Rejestru Sądowego pod nr 565626,
Sąd Rejonowy w Gdańsku VII Wydział Gospodarczy Krajowego Rejestru Sądowego;
NIP: 592-22-64-419; REGON:361911377;







Wiadomość napisana przez Ernest Hocking  w
dniu 25.07.2023, o godz. 12:58:

Hi Jacques,

I tried with 18.12.08 and experienced the same issue:

* What went wrong:
Could not create an instance of type
org.gradle.initialization.DefaultSettings_Decorated.

Could not initialize class org.codehaus.groovy.reflection.ReflectionCache

I'll continue to investigate options at this end.

kind regards

Ernest

On Tue, Jul 25, 2023 at 4:39 PM Ernest Hocking <
ernest.hock...@computer.org>
wrote:


Hi Jacques

Yes. I tried all the Google leads including several android gradle
suggestions   I'll try with 18.13.08 and let you know the outcome.

Thanks and kind regards

Ernest

On Tue, 25 Jul 2023, 13:22 Jacques Le Roux, <

jacques.le.r...@les7arts.com>

wrote:


Hi Ernest,

Did you try to look for a solution with Google ?
Like looking for "Could not initialize class
org.codehaus.groovy.reflection.ReflectionCache Could not create an

instance

of
typeorg.gradle.initialization.DefaultSettings_Decorated."

Also, because of security issues*, you should rather use 18.12.08**

* https://ofbiz.apache.org/security.html
** https://ofbiz.apache.org/download.html

HTH

Jacques

Le 25/07/2023 à 07:31, Ernest Hocking a écrit :

Good afternoon

Has anyone succeeded in running ofbiz 18.12.05 on ubuntu 23.04.

I have tried and get an error message:

* What went wrong:
Could not create an instance of type
org.gradle.initialization.DefaultSettings_Decorated.

Could not initialize class

org.codehaus.groovy.reflection.ReflectionCache

I have tried various versions of openjdk, and gradle but so far no
success.

Any experience/ pointers  to getting it running would bve appreciated,

thanks and kind regards

Ernest

Re: running ofbiz 18.12.05 on ubuntu 23.04

[Jacques Le Roux]

Hi Ernest,

Did you try to look for a solution with Google ?
Like looking for "Could not initialize class org.codehaus.groovy.reflection.ReflectionCache Could not create an instance of 
typeorg.gradle.initialization.DefaultSettings_Decorated."


Also, because of security issues*, you should rather use 18.12.08**

* https://ofbiz.apache.org/security.html
** https://ofbiz.apache.org/download.html

HTH

Jacques

Le 25/07/2023 à 07:31, Ernest Hocking a écrit :

Good afternoon

Has anyone succeeded in running ofbiz 18.12.05 on ubuntu 23.04.

I have tried and get an error message:

* What went wrong:
Could not create an instance of type
org.gradle.initialization.DefaultSettings_Decorated.

Could not initialize class org.codehaus.groovy.reflection.ReflectionCache


I have tried various versions of openjdk, and gradle but so far no
success.

Any experience/ pointers  to getting it running would bve appreciated,

thanks and kind regards

Ernest

Re: Pricing process in the Quote

[Jacques Le Roux]

Hi,

ofbiz_logo depends on the theme used. If you look for it under \themes\ you 
will see several of them. Some (most recent) are svg files, older are png or 
giff.
As you don't need the real ofbiz_logoS you may simply replace them by the ones 
you want keeping the same names.

HTH

Jacques

Le 10/07/2023 à 21:22, specificpurpose a écrit :


Hi,
I've also checked the issue related to the logo.
Going to the example, I found that the logo has this link: 
'/images/ofbiz_logo.png' and effectively there is the OFbiz logo at 
'https://localhost:8443/images/ofbiz_logo.png'.
Now how to upload the image of the logo my company?
If I just visit 'https://localhost:8443/images/'  it reports this error: HTTP 
Status 404 – Not Found
Is there GUI to see the available list of images? What about uploading the new 
ones?

Thanks


Sent with Proton Mail secure email.

--- Original Message ---
On Monday, July 10th, 2023 at 19:08, specificpurpose 
 wrote:



Hi,
how to access OrderContent and how to create a specific table for QuoteContent 
as you described?
I've not understood where is this Content. Under Order Manager menu, I have the 
following options:
-Main
-Requests
-Quotes
-Order List
-Find Orders
-Order Entry
-Returns
-Requirements
-Reports
-Stats

Maybe I'm missing some options or possibilities that are unknown for me. Is 
there a specific guide, video guide for this specific purpose?




Sent with Proton Mail secure email.


--- Original Message ---
On Friday, July 7th, 2023 at 07:16, Yashwant Dhakad 
yashwant.dha...@hotwaxsystems.com wrote:




Hi,
You can check the OrderContent data model and create a new table for
QuoteContent similar to OrderContent. In Content, DataResource you can link
the document and text and link the content with Quote. For the company
logo, you can see the company
https://demo-trunk.ofbiz.apache.org/partymgr/control/viewprofile?partyId=Company

logo in PartyGroup
https://demo-trunk.ofbiz.apache.org/webtools/control/entity/find/PartyGroup.logoImageUrl

field or you can also link the logo image in PartyContent as well.

On Thu, Jun 29, 2023 at 10:51 PM specificpurpose
specificpurp...@proton.me.invalid wrote:


Hi Nicolas,
let me explain better my question.
I want to configure OFbiz for a specific company that provides custom
services.
They need to track the quote proposed when trasformed in contracts.

So after the creation of a quote, I've not understood where to input all
the specifications of the services. They prefer to have something where it
is possible a minimum of text formatting tools, maybe the possibility to
add some images and all the description of the service.

Where to input them? They should prepare a document in another software
and then upload a descriptive PDF somewhere?
Moreover where to upload the logo of the company? When they print the
quote, it should be the logo of the company with some identification
information.

Is there a guide about all these types of settings?

Thanks

Sent with Proton Mail secure email.

--- Original Message ---
On Thursday, June 15th, 2023 at 09:07, Nicolas Malin <
nicolas.ma...@nereide.fr> wrote:


Hello,

The pricing for the quote is exactly the same than an order.

Can you explain your attendee case ?

Nicolas

Le 13/06/2023 à 20:13, specificpurpose a écrit :


Hi Team,

Could you please help with any documentation describing the pricing
settings for new quotes processes?
Quick help will be appreciated!

Sent with Proton Mail secure email.

--
Kind Regards,
Yashwant Dhakad
Sr. Technical Consultant

HotWax Systems
Enterprise open source experts
cell: +91-9098240513
office: 0731-409-3684
http://www.hotwaxsystems.com

Re: no answers

[Jacques Le Roux]

Hi,

What system are you talking about ?

Jacques

Le 06/07/2023 à 12:27, specificpurpose a écrit :

Hi all,
why does it seem the system is down and I cannot see any message in July?

Sent with [Proton Mail](https://proton.me/) secure email.

Stable demo was down, it's now back

[Jacques Le Roux]

Enjoy

Jacques

Re: Demos are all down

[Jacques Le Roux]

All is back and seems normal

Enjoy :)

Le 16/06/2023 à 11:11, Jacques Le Roux a écrit :

Hi,

For stable here is the end of console.log.

2023-06-16 06:50:46,428 |7.0.0.1-18009-exec-9 |ControlServlet    |T| [[[main(Domain:https://demo-stable.ofbiz.apache.org)] Request 
Begun, encoding=[UTF-8]- total:0.0,since last(Begin):0.0]]

2023-06-16 06:50:46,428 |7.0.0.1-18009-exec-9 |VisitHandler  
|I| Found visitorId [null] in cookie
2023-06-16 06:50:46,448 |7.0.0.1-18009-exec-9 |ConfigXMLReader   |I| controller loaded: 0.001s, 113 requests, 78 views in 
file:/home/ofbizDemo/branch18.12/framework/webtools/webapp/webtools/WEB-INF/controller.xml
2023-06-16 06:50:46,461 |7.0.0.1-18009-exec-9 |ConfigXMLReader   |I| controller loaded: 0.0s, 26 requests, 10 views in 
file:/home/ofbizDemo/branch18.12/framework/common/webcommon/WEB-INF/portal-controller.xml
2023-06-16 06:50:46,474 |7.0.0.1-18009-exec-9 |ConfigXMLReader   |I| controller loaded: 0.001s, 30 requests, 13 views in 
file:/home/ofbizDemo/branch18.12/framework/common/webcommon/WEB-INF/security-controller.xml
2023-06-16 06:50:46,486 |7.0.0.1-18009-exec-9 |ConfigXMLReader   |I| controller loaded: 0.0s, 5 requests, 0 views in 
file:/home/ofbizDemo/branch18.12/framework/common/webcommon/WEB-INF/tempexpr-controller.xml

