[xwiki-users] Merry Christmas and Happy New Year 2010
Hi everyone, Just a quick note to wish everyone in the XWiki project very happy festivities and a happy next year for 2010. The XWiki project has seen exciting times in 2009 as described on: http://massol.myxwiki.org/xwiki/bin/view/Blog/XWikiIn2009 Let's all make 2010 even better :) Take care, -Vincent ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Merry Christmas and Happy New Year 2010
Hi, the feature list for 2009 is exciting indeed :) Thanks to all and please *forget* about xwiki for next days and relax as much as you can :)) Merry Christmas and a Happy New Year! Roman P.S. I hope, I will return back to my xwiki activities next year, so be prepared for even more suggestions without (code) implementation ;) -Ursprüngliche Nachricht- Von: users-boun...@xwiki.org [mailto:users-boun...@xwiki.org] Im Auftrag von Vincent Massol Gesendet: Dienstag, 22. Dezember 2009 11:54 An: XWiki Users; XWiki Developers Betreff: [xwiki-users] Merry Christmas and Happy New Year 2010 Hi everyone, Just a quick note to wish everyone in the XWiki project very happy festivities and a happy next year for 2010. The XWiki project has seen exciting times in 2009 as described on: http://massol.myxwiki.org/xwiki/bin/view/Blog/XWikiIn2009 Let's all make 2010 even better :) Take care, -Vincent ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
[xwiki-users] Contributed Emoticon MBox wiki macros
Hi All, I've added these two macros into code.xwiki.org little while ago. Emoticon Macro: http://code.xwiki.org/xwiki/bin/view/Macros/EmoticonMacrosee http://www.rathnayake.org/xwiki/bin/view/Macro/Emo for some examples. MBox Macro: http://code.xwiki.org/xwiki/bin/view/Macros/MBoxMacro see http://asiri.rathnayake.org/xwiki/bin/view/Blog/XWiki+Customize+content+presentation+with+wiki+macrosfor a description about MBox macro's usage. Thanks. - Asiri ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Contributed Emoticon MBox wiki macros
Hi, I use the MBox and MNote macros, and they're really fine :) (you have a typo in first emoticon link) By the way thanks for the fix on id/class ;) Jeremie 2009/12/22 Asiri Rathnayake asiri.rathnay...@gmail.com Hi All, I've added these two macros into code.xwiki.org little while ago. Emoticon Macro: http://code.xwiki.org/xwiki/bin/view/Macros/EmoticonMacrosee http://www.rathnayake.org/xwiki/bin/view/Macro/Emo for some examples. MBox Macro: http://code.xwiki.org/xwiki/bin/view/Macros/MBoxMacro see http://asiri.rathnayake.org/xwiki/bin/view/Blog/XWiki+Customize+content+presentation+with+wiki+macrosfor a description about MBox macro's usage. Thanks. - Asiri ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Merry Christmas and Happy New Year 2010
Hi all and happy new year ! :) Next year I'm afraid I'll still have to fight against sharepoint in my office :( ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Security best practices for Xwiki deployment and management
Very useful tips. Thanks On 12/20/09, Niels Mayer nielsma...@gmail.com wrote: On Sat, Dec 19, 2009 at 5:49 AM, esdaniel xw...@esdaniel.com wrote: I asked Vincent if there was a security how-to / checklist page in the xwiki user guide and as such this does not yet exist. As security is such an important issue for public-facing sites, coupled with the fact that in order to help those who have to ensure they can carry out necessary due diligence on security before they are allowed to adopt solutions such as Xwiki, I'd like to request the help of the community to gather knowledge and best practices together. This thread is a request to gather information from experts and users alike to then create pages in the user guide that provide security guidance for administrators of public-facing Xwiki deployments (1) Have the java-web-server (e.g. tomcat) only accessible on localhost:8080 such that server configuration requires special access beyond port 80/443 seen by outside world (e.g. SSH tunnel : ssh -x -L 8080:localhost:8080 u...@host.com cat). This also enables java to not run as superuser -- having the smallest amount of new things running with privileges is what make sysadmins and security czars happy that they're not introducing new untested technology and new security holes into their fortress. (2) One of the well-understood parts of the sysadmin fortress is Apache httpd. Therefore, front the Xwiki-based website with Apache HTTPD and use mod_proxy_ajp to firewall the parts of the xwiki site you want exposed to the outside world on public ports (80/443) -- e.g. to access /xwiki use ProxyPass /xwiki/ajp://127.0.0.1:8009/xwiki/. With this in place you can use Apache to SSL-wrap access to a java based site, and potentially add further gating based on SSL-authentication (mod_ssl) and Apache basic auth (e.g. like the 2-factor authentication I setup for https://www.ipssources.com/ https://ipsssources.net ). You can also use Apache configurations to further limit or disable access to any parts of the wiki that aren't used or you don't want available to the public. E.g. /xwiki/webdav/ and /xwiki/admin/ might be limited to access from certain IPs, or only using SSL, etc. For additional level of protection (beyond Xwiki's auth gating users not having admin rights), one may want to block outside access to URL's like /xwiki/bin/export/XWiki/* to prevent access to hidden password data even if something breaks, or someone accidentally gives the wrong users, or guests admin or other rights that could compromise a xwiki based site. (3) No passwords in the clear: Use aforementioned Apache httpd gating to prevent access to /xwiki/bin/login/* unless user accessing via HTTPS. Depending on the level of security desired, the session can then remain in HTTPS entirely, or be redirected back to HTTP... It might be a good idea to further gate destructive operations (e.g. /xwiki/bin/admin/ ) so that they require an SSL login. This would at least force admins to not transmit the admin password for the site in the clear. (4) xwiki.cfg, etc. (i) change xwiki.authentication.validationKey and xwiki.authentication.encryptionKey; (ii) be sure xwiki.superadminpassword not set. (5) Initial XAR import of xwiki-enterprise-wiki-*.xar or on each upgrade importation: (i) After installing XAR from upgrade be sure to skip install of XWiki.Admin which will override the admin password you set for this user, setting it back to default/public password. (ii). Be sure to set a secure password for XWiki.Admin (iii). Those having imported from older 1.X xwikis may want to check to make sure XWiki.Admin doesn't have *XWiki.XWikiRights[1]* set with so that nonexistent user 'WikiWiki' can edit the 'XWiki.Admin' user. This could grant unexpected privileges to a wiki with open registration and no user XWiki.WikiWiki existing already. (iv) In /xwiki/bin/admin/XWiki/XWikiPreferences?editor=globaladminsection=Rights check Prevent unregistered users from editing pages, regardless of the page or space rights Niels http://nielsmayer.com ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users -- Sent from my mobile device ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Contributed Emoticon MBox wiki macros
On 12/22/2009 02:37 PM, Jeremie BOUSQUET wrote: Hi, I use the MBox and MNote macros, and they're really fine :) (you have a typo in first emoticon link) Should be: http://code.xwiki.org/xwiki/bin/view/Macros/EmoticonMacro , see http://www.rathnayake.org/xwiki/bin/view/Macro/Emo for some examples. By the way thanks for the fix on id/class ;) Jeremie 2009/12/22 Asiri Rathnayakeasiri.rathnay...@gmail.com Hi All, I've added these two macros into code.xwiki.org little while ago. Emoticon Macro: http://code.xwiki.org/xwiki/bin/view/Macros/EmoticonMacrosee http://www.rathnayake.org/xwiki/bin/view/Macro/Emo for some examples. MBox Macro: http://code.xwiki.org/xwiki/bin/view/Macros/MBoxMacro see http://asiri.rathnayake.org/xwiki/bin/view/Blog/XWiki+Customize+content+presentation+with+wiki+macrosfor a description about MBox macro's usage. Thanks. - Asiri ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users -- Sergiu Dumitriu http://purl.org/net/sergiu/ ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
[xwiki-users] AUTO: MaryEllen Coleman/Poughkeepsie/IBM is out of the office. (returning 01/04/2010)
I am out of the office until 01/04/2010. I will have limited access to email. If this is an emergency, please call my cell phone. Merry Christmas and Happy New Year! Note: This is an automated response to your message users Digest, Vol 29, Issue 58 sent on 12/22/09 5:54:13. This is the only notification you will receive while this person is away. ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
Re: [xwiki-users] Contributed Emoticon MBox wiki macros
Hi Jeremie! On Tue, Dec 22, 2009 at 7:07 PM, Jeremie BOUSQUET jeremie.bousq...@gmail.com wrote: Hi, I use the MBox and MNote macros, and they're really fine :) (you have a typo in first emoticon link) By the way thanks for the fix on id/class ;) Many thanks to you for pointing out the problem :) - Asiri ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
[xwiki-users] [ANN] XWiki Enterprise and XWiki Enterprise Manager 2.1.1 Released
The XWiki development team is pleased to announce the release of XWiki Enterprise and XWiki Enterprise Manager 2.1.1 Go grab it at http://www.xwiki.org/xwiki/bin/view/Main/Download Important bug fixes since 2.1: * XWIKI-4575 : Horizontal ruler breaks the display of the WYSIWYG menu bar and toolbox * XWIKI-4681 : Attachments deletion has no effect before a restart * XWIKI-4679 : Can't select the macro after inserting it (WYSIWYG) * XWIKI-4688 : Macro disappears after editing its properties (WYSIWYG) For more information see the Release notes at: http://www.xwiki.org/xwiki/bin/view/Main/ReleaseNotesXWikiEnterprise211 http://www.xwiki.org/xwiki/bin/view/Main/ReleaseNotesXEM211 Thanks -The XWiki dev team ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
[xwiki-users] Reserved names for fields in livetables
When using a field named title in a live table the caption for that field in
the livetables header displays as Browser Title Bar Text. If I change the
name for that field then it displays correctly.
Is this is a bug or are there reserved names that cant be used as fieldnames in
livetables?
Below is the macro code that I am using to create the livetable:
#set($collist = [council, region,title, description])
#set($colprops = {
council : { type : list , size : 1, link :
view},
region : { type : text , size : 10, link : view},
title : { type : text , size : 20, link : none},
description : { type : text , size : 10, link :
none}
})
#set($options = {
className:Tenders.TendersClass,
tagCloud : true,
rowCount: 10
})
#livetable(Tenders $collist $colprops $options)
Radek Rekas
___
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
[xwiki-users] Restful API create object
We are posting a string of name=value pairs seperated by ampersands with a className property at the end set to the type of xwiki class that we would like to create. The object of the correct type is getting created and attached to the page however all of the fields in that object are empty. What is the correct format needed to post the name=value pairs? What is the significance of the property# bit in the object resources section of the restfulapi doco (http://platform.xwiki.org/xwiki/bin/view/Features/XWikiRESTfulAPI). Do the name=value pairs need to be prefixed with property#? Radek Rekas VFMFocus Developer eVALUA Pty Ltd 66B Maryborough St Fyshwick, ACT, Australia T: +61 2 6228 1904 F: +61 2 6228 1131 Http://www.evalua.com.au ___ users mailing list users@xwiki.org http://lists.xwiki.org/mailman/listinfo/users
