openupload-devel — Development and general discussion

Re: [openupload-devel] IP Banned

[Alessandro B. <ts...@br...>]

that's really odd...

Probably some query failed during setup?
the default installation allows:
127.0.0.1 (localhost)

0.0.0.0/0 which basically allows everybody...

I'd suggest to check the database table of the banned IPs to see why 
this is the case.

Otherwise you can disable temporarly the ban by changing line 393 of the 
file lib/main.inc.php

adding a line like this:

return 'allow';

Alessandro


jac...@ya... ha scritto:
> Hi,

> I went through the auto install procedure, got the success after saving 
> the configuration and when I click to start using I get the following 
> message:
> 
> Your IP has been blocked!
> You cannot use this site.
> If you think this is a misconfiguration please send an email to the site 
> owner
> 
> What did I do wrong / how do I un-ban myself?
> 
> Thanks!
> Tom
> 
> 
> ------------------------------------------------------------------------
> 
> ------------------------------------------------------------------------------
> Crystal Reports - New Free Runtime and 30 Day Trial
> Check out the new simplified licensing option that enables 
> unlimited royalty-free distribution of the report engine 
> for externally facing server and web deployment. 
> http://p.sf.net/sfu/businessobjects
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Openupload-devel mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/openupload-devel

[openupload-devel] IP Banned

[<jac...@ya...>]

Hi,

I went through the auto install procedure, got the success after saving the configuration and when I click to start using I get the following message:

Your IP has been blocked!
You cannot use this site.
If you think this is a misconfiguration please send an email to the site owner

What did I do wrong / how do I un-ban myself?

Thanks!
Tom

[openupload-devel] New Plugin: account_expire

[Jochen D. <jo...@co...>]

Dear Alessandro,

I've finally come round to finishing the first version of the account_expire
plugin. The administrator can now enter an expiration date in the user form.
This date is checkec when the user tries to log on, to allow or deny
authentication.

I did have to make some minor changes to the admin module (to call and
display plugins in the useredit method) in order to get this plugin to work.
The code I've provided is probably not up to the standards of the rest of
the code base. I think mostly acl is missing from this plugin. I would still
appreciate it if you could take a look and tell me what you think.

I'm going to work on assigning files to groups now, I might do it
differently then what you had in mind, due to the database code not being
able to do joins. Anyway, I'll patch something together (-:

Thanks,
Jochen

Re: [openupload-devel] download are incomplete

[Alessandro B. <ts...@br...>]

Hester, Andy ha scritto:
> Right.  I did another check of file permissions and found that the tmp directory permissions were not the same as the other site.  ( I have 2 sites with 2 separate IPs and separate directories)  Setting the permissions back solved th problem.   
> 
Good at least it was not completely an Open Upload fault :)

> So what caused the /data/tmp dir to have the wrong permissions?
> 

That's dificult to guess. Maybe your testing with clamav/clamd, if it 
was working before. otherwise you might have missed a -R switch

Alessandro

Re: [openupload-devel] download are incomplete

[Hester, A. <And...@eu...>]

-----Original Message-----
From: Alessandro Briosi [mailto:ts...@br...]
Sent: Thu 5/7/2009 6:47 PM
To: OpenUpload Delvel and General talk
Subject: Re: [openupload-devel] download are incomplete
 
Hmm, I might have spoken too early.
If the multiupload value is 0 then it gets back to 1 (so the check is 
there :)

But got the problem 'cause the /data/tmp directory was not writable by 
the www-data user ...

--------------------------------------------
Right.  I did another check of file permissions and found that the tmp directory permissions were not the same as the other site.  ( I have 2 sites with 2 separate IPs and separate directories)  Setting the permissions back solved th problem.   

So what caused the /data/tmp dir to have the wrong permissions?

-Andy

Re: [openupload-devel] download are incomplete

[Alessandro B. <ts...@br...>]

Hmm, I might have spoken too early.
If the multiupload value is 0 then it gets back to 1 (so the check is 
there :)

But got the problem 'cause the /data/tmp directory was not writable by 
the www-data user ...