2023-06-16 06:50:46,487 |7.0.0.1-18009-exec-9 |RequestHandler    
|I| This is the first request in this visit. Hidden sessionId by default.
2023-06-16 06:50:46,487 |7.0.0.1-18009-exec-9 |ExternalLoginKeysManager  |W| Could not find userLogin for external login key: 
ELbf3c7154-d50f-448b-bf93-8d4084331366

2023-06-16 06:50:46,487 |7.0.0.1-18009-exec-9 |JWTManager    
|I| Internal single sign on is disabled.
2023-06-16 06:50:46,488 |7.0.0.1-18009-exec-9 |RequestHandler    
|I| Rendering View [main].  Hidden sessionId by default.
2023-06-16 06:50:46,489 |7.0.0.1-18009-exec-9 |ServiceDispatcher |T| Sync service [webtools/getUserPreferenceGroup] finished in [1] 
milliseconds
2023-06-16 06:50:46,495 |7.0.0.1-18009-exec-9 |ScreenFactory |I| Got 11 screens in 0.005s from: 
file:/home/ofbizDemo/branch18.12/framework/webtools/widget/CommonScreens.xml

2023-06-16 06:50:46,512 |7.0.0.1-18009-exec-9 |ServerHitBin  
|I| Visit delegatorName=default, ServerHitBin delegatorName=default
2023-06-16 06:50:46,514 |7.0.0.1-18009-exec-9 |TransactionUtil   
|W| No transaction in place, so not suspending.
2023-06-16 06:50:46,517 |7.0.0.1-18009-exec-9 |SequenceUtil  |I| Got bank of sequenced IDs for [ServerHitBin]; curSeqId=10820, 
maxSeqId=10830, bankSize=10
2023-06-16 06:50:46,520 |7.0.0.1-18009-exec-9 |ControlServlet    |T| [[[main(Domain:https://demo-stable.ofbiz.apache.org)] Request Done- 
total:0.092,since last([main(Domain:http...):0.092]]

2023-06-16 06:50:55,763 |OFBiz-JobQueue-1 |PersistedServiceJob   |I| 
Job  [Send Email] Id [10032] -- Next runtime: Fri Jun 16 07:05:55 UTC 2023
2023-06-16 06:50:55,775 |OFBiz-JobQueue-1 |ServiceDispatcher |T| 
Sync service [default/sendEmailDated] finished in [12] milliseconds
2023-06-16 06:51:38,952 |Thread-0 |ContainerLoader |I| Shutting down containers
2023-06-16 06:51:38,952 |Thread-0 |ContainerLoader |I| Stopping container 
catalina-container
2023-06-16 06:51:38,962 |Thread-0 |ServiceContainer |I| Removing from cache 
dispatcher: ebay
2023-06-16 06:51:38,962 |Thread-0 |ServiceDispatcher |I| De-Registering 
dispatcher: ebay
...
[...]
...
2023-06-16 06:51:39,295 |Thread-0 |ServiceContainer |I| Removing from cache 
dispatcher: ical
2023-06-16 06:51:39,295 |Thread-0 |ServiceDispatcher |I| De-Registering 
dispatcher: ical
2023-06-16 06:51:39,313 |Thread-0 |ContainerLoader |I| Stopped container 
catalina-container
2023-06-16 06:51:39,313 |Thread-0 |ContainerLoader |I| Stopping container 
service-container
2023-06-16 06:51:39,313 |Thread-0 |JobPoller |I| Shutting down JobPoller.
2023-06-16 06:51:39,314 |Thread-0 |JobPoller |I| JobPoller shutdown completed.
2023-06-16 06:51:39,314 |OFBiz-JobPoller |JobPoller |I| 
JobPoller thread stopped.
2023-06-16 06:51:39,314 |Thread-0 |ServiceContainer |I| Removing from cache 
dispatcher: default
2023-06-16 06:51:39,314 |Thread-0 |ServiceDispatcher |I| De-Registering 
dispatcher: default
2023-06-16 06:51:39,314 |Thread-0 |ServiceContainer |I| Removing from cache 
dispatcher: entity-default
2023-06-16 06:51:39,314 |Thread-0 |ServiceDispatcher |I| De-Registering 
dispatcher: entity-default
2023-06-16 06:51:39,314 |Thread-0 |ServiceDispatcher |I| Shutting down the 
service engine...
2023-06-16 06:51:39,314 |Thread-0 |ContainerLoader |I| Stopped container 
service-container
2023-06-16 06:51:39,314 |Thread-0 |ContainerLoader |I| Stopping container 
delegator-container
2023-06-16 06:51:39,314 |Thread-0 |ContainerLoader |I| Stopped container 
delegator-container

Demos are all down

[Jacques Le Roux]

Hi,

For stable here is the end of console.log.

2023-06-16 06:50:46,428 |7.0.0.1-18009-exec-9 |ControlServlet    |T| [[[main(Domain:https://demo-stable.ofbiz.apache.org)] Request Begun, 
encoding=[UTF-8]- total:0.0,since last(Begin):0.0]]

2023-06-16 06:50:46,428 |7.0.0.1-18009-exec-9 |VisitHandler  
|I| Found visitorId [null] in cookie
2023-06-16 06:50:46,448 |7.0.0.1-18009-exec-9 |ConfigXMLReader   |I| controller loaded: 0.001s, 113 requests, 78 views in 
file:/home/ofbizDemo/branch18.12/framework/webtools/webapp/webtools/WEB-INF/controller.xml
2023-06-16 06:50:46,461 |7.0.0.1-18009-exec-9 |ConfigXMLReader   |I| controller loaded: 0.0s, 26 requests, 10 views in 
file:/home/ofbizDemo/branch18.12/framework/common/webcommon/WEB-INF/portal-controller.xml
2023-06-16 06:50:46,474 |7.0.0.1-18009-exec-9 |ConfigXMLReader   |I| controller loaded: 0.001s, 30 requests, 13 views in 
file:/home/ofbizDemo/branch18.12/framework/common/webcommon/WEB-INF/security-controller.xml
2023-06-16 06:50:46,486 |7.0.0.1-18009-exec-9 |ConfigXMLReader   |I| controller loaded: 0.0s, 5 requests, 0 views in 
file:/home/ofbizDemo/branch18.12/framework/common/webcommon/WEB-INF/tempexpr-controller.xml

2023-06-16 06:50:46,487 |7.0.0.1-18009-exec-9 |RequestHandler    
|I| This is the first request in this visit. Hidden sessionId by default.
2023-06-16 06:50:46,487 |7.0.0.1-18009-exec-9 |ExternalLoginKeysManager  |W| Could not find userLogin for external login key: 
ELbf3c7154-d50f-448b-bf93-8d4084331366

2023-06-16 06:50:46,487 |7.0.0.1-18009-exec-9 |JWTManager    
|I| Internal single sign on is disabled.
2023-06-16 06:50:46,488 |7.0.0.1-18009-exec-9 |RequestHandler    
|I| Rendering View [main].  Hidden sessionId by default.
2023-06-16 06:50:46,489 |7.0.0.1-18009-exec-9 |ServiceDispatcher |T| Sync service [webtools/getUserPreferenceGroup] finished in [1] 
milliseconds
2023-06-16 06:50:46,495 |7.0.0.1-18009-exec-9 |ScreenFactory |I| Got 11 screens in 0.005s from: 
file:/home/ofbizDemo/branch18.12/framework/webtools/widget/CommonScreens.xml

2023-06-16 06:50:46,512 |7.0.0.1-18009-exec-9 |ServerHitBin  
|I| Visit delegatorName=default, ServerHitBin delegatorName=default
2023-06-16 06:50:46,514 |7.0.0.1-18009-exec-9 |TransactionUtil   
|W| No transaction in place, so not suspending.
2023-06-16 06:50:46,517 |7.0.0.1-18009-exec-9 |SequenceUtil  |I| Got bank of sequenced IDs for [ServerHitBin]; curSeqId=10820, 
maxSeqId=10830, bankSize=10
2023-06-16 06:50:46,520 |7.0.0.1-18009-exec-9 |ControlServlet    |T| [[[main(Domain:https://demo-stable.ofbiz.apache.org)] Request Done- 
total:0.092,since last([main(Domain:http...):0.092]]

