Re: REST API for OM

2017-07-25 Thread Jacob Ouanounou 
I have followed the first example, and I get this error : 
(services/user/login)


No 'Access-Control-Allow-Origin' header is present on the requested 
resource. Origin 'null' is therefore not allowed access.




Le 25/07/2017 à 12:24, Maxim Solodovnik a écrit :

Yes, API was changed
please check the example
I believe it is cleaner now :)

On Tue, Jul 25, 2017 at 5:22 PM, Jacob Ouanounou > wrote:


In a previous version, I started by using this link to do a
session request :

http://:5080/openmeetings/services/UserService/getSession

to initiate the connection process

Now I get this answer :

Re: REST API for OM

2017-07-25 Thread Jacob Ouanounou 
Can you please send me your code, si that I could see a code that works 
and get inspired ...



Le 25/07/2017 à 13:33, Maxim Solodovnik a écrit :

just have tested on demo server, works as expected
how are you using the service?

On Tue, Jul 25, 2017 at 6:28 PM, Jacob Ouanounou > wrote:


I have followed the first example, and I get this error :
(services/user/login)

No 'Access-Control-Allow-Origin' header is present on the
requested resource. Origin 'null' is therefore not allowed access.



Le 25/07/2017 à 12:24, Maxim Solodovnik a écrit :

Yes, API was changed
please check the example
I believe it is cleaner now :)

On Tue, Jul 25, 2017 at 5:22 PM, Jacob Ouanounou > wrote:

In a previous version, I started by using this link to do a
session request :

http://:5080/openmeetings/services/UserService/getSession

to initiate the connection process

Now I get this answer :

Re: REST API for OM

2017-07-25 Thread Maxim Solodovnik 
is there anything suspicious in openmeetings.log file?

On Tue, Jul 25, 2017 at 6:54 PM, Jacob Ouanounou  wrote:

> When I enter this directly on the browser, using the correct user and pwd,
> I get this
>
> {"serviceResult":{"code":-1,"message":"Login failed","type":"ERROR"}}
>
>
> Le 25/07/2017 à 13:47, Maxim Solodovnik a écrit :
>
> to login and get SID you can just type in your browser:
> http://35.157.227.184:5080/openmeetings/services/user/login?user=XXX;
> pass=XXX
>
> Here is the link to PHP API (seems to work, just have tested with Moodle)
> https://github.com/openmeetings/openmeetings-api-plugin
>
> Here is the link to Java Unit tests we are using in nightly builds
> https://github.com/apache/openmeetings/tree/3.3.x/
> openmeetings-web/src/test/java/org/apache/openmeetings/test/webservice
>
> How are you planning to use the API?
>
> On Tue, Jul 25, 2017 at 6:40 PM, Jacob Ouanounou  wrote:
>
>> Can you please send me your code, si that I could see a code that works
>> and get inspired ...
>>
>> Le 25/07/2017 à 13:33, Maxim Solodovnik a écrit :
>>
>> just have tested on demo server, works as expected
>> how are you using the service?
>>
>> On Tue, Jul 25, 2017 at 6:28 PM, Jacob Ouanounou  wrote:
>>
>>> I have followed the first example, and I get this error :
>>> (services/user/login)
>>>
>>> No 'Access-Control-Allow-Origin' header is present on the requested
>>> resource. Origin 'null' is therefore not allowed access.
>>>
>>>
>>>
>>> Le 25/07/2017 à 12:24, Maxim Solodovnik a écrit :
>>>
>>> Yes, API was changed
>>> please check the example
>>> I believe it is cleaner now :)
>>>
>>> On Tue, Jul 25, 2017 at 5:22 PM, Jacob Ouanounou  wrote:
>>>
 In a previous version, I started by using this link to do a session
 request :

 http://:5080/openmeetings/services/UserService/getSession

 to initiate the connection process

 Now I get this answer :


 http://schemas.xmlsoap.org/soap/envelope/;>
 
 
 soap:Server
 
 No binding operation info while invoking unknown method with params
 unknown.
 
 
 
 



 Le 25/07/2017 à 11:59, Maxim Solodovnik a écrit :

 It is definitely possible :)
 Here is sample: http://openmeetings.apache.org/RestAPISample.html
 Here is the link to the API javadoc: http://openmeetings.a
 pache.org/openmeetings-webservice/apidocs/index.html

 On Tue, Jul 25, 2017 at 4:57 PM, Jacob Ouanounou 
 wrote:

> Hi,
>
> It seems that it is not possible anymore to connect to OM server using
> REST. Is it ?
>
> Thank you
>
> Le 24/07/2017 à 18:00, Maxim Solodovnik a écrit :
>
> Thanks :)
> Will try to create custom CSS, might take some time :(
> Will report back here
> please ping me in case I'll be too silent
>
> On Mon, Jul 24, 2017 at 10:58 PM, Jacob Ouanounou 
> wrote:
>
>> Hi Maxim,
>>
>> I am using OM 5.3.3.0
>>
>> Resolution 1280 x 800
>>
>>
>>
>>
>> Le 24/07/2017 à 14:07, Maxim Solodovnik a écrit :
>>
>> Hello Jacob,
>>
>> sure it is possible :)
>> what screen resolution do you have? what version of OM are you using?
>>
>>
>> On Mon, Jul 24, 2017 at 7:03 PM, Jacob Ouanounou 
>> wrote:
>>
>>> Hi
>>>
>>> In the meeting rooms, there is on the left side of the screen a
>>> large pane, displaying the list of users and the files. In my screen, it
>>> appears very large (I have a Mac). Is it possible either : to hide /show
>>> it, or iconize it, or to define smaller fonts ?
>>>
>>> Thank you
>>>
>>>
>>
>>
>> --
>> WBR
>> Maxim aka solomax
>>
>>
>>
>
>
> --
> WBR
> Maxim aka solomax
>
>
>


 --
 WBR
 Maxim aka solomax



>>>
>>>
>>> --
>>> WBR
>>> Maxim aka solomax
>>>
>>>
>>>
>>
>>
>> --
>> WBR
>> Maxim aka solomax
>>
>>
>>
>
>
> --
> WBR
> Maxim aka solomax
>
>
>


-- 
WBR
Maxim aka solomax

Re: REST API for OM

2017-07-25 Thread Maxim Solodovnik 
Yes, API was changed
please check the example
I believe it is cleaner now :)

On Tue, Jul 25, 2017 at 5:22 PM, Jacob Ouanounou  wrote:

> In a previous version, I started by using this link to do a session
> request :
>
> http://:5080/openmeetings/services/UserService/getSession
>
> to initiate the connection process
>
> Now I get this answer :
>
>
> http://schemas.xmlsoap.org/soap/envelope/;>
> 
> 
> soap:Server
> 
> No binding operation info while invoking unknown method with params
> unknown.
> 
> 
> 
> 
>
>
>
> Le 25/07/2017 à 11:59, Maxim Solodovnik a écrit :
>
> It is definitely possible :)
> Here is sample: http://openmeetings.apache.org/RestAPISample.html
> Here is the link to the API javadoc: http://openmeetings.
> apache.org/openmeetings-webservice/apidocs/index.html
>
> On Tue, Jul 25, 2017 at 4:57 PM, Jacob Ouanounou  wrote:
>
>> Hi,
>>
>> It seems that it is not possible anymore to connect to OM server using
>> REST. Is it ?
>>
>> Thank you
>>
>> Le 24/07/2017 à 18:00, Maxim Solodovnik a écrit :
>>
>> Thanks :)
>> Will try to create custom CSS, might take some time :(
>> Will report back here
>> please ping me in case I'll be too silent
>>
>> On Mon, Jul 24, 2017 at 10:58 PM, Jacob Ouanounou  wrote:
>>
>>> Hi Maxim,
>>>
>>> I am using OM 5.3.3.0
>>>
>>> Resolution 1280 x 800
>>>
>>>
>>>
>>>
>>> Le 24/07/2017 à 14:07, Maxim Solodovnik a écrit :
>>>
>>> Hello Jacob,
>>>
>>> sure it is possible :)
>>> what screen resolution do you have? what version of OM are you using?
>>>
>>>
>>> On Mon, Jul 24, 2017 at 7:03 PM, Jacob Ouanounou  wrote:
>>>
 Hi

 In the meeting rooms, there is on the left side of the screen a large
 pane, displaying the list of users and the files. In my screen, it appears
 very large (I have a Mac). Is it possible either : to hide /show it, or
 iconize it, or to define smaller fonts ?