Alessandro

Alessandro Briosi ha scritto:
>> These files vary from 1k to 500k and they all upload within a few seconds.  The website reports the correct size 
>  > after upload and writes the correct size into the db, but never 
> writes a file to /data or /data/tmp
>> The last thing that I had done was to set up clamav and run some manual scans and I use the /data directory and 
>  > I wonder if this may have caused a problem.
> 
> It might be, but don't think so.
> 
> I opt for a $CONFIG['multiupload'] value equal to 0, (I have tested it 
> and get the same result as you have)
> this naming might be misleading, but it means how many files can be 
> uploaded and a value of 0 means NO FILE. It should be bigger or equal to 
> 1 (yes I'll need a check and default to at least 1)
> 
> The fact that uploads are "fast" is a bit odd though.
> Also PHP should report if there was a partial transfer or an upload error.
> 
> If nothing else helps and if you have some PHP knowledge I'd go for a 
> few debug lines in the files.inc.php, something like
> 
> insert this lines at the beginning of function uploadOptions(
> echo '<pre>';
> print_r($_FILES);
> echo '</pre>';
> exit;
> 
> then move the "exit;" line and place it
> before the $this->nextStep(app()->step);
> this should stop the upload right after the file should be moved to the 
> /data/tmp directory
> and tell you the files details PHP passes to Open Upload.
> 
> and if nothing displays try before all the redirect and so on
> 
> 
> Alessandro
> 
> ------------------------------------------------------------------------------
> The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
> production scanning environment may not be a perfect world - but thanks to
> Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700
> Series Scanner you'll get full speed at 300 dpi even with all image 
> processing features enabled. http://p.sf.net/sfu/kodak-com
> _______________________________________________
> Openupload-devel mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/openupload-devel

Re: [openupload-devel] download are incomplete

[Alessandro B. <ts...@br...>]

> 
> These files vary from 1k to 500k and they all upload within a few seconds.  The website reports the correct size 
 > after upload and writes the correct size into the db, but never 
writes a file to /data or /data/tmp
> 
> The last thing that I had done was to set up clamav and run some manual scans and I use the /data directory and 
 > I wonder if this may have caused a problem.
> 

It might be, but don't think so.

I opt for a $CONFIG['multiupload'] value equal to 0, (I have tested it 
and get the same result as you have)
this naming might be misleading, but it means how many files can be 
uploaded and a value of 0 means NO FILE. It should be bigger or equal to 
1 (yes I'll need a check and default to at least 1)

The fact that uploads are "fast" is a bit odd though.
Also PHP should report if there was a partial transfer or an upload error.

If nothing else helps and if you have some PHP knowledge I'd go for a 
few debug lines in the files.inc.php, something like

insert this lines at the beginning of function uploadOptions(
echo '<pre>';
print_r($_FILES);
echo '</pre>';
exit;

then move the "exit;" line and place it
before the $this->nextStep(app()->step);
this should stop the upload right after the file should be moved to the 
/data/tmp directory
and tell you the files details PHP passes to Open Upload.

and if nothing displays try before all the redirect and so on


Alessandro

Re: [openupload-devel] download are incomplete

[Hester, A. <And...@eu...>]

-----Original Message-----
From: Alessandro Briosi [mailto:ts...@br...]
Sent: Thu 5/7/2009 11:42 AM
To: OpenUpload Delvel and General talk
Subject: Re: [openupload-devel] download are incomplete
 
hmm, maybe check the .htaccess file in the www directory. it seems that 
Somehow the files are not uploaded correctly (maybe a timeout?)

Did you set both the upload_max_filesize and post_max_size  ?
Also check the max_input_time and max_execution_time
Logs should tell you what's wrong there.



Yes the data directory should contain the files with the names of the 
file ids associated.

The mimetype is only to check uploaded files mime type (not really 
working as it should imho), but if the file mime type is not correct it 
should block your request.

Alessandro
--------------------------------------

These files vary from 1k to 500k and they all upload within a few seconds.  The website reports the correct size after upload and writes the correct size into the db, but never writes a file to /data or /data/tmp

The last thing that I had done was to set up clamav and run some manual scans and I use the /data directory and I wonder if this may have caused a problem.

-Andy

Re: [openupload-devel] download are incomplete

[Alessandro B. <ts...@br...>]

btw: do the 2 sites use the same database and data directory?
Are they on the same webserver name (i.e. www.ou.com/upload and 
www.ou.com/download) ?

Is the temporary php upload directory on the same partition as the open 
upload data directory? Just a wild guess. And the data/tmp ?