2023-06-16 06:50:55,763 |OFBiz-JobQueue-1 |PersistedServiceJob   |I| 
Job  [Send Email] Id [10032] -- Next runtime: Fri Jun 16 07:05:55 UTC 2023
2023-06-16 06:50:55,775 |OFBiz-JobQueue-1 |ServiceDispatcher |T| 
Sync service [default/sendEmailDated] finished in [12] milliseconds
2023-06-16 06:51:38,952 |Thread-0 |ContainerLoader   |I| Shutting 
down containers
2023-06-16 06:51:38,952 |Thread-0 |ContainerLoader   |I| Stopping 
container catalina-container
2023-06-16 06:51:38,962 |Thread-0 |ServiceContainer  |I| Removing 
from cache dispatcher: ebay
2023-06-16 06:51:38,962 |Thread-0 |ServiceDispatcher |I| 
De-Registering dispatcher: ebay
...
[...]
...
2023-06-16 06:51:39,295 |Thread-0 |ServiceContainer  |I| Removing 
from cache dispatcher: ical
2023-06-16 06:51:39,295 |Thread-0 |ServiceDispatcher |I| 
De-Registering dispatcher: ical
2023-06-16 06:51:39,313 |Thread-0 |ContainerLoader   |I| Stopped 
container catalina-container
2023-06-16 06:51:39,313 |Thread-0 |ContainerLoader   |I| Stopping 
container service-container
2023-06-16 06:51:39,313 |Thread-0 |JobPoller |I| Shutting 
down JobPoller.
2023-06-16 06:51:39,314 |Thread-0 |JobPoller |I| JobPoller 
shutdown completed.
2023-06-16 06:51:39,314 |OFBiz-JobPoller |JobPoller |I| 
JobPoller thread stopped.
2023-06-16 06:51:39,314 |Thread-0 |ServiceContainer  |I| Removing 
from cache dispatcher: default
2023-06-16 06:51:39,314 |Thread-0 |ServiceDispatcher |I| 
De-Registering dispatcher: default
2023-06-16 06:51:39,314 |Thread-0 |ServiceContainer  |I| Removing 
from cache dispatcher: entity-default
2023-06-16 06:51:39,314 |Thread-0 |ServiceDispatcher |I| 
De-Registering dispatcher: entity-default
2023-06-16 06:51:39,314 |Thread-0 |ServiceDispatcher |I| Shutting 
down the service engine...
2023-06-16 06:51:39,314 |Thread-0 |ContainerLoader   |I| Stopped 
container service-container
2023-06-16 06:51:39,314 |Thread-0 |ContainerLoader   

Re: Demos are down since this morning around nine UTC

[Jacques Le Roux]

All is OK now

Le 01/06/2023 à 12:40, Jacques Le Roux a écrit :

The stable demo is back but not the trunk and next yet.

Le 01/06/2023 à 12:07, Jacques Le Roux a écrit :

I'm looking at it...

Jacques

Re: Demos are down since this morning around nine UTC

[Jacques Le Roux]

The stable demo is back but not the trunk and next yet.

Le 01/06/2023 à 12:07, Jacques Le Roux a écrit :

I'm looking at it...

Jacques

Demos are down since this morning around nine UTC

[Jacques Le Roux]

I'm looking at it...

Jacques

Re: how can I increase the size of any column of SecurityGroup entity

[Jacques Le Roux]

Hi Maheshwari,

This may also help you with some examples:
https://cwiki.apache.org/confluence/display/OFBIZ/Revisions+Requiring+Data+Migration+-+upgrade+ofbiz

HTH

Jacques

Le 20/05/2023 à 14:04, Nicolas Malin a écrit :

What's didn't works ?

When you recreate all the db with OFBiz after a change, or just restart OFBiz 
on existing database ?

On the second you need to apply an ALTER TABLE on your field.

For the first, check that you modified the good fieldType file.

Nicolas

On 20/05/2023 12:06, Mahi maheshwari wrote:

Hello Community,

I'm trying to change the size of groupId column of the SecurityGroup entity.
I tried changing the size from 20 to 80 as mentioned below.

Method: 1

I replaced this line with the below line of code




Method: 2
and also tried changing the below-mentioned code, I changed the type to the 
description for groupId.



      
      
      
    

both methods didn't work, please guide me If I'm going wrong anywhere.
I'm also attaching the screenshot for you to have a look at.

Regards,
Maheshwari.

Re: How can I know the session object value inside .groovy file

[Jacques Le Roux]

Hi Mahi,

Please see 
https://cwiki.apache.org/confluence/display/OFBIZ/Variables+always+available+in+screen+context

HTH

Jacques

Le 22/04/2023 à 14:04, Mahi maheshwari a écrit :

Hello Community,

how can I know the session object values in .groovy
I want to know where the session object values are set and which file and
module. please share the path of that file.
I've included the piece of code for reference below.

  println "hey context==="+context.detailScreen
  println "what is session=="+session.toString()
  if(security.hasEntityPermission("XERUS", "_ADMIN", session)){
  println "security value for
  ADMIN="+security.hasEntityPermission("XERUS", "_ADMIN",
session)
  context.detailScreen = 'XerusAdminView'
}

Regards,
Maheshwari.

Re: Class and Methods to find job ID and job Name in a service

[Jacques Le Roux]

                    not coming, of course

Le 18/04/2023 à 15:39, Jacques Le Roux a écrit :

As you can see at 
https://lists.apache.org/thread/pqmq1x95hlbqwhhzygsvdq2ocwqo10p0 images are 
most of the time coming to this ML

HTH 

Re: Class and Methods to find job ID and job Name in a service

[Jacques Le Roux]

Hi Mahi,

As you can see at 
https://lists.apache.org/thread/pqmq1x95hlbqwhhzygsvdq2ocwqo10p0 images are 
most of the time coming to this ML

HTH

Jacques

Le 18/04/2023 à 12:23, Mahi maheshwari a écrit :

Hello Community,

Is there a way to find and access the job Id and job name inside a Java service?
I have a service "SendEmailService" written in Java for mail notification, for 
this, I have created the job in jobSandBox.
whenever the "SendEmailService" service is called by the scheduler then inside this service, I want to know the job name associated with that 
service for the calling service.

I'm attaching the image below, please take a look at the attachment for 
reference.

*_for example: _*
SendEmailService(HttpServletRequest request, HttpServletResponse response){
     code to get a job id and job name
}

Regards,
Maheshwari.

Re: CVE-2022-47501: Apache OFBiz: Arbitrary file reading vulnerability

[Jacques Le Roux]

Hi Douglas,

Your message has been moderated, else it would not have reached this Mailing 
List.

Please subscribe to the user ML for such questions and then use your email 
client.
See why here http://ofbiz.apache.org/mailing-lists.html.

You will get a better support, people can answer you on the ML.
The wider the audience the better the answers you might get.

Also it's more work for moderators who have to accept your messages as long as 
you have not subscribed.
I'll personally no longer accept them (other moderators still could).

Thanks

This said, only the Solr plugin is concerned, no need to update the rest

HTH

Jacques

Le 11/04/2023 à 07:49, Douglas Melo a écrit :

Hello Jacques!!

I have a question, is it necessary to update the entire project or just the 
Solr plugin?

On 2023/04/10 09:21:12 Jacques Le Roux wrote:
> Severity: important
>
> Description:
>
> Arbitrary file reading vulnerability in Apache Software Foundation Apache 
OFBiz.This issue affects Apache OFBiz: before 18.12.07.
>
> Required Configurations:
>
> Using the Solr plugin
>
> Solution:
>
> Upgrade to release 18.12.07
>
> Credit:
>
> Skay (finder)
>
> References:
>
> https://lists.apache.org/list.html?annou...@apache.org
> https://ofbiz.apache.org/download.html
> https://ofbiz.apache.org/security.html
> https://ofbiz.apache.org/
> https://www.cve.org/CVERecord?id=CVE-2022-47501
>
>

Re: List of Ofbiz user companies

[Jacques Le Roux]

Hi Mandar,

Here is the official list of users: 
https://cwiki.apache.org/confluence/display/OFBIZ/Apache+OFBiz+User+List

But there are several others, often bigger users, specifically ERP users, not ecommerce ones, not listed there. Because they don't want that people 
know they use OFBiz.


Some are global corporations... Stannah is one of them and kindly accepter to 
be listed. 5 years ago, they even posted an user story at:
https://cwiki.apache.org/confluence/display/OFBIZ/Apache+OFBiz+User+Stories

HTH

Jacques

Le 10/04/2023 à 13:07, Mandar K a écrit :

Hello All, Greetings.

I am looking for a list of organizations who are using Ofbiz. Pl can you
share the same.

Typically when we talk about the advantage and equally capable product
Apache Ofbiz compared to SAP or EBS or any as such and try to emphasize on
the strong presence of Apache Ofbiz, this is the typical question we face
-" Who are the leading names in the globe who use Apache Ofbiz"

Kindly share a few global names who are using it.

Thank you

Re: How to call a java service in widget/Screens.xml

[Jacques Le Roux]

Thanks Priya, this shows how OFBiz is flexible and versatile.

Hi Mahi,

As you need to get to ProductionViewFtl view, you may use the 
<> to directly call a controller request-map like 
ProductionViewFtl

There are few examples in source, notably in FormWidgetExampleScreens.xml and 
BirtScreens.xml. Here is an example:

   http://eclipse.org/birt/phoenix/intro/; 
url-mode="plain" target-window="_blank_"/>

HTH

Jacques

Le 10/04/2023 à 07:39, Priya Sharma a écrit :

Hello Mahi,

You can do a service call from a screen by including the following in
the actions tag on the screen.


 


Hope that helps!