 Thank you


>>>
>>>
>>> --
>>> WBR
>>> Maxim aka solomax
>>>
>>>
>>>
>>
>>
>> --
>> WBR
>> Maxim aka solomax
>>
>>
>>
>
>
> --
> WBR
> Maxim aka solomax
>
>
>


-- 
WBR
Maxim aka solomax

Re: REST API for OM

2017-07-25 Thread Jacob Ouanounou 

In a script, java inserted these lines

$.ajax({
  method: "GET",
  url: "http://35.157.227.184:5080/openmeetings/services/user/login;,
  data: {user: 'XXX',
  pass: 'XXX'},
  dataType: "json"
});


Le 25/07/2017 à 13:33, Maxim Solodovnik a écrit :

just have tested on demo server, works as expected
how are you using the service?

On Tue, Jul 25, 2017 at 6:28 PM, Jacob Ouanounou > wrote:


I have followed the first example, and I get this error :
(services/user/login)

No 'Access-Control-Allow-Origin' header is present on the
requested resource. Origin 'null' is therefore not allowed access.



Le 25/07/2017 à 12:24, Maxim Solodovnik a écrit :

Yes, API was changed
please check the example
I believe it is cleaner now :)

On Tue, Jul 25, 2017 at 5:22 PM, Jacob Ouanounou > wrote:

In a previous version, I started by using this link to do a
session request :

http://:5080/openmeetings/services/UserService/getSession

to initiate the connection process

Now I get this answer :

Re: REST API for OM

2017-07-25 Thread Maxim Solodovnik 
just have tested on demo server, works as expected
how are you using the service?

On Tue, Jul 25, 2017 at 6:28 PM, Jacob Ouanounou  wrote:

> I have followed the first example, and I get this error :
> (services/user/login)
>
> No 'Access-Control-Allow-Origin' header is present on the requested
> resource. Origin 'null' is therefore not allowed access.
>
>
>
> Le 25/07/2017 à 12:24, Maxim Solodovnik a écrit :
>
> Yes, API was changed
> please check the example
> I believe it is cleaner now :)
>
> On Tue, Jul 25, 2017 at 5:22 PM, Jacob Ouanounou  wrote:
>
>> In a previous version, I started by using this link to do a session
>> request :
>>
>> http://:5080/openmeetings/services/UserService/getSession
>>
>> to initiate the connection process
>>
>> Now I get this answer :
>>
>>
>> http://schemas.xmlsoap.org/soap/envelope/;>
>> 
>> 
>> soap:Server
>> 
>> No binding operation info while invoking unknown method with params
>> unknown.
>> 
>> 
>> 
>> 
>>
>>
>>
>> Le 25/07/2017 à 11:59, Maxim Solodovnik a écrit :
>>
>> It is definitely possible :)
>> Here is sample: http://openmeetings.apache.org/RestAPISample.html
>> Here is the link to the API javadoc: http://openmeetings.a
>> pache.org/openmeetings-webservice/apidocs/index.html
>>
>> On Tue, Jul 25, 2017 at 4:57 PM, Jacob Ouanounou  wrote:
>>
>>> Hi,
>>>
>>> It seems that it is not possible anymore to connect to OM server using
>>> REST. Is it ?
>>>
>>> Thank you
>>>
>>> Le 24/07/2017 à 18:00, Maxim Solodovnik a écrit :
>>>
>>> Thanks :)
>>> Will try to create custom CSS, might take some time :(
>>> Will report back here
>>> please ping me in case I'll be too silent
>>>
>>> On Mon, Jul 24, 2017 at 10:58 PM, Jacob Ouanounou 
>>> wrote:
>>>
 Hi Maxim,

 I am using OM 5.3.3.0

 Resolution 1280 x 800




 Le 24/07/2017 à 14:07, Maxim Solodovnik a écrit :

 Hello Jacob,

 sure it is possible :)
 what screen resolution do you have? what version of OM are you using?


 On Mon, Jul 24, 2017 at 7:03 PM, Jacob Ouanounou 
 wrote:

> Hi
>
> In the meeting rooms, there is on the left side of the screen a large
> pane, displaying the list of users and the files. In my screen, it appears
> very large (I have a Mac). Is it possible either : to hide /show it, or
> iconize it, or to define smaller fonts ?
>
> Thank you
>
>


 --
 WBR
 Maxim aka solomax



>>>
>>>
>>> --
>>> WBR
>>> Maxim aka solomax
>>>
>>>
>>>
>>
>>
>> --
>> WBR
>> Maxim aka solomax
>>
>>
>>
>
>
> --
> WBR
> Maxim aka solomax
>
>
>


-- 
WBR
Maxim aka solomax

REST API for OM

2017-07-25 Thread Jacob Ouanounou 

Hi,

It seems that it is not possible anymore to connect to OM server using 
REST. Is it ?


Thank you


Le 24/07/2017 à 18:00, Maxim Solodovnik a écrit :

Thanks :)
Will try to create custom CSS, might take some time :(
Will report back here
please ping me in case I'll be too silent

On Mon, Jul 24, 2017 at 10:58 PM, Jacob Ouanounou > wrote:


Hi Maxim,

I am using OM 5.3.3.0

Resolution 1280 x 800




Le 24/07/2017 à 14:07, Maxim Solodovnik a écrit :

Hello Jacob,

sure it is possible :)
what screen resolution do you have? what version of OM are you using?


On Mon, Jul 24, 2017 at 7:03 PM, Jacob Ouanounou > wrote:

Hi

In the meeting rooms, there is on the left side of the screen
a large pane, displaying the list of users and the files. In
my screen, it appears very large (I have a Mac). Is it
possible either : to hide /show it, or iconize it, or to
define smaller fonts ?

Thank you





-- 
WBR

Maxim aka solomax





--
WBR
Maxim aka solomax

Re: REST API for OM

2017-07-25 Thread Jacob Ouanounou 
In a previous version, I started by using this link to do a session 
request :


http://:5080/openmeetings/services/UserService/getSession

to initiate the connection process

Now I get this answer :

Re: REST API for OM

2017-07-25 Thread Maxim Solodovnik 
to login and get SID you can just type in your browser:
http://35.157.227.184:5080/openmeetings/services/user/login?user=XXX;
pass=XXX

Here is the link to PHP API (seems to work, just have tested with Moodle)
https://github.com/openmeetings/openmeetings-api-plugin

Here is the link to Java Unit tests we are using in nightly builds
https://github.com/apache/openmeetings/tree/3.3.x/openmeetings-web/src/test/java/org/apache/openmeetings/test/webservice

How are you planning to use the API?