Is the CONFIG['multiupload'] set to at least 1?

Open Upload is supposed to:
1. upload a file via standard php functions
2. move the uploaded file to the data/tmp directory so php won't delete 
the file at the end of the script
3. if everything is good then it will generate the new ID and move the 
file to the data directory with the new ID name.

Something here fails.

Alessandro

P.S. I should add a check and raise an error if the file is not found on 
the filesystem. Also a few checks if the file was moved (renamed) correctly.

Hester, Andy ha scritto:
> I uploaded and then downloaded a .jpg file after deleting all files.  The file was still only 261 bytes (download - the size in the db shows correctly).  I opened the .jpg with a text editor and found this:
> 
> <br />
> <b>Warning</b>:  readfile(/usr/local/transfer/data/wn1AmL8STJ) [<a href='function.readfile'>function.readfile</a>]: failed to open stream: No such file or directory in <b>/usr/local/transfer/lib/modules/default/files.inc.php</b> on line <b>408</b><br />
> 
> and it is true that it is not in the data directory.  I do have some file id data/tmp but they are not the size if the .jpg file.  www-data has write access to the data directory:
> 
> drwxr-xr-x  3 www-data www-data  4096 2009-05-07 10:05 data
> 
> off to check logs...
> 
> 
> 
> -Andy
> 
> 
> 
> -----Original Message-----
> From: Hester, Andy [mailto:And...@eu...]
> Sent: Thu 5/7/2009 9:49 AM
> To: ope...@li...
> Subject: [openupload-devel] download are incomplete
>  
> 
> I have 2 sites up, both members only.  One is for outbound file transfers and one for inbound transfers (temporary).  
> 
> The inbound site seemed to be working fine until I took a day off to go to the Dr.
> 
> Now I am getting reports that the files are being corrupted.
> 
> I had a chance to log in this am and confirmed that while the files are uploaded correctly, the same files when downloaded are only 261 bytes.  Oddly enough, I looked at the files table and found that there is a record in there that has a size of 261.  Of course there are many others of varying sizes.
> 
> Could it be stuck on a corrupt file?
> 
> Also, I don't see the same files in the db as in the data directory? should I?
> 
> While trying to fix this I noticed that there was a mime type plugin rule for un registered users that I hadn't noticed before.  I deleted that rule on the idea that it might be causing the download to fail. The only change I've made recently that I can think of is allowing multiple uploads, bu I changed that back and that didn;t resolve the issue either.
> 
> 
> Thanks for any help.
> 
> -Andy
> 
> ------------------------------------------------------------------------------
> The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
> production scanning environment may not be a perfect world - but thanks to
> Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700
> Series Scanner you'll get full speed at 300 dpi even with all image 
> processing features enabled. http://p.sf.net/sfu/kodak-com
> _______________________________________________
> Openupload-devel mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/openupload-devel
> 
> 
> 
> ------------------------------------------------------------------------
> 
> ------------------------------------------------------------------------------
> The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
> production scanning environment may not be a perfect world - but thanks to
> Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700
> Series Scanner you'll get full speed at 300 dpi even with all image 
> processing features enabled. http://p.sf.net/sfu/kodak-com
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Openupload-devel mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/openupload-devel

Re: [openupload-devel] download are incomplete

[Alessandro B. <ts...@br...>]

hmm, maybe check the .htaccess file in the www directory. it seems that 
Somehow the files are not uploaded correctly (maybe a timeout?)

Did you set both the upload_max_filesize and post_max_size  ?
Also check the max_input_time and max_execution_time
Logs should tell you what's wrong there.

Yes the data directory should contain the files with the names of the 
file ids associated.

The mimetype is only to check uploaded files mime type (not really 
working as it should imho), but if the file mime type is not correct it 
should block your request.