On Sat, 8 Apr 2023 at 18:47, Mahi maheshwari  wrote:

Hello Community,

Is there a way to call a java service written at
pluginname/src/main/java/apache/services/ Submitform.java  in
pluginname/widget/screens.xml

I actually have my Java service written in  Submitform.java  which is
getting called through the  in the controller.xml

  
  
  
  
  

so when I hithttps://localhost:8443/xerus/control/ProductionViewFtl
, productionNeedsPage
service will be invoked

I want to achieve the same through Screens.xml which is in
pluginname/widget/screens.xml.

calling the java event productionNeedsPage and the view will be
ProductionViewFtl

how can I achieve this? can anyone please let me know how can I do it so?

Thanks,
Maheshwari.

CVE-2022-47501: Apache OFBiz: Arbitrary file reading vulnerability

[Jacques Le Roux]

Severity: important

Description:

Arbitrary file reading vulnerability in Apache Software Foundation Apache 
OFBiz.This issue affects Apache OFBiz: before 18.12.07.

Required Configurations:

Using the Solr plugin

Solution:

Upgrade to release 18.12.07

Credit:

Skay  (finder)

References:

https://lists.apache.org/list.html?annou...@apache.org
https://ofbiz.apache.org/download.html
https://ofbiz.apache.org/security.html
https://ofbiz.apache.org/
https://www.cve.org/CVERecord?id=CVE-2022-47501

Fwd: TAC supporting Berlin Buzzwords

[Jacques Le Roux]

Hi,

As requested, FYI

Jacques



 Message transféré 
Sujet : TAC supporting Berlin Buzzwords
Date :  Fri, 24 Mar 2023 10:56:36 +0100
De :Gavin McDonald 
Répondre à :priv...@freemarker.apache.org
Pour :  gmcdon...@apache.org



PMCs,

Please forward to your dev and user lists.

Hi All,

The ASF Travel Assistance Committee is supporting taking up to six (6) people
to attend Berlin Buzzwords In June this year.

This includes Conference passes, and travel & accommodation as needed.

Please see our website at https://tac.apache.org for more information and how 
to apply.

Applications close on 15th April.

Good luck to those that apply.

Gavin McDonald (VP TAC)

Re: become a contributor

[Jacques Le Roux]

Hi Kaoe,

Here you go:

https://cwiki.apache.org/confluence/display/OFBIZ/Apache+OFBiz+Contributors
https://cwiki.apache.org/confluence/display/OFBIZ/OFBiz+Contributors+Best+Practices

HTH

Jacques

Le 09/03/2023 à 16:29, Kaoe Coito a écrit :

Hello,

I would like to become a contributor to the OFBiz project.
What would be the necessary procedure for this?

Thanks

Re: Inquiry on the use of API

[Jacques Le Roux]

Hi Godwin,

Please, if not done yet, subscribe to the user ML for such questions and then 
use your email client.
See why here http://ofbiz.apache.org/mailing-lists.html.

You will get a better support, people can answer you on the ML.
The wider the audience the better the answers you might get.

Thanks

This said, I don't know anything about Fineract, but have a look at 
https://github.com/apache/ofbiz-framework/blob/trunk/framework/entity/config/entityengine.xml you should find a way there, maybe by also asking one 
Fineract user ML how to connect to Fineract DB (if that makes sense)


HTH

Jacques

Le 07/03/2023 à 16:22, Technology a écrit :

Good day Team,

We are reviewing the OFBIZ application and we are trying to get some inquires 
on the API configuration with other system.

We are currently hosting our DB on another backend services called 
fineract and we want to identify the easiet way to 
connect to Fineract from OFBIZ (as we are planning on 
using OFBIZ as a UI) which will be our goal.

Looking forward to hearing from you.

Thanks
Godwin

Re: Big book of OFBiz data model

[Jacques Le Roux]

Le 16/02/2023 à 16:57, Jacques Le Roux a écrit :

To update the wiki you need to be a contributor:
https://cwiki.apache.org/confluence/display/OFBIZ/Apache+OFBiz+Contributors

I just checked, you are a contributor

Re: Big book of OFBiz data model

[Jacques Le Roux]

Hi Pawan, welcome back :)

To update the wiki you need to be a contributor:
https://cwiki.apache.org/confluence/display/OFBIZ/Apache+OFBiz+Contributors

This said since 2017 there are no major changes registered:
https://cwiki.apache.org/confluence/display/OFBIZ/Revisions+Requiring+Data+Migration+-+upgrade+ofbiz

HTH

Jacques

Le 08/02/2023 à 14:33, Pawan Verma a écrit :

Hello Devs,

It feels good to be here after a long time, I hope everyone is doing well.

I saw a lot has changed in recent times. I was checking the Big Book of
OFBiz data model for recent changes but it was last released in 2017
according to [1].

Is there any update about this? Can someone share any information about how
we can update it?

Any help would be appreciated. Thanks!

[1]: https://cwiki.apache.org/confluence/display/OFBIZ/Data+Model+Diagrams

Best Regards,
Pawan

Re: Fw: Need Help for detail description and example for OFBiz service calling in screen

[Jacques Le Roux]

Hi Zhicheng,

You should not have send this message to dev-ow...@ofbiz.apache.org but to 
user@ofbiz.apache.org

Please subscribe to the user ML for such questions and then use your email 
client.
See why here http://ofbiz.apache.org/mailing-lists.html.

You will get a better support, people can answer you on the ML.
The wider the audience the better the answers you might get.

Also it's more work for moderators who have to accept your messages as long as 
you have not subscribed.
I'll personally no longer accept them (other moderators still could).

Thanks

This said it's quite simple, result-map, as its name says, is a map resulting 
from the call to a service, here findPartyFromEmailAddress.
In this case, it's then used to get from the DB the Party entity using the 
partyId primary key

HTH

Jacques

Le 15/02/2023 à 09:52, honestch...@163.com a écrit :



Hi, OFBizers,  these days I am learning OFBiz .
When reading the codes about screen definition, I confused by the 
service calling in screen's actions element as











I want to understand  what's meaning about the element attribute 
result-map, 

Thanks
                         Zhicheng


--
honestch...@163.com

Re: Demos are down

[Jacques Le Roux]

The demos are back and should be faster

Le 11/02/2023 à 10:35, Jacques Le Roux a écrit :

Hi,

The demos are temporarily down while Infra team is increasing the RAM, using an 
AWS t2.2xlarge*.

We will let you know as soon as it's back

Jacques

* 
https://aws.amazon.com/about-aws/whats-new/2016/11/introducing-t2-xlarge-and-t2-2xlarge-two-new-larger-burstable-amazon-ec2-instances/?nc1=h_ls

Demos are down

[Jacques Le Roux]

Hi,

The demos are temporarily down while Infra team is increasing the RAM, using an 
AWS t2.2xlarge*.

We will let you know as soon as it's back

Jacques

* 
https://aws.amazon.com/about-aws/whats-new/2016/11/introducing-t2-xlarge-and-t2-2xlarge-two-new-larger-burstable-amazon-ec2-instances/?nc1=h_ls

Re: Balance seen on last year Closing D and Closing C but is not present on current year Opening D and C

[Jacques Le Roux]

Le 03/02/2023 à 09:28, Daniel Watford a écrit :

Something worth noting is that the demo sites are reset daily - I'm not
sure what time of day, hopefully someone else can answer that for us.


Hi Daniel,

The 3 demos are totally restarted (ie with all data reloaded) at 3 UTC

HTH

Jacques

Re: The demos VM is down

[Jacques Le Roux]

All is back, enjoy

Le 15/01/2023 à 09:49, Jacques Le Roux a écrit :

Hi,

The demos VM is down, I have asked Infra about it with 
https://issues.apache.org/jira/browse/INFRA-24084

Jacques

The demos VM is down

[Jacques Le Roux]

Hi,

The demos VM is down, I have asked Infra about it with 
https://issues.apache.org/jira/browse/INFRA-24084

Jacques

Re: Accounting Invoice Overview - PDF failed

[Jacques Le Roux]

Thanks Huang,

Could you please create a Jira issue for that. We need them when releasing

TIA

Jacques

Le 08/01/2023 à 19:41, yannong huang a écrit :


Hi there,

When clicking “PDF” button in the invoice view, it failed with 
“java.lang.StackOverflowError” (see stack trace below).

A quick fix:
in def getCustomScreenTemplate(String entityTypeName, String fieldTypeValue), 
template/DocTypeTemplate.groovy,
Change:
parentTypeValue = from(entityTypeName).where().cache().queryFirst().parentTypeId
To:
String parentTypeValue = from(entityTypeName).where("invoiceTypeId", 
fieldTypeValue).cache().queryFirst().parentTypeId

*HTTP Status 500 – Internal Server Error*

--

*Type*Exception Report

*Message*Servlet execution threw an exception

*Description*The server encountered an unexpected condition that prevented it 
from fulfilling the request.