On Tue, Jul 25, 2017 at 6:40 PM, Jacob Ouanounou  wrote:

> Can you please send me your code, si that I could see a code that works
> and get inspired ...
>
> Le 25/07/2017 à 13:33, Maxim Solodovnik a écrit :
>
> just have tested on demo server, works as expected
> how are you using the service?
>
> On Tue, Jul 25, 2017 at 6:28 PM, Jacob Ouanounou  wrote:
>
>> I have followed the first example, and I get this error :
>> (services/user/login)
>>
>> No 'Access-Control-Allow-Origin' header is present on the requested
>> resource. Origin 'null' is therefore not allowed access.
>>
>>
>>
>> Le 25/07/2017 à 12:24, Maxim Solodovnik a écrit :
>>
>> Yes, API was changed
>> please check the example
>> I believe it is cleaner now :)
>>
>> On Tue, Jul 25, 2017 at 5:22 PM, Jacob Ouanounou  wrote:
>>
>>> In a previous version, I started by using this link to do a session
>>> request :
>>>
>>> http://:5080/openmeetings/services/UserService/getSession
>>>
>>> to initiate the connection process
>>>
>>> Now I get this answer :
>>>
>>>
>>> http://schemas.xmlsoap.org/soap/envelope/;>
>>> 
>>> 
>>> soap:Server
>>> 
>>> No binding operation info while invoking unknown method with params
>>> unknown.
>>> 
>>> 
>>> 
>>> 
>>>
>>>
>>>
>>> Le 25/07/2017 à 11:59, Maxim Solodovnik a écrit :
>>>
>>> It is definitely possible :)
>>> Here is sample: http://openmeetings.apache.org/RestAPISample.html
>>> Here is the link to the API javadoc: http://openmeetings.a
>>> pache.org/openmeetings-webservice/apidocs/index.html
>>>
>>> On Tue, Jul 25, 2017 at 4:57 PM, Jacob Ouanounou  wrote:
>>>
 Hi,

 It seems that it is not possible anymore to connect to OM server using
 REST. Is it ?

 Thank you

 Le 24/07/2017 à 18:00, Maxim Solodovnik a écrit :

 Thanks :)
 Will try to create custom CSS, might take some time :(
 Will report back here
 please ping me in case I'll be too silent

 On Mon, Jul 24, 2017 at 10:58 PM, Jacob Ouanounou 
 wrote:

> Hi Maxim,
>
> I am using OM 5.3.3.0
>
> Resolution 1280 x 800
>
>
>
>
> Le 24/07/2017 à 14:07, Maxim Solodovnik a écrit :
>
> Hello Jacob,
>
> sure it is possible :)
> what screen resolution do you have? what version of OM are you using?
>
>
> On Mon, Jul 24, 2017 at 7:03 PM, Jacob Ouanounou 
> wrote:
>
>> Hi
>>
>> In the meeting rooms, there is on the left side of the screen a large
>> pane, displaying the list of users and the files. In my screen, it 
>> appears
>> very large (I have a Mac). Is it possible either : to hide /show it, or
>> iconize it, or to define smaller fonts ?
>>
>> Thank you
>>
>>
>
>
> --
> WBR
> Maxim aka solomax
>
>
>


 --
 WBR
 Maxim aka solomax



>>>
>>>
>>> --
>>> WBR
>>> Maxim aka solomax
>>>
>>>
>>>
>>
>>
>> --
>> WBR
>> Maxim aka solomax
>>
>>
>>
>
>
> --
> WBR
> Maxim aka solomax
>
>
>


-- 
WBR
Maxim aka solomax

Re: REST API for OM

2017-07-25 Thread Maxim Solodovnik 
It is definitely possible :)
Here is sample: http://openmeetings.apache.org/RestAPISample.html
Here is the link to the API javadoc:
http://openmeetings.apache.org/openmeetings-webservice/apidocs/index.html

On Tue, Jul 25, 2017 at 4:57 PM, Jacob Ouanounou  wrote:

> Hi,
>
> It seems that it is not possible anymore to connect to OM server using
> REST. Is it ?
>
> Thank you
>
> Le 24/07/2017 à 18:00, Maxim Solodovnik a écrit :
>
> Thanks :)
> Will try to create custom CSS, might take some time :(
> Will report back here
> please ping me in case I'll be too silent
>
> On Mon, Jul 24, 2017 at 10:58 PM, Jacob Ouanounou  wrote:
>
>> Hi Maxim,
>>
>> I am using OM 5.3.3.0
>>
>> Resolution 1280 x 800
>>
>>
>>
>>
>> Le 24/07/2017 à 14:07, Maxim Solodovnik a écrit :
>>
>> Hello Jacob,
>>
>> sure it is possible :)
>> what screen resolution do you have? what version of OM are you using?
>>
>>
>> On Mon, Jul 24, 2017 at 7:03 PM, Jacob Ouanounou  wrote:
>>
>>> Hi
>>>
>>> In the meeting rooms, there is on the left side of the screen a large
>>> pane, displaying the list of users and the files. In my screen, it appears
>>> very large (I have a Mac). Is it possible either : to hide /show it, or
>>> iconize it, or to define smaller fonts ?
>>>
>>> Thank you
>>>
>>>
>>
>>
>> --
>> WBR
>> Maxim aka solomax
>>
>>
>>
>
>
> --
> WBR
> Maxim aka solomax
>
>
>


-- 
WBR
Maxim aka solomax

Re: REST API for OM

2017-07-25 Thread Jacob Ouanounou 
When I enter this directly on the browser, using the correct user and 
pwd, I get this


{"serviceResult":{"code":-1,"message":"Login failed","type":"ERROR"}}


Le 25/07/2017 à 13:47, Maxim Solodovnik a écrit :

to login and get SID you can just type in your browser:
http://35.157.227.184:5080/openmeetings/services/user/login?user=XXX=XXX

Here is the link to PHP API (seems to work, just have tested with Moodle)
https://github.com/openmeetings/openmeetings-api-plugin

Here is the link to Java Unit tests we are using in nightly builds
https://github.com/apache/openmeetings/tree/3.3.x/openmeetings-web/src/test/java/org/apache/openmeetings/test/webservice

How are you planning to use the API?

On Tue, Jul 25, 2017 at 6:40 PM, Jacob Ouanounou > wrote:


Can you please send me your code, si that I could see a code that
works and get inspired ...


Le 25/07/2017 à 13:33, Maxim Solodovnik a écrit :

just have tested on demo server, works as expected
how are you using the service?

On Tue, Jul 25, 2017 at 6:28 PM, Jacob Ouanounou > wrote:

I have followed the first example, and I get this error :
(services/user/login)

No 'Access-Control-Allow-Origin' header is present on the
requested resource. Origin 'null' is therefore not allowed
access.



Le 25/07/2017 à 12:24, Maxim Solodovnik a écrit :

Yes, API was changed
please check the example
I believe it is cleaner now :)

On Tue, Jul 25, 2017 at 5:22 PM, Jacob Ouanounou
> wrote:

In a previous version, I started by using this link to
do a session request :

http://:5080/openmeetings/services/UserService/getSession

to initiate the connection process

Now I get this answer :

export red5 and suppress ID

2017-07-25 Thread maxime . guerif 

Hello,

I have, with your help, fully installed openmeetings from sources but I 
am now trying to suppress the IDs which are behind each word in pages 
like for example : rooms[792]. I would like to hide the [792] whenever I 
want, I have tried to modify things in 'configuration' but didn't 
succeed. Is it possible on the web configuration?


Other request, I want to start red5 with "service red5 (re)start", is it 
possible?


Thank you.

Best regards

Maxime

RE: OM 3.3.0: CSRF Solution via Reverse Proxy Server

2017-07-25 Thread Coscend@OM 
Dear Maxim,

As requested, moving this thread to user@ list.  Would you be kind enough to 
give a detailed working configuration (proxy and rewrite rules) to enable 
'CSRF+WebSockets' from your demo server?

We have tried several options in configuration, but CSRF blocks the service.

Thank you.

Sincerely,

Hemant K. Sabat
 
Coscend Communications Solutions
www.Coscend.com 
--
Real-time, Interactive Video Collaboration, Tele-healthcare, Tele-education, 
Telepresence Services, on the fly…
--
CONFIDENTIALITY NOTICE: See 'Confidentiality Notice Regarding E-mail Messages 
from Coscend Communications Solutions' posted at: 
http://www.Coscend.com/Terms_and_Conditions.html 


Sincerely


-Original Message-
From: Maxim Solodovnik [mailto:solomax...@gmail.com] 
Sent: Tuesday, July 25, 2017 12:08 AM
To: dev ; om.insig...@coscend.com
Subject: Re: OM 3.3.0: CSRF Solution via Reverse Proxy Server

Hello Hemant,

CSRF works as expected on demo servers

I believe you need to set up Rewrite rules in addition to proxy rules This 
should do the trick :)

On Tue, Jul 25, 2017 at 11:58 AM, Coscend@OM 
wrote:

> Dear OpenMeetings Developers,
>
>
>
> Congratulations on beefing up Web content security of OpenMeetings in 
> 3.3.0, including XSS, CSRF and requests via security headers!
>
>
>
> Your guidance in the a reverse proxy scenario would be appreciated.
>
>
>
> In a reverse proxy use case, the origin site request is changed by the 
> proxy server.  That is, the IP and port of product's server is 
> replaced with the proxy server's IP and port number.  This will be 
> perceived incorrectly as CSRF attack.  Hence, it will be blocked by
>
>
>
> Application.java @ 151
>
> --
>
> getRequestCycleListeners().add(new 
> CsrfPreventionRequestCycleListener() {
>
> .
>
> }); @ 172
>
>
>
> Would you provide us guidance on how to find a solution?
>
> (1)   Temporary workaournd:  How to disable CSRF feature so as to be able
> to
> access via proxy?  (Removing lines 152-172 will give Java
> illegalArgumentException.)
>
> (2)   Long-term:  Have CSRF and access through proxy server
>
>
>
> Thank you.
>
>
>
> Sincerely,
>
>
>
> Hemant K. Sabat
>
>
>
> Coscend Communications Solutions
>
>   www.Coscend.com
>
> --
>
> Real-time, Interactive Video Collaboration, Tele-healthcare, 
> Tele-education, Telepresence Services, on the fly.
>
> --
>
> CONFIDENTIALITY NOTICE: See 'Confidentiality Notice Regarding E-mail 
> Messages from Coscend Communications Solutions' posted at:
> 
> http://www.Coscend.com/Terms_and_Conditions.html
>
>
>
>
>
>
>
>
>
>
>
>
>
> ---
> This email has been checked for viruses by AVG.
> http://www.avg.com
>



--
WBR
Maxim aka solomax

Re: export red5 and suppress ID

2017-07-25 Thread maxime . guerif 
On 25.07.2017 14:16, Maxim Solodovnik wrote:

> According "I want to start red5 with "service red5 (re)start", is it 
> possible" 
> Please search mailing lists for upstart script (or take it from Alvaro's 
> tutorials :)) ) 
> 
> On Tue, Jul 25, 2017 at 7:14 PM, Maxim Solodovnik  
> wrote:
> 
> you can rebuild using command 
> 
> mvn install -P allModules,quick,mysql,default-db-cred -pl openmeetings-web 
> -pl openmeetings-server
> 
> (remove -Dwicket.mode=DEVELOPMENT) 
> 
> On Tue, Jul 25, 2017 at 7:12 PM,  wrote:
> Hello,
> 
> I have, with your help, fully installed openmeetings from sources but I am 
> now trying to suppress the IDs which are behind each word in pages like for 
> example : rooms[792]. I would like to hide the [792] whenever I want, I have 
> tried to modify things in 'configuration' but didn't succeed. Is it possible 
> on the web configuration?
> 
> Other request, I want to start red5 with "service red5 (re)start", is it 
> possible?
> 
> Thank you.
> 
> Best regards
> 
> Maxime 
> 
> -- 
> 
> WBR
> Maxim aka solomax

  -- 
WBR
Maxim aka solomax 

Ok, I will do it, thank you very much again Maxim.

Best regards.

Maxime

Re: REST API for OM

2017-07-25 Thread Jacob Ouanounou 

In which directory is this file ?


Le 25/07/2017 à 13:57, Maxim Solodovnik a écrit :

is there anything suspicious in openmeetings.log file?

On Tue, Jul 25, 2017 at 6:54 PM, Jacob Ouanounou > wrote:


When I enter this directly on the browser, using the correct user
and pwd, I get this

{"serviceResult":{"code":-1,"message":"Login failed","type":"ERROR"}}


Le 25/07/2017 à 13:47, Maxim Solodovnik a écrit :

to login and get SID you can just type in your browser:

http://35.157.227.184:5080/openmeetings/services/user/login?user=XXX=XXX

Here is the link to PHP API (seems to work, just have tested with
Moodle)
https://github.com/openmeetings/openmeetings-api-plugin


Here is the link to Java Unit tests we are using in nightly builds

https://github.com/apache/openmeetings/tree/3.3.x/openmeetings-web/src/test/java/org/apache/openmeetings/test/webservice



How are you planning to use the API?

On Tue, Jul 25, 2017 at 6:40 PM, Jacob Ouanounou > wrote:

Can you please send me your code, si that I could see a code
that works and get inspired ...


Le 25/07/2017 à 13:33, Maxim Solodovnik a écrit :

just have tested on demo server, works as expected
how are you using the service?

On Tue, Jul 25, 2017 at 6:28 PM, Jacob Ouanounou
> wrote:

I have followed the first example, and I get this error
: (services/user/login)

No 'Access-Control-Allow-Origin' header is present on
the requested resource. Origin 'null' is therefore not
allowed access.



Le 25/07/2017 à 12:24, Maxim Solodovnik a écrit :

Yes, API was changed
please check the example
I believe it is cleaner now :)

On Tue, Jul 25, 2017 at 5:22 PM, Jacob Ouanounou
> wrote:

In a previous version, I started by using this link
to do a session request :


http://:5080/openmeetings/services/UserService/getSession

to initiate the connection process

Now I get this answer :

Re: export red5 and suppress ID

2017-07-25 Thread Maxim Solodovnik 
you can rebuild using command

mvn install -P allModules,quick,mysql,default-db-cred -pl
openmeetings-web -pl openmeetings-server

(remove -Dwicket.mode=DEVELOPMENT)


On Tue, Jul 25, 2017 at 7:12 PM,  wrote:

> Hello,
>
> I have, with your help, fully installed openmeetings from sources but I am
> now trying to suppress the IDs which are behind each word in pages like for
> example : rooms[792]. I would like to hide the [792] whenever I want, I
> have tried to modify things in 'configuration' but didn't succeed. Is it
> possible on the web configuration?
>
> Other request, I want to start red5 with "service red5 (re)start", is it
> possible?
>
> Thank you.
>
> Best regards
>
> Maxime
>



-- 
WBR
Maxim aka solomax

Re: export red5 and suppress ID

2017-07-25 Thread Maxim Solodovnik 
According "I want to start red5 with "service red5 (re)start", is it
possible"
Please search mailing lists for upstart script (or take it from Alvaro's
tutorials :)) )

On Tue, Jul 25, 2017 at 7:14 PM, Maxim Solodovnik 
wrote:

> you can rebuild using command
>
> mvn install -P allModules,quick,mysql,default-db-cred -pl openmeetings-web 
> -pl openmeetings-server
>
> (remove -Dwicket.mode=DEVELOPMENT)
>
>
> On Tue, Jul 25, 2017 at 7:12 PM,  wrote:
>
>> Hello,
>>
>> I have, with your help, fully installed openmeetings from sources but I
>> am now trying to suppress the IDs which are behind each word in pages like
>> for example : rooms[792]. I would like to hide the [792] whenever I want, I
>> have tried to modify things in 'configuration' but didn't succeed. Is it
>> possible on the web configuration?
>>
>> Other request, I want to start red5 with "service red5 (re)start", is it
>> possible?
>>
>> Thank you.
>>
>> Best regards
>>
>> Maxime
>>
>
>
>
> --
> WBR
> Maxim aka solomax
>