*Exception*

javax.servlet.ServletException: Servlet execution threw an exception

org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:53)

org.apache.ofbiz.webapp.control.SameSiteFilter.doFilter(SameSiteFilter.java:45)

org.apache.ofbiz.webapp.control.ContextFilter.doFilter(ContextFilter.java:188)

org.apache.ofbiz.webapp.control.ControlFilter.doFilter(ControlFilter.java:168)

javax.servlet.http.HttpFilter.doFilter(HttpFilter.java:57)

org.apache.logging.log4j.web.Log4jServletFilter.doFilter(Log4jServletFilter.java:71)

*Root Cause*

java.lang.StackOverflowError

java.base/java.lang.Exception.(Exception.java:102)

java.base/java.lang.ReflectiveOperationException.(ReflectiveOperationException.java:89)

java.base/java.lang.reflect.InvocationTargetException.(InvocationTargetException.java:73)

jdk.internal.reflect.GeneratedMethodAccessor132.invoke(Unknown Source)

java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

java.base/java.lang.reflect.Method.invoke(Method.java:566)

org.codehaus.groovy.runtime.callsite.PlainObjectMetaMethodSite.doInvoke(PlainObjectMetaMethodSite.java:43)

org.codehaus.groovy.runtime.callsite.PojoMetaMethodSite$PojoCachedMethodSite.invoke(PojoMetaMethodSite.java:188)

org.codehaus.groovy.runtime.callsite.PojoMetaMethodSite.call(PojoMetaMethodSite.java:53)

org.codehaus.groovy.runtime.callsite.AbstractCallSite.call(AbstractCallSite.java:135)

org.apache.ofbiz.common.template.DocTypeTemplate.getCustomScreenTemplate(DocTypeTemplate.groovy:37)

org.apache.ofbiz.common.template.DocTypeTemplate.getCustomScreenTemplate(DocTypeTemplate.groovy:47)

org.apache.ofbiz.common.template.DocTypeTemplate.getCustomScreenTemplate(DocTypeTemplate.groovy:47)

org.apache.ofbiz.common.template.DocTypeTemplate.getCustomScreenTemplate(DocTypeTemplate.groovy:47)

org.apache.ofbiz.common.template.DocTypeTemplate.getCustomScreenTemplate(DocTypeTemplate.groovy:47)

org.apache.ofbiz.common.template.DocTypeTemplate.getCustomScreenTemplate(DocTypeTemplate.groovy:47)

org.apache.ofbiz.common.template.DocTypeTemplate.getCustomScreenTemplate(DocTypeTemplate.groovy:47)

org.apache.ofbiz.common.template.DocTypeTemplate.getCustomScreenTemplate(DocTypeTemplate.groovy:47)

org.apache.ofbiz.common.template.DocTypeTemplate.getCustomScreenTemplate(DocTypeTemplate.groovy:47)

org.apache.ofbiz.common.template.DocTypeTemplate.getCustomScreenTemplate(DocTypeTemplate.groovy:47)

org.apache.ofbiz.common.template.DocTypeTemplate.getCustomScreenTemplate(DocTypeTemplate.groovy:47)

org.apache.ofbiz.common.template.DocTypeTemplate.getCustomScreenTemplate(DocTypeTemplate.groovy:47)

org.apache.ofbiz.common.template.DocTypeTemplate.getCustomScreenTemplate(DocTypeTemplate.groovy:47)

org.apache.ofbiz.common.template.DocTypeTemplate.getCustomScreenTemplate(DocTypeTemplate.groovy:47)

org.apache.ofbiz.common.template.DocTypeTemplate.getCustomScreenTemplate(DocTypeTemplate.groovy:47)

org.apache.ofbiz.common.template.DocTypeTemplate.getCustomScreenTemplate(DocTypeTemplate.groovy:47)

org.apache.ofbiz.common.template.DocTypeTemplate.getCustomScreenTemplate(DocTypeTemplate.groovy:47)

org.apache.ofbiz.common.template.DocTypeTemplate.getCustomScreenTemplate(DocTypeTemplate.groovy:47)

org.apache.ofbiz.common.template.DocTypeTemplate.getCustomScreenTemplate(DocTypeTemplate.groovy:47)

org.apache.ofbiz.common.template.DocTypeTemplate.getCustomScreenTemplate(DocTypeTemplate.groovy:47)

org.apache.ofbiz.common.template.DocTypeTemplate.getCustomScreenTemplate(DocTypeTemplate.groovy:47)

org.apache.ofbiz.common.template.DocTypeTemplate.getCustomScreenTemplate(DocTypeTemplate.groovy:47)

org.apache.ofbiz.common.template.DocTypeTemplate.getCustomScreenTemplate(DocTypeTemplate.groovy:47)

org.apache.ofbiz.common.template.DocTypeTemplate.getCustomScreenTemplate(DocTypeTemplate.groovy:47)

org.apache.ofbiz.common.template.DocTypeTemplate.getCustomScreenTemplate(DocTypeTemplate.groovy:47)

Re: Inventory - WEBPOS

[Jacques Le Roux]

Hi Steve,

As we can't share information through a local OFBiz instance, it's helpful to use the demos. So you could reproduce there and it would be easier to 
understand your problem. The issue is that the demo data are reloaded every day at 3 UTC. So we need to sync before.


PS: I answered to this message almost a month ago but forgot to send it, here 
it is

Jacques


Le 28/10/2022 à 00:22, S Munene a écrit :

Hi,

I am exploring the WEBPOS plugin.
I can see the orders, invoices and payments generated after successful checkout
The inventory does not change however. (There are no changes on the 
InventoryItem,
 InventoryItemDetail, ItemIssuance entities)
  
  
 
Is this the correct behaviour or am i missing a setting. I would like to track 
the inventory levels

Regards
Steve.

Re: Manufacturing - MRP Run Failure

[Jacques Le Roux]

Hi Yannong,

Glad that you found a workaround. It's also a track.

The basic issue is related to serialization filtering introduced with Java 8: 
https://docs.oracle.com/javase/8/docs/technotes/guides/serialization/filters/serialization-filtering.html


I have just created a Jira account for you: yannonghuang
So you may now create a Jira issue as a major bug in the Manufacturing 
component.

We may cross other issues like that. I'll try to find a simple but global 
solution

Thanks

Jacques


Le 24/11/2022 à 23:53, yannong huang a écrit :

Hi Jacques,

As a workaround, I set auth="false" for  in 
service_mrp.xml to make it "work".

I apparently was not allowed to signup to Jira, please see the screen shot 
attached.

Thanks,
Yannong

On 11/24/22, 8:07 AM, "Jacques Le Roux"  wrote:

 Hi Yannong,

 Your message has been moderated, else it would not have reached this 
Mailing List.

 Please subscribe to the user ML for such questions and then use your email 
client.
 See why here http://ofbiz.apache.org/mailing-lists.html.

 You will get a better support, people can answer you on the ML.
 The wider the audience the better the answers you might get.

 Also it's more work for moderators who have to accept your messages as 
long as you have not subscribed.
 I'll personally no longer accept them (other moderators still could).

 This said, I was able to reproduce the issue using trunk HEAD and will 
have a look at it ASAP

 Thanks for report, would you mind creating a Jira about that? You may 
follow:
 
https://cwiki.apache.org/confluence/display/OFBIZ/OFBiz+Contributors+Best+Practices