-- 
WBR
Maxim aka solomax

Re: New OpenMeetings 3.3.0 release installation tutorials

2017-07-25 Thread Maxim Solodovnik 
Hello All,

I was able to compile using fresh Ubuntu 17.04
(ubuntu-17.04-server-amd64.iso)
Here is the script:
https://github.com/openmeetings/openmeetings-docker/blob/master/scripts/ffmpeg-ubuntu-debian.sh

Here are the changes I made to make it work:
https://github.com/openmeetings/openmeetings-docker/commit/1a8388997948a75b7e398b42205a15bce0219f54#diff-0a5b226f725ef4fe43734ca7d21860f7

Would appreciate if you can double-check it

On Thu, Jul 20, 2017 at 2:59 AM, Chamberland, Martin <
martin.chamberl...@fadq.qc.ca> wrote:

> Hi  Alvaro,
>
> For FFMPEG and Debian 8.x
>
> Here is the step i use to install FFMPEG (beside compilation and save 30
> minutes)
>
> nano /etc/apt/sources.list
> deb http://www.deb-multimedia.org jessie main
> apt update
> apt install ffmpeg
> ffmpeg -version
>
> you have to change where ffmpeg is install at setup step of OpenMeetings:
> /usr/bin/ffmpeg
>
> To test it inside the OpenMeetings application,  i just create a
> presentation, save it and watch it later using the include player.
> All seem to work flawless.
>
>
> -Message d'origine-
> De : Alvaro [mailto:zurca...@gmail.com]
> Envoyé : 15 juillet 2017 03:00
> À : user@openmeetings.apache.org
> Objet : Re: New OpenMeetings 3.3.0 release installation tutorials
>
> Maxim, could you please type the iso file name of the Ubuntu 17.04 that
> you made a fresh install and ffmpeg compilation works fine for you?
>
> Thanks
>
> Alvaro
>
> ..
>
> El vie, 14-07-2017 a las 23:41 +0700, Maxim Solodovnik escribió:
> > OK will try with Debian
> > Next week I will be on vacation with no access to mobile network and
> > internet So will try it ~Jul 24 Will report back here
> >
> > On Fri, Jul 14, 2017 at 11:39 PM, Alvaro  wrote:
> > > Maxim, i've tryied with Debian 9 desktop iso, in the installation i
> > > select Mate desktop, and tryied also with Debian 9 server iso. The
> > > resultat about ffmpeg, is the same error.
> > >
> > > I've tryied on HP-i7 computer, and Asus double core.
> > > The same resultat.
> > >
> > > ..
> > >
> > >
> > > El vie, 14-07-2017 a las 22:55 +0700, Maxim Solodovnik escribió:
> > >> What ISO are you using as base image for Debian 9?
> > >> I'll try to create VM and test
> > >>
> > >> On Fri, Jul 14, 2017 at 10:44 PM, Chamberland, Martin
> > >>  wrote:
> > >> > Hi Alvaro,
> > >> >
> > >> > Any time to release a 3.3.0 on Debian 9 ?
> > >> >
> > >> > We are still struggling hard with SWFTOOLS et Flash Plugins  :-(
> > >> >
> > >> > -Message d'origine-
> > >> > De : Alvaro [mailto:zurca...@gmail.com] Envoyé : 14 juillet 2017
> > >> > 11:43 À : user@openmeetings.apache.org Objet : New OpenMeetings
> > >> > 3.3.0 release installation tutorials
> > >> >
> > >> > Hello,
> > >> >
> > >> > Yesterday, Maxim launched the new OpenMeetings 3.3.0 release. In
> this Version, the security has been specially careful.
> > >> >
> > >> > The new tutorials to install this version, are ready to your
> disposition for download, in:
> > >> >
> > >> > https://cwiki.apache.org/confluence/display/OPENMEETINGS/Tutorial
> > >> > s+for
> > >> > +installing+OpenMeetings+and+Tools
> > >> >
> > >> > These tutorials are:
> > >> >
> > >> >
> > >> > Installation OpenMeetings 3.3.0 on Arch Linux
> > >> >
> > >> > Installation OpenMeetings 3.3.0 on Centos 6.9
> > >> >
> > >> > Installation OpenMeetings 3.3.0 on Centos 7
> > >> >
> > >> > Installation OpenMeetings 3.3.0 on Debian 8
> > >> >
> > >> > Installation OpenMeetings 3.3.0 on El Capitan OS X
> > >> >
> > >> > Installation OpenMeetings 3.3.0 on Fedora 25
> > >> >
> > >> > Installation OpenMeetings 3.3.0 on Gentoo
> > >> >
> > >> > Installation OpenMeetings 3.3.0 on macOS Sierra
> > >> >
> > >> > Installation OpenMeetings 3.3.0 on Mint 18.1
> > >> >
> > >> > Installation OpenMeetings 3.3.0 on openSUSE 13.2 32bit
> > >> >
> > >> > Installation OpenMeetings 3.3.0 on openSUSE 13.2 64bit
> > >> >
> > >> > Installation OpenMeetings 3.3.0 on openSUSE Leap 42.2
> > >> >
> > >> > Installation OpenMeetings 3.3.0 on PCLinuxOS 2017
> > >> >
> > >> > Installation OpenMeetings 3.3.0 on Ubuntu 14.04
> > >> >
> > >> > Installation OpenMeetings 3.3.0 on Ubuntu 16.04 LTS
> > >> >
> > >> > Best regards
> > >> >
> > >> > Alvaro
> > >> >
> > >>
> > >>
> > >>
> > >
> > >
> >
> >
> >
>
>
>


-- 
WBR
Maxim aka solomax

Re: REST API for OM

2017-07-25 Thread Maxim Solodovnik 
You can search it on your server :)
it should be located in "log" folder under the folder you have unpacked
openmeetings

On Tue, Jul 25, 2017 at 7:11 PM, Jacob Ouanounou  wrote:

> In which directory is this file ?
>
> Le 25/07/2017 à 13:57, Maxim Solodovnik a écrit :
>
> is there anything suspicious in openmeetings.log file?
>
> On Tue, Jul 25, 2017 at 6:54 PM, Jacob Ouanounou  wrote:
>
>> When I enter this directly on the browser, using the correct user and
>> pwd, I get this
>>
>> {"serviceResult":{"code":-1,"message":"Login failed","type":"ERROR"}}
>>
>>
>> Le 25/07/2017 à 13:47, Maxim Solodovnik a écrit :
>>
>> to login and get SID you can just type in your browser:
>> http://35.157.227.184:5080/openmeetings/services/user/login?user=XXX;
>> pass=XXX
>>
>> Here is the link to PHP API (seems to work, just have tested with Moodle)
>> https://github.com/openmeetings/openmeetings-api-plugin
>>
>> Here is the link to Java Unit tests we are using in nightly builds
>> https://github.com/apache/openmeetings/tree/3.3.x/openmeetin
>> gs-web/src/test/java/org/apache/openmeetings/test/webservice
>>
>> How are you planning to use the API?
>>
>> On Tue, Jul 25, 2017 at 6:40 PM, Jacob Ouanounou  wrote:
>>
>>> Can you please send me your code, si that I could see a code that works
>>> and get inspired ...
>>>
>>> Le 25/07/2017 à 13:33, Maxim Solodovnik a écrit :
>>>
>>> just have tested on demo server, works as expected
>>> how are you using the service?
>>>
>>> On Tue, Jul 25, 2017 at 6:28 PM, Jacob Ouanounou  wrote:
>>>
 I have followed the first example, and I get this error :
 (services/user/login)

 No 'Access-Control-Allow-Origin' header is present on the requested
 resource. Origin 'null' is therefore not allowed access.



 Le 25/07/2017 à 12:24, Maxim Solodovnik a écrit :

 Yes, API was changed
 please check the example
 I believe it is cleaner now :)

 On Tue, Jul 25, 2017 at 5:22 PM, Jacob Ouanounou 
 wrote:

> In a previous version, I started by using this link to do a session
> request :
>
> http://:5080/openmeetings/services/UserService/getSession
>
> to initiate the connection process
>
> Now I get this answer :
>
>
> http://schemas.xmlsoap.org/soap/envelope/;>
> 
> 
> soap:Server
> 
> No binding operation info while invoking unknown method with params
> unknown.
> 
> 
> 
> 
>
>
>
> Le 25/07/2017 à 11:59, Maxim Solodovnik a écrit :
>
> It is definitely possible :)
> Here is sample: http://openmeetings.apache.org/RestAPISample.html
> Here is the link to the API javadoc: http://openmeetings.a
> pache.org/openmeetings-webservice/apidocs/index.html
>
> On Tue, Jul 25, 2017 at 4:57 PM, Jacob Ouanounou 
> wrote:
>
>> Hi,
>>
>> It seems that it is not possible anymore to connect to OM server
>> using REST. Is it ?
>>
>> Thank you
>>
>> Le 24/07/2017 à 18:00, Maxim Solodovnik a écrit :
>>
>> Thanks :)
>> Will try to create custom CSS, might take some time :(
>> Will report back here
>> please ping me in case I'll be too silent
>>
>> On Mon, Jul 24, 2017 at 10:58 PM, Jacob Ouanounou 
>> wrote:
>>
>>> Hi Maxim,
>>>
>>> I am using OM 5.3.3.0
>>>
>>> Resolution 1280 x 800
>>>
>>>
>>>
>>>
>>> Le 24/07/2017 à 14:07, Maxim Solodovnik a écrit :
>>>
>>> Hello Jacob,
>>>
>>> sure it is possible :)
>>> what screen resolution do you have? what version of OM are you using?
>>>
>>>
>>> On Mon, Jul 24, 2017 at 7:03 PM, Jacob Ouanounou 
>>> wrote:
>>>
 Hi

 In the meeting rooms, there is on the left side of the screen a
 large pane, displaying the list of users and the files. In my screen, 
 it
 appears very large (I have a Mac). Is it possible either : to hide 
 /show
 it, or iconize it, or to define smaller fonts ?

 Thank you


>>>
>>>
>>> --
>>> WBR
>>> Maxim aka solomax
>>>
>>>
>>>
>>
>>
>> --
>> WBR
>> Maxim aka solomax
>>
>>
>>
>
>
> --
> WBR
> Maxim aka solomax
>
>
>


 --
 WBR
 Maxim aka solomax



>>>
>>>
>>> --
>>> WBR
>>> Maxim aka solomax
>>>
>>>
>>>
>>
>>
>> --
>> WBR
>> Maxim aka solomax
>>
>>
>>
>
>
> --
> WBR
> Maxim aka solomax
>
>
>


-- 
WBR
Maxim aka solomax

Re: help configuration smtp server

2017-07-25 Thread Richard Pérez 
Many thanks Maxim 

Persistence worked great (just shows persistence is a great philosophical 
attitude)

BTW, when I failed to install, for different reasons, I noticed that if I tried 
to restart Red5 after closing the cmd 
window, Red5 would get blocked, and the only way to get it fully running again 
was to delete the folder I had OM in, 
and extract all the zipped files into a new folder again, that is, a new Red5. 
Is this the usual situation?  I have no problem
with unzipping OM again, each time it might be required, but I'm just curious 
if I can be avoid this with some easy tweak.

Thanks again.

Richard Pérez
 
 

On Tue, 25/7/17, Maxim Solodovnik  wrote:

 Subject: Re: help configuration smtp server
 To: "Openmeetings user-list" , "Richard Pérez" 

 Date: Tuesday, 25 July, 2017, 12:01
 
 Seems to
 be reproducible :(Will try to fix.Please
 manually edit persistence.xml file and set Username, then
 start OM as a workaround
 would appreciate if you can create
 JIRA issue here: https://issues.apache.org/jira/browse/OPENMEETINGS
 On Tue, Jul 25, 2017 at
 10:44 PM, Maxim Solodovnik 
 wrote:
 I'll try to double-check this ASAPWill
 report back in 30 minutes or so
 On Tue, Jul 25, 2017 at
 10:37 PM, Richard Pérez 
 wrote:
 Many
 thanks Maxim for your congrats.  Yes, with not much work
 available, being able to nail down a week long job is quite
 a feat, something worth dancing around the office/room
 for.
 
 Thanks.
 
 
 
 I'd like to get back to where I left this, if you have
 time to have a look.
 
 
 
 I have tried to install OM 3.3.0 with both User and Password
 textboxes empty in the Data Base form and also using
 
 the word "user" as User.  When I use the word
 "user" and specify the password as
 "secret" I can keep on installing
 
 till the final page where I get a string of error warnings
 giving as Exception "There is no "user", or a
 similar wording".
 
 If I leave those textboxes empty, as soon as I click on
 "move to the next page" I get a red flag across
 the top of the
 
 form (attached image) saying "The "Login"
 field is mandatory", that is, I understand I have to
 specify a "User".  I try to override this
 
 clicking on the "move to the next page" button and
 it is not possible.  If I use the word "user"
 without specifying
 
 a password, I can move through but at the end I get the
 error warnings giving the exception "There is no
 user".
 
 
 
 I am using the Apache Derby (by default) database as it
 worked OK with OM 3.2.1
 
 
 
 Thanks,
 
 
 
 
 
 Richard
 
 
 
 
 
 
 
 -- --
 
 On Fri, 14/7/17, Maxim Solodovnik 
 wrote:
 
 
 
  Subject: Re: help configuration smtp server
 
  To: "Openmeetings user-list" 
 , "Richard Pérez" 
 
  Date: Friday, 14 July, 2017, 12:37
 
 
 
  Congrats :)
 
 
 
  On Fri, Jul 14, 2017 at 11:23 PM,
 
  Richard Pérez
 
  
 
  wrote:
 
  > Sorry, when I click reply it just
 
  picks up the "From" email not the "Cc"
 ones.  Didn't
 
  notice that.
 
  > This morning I got a job I'll have
 
  to work on full time so I think i'll take this thread
 on
 
  again some
 
  > other day.
 
  > Thanks.
 
  >
 
  >
 
  > Richard Pérez-Mongard
 
  >
 
  >
 
  >
 
  - ---
 
  > On Fri, 14/7/17, Maxim Solodovnik
 
  
 
  wrote:
 
  >
 
  >  Subject: Re: help
 
  configuration smtp server
 
  >  To: "Richard Pérez" 
 
  >  Cc: "Openmeetings user-list"
 
  
 
  >  Date: Friday, 14 July, 2017,
 
  11:32
 
  >
 
  >  Hello Richard,
 
  >
 
  >  please do not write personal
 
  emails,
 
  >  write to the list instead
 
  >
 
  >  DB user and password and not
 
  being
 
  >  "prefilled" since 3.3.0 due
 
  to
 
  >  security reasons
 
  >  You have to create DB
 
  >  database/user/password and
 
  enter this data to OM
 
  >  Internal DB works even with
 
  no
 
  >  user/pass ...
 
  >
 
  >  What DB are you using?
 
  >
 
  >  On Fri, Jul 14, 2017 at 6:51
 
  PM,
 
  >  Richard Pérez
 
  >  
 
  >  wrote:
 
  >  > Thanks Maxim. I'll look
 
  into your
 
  >  suggestions although I have
 
  to fix up the install first.
 
  >  >
 
  >  > I must mention that due
 
  to
 
  >  "warning" received I decided
 
  to ditch 3.2.1 and install
 
  >  > 3.3.0
 
  >  > The problem I have is
 
  that the
 
  >  page that asks for DB user
 
  and DB password aren't prefilled
 
  >  > with that information
 
  (i.e. "user"
 
  >  and "secret"). If I use
 
  these words as user and password at
 
  >  > the end of the process
 
  install
 
  >  fails due to: "user" doesn't
 
  exist.  If I leave those
 
  >  blank install

Re: help configuration smtp server

2017-07-25 Thread Richard Pérez 
I'll see what I can do with the persistence.xml

When you say:
Quote "would appreciate if you can create JIRA issue here: 
https://issues.apache.org/jira/browse/OPENMEETINGS; /Quote
were you saying that to me.  Went there and I'm not sure what I would have to 
do. I wouldn't like to mees anything up due to inexperience and/or ignorance.