 TIA

 Jacques

 Le 22/11/2022 à 03:32, yannong huang a écrit :
 > Hi there,
 >
 >
 >
 > I recently downloaded, installed and run OfBiz 18.12 in my local 
environment (MacOS M1, jdk1.8.0_351.jdk), but failed with the Manufacturing / MRP 
Run with the Table made of (Wood + Nails + Varnish) tutorial. I attached error 
messages below.
 >
 >
 >
 > Can anyone shed some lights on that?
 >
 >
 >
 > Thanks,
 >
 > Yannong
 >
 >
 >
 >   
--
 >
 >
 >
 >
 >
 > 2022-11-21 17:40:40,916 |jsse-nio-8443-exec-2 |ServiceDispatcher 
|T| Sync service [manufacturing/getLastSystemInfoNote] finished in [1] 
milliseconds
 >
 > 2022-11-21 17:40:41,088 |jsse-nio-8443-exec-2 |ServerHitBin  
|I| Visit delegatorName=default, ServerHitBin delegatorName=default
 >
 > 2022-11-21 17:40:41,099 |jsse-nio-8443-exec-2 |ControlServlet
|T| [[[FindInventoryEventPlan(Domain:https://localhost)] Request Done- 
total:0.268,since last([FindInventoryEve...):0.269]]
 >
 > 2022-11-21 17:40:43,746 |jsse-nio-8443-exec-4 |LoginWorker   
|W| Received a null Security object from HttpServletRequest
 >
 > 2022-11-21 17:40:43,750 |jsse-nio-8443-exec-4 |ControlServlet
|T| [[[FindInventoryEventPlan(Domain:https://localhost)] Request Begun, 
encoding=[UTF-8]- total:0.0,since last(Begin):0.0]]
 >
 > 2022-11-21 17:40:43,798 |jsse-nio-8443-exec-4 |ConfigXMLReader   
|I| controller loaded: 0.005s, 149 requests, 66 views in 
file:/Users/yannonghuang/ofbiz/ofbiz-framework/applications/manufacturing/webapp/manufacturing/WEB-INF/controller.xml
 >
 > 2022-11-21 17:40:43,812 |jsse-nio-8443-exec-4 |ConfigXMLReader   
|I| controller loaded: 0.001s, 49 requests, 21 views in 
file:/Users/yannonghuang/ofbiz/ofbiz-framework/framework/common/webcommon/WEB-INF/common-controller.xml
 >
 > 2022-11-21 17:40:43,822 |jsse-nio-8443-exec-4 |ConfigXMLReader   
|I| controller loaded: 0.0s, 0 requests, 0 views in 
file:/Users/yannonghuang/ofbiz/ofbiz-framework/framework/common/webcommon/WEB-INF/handlers-controller.xml
 >
 > 2022-11-21 17:40:43,830 |jsse-nio-8443-exec-4 |ConfigXMLReader   
|I| controller loaded: 0.0s, 4 requests, 0 views in 
file:/Users/yannonghuang/ofbiz/ofbiz-framework/applications/commonext/webapp/WEB-INF/controller.xml
 >
 > 2022-11-21 17:40:43,833 |jsse-nio-8443-exec-4 |JWTManager
|I| Internal single sign on is disabled.
 >
 > 2022-11-21 17:40:43,842 |jsse-nio-8443-exec-4 |RequestHandler
|I| Rendering View [FindMrpPlannedEvents].  Hidden sessionId by default.
 >
 > 2022-11-21 17:40:43,849 |jsse-nio-8443-exec-4 |ServiceDispatcher 
|T| Sync service [manufacturing/getUserPreferenceGroup] finished in [2] 
milliseconds
 >
 > 2022-11-21 17:40:43,961 |jsse-nio-8443-exec-4 |ScreenFactory 
|I| Got 2 screens in 0.006s fr

Re: Manufacturing - MRP Run Failure

[Jacques Le Roux]

Hi Yannong,

Your message has been moderated, else it would not have reached this Mailing 
List.

Please subscribe to the user ML for such questions and then use your email 
client.
See why here http://ofbiz.apache.org/mailing-lists.html.

You will get a better support, people can answer you on the ML.
The wider the audience the better the answers you might get.

Also it's more work for moderators who have to accept your messages as long as 
you have not subscribed.
I'll personally no longer accept them (other moderators still could).

This said, I was able to reproduce the issue using trunk HEAD and will have a 
look at it ASAP

Thanks for report, would you mind creating a Jira about that? You may follow:
https://cwiki.apache.org/confluence/display/OFBIZ/OFBiz+Contributors+Best+Practices

TIA

Jacques

Le 22/11/2022 à 03:32, yannong huang a écrit :

Hi there,

  


I recently downloaded, installed and run OfBiz 18.12 in my local environment 
(MacOS M1, jdk1.8.0_351.jdk), but failed with the Manufacturing / MRP Run with 
the Table made of (Wood + Nails + Varnish) tutorial. I attached error messages 
below.

  


Can anyone shed some lights on that?

  


Thanks,

Yannong

  


  --

  

  


2022-11-21 17:40:40,916 |jsse-nio-8443-exec-2 |ServiceDispatcher 
|T| Sync service [manufacturing/getLastSystemInfoNote] finished in [1] 
milliseconds

2022-11-21 17:40:41,088 |jsse-nio-8443-exec-2 |ServerHitBin  
|I| Visit delegatorName=default, ServerHitBin delegatorName=default

2022-11-21 17:40:41,099 |jsse-nio-8443-exec-2 |ControlServlet
|T| [[[FindInventoryEventPlan(Domain:https://localhost)] Request Done- 
total:0.268,since last([FindInventoryEve...):0.269]]

2022-11-21 17:40:43,746 |jsse-nio-8443-exec-4 |LoginWorker   
|W| Received a null Security object from HttpServletRequest

2022-11-21 17:40:43,750 |jsse-nio-8443-exec-4 |ControlServlet
|T| [[[FindInventoryEventPlan(Domain:https://localhost)] Request Begun, 
encoding=[UTF-8]- total:0.0,since last(Begin):0.0]]

2022-11-21 17:40:43,798 |jsse-nio-8443-exec-4 |ConfigXMLReader   
|I| controller loaded: 0.005s, 149 requests, 66 views in 
file:/Users/yannonghuang/ofbiz/ofbiz-framework/applications/manufacturing/webapp/manufacturing/WEB-INF/controller.xml

2022-11-21 17:40:43,812 |jsse-nio-8443-exec-4 |ConfigXMLReader   
|I| controller loaded: 0.001s, 49 requests, 21 views in 
file:/Users/yannonghuang/ofbiz/ofbiz-framework/framework/common/webcommon/WEB-INF/common-controller.xml

2022-11-21 17:40:43,822 |jsse-nio-8443-exec-4 |ConfigXMLReader   
|I| controller loaded: 0.0s, 0 requests, 0 views in 
file:/Users/yannonghuang/ofbiz/ofbiz-framework/framework/common/webcommon/WEB-INF/handlers-controller.xml

2022-11-21 17:40:43,830 |jsse-nio-8443-exec-4 |ConfigXMLReader   
|I| controller loaded: 0.0s, 4 requests, 0 views in 
file:/Users/yannonghuang/ofbiz/ofbiz-framework/applications/commonext/webapp/WEB-INF/controller.xml

2022-11-21 17:40:43,833 |jsse-nio-8443-exec-4 |JWTManager
|I| Internal single sign on is disabled.

2022-11-21 17:40:43,842 |jsse-nio-8443-exec-4 |RequestHandler
|I| Rendering View [FindMrpPlannedEvents].  Hidden sessionId by default.

2022-11-21 17:40:43,849 |jsse-nio-8443-exec-4 |ServiceDispatcher 
|T| Sync service [manufacturing/getUserPreferenceGroup] finished in [2] 
milliseconds

2022-11-21 17:40:43,961 |jsse-nio-8443-exec-4 |ScreenFactory 
|I| Got 2 screens in 0.006s from: 
file:/Users/yannonghuang/ofbiz/ofbiz-framework/applications/manufacturing/widget/manufacturing/CommonScreens.xml

2022-11-21 17:40:43,966 |jsse-nio-8443-exec-4 |ScreenFactory 
|I| Got 1 screens in 0.004s from: 
file:/Users/yannonghuang/ofbiz/ofbiz-framework/applications/commonext/widget/CommonScreens.xml

2022-11-21 17:40:44,001 |jsse-nio-8443-exec-4 |ServiceDispatcher 
|T| Sync service [manufacturing/getLastSystemInfoNote] finished in [14] 
milliseconds

2022-11-21 17:40:44,008 |jsse-nio-8443-exec-4 |ScreenFactory 
|I| Got 26 screens in 0.004s from: 
file:/Users/yannonghuang/ofbiz/ofbiz-framework/framework/common/widget/CommonScreens.xml

2022-11-21 17:40:44,048 |jsse-nio-8443-exec-4 |ScreenFactory 
|I| Got 25 screens in 0.007s from: 
file:/Users/yannonghuang/ofbiz/ofbiz-framework/themes/common-theme/widget/CommonScreens.xml

2022-11-21 17:40:44,133 |jsse-nio-8443-exec-4 |ServerHitBin  
|I| Visit delegatorName=default, ServerHitBin delegatorName=default

2022-11-21 17:40:44,137 |jsse-nio-8443-exec-4 |ControlServlet
|T| [[[FindInventoryEventPlan(Domain:https://localhost)] Request Done- 
total:0.387,since last([FindInventoryEve...):0.387]]

2022-11-21 17:40:47,558 |jsse-nio-8443-exec-1 |LoginWorker   
|W| Received 

Re: how to install plugin

[Jacques Le Roux]

Hi  Jilani,

You need to use Gradle for that. The Gradle tasks are listed using "gradlew 
tasks"

The one you are looking for is part of the "OFBiz Plugin tasks" section.
It's pullPluginSource. The syntax is not that obvious.
You need to use the "-PpluginId=ecommerce" parameter

So you should use: "gradlew pullPluginSource -PpluginId=ecommerce"

The rest is up to you

HTH

Jacques

Le 13/11/2022 à 06:49, jilani shaik a écrit :

Hi,

I am looking for help with how to install an e-commerce plugin

https://github.com/apache/ofbiz-plugins/tree/trunk


Thanks,
Jilani

Re: OFBiz Slack Request

[Jacques Le Roux]

Sincerely there not much happening on OFBiz Slack channel. The privileged media 
is the ML. The principal reason ? It's archived:
https://lists.apache.org/list.html?user@ofbiz.apache.org

HTH

Le 25/10/2022 à 20:59, Maximilian Bloomstine (RIT Student) a écrit :

Thank you for the email. I will go ahead and join the ML. is there anything 
else I would need to do to join slack?

again thank you,
Max

On Fri, Oct 21, 2022 at 12:06 PM Jacques Le Roux  
wrote:

Hi Max,

Your message has been moderated, else it would not have reached this 
Mailing List.