Richard 
 
 
On Tue, 25/7/17, Maxim Solodovnik  wrote:

 Subject: Re: help configuration smtp server
 To: "Openmeetings user-list" , "Richard Pérez" 

 Date: Tuesday, 25 July, 2017, 12:01
 
 Seems to
 be reproducible :(Will try to fix.Please
 manually edit persistence.xml file and set Username, then
 start OM as a workaround
 would appreciate if you can create
 JIRA issue here: https://issues.apache.org/jira/browse/OPENMEETINGS
 On Tue, Jul 25, 2017 at
 10:44 PM, Maxim Solodovnik 
 wrote:
 I'll try to double-check this ASAPWill
 report back in 30 minutes or so
 On Tue, Jul 25, 2017 at
 10:37 PM, Richard Pérez 
 wrote:
 Many
 thanks Maxim for your congrats.  Yes, with not much work
 available, being able to nail down a week long job is quite
 a feat, something worth dancing around the office/room
 for.
 
 Thanks.
 
 
 
 I'd like to get back to where I left this, if you have
 time to have a look.
 
 
 
 I have tried to install OM 3.3.0 with both User and Password
 textboxes empty in the Data Base form and also using
 
 the word "user" as User.  When I use the word
 "user" and specify the password as
 "secret" I can keep on installing
 
 till the final page where I get a string of error warnings
 giving as Exception "There is no "user", or a
 similar wording".
 
 If I leave those textboxes empty, as soon as I click on
 "move to the next page" I get a red flag across
 the top of the
 
 form (attached image) saying "The "Login"
 field is mandatory", that is, I understand I have to
 specify a "User".  I try to override this
 
 clicking on the "move to the next page" button and
 it is not possible.  If I use the word "user"
 without specifying
 
 a password, I can move through but at the end I get the
 error warnings giving the exception "There is no
 user".
 
 
 
 I am using the Apache Derby (by default) database as it
 worked OK with OM 3.2.1
 
 
 
 Thanks,
 
 
 
 
 
 Richard
 
 
 
 
 
 
 
 -- --
 
 On Fri, 14/7/17, Maxim Solodovnik 
 wrote:
 
 
 
  Subject: Re: help configuration smtp server
 
  To: "Openmeetings user-list" 
 , "Richard Pérez" 
 
  Date: Friday, 14 July, 2017, 12:37
 
 
 
  Congrats :)
 
 
 
  On Fri, Jul 14, 2017 at 11:23 PM,
 
  Richard Pérez
 
  
 
  wrote:
 
  > Sorry, when I click reply it just
 
  picks up the "From" email not the "Cc"
 ones.  Didn't
 
  notice that.
 
  > This morning I got a job I'll have
 
  to work on full time so I think i'll take this thread
 on
 
  again some
 
  > other day.
 
  > Thanks.
 
  >
 
  >
 
  > Richard Pérez-Mongard
 
  >
 
  >
 
  >
 
  - ---
 
  > On Fri, 14/7/17, Maxim Solodovnik
 
  
 
  wrote:
 
  >
 
  >  Subject: Re: help
 
  configuration smtp server
 
  >  To: "Richard Pérez" 
 
  >  Cc: "Openmeetings user-list"
 
  
 
  >  Date: Friday, 14 July, 2017,
 
  11:32
 
  >
 
  >  Hello Richard,
 
  >
 
  >  please do not write personal
 
  emails,
 
  >  write to the list instead
 
  >
 
  >  DB user and password and not
 
  being
 
  >  "prefilled" since 3.3.0 due
 
  to
 
  >  security reasons
 
  >  You have to create DB
 
  >  database/user/password and
 
  enter this data to OM
 
  >  Internal DB works even with
 
  no
 
  >  user/pass ...
 
  >
 
  >  What DB are you using?
 
  >
 
  >  On Fri, Jul 14, 2017 at 6:51
 
  PM,
 
  >  Richard Pérez
 
  >  
 
  >  wrote:
 
  >  > Thanks Maxim. I'll look
 
  into your
 
  >  suggestions although I have
 
  to fix up the install first.
 
  >  >
 
  >  > I must mention that due
 
  to
 
  >  "warning" received I decided
 
  to ditch 3.2.1 and install
 
  >  > 3.3.0
 
  >  > The problem I have is
 
  that the
 
  >  page that asks for DB user
 
  and DB password aren't prefilled
 
  >  > with that information
 
  (i.e. "user"
 
  >  and "secret"). If I use
 
  these words as user and password at
 
  >  > the end of the process
 
  install
 
  >  fails due to: "user" doesn't
 
  exist.  If I leave those
 
  >  blank install
 
  >  > doesn't advance. 
 
  If I invent
 
  >  my own "myown" don't exist.
 
  Maybe it's a cache problem or
 
  >  something like that.
 
  >  >
 
  >  > Regards,
 
  >  >
 
  >  > Richard Pérez-Mongard
 
  >  >
 
  >  >
 
  > 
 
  -

Adobe has announced the end-of-life of the Flash Player

2017-07-25 Thread Maxim Solodovnik 
https://blogs.adobe.com/conversations/2017/07/adobe-flash-update.html

It
seems we need to release 4.0.0 and 4.1.0 before 2020 ... :))

-- 
WBR
Maxim aka solomax

Re: OM 3.3.0: CSRF Solution via Reverse Proxy Server

2017-07-25 Thread Maxim Solodovnik 
you need to add modrewrite
and the rule to rewrite external_protocol_host_port to internal one
and leave URL tail unchanged