Please subscribe to the user ML for such questions and then use your email 
client.
See why here http://ofbiz.apache.org/mailing-lists.html.

You will get a better support, people can answer you on the ML.
The wider the audience the better the answers you might get.

Also it's more work for moderators who have to accept your messages as long 
as you have not subscribed.
I'll personally no longer accept them (other moderators still could).

Thanks

This said, this is also explained in the OFBiz Slack channel title :)

Jacques

Le 20/10/2022 à 18:55, Maximilian Bloomstine (RIT Student) a écrit :
> Hello,
>
>
>
> My name is Max and I am a senior at Rochester Institute of Technology. My
> team and I are currently working on a project that revolves around OFBiz
> and we have a few questions. Would it be possible to join the OFBiz slack?
> It would be extremely helpful and much appreciated.
>
>
>
> Many thanks,
>
> Max

Re: Error while viewing service logs

[Jacques Le Roux]

Yes "tomorrow morning", ie 3H UTC

HTH

Le 28/09/2022 à 19:51, Emad Radwan a écrit :

Many thanks Jacques. Excuse my ignorance. Will this be available on the
demo version soon?

Regards,
Emad

On Wed, Sep 28, 2022 at 7:07 PM Jacques Le Roux <
jacques.le.r...@les7arts.com> wrote:


Emad,

As you know the R18.12 branch is no longer supported.
But you should find the fix of that bug at the bottom of
https://issues.apache.org/jira/browse/OFBIZ-9638

Please check that it's OK with you

TIA

Jacques

Le 28/09/2022 à 17:39, Emad Radwan a écrit :

Many thanks, Jacques.

On Wed, Sep 28, 2022 at 5:36 PM Jacques Le Roux <
jacques.le.r...@les7arts.com> wrote:


Hi Emad,

Thanks for the report, I'm on it after it seems to have broken the

stable

demo (restarted one hour ago).
I mean I'll have already ideas, hopefully will be soon resolved, not

sure

today though... ;)

Jacques

Le 28/09/2022 à 17:28, Emad Radwan a écrit :

Hello Community,

Since this issue is still there and it seems from similar and previous
related posts that it's not reproducible with everybody, so I'll

appreciate

it if someone can create and ship an order on a demo instance and send

me a

list of those services called on the operation especially those related

to

Accounting.

Solving the error itself would be best of course.

Regards,
Emad

On Sun, Sep 11, 2022 at 1:54 PM Emad Radwan 

wrote:

Hello Community,

I'm getting this error after executing quickShipEntireOrder in both

local

and online versions.

java.lang.IllegalArgumentException: Error running script at location
[component://webtools/groovyScripts/service/Services.groovy]:
java.lang.NullPointerException

Regards,
Emad

Re: Error while viewing service logs

[Jacques Le Roux]

Emad,

As you know the R18.12 branch is no longer supported.
But you should find the fix of that bug at the bottom of
https://issues.apache.org/jira/browse/OFBIZ-9638

Please check that it's OK with you

TIA

Jacques

Le 28/09/2022 à 17:39, Emad Radwan a écrit :

Many thanks, Jacques.

On Wed, Sep 28, 2022 at 5:36 PM Jacques Le Roux <
jacques.le.r...@les7arts.com> wrote:


Hi Emad,

Thanks for the report, I'm on it after it seems to have broken the stable
demo (restarted one hour ago).
I mean I'll have already ideas, hopefully will be soon resolved, not sure
today though... ;)

Jacques

Le 28/09/2022 à 17:28, Emad Radwan a écrit :

Hello Community,

Since this issue is still there and it seems from similar and previous
related posts that it's not reproducible with everybody, so I'll

appreciate

it if someone can create and ship an order on a demo instance and send

me a

list of those services called on the operation especially those related

to

Accounting.

Solving the error itself would be best of course.

Regards,
Emad

On Sun, Sep 11, 2022 at 1:54 PM Emad Radwan 

wrote:

Hello Community,

I'm getting this error after executing quickShipEntireOrder in both

local

and online versions.

java.lang.IllegalArgumentException: Error running script at location
[component://webtools/groovyScripts/service/Services.groovy]:
java.lang.NullPointerException

Regards,
Emad

Re: Error while viewing service logs

[Jacques Le Roux]

Hi Emad,

Thanks for the report, I'm on it after it seems to have broken the stable demo 
(restarted one hour ago).
I mean I'll have already ideas, hopefully will be soon resolved, not sure today 
though... ;)

Jacques

Le 28/09/2022 à 17:28, Emad Radwan a écrit :

Hello Community,

Since this issue is still there and it seems from similar and previous
related posts that it's not reproducible with everybody, so I'll appreciate
it if someone can create and ship an order on a demo instance and send me a
list of those services called on the operation especially those related to
Accounting.

Solving the error itself would be best of course.

Regards,
Emad

On Sun, Sep 11, 2022 at 1:54 PM Emad Radwan  wrote:


Hello Community,

I'm getting this error after executing quickShipEntireOrder in both local
and online versions.

java.lang.IllegalArgumentException: Error running script at location
[component://webtools/groovyScripts/service/Services.groovy]:
java.lang.NullPointerException

Regards,
Emad

Demos just restarted

[Jacques Le Roux]

Hi,

A weird issue(s?) happened on stable demo. I restarted all demos...

Thanks for your patience

Jacques

Re: [jira] [Updated] (OFBIZ-11244) Remove the user login security question

[Jacques Le Roux]

Hi,

FYI: Following below Infra advice on Slack I had to change the 
https://www.schneier.com/essays/... URL:

Humbedooh17:53 <https://the-asf.slack.com/archives/CBX4TSBQ8/p1663170822890599>
<< @Jacques Le Roux  you triggered the aardvark spam filter with the URL in your ticket. I will suggest using s.apache.org to shorten it for now, and 
avoid triggering the spam detection.

we get hit by a lot of spammers trying to sell essay writing and what not, so it's a 
thing that triggers the spam filter>>

Else you get very troubling messages like
<know what to look for.>>

<>

HTH

Jacques

Jacques Le Roux updated OFBIZ-11244:

Description:
After our discussion in dev ML athttps://markmail.org/message/2dhc4al4adwgvl7z  
we will remove this feature. This [~paulfoxworthy]'s remark is notably 
important:

bq. Security is only as good as its weakest link (https://s.apache.org/xp8da) , 
and security questions can be a real weakness. Any organisation using OFBiz 
that really hates passwords could look at security keys from Yubico or the like.


  was:
After our discussion in dev ML athttps://markmail.org/message/2dhc4al4adwgvl7z  
we will remove this feature. This [~paulfoxworthy]'s remark is notably 
important:

bq. Security is only as good as its weakest link 
(https://www.schneier.com/essays/archives/2005/02/the_curse_of_the_sec.html) , 
and security questions can be a real weakness. Any organisation using OFBiz 
that really hates passwords could look at security keys from Yubico or the like.




Remove the user login security question
---

 Key: OFBIZ-11244
 URL:https://issues.apache.org/jira/browse/OFBIZ-11244
 Project: OFBiz
  Issue Type: Improvement
  Components: ecommerce, framework, party
Affects Versions: Trunk
Reporter: Jacques Le Roux
Assignee: Michael Brohl
Priority: Major
 Attachments: OFBIZ-11244-framework-correction.patch, 
OFBIZ-11244-framework.patch, OFBIZ-11244-plugins.patch


After our discussion in dev ML athttps://markmail.org/message/2dhc4al4adwgvl7z  
we will remove this feature. This [~paulfoxworthy]'s remark is notably 
important:
bq. Security is only as good as its weakest link (https://s.apache.org/xp8da) , 
and security questions can be a real weakness. Any organisation using OFBiz 
that really hates passwords could look at security keys from Yubico or the like.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Apache OFBiz - Unauth Path Traversal with file corruption (CVE-2022-25371)

[Jacques Le Roux]

Severity:
High

Vendor:
The Apache Software Foundation

Versions Affected:
OFBiz versions prior to 18.12.06

Description:
The Birt viewer version 4.5.0 has a security issue that allows this exploit.
We waited long for https://github.com/eclipse/birt/issues/625
to resolve but eventually decided to release OFBiz 18.12.06 without
the Birt component

Mitigation:
Upgrade to at least 18.12.06

Credit:
Positive Technologies

References:
http://ofbiz.apache.org/download.html#vulnerabilities

Re: Applying patch for ofbiz 18.12.06

[Jacques Le Roux]

Hi Avijit,

There is no other reporting tool integrated in OFBiz.
If your backend is not open to Internet you could still use Birt since then the 
security issue would no be a problem for you.

About Jasper Reports or alike tools  please help yourself, eg:
https://ofbiz.markmail.org/search/?q=Jasper+reports

HTH

Jacques

Le 05/09/2022 à 03:24, Avijit Bose a écrit :

Hi Jacques,

Ofbiz development team has decided to disable BIRT component from 18.12.06
version onwards for security issuesfine.

Pls let us know which other reporting tool is integrated with Ofbiz
18.12.06 version instead of BIRT?

In case, if one wishes to use any other reporting tool like Jasper reports
or any other reporting tool, then how do one integrate the new reporting
tool in ofbiz?

It is not clearly mentioned in the release notes.

regards
Avijit

On Sun, Sep 4, 2022 at 11:45 AM Jacques Le Roux <
jacques.le.r...@les7arts.com> wrote:


Hi Avijit,

If you need this component then you can re-enable it by changing the
"enabled" attribute of the "ofbiz-component" element in its
ofbiz-component.xml file

Jacques

Le 04/09/2022 à 04:08, Avijit Bose a écrit :

Hi Jacques,

"but eventually decided to release OFBiz 18.12.06 with the Birt component
disabled" what does it mean?

Does it mean that we cannot use BIRT in Ofbiz 18.12.06 onwards for

reports?

If yes, then which other reporting api is added in ofbiz 18.12.06?

Does it mean  those java files which we all are using for BIRT for
reporting will no longer work?

Will we all have to design and develop all the reports new and re-code

its

corresponding java classes with the help of new API's?

Pls clarify properly. Statements are not complete and clear enough to
understand clearly and that is why we have to ask repeatedly.

regards
Avijit


On Sat, Sep 3, 2022 at 11:25 PM Jacques Le Roux <
jacques.le.r...@les7arts.com> wrote:


Hi Nicolas, Avijit,

Note that today I have modified OFBIZ-12646 there are 3 already done for
weeks commits there with one for 18.12.06. Did you include them?

Le 03/09/2022 à 19:25, Nicolas Malin a écrit :

Hello,

You can extract the needed patch with git between official tag.

If you want I already do that and available from the nereide's cloud

[1]

but it's unofficial and own our risk

Cheers,
Nicolas

[1] https://cloud.nereide.fr/index.php/s/8PsEJiE2LQnqGRM

On 03/09/2022 04:08, Avijit Bose wrote:

Hi Jac,

Your message is not clear. Request...pls clarify it clearly how to

apply

patch for individual cases or for all items together.

regards
Avijit

On Fri, Sep 2, 2022 at 5:21 PM Jacques Le Roux<

jacques.le.r...@les7arts.com>

wrote:


Hi,

You need at least the Sub-task (related to security) and Bug lists

here:

https://ofbiz.apache.org/release-notes-18.12.06.html

For the rest it's up to you...

HTH

Jacques

Le 02/09/2022 à 12:54, Avijit Bose a écrit :

Hi,

Presently I am using 18.12.05. All applications are set. I wish not

to

install 18.12.06 afresh and new. I am thinking of applying patch to

upgrade

from 18.12.05 to 18.12.06.

Please let us know how to apply patches correctly with patch files.

regards
Avijit

Re: Applying patch for ofbiz 18.12.06

[Jacques Le Roux]

Hi Avijit,

If you need this component then you can re-enable it by changing the "enabled" attribute 
of the "ofbiz-component" element in its ofbiz-component.xml file

Jacques

Le 04/09/2022 à 04:08, Avijit Bose a écrit :

Hi Jacques,

"but eventually decided to release OFBiz 18.12.06 with the Birt component
disabled" what does it mean?

Does it mean that we cannot use BIRT in Ofbiz 18.12.06 onwards for reports?

If yes, then which other reporting api is added in ofbiz 18.12.06?

Does it mean  those java files which we all are using for BIRT for
reporting will no longer work?

Will we all have to design and develop all the reports new and re-code its
corresponding java classes with the help of new API's?

Pls clarify properly. Statements are not complete and clear enough to
understand clearly and that is why we have to ask repeatedly.

regards
Avijit


On Sat, Sep 3, 2022 at 11:25 PM Jacques Le Roux <
jacques.le.r...@les7arts.com> wrote:


Hi Nicolas, Avijit,

Note that today I have modified OFBIZ-12646 there are 3 already done for
weeks commits there with one for 18.12.06. Did you include them?

Le 03/09/2022 à 19:25, Nicolas Malin a écrit :

Hello,

You can extract the needed patch with git between official tag.

If you want I already do that and available from the nereide's cloud [1]

but it's unofficial and own our risk

Cheers,
Nicolas

[1] https://cloud.nereide.fr/index.php/s/8PsEJiE2LQnqGRM

On 03/09/2022 04:08, Avijit Bose wrote:

Hi Jac,

Your message is not clear. Request...pls clarify it clearly how to apply
patch for individual cases or for all items together.

regards
Avijit

On Fri, Sep 2, 2022 at 5:21 PM Jacques Le Roux<

jacques.le.r...@les7arts.com>

wrote:


Hi,

You need at least the Sub-task (related to security) and Bug lists

here:

https://ofbiz.apache.org/release-notes-18.12.06.html

For the rest it's up to you...

HTH

Jacques

Le 02/09/2022 à 12:54, Avijit Bose a écrit :

Hi,

Presently I am using 18.12.05. All applications are set. I wish not to
install 18.12.06 afresh and new. I am thinking of applying patch to

upgrade

from 18.12.05 to 18.12.06.

Please let us know how to apply patches correctly with patch files.

regards
Avijit

Re: Applying patch for ofbiz 18.12.06

[Jacques Le Roux]

Hi Nicolas, Avijit,

Note that today I have modified OFBIZ-12646 there are 3 already done for weeks 
commits there with one for 18.12.06. Did you include them?

Le 03/09/2022 à 19:25, Nicolas Malin a écrit :

Hello,

You can extract the needed patch with git between official tag.

If you want I already do that and available from the nereide's cloud [1] but 
it's unofficial and own our risk

Cheers,
Nicolas

[1] https://cloud.nereide.fr/index.php/s/8PsEJiE2LQnqGRM

On 03/09/2022 04:08, Avijit Bose wrote:

Hi Jac,

Your message is not clear. Request...pls clarify it clearly how to apply
patch for individual cases or for all items together.

regards
Avijit

On Fri, Sep 2, 2022 at 5:21 PM Jacques Le Roux
wrote:


Hi,

You need at least the Sub-task (related to security) and Bug lists here:
https://ofbiz.apache.org/release-notes-18.12.06.html

For the rest it's up to you...

HTH

Jacques

Le 02/09/2022 à 12:54, Avijit Bose a écrit :

Hi,

Presently I am using 18.12.05. All applications are set. I wish not to
install 18.12.06 afresh and new. I am thinking of applying patch to

upgrade

from 18.12.05 to 18.12.06.

Please let us know how to apply patches correctly with patch files.

regards
Avijit

Re: Apache OFBiz - Unauth Path Traversal with file corruption (CVE-2022-25371)

[Jacques Le Roux]

Hi I'm sorry, I forgot to mention here the same than for (CVE-2022-25370) for 
the mitigation.

Obviously there is no patch to apply since we waited [too] long for
https://github.com/eclipse/birt/issues/625
to resolve but eventually decided to release OFBiz 18.12.06 with
the Birt component disabled.

My apologies

Jacques

Le 02/09/2022 à 08:34, Jacques Le Roux a écrit :

Severity:
High

Vendor:
The Apache Software Foundation

Versions Affected:
OFBiz versions prior to 18.12.06

Description:
The Birt viewer version 4.5.0 has a security issue that allows this exploit.
We waited long for https://github.com/eclipse/birt/issues/625
to resolve but eventually decided to release OFBiz 18.12.06 without
the Birt component

Mitigation:
Upgrade to at least 18.12.06
or apply patches at https://issues.apache.org/jira/browse/OFBIZ-...

Credit:
npodoty...@ptsecurity.com

References:
http://ofbiz.apache.org/download.html#vulnerabilities

Re: Applying patch for ofbiz 18.12.06

[Jacques Le Roux]

Hi Avijit,

When applying patches in theory you should apply them one by one in 
chronological order.

HTH

Jacques

Le 03/09/2022 à 04:08, Avijit Bose a écrit :

Hi Jac,

Your message is not clear. Request...pls clarify it clearly how to apply
patch for individual cases or for all items together.

regards
Avijit

On Fri, Sep 2, 2022 at 5:21 PM Jacques Le Roux 
wrote:


Hi,

You need at least the Sub-task (related to security) and Bug lists here:
https://ofbiz.apache.org/release-notes-18.12.06.html

For the rest it's up to you...

HTH

Jacques

Le 02/09/2022 à 12:54, Avijit Bose a écrit :

Hi,

Presently I am using 18.12.05. All applications are set. I wish not to
install 18.12.06 afresh and new. I am thinking of applying patch to

upgrade

from 18.12.05 to 18.12.06.

Please let us know how to apply patches correctly with patch files.

regards
Avijit