On Wed, Jul 26, 2017 at 11:26 AM, Coscend@OM  wrote:
> Dear Maxim and OpenMeetings Community,
>
> Just following up to see if anyone can provide us sample lines of a working 
> configuration of reverse proxy and rewrite rules to access OM 3.3.0 through a 
> proxy server.  Relevant "CSRF+security headers+WebSockets" configuration of 
> Apache HTTPD or NGINX or any other Web server load balancer will help.  We 
> will modify it to suit our load balancer.
>
>
> We have added several of the following options, but OM is being blocked by 
> CSRF security header.
>
> We have added the following headers options to proxy:
> X-Content-Type-Options:  nosniff
> Content-Security-Policy: default-src 'self'; style-src 'self' 
> 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'
> Strict-Transport-Security:  max-age=31536000; includeSubDomains; 
> preload
> X-Frame-Options: DENY
> X-XSS-Protection: 1; mode=block
>
> --
> Error Log details
> --
> org.apache.wicket.protocol.http.CsrfPreventionRequestCycleListener - Possible 
> CSRF attack, request URL: 
> http:///OpenMeetings/wicket/bookmarkable/org.apache.openmeetings.web.pages.auth.SignInPage;jsessionid=8DD832BCCD2E87CA0AD618EBE6719340,
>  Origin: https://, action: aborted with error 400 Origin does not 
> correspond to request
>
> Thank you.
>
> Sincerely,
>
> Hemant K. Sabat
>
> Coscend Communications Solutions
> www.Coscend.com
> --
> Real-time, Interactive Video Collaboration, Tele-healthcare, Tele-education, 
> Telepresence Services, on the fly…
> --
> CONFIDENTIALITY NOTICE: See 'Confidentiality Notice Regarding E-mail Messages 
> from Coscend Communications Solutions' posted at: 
> http://www.Coscend.com/Terms_and_Conditions.html
>
> -Original Message-
> From: Coscend@OM [mailto:om.insig...@coscend.com]
> Sent: Tuesday, July 25, 2017 9:31 AM
> To: user@openmeetings.apache.org
> Subject: RE: OM 3.3.0: CSRF Solution via Reverse Proxy Server
>
> Dear Maxim,
>
> As requested, moving this thread to user@ list.  Would you be kind enough to 
> give a detailed working configuration (proxy and rewrite rules) to enable 
> 'CSRF+WebSockets' from your demo server?
>
> We have tried several options in configuration, but CSRF blocks the service.
>
> Thank you.
>
> Sincerely,
>
> Hemant K. Sabat
>
> Coscend Communications Solutions
> www.Coscend.com
> --
> Real-time, Interactive Video Collaboration, Tele-healthcare, Tele-education, 
> Telepresence Services, on the fly…
> --
> CONFIDENTIALITY NOTICE: See 'Confidentiality Notice Regarding E-mail Messages 
> from Coscend Communications Solutions' posted at: 
> http://www.Coscend.com/Terms_and_Conditions.html
>
>
> Sincerely
>
>
> -Original Message-
> From: Maxim Solodovnik [mailto:solomax...@gmail.com]
> Sent: Tuesday, July 25, 2017 12:08 AM
> To: dev ; om.insig...@coscend.com
> Subject: Re: OM 3.3.0: CSRF Solution via Reverse Proxy Server
>
> Hello Hemant,
>
> CSRF works as expected on demo servers
>
> I believe you need to set up Rewrite rules in addition to proxy rules This 
> should do the trick :)
>
> On Tue, Jul 25, 2017 at 11:58 AM, Coscend@OM 
> wrote:
>
>> Dear OpenMeetings Developers,
>>
>>
>>
>> Congratulations on beefing up Web content security of OpenMeetings in
>> 3.3.0, including XSS, CSRF and requests via security headers!
>>
>>
>>
>> Your guidance in the a reverse proxy scenario would be appreciated.
>>
>>
>>
>> In a reverse proxy use case, the origin site request is changed by the
>> proxy server.  That is, the IP and port of product's server is
>> replaced with the proxy server's IP and port number.  This will be
>> perceived incorrectly as CSRF attack.  Hence, it will be blocked by
>>
>>
>>
>> Application.java @ 151
>>
>> --
>>
>> getRequestCycleListeners().add(new
>> CsrfPreventionRequestCycleListener() {
>>
>> .
>>
>> }); @ 172
>>
>>
>>
>> Would you provide us guidance on how to find a solution?
>>
>> (1)   Temporary workaournd:  How to disable CSRF feature so as to be able
>> to
>> access via proxy?  (Removing lines 152-172 will give Java
>> illegalArgumentException.)
>>
>> (2)   Long-term:  Have CSRF and access through proxy server
>>
>>
>>
>> Thank you.
>>
>>
>>
>> Sincerely,
>>
>>
>>
>> Hemant K. Sabat
>>
>>
>>
>> Coscend Communications Solutions
>>
>>   www.Coscend.com
>>
>> --
>>
>> Real-time, Interactive Video Collaboration,

RE: OM 3.3.0: CSRF Solution via Reverse Proxy Server

2017-07-25 Thread Coscend@OM 
Dear Maxim and OpenMeetings Community,

Just following up to see if anyone can provide us sample lines of a working 
configuration of reverse proxy and rewrite rules to access OM 3.3.0 through a 
proxy server.  Relevant "CSRF+security headers+WebSockets" configuration of 
Apache HTTPD or NGINX or any other Web server load balancer will help.  We will 
modify it to suit our load balancer.


We have added several of the following options, but OM is being blocked by CSRF 
security header.

We have added the following headers options to proxy:
X-Content-Type-Options:  nosniff
Content-Security-Policy: default-src 'self'; style-src 'self' 
'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'
Strict-Transport-Security:  max-age=31536000; includeSubDomains; preload
X-Frame-Options: DENY   
X-XSS-Protection: 1; mode=block

--
Error Log details
--
org.apache.wicket.protocol.http.CsrfPreventionRequestCycleListener - Possible 
CSRF attack, request URL: 
http:///OpenMeetings/wicket/bookmarkable/org.apache.openmeetings.web.pages.auth.SignInPage;jsessionid=8DD832BCCD2E87CA0AD618EBE6719340,
 Origin: https://, action: aborted with error 400 Origin does not 
correspond to request

Thank you.

Sincerely,

Hemant K. Sabat
 
Coscend Communications Solutions
www.Coscend.com 
--
Real-time, Interactive Video Collaboration, Tele-healthcare, Tele-education, 
Telepresence Services, on the fly…
--
CONFIDENTIALITY NOTICE: See 'Confidentiality Notice Regarding E-mail Messages 
from Coscend Communications Solutions' posted at: 
http://www.Coscend.com/Terms_and_Conditions.html 

-Original Message-
From: Coscend@OM [mailto:om.insig...@coscend.com] 
Sent: Tuesday, July 25, 2017 9:31 AM
To: user@openmeetings.apache.org
Subject: RE: OM 3.3.0: CSRF Solution via Reverse Proxy Server

Dear Maxim,

As requested, moving this thread to user@ list.  Would you be kind enough to 
give a detailed working configuration (proxy and rewrite rules) to enable 
'CSRF+WebSockets' from your demo server?

We have tried several options in configuration, but CSRF blocks the service.

Thank you.

Sincerely,

Hemant K. Sabat
 
Coscend Communications Solutions
www.Coscend.com 
--
Real-time, Interactive Video Collaboration, Tele-healthcare, Tele-education, 
Telepresence Services, on the fly…
--
CONFIDENTIALITY NOTICE: See 'Confidentiality Notice Regarding E-mail Messages 
from Coscend Communications Solutions' posted at: 
http://www.Coscend.com/Terms_and_Conditions.html 


Sincerely


-Original Message-
From: Maxim Solodovnik [mailto:solomax...@gmail.com] 
Sent: Tuesday, July 25, 2017 12:08 AM
To: dev ; om.insig...@coscend.com
Subject: Re: OM 3.3.0: CSRF Solution via Reverse Proxy Server

Hello Hemant,

CSRF works as expected on demo servers

I believe you need to set up Rewrite rules in addition to proxy rules This 
should do the trick :)

On Tue, Jul 25, 2017 at 11:58 AM, Coscend@OM 
wrote:

> Dear OpenMeetings Developers,
>
>
>
> Congratulations on beefing up Web content security of OpenMeetings in 
> 3.3.0, including XSS, CSRF and requests via security headers!
>
>
>
> Your guidance in the a reverse proxy scenario would be appreciated.
>
>
>
> In a reverse proxy use case, the origin site request is changed by the 
> proxy server.  That is, the IP and port of product's server is 
> replaced with the proxy server's IP and port number.  This will be 
> perceived incorrectly as CSRF attack.  Hence, it will be blocked by
>
>
>
> Application.java @ 151
>
> --
>
> getRequestCycleListeners().add(new 
> CsrfPreventionRequestCycleListener() {
>
> .
>
> }); @ 172
>
>
>
> Would you provide us guidance on how to find a solution?
>
> (1)   Temporary workaournd:  How to disable CSRF feature so as to be able
> to
> access via proxy?  (Removing lines 152-172 will give Java
> illegalArgumentException.)
>
> (2)   Long-term:  Have CSRF and access through proxy server
>
>
>
> Thank you.
>
>
>
> Sincerely,
>
>
>
> Hemant K. Sabat
>
>
>
> Coscend Communications Solutions
>
>   www.Coscend.com
>
> --
>
> Real-time, Interactive Video Collaboration, Tele-healthcare, 
> Tele-education, Telepresence Services, on the fly.
>
> --
>
> CONFIDENTIALITY NOTICE: See 'Confidentiality Notice Regarding E-mail 
> Messages from Coscend Communications Solutions' posted at:
> 
> http://www.Coscend.com/Terms_and_Conditions.html
>
>
>
>
>
>
>
>