Alessandro

Hester, Andy ha scritto:
> I uploaded and then downloaded a .jpg file after deleting all files.  The file was still only 261 bytes (download - the size in the db shows correctly).  I opened the .jpg with a text editor and found this:
> 
> <br />
> <b>Warning</b>:  readfile(/usr/local/transfer/data/wn1AmL8STJ) [<a href='function.readfile'>function.readfile</a>]: failed to open stream: No such file or directory in <b>/usr/local/transfer/lib/modules/default/files.inc.php</b> on line <b>408</b><br />
> 
> and it is true that it is not in the data directory.  I do have some file id data/tmp but they are not the size if the .jpg file.  www-data has write access to the data directory:
> 
> drwxr-xr-x  3 www-data www-data  4096 2009-05-07 10:05 data
> 
> off to check logs...
> 
> 
> 
> -Andy
> 
> 
> 
> -----Original Message-----
> From: Hester, Andy [mailto:And...@eu...]
> Sent: Thu 5/7/2009 9:49 AM
> To: ope...@li...
> Subject: [openupload-devel] download are incomplete
>  
> 
> I have 2 sites up, both members only.  One is for outbound file transfers and one for inbound transfers (temporary).  
> 
> The inbound site seemed to be working fine until I took a day off to go to the Dr.
> 
> Now I am getting reports that the files are being corrupted.
> 
> I had a chance to log in this am and confirmed that while the files are uploaded correctly, the same files when downloaded are only 261 bytes.  Oddly enough, I looked at the files table and found that there is a record in there that has a size of 261.  Of course there are many others of varying sizes.
> 
> Could it be stuck on a corrupt file?
> 
> Also, I don't see the same files in the db as in the data directory? should I?
> 
> While trying to fix this I noticed that there was a mime type plugin rule for un registered users that I hadn't noticed before.  I deleted that rule on the idea that it might be causing the download to fail. The only change I've made recently that I can think of is allowing multiple uploads, bu I changed that back and that didn;t resolve the issue either.
> 
> 
> Thanks for any help.
> 
> -Andy
> 
> ------------------------------------------------------------------------------
> The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
> production scanning environment may not be a perfect world - but thanks to
> Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700
> Series Scanner you'll get full speed at 300 dpi even with all image 
> processing features enabled. http://p.sf.net/sfu/kodak-com
> _______________________________________________
> Openupload-devel mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/openupload-devel
> 
> 
> 
> ------------------------------------------------------------------------
> 
> ------------------------------------------------------------------------------
> The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
> production scanning environment may not be a perfect world - but thanks to
> Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700
> Series Scanner you'll get full speed at 300 dpi even with all image 
> processing features enabled. http://p.sf.net/sfu/kodak-com
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Openupload-devel mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/openupload-devel

Re: [openupload-devel] download are incomplete

[Hester, A. <And...@eu...>]

I uploaded and then downloaded a .jpg file after deleting all files.  The file was still only 261 bytes (download - the size in the db shows correctly).  I opened the .jpg with a text editor and found this:

<br />
<b>Warning</b>:  readfile(/usr/local/transfer/data/wn1AmL8STJ) [<a href='function.readfile'>function.readfile</a>]: failed to open stream: No such file or directory in <b>/usr/local/transfer/lib/modules/default/files.inc.php</b> on line <b>408</b><br />

and it is true that it is not in the data directory.  I do have some file id data/tmp but they are not the size if the .jpg file.  www-data has write access to the data directory:

drwxr-xr-x  3 www-data www-data  4096 2009-05-07 10:05 data

off to check logs...



-Andy



-----Original Message-----
From: Hester, Andy [mailto:And...@eu...]
Sent: Thu 5/7/2009 9:49 AM
To: ope...@li...
Subject: [openupload-devel] download are incomplete
 

I have 2 sites up, both members only.  One is for outbound file transfers and one for inbound transfers (temporary).  

The inbound site seemed to be working fine until I took a day off to go to the Dr.

Now I am getting reports that the files are being corrupted.

I had a chance to log in this am and confirmed that while the files are uploaded correctly, the same files when downloaded are only 261 bytes.  Oddly enough, I looked at the files table and found that there is a record in there that has a size of 261.  Of course there are many others of varying sizes.

Could it be stuck on a corrupt file?

Also, I don't see the same files in the db as in the data directory? should I?

While trying to fix this I noticed that there was a mime type plugin rule for un registered users that I hadn't noticed before.  I deleted that rule on the idea that it might be causing the download to fail. The only change I've made recently that I can think of is allowing multiple uploads, bu I changed that back and that didn;t resolve the issue either.


Thanks for any help.

-Andy

------------------------------------------------------------------------------
The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
production scanning environment may not be a perfect world - but thanks to
Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700
Series Scanner you'll get full speed at 300 dpi even with all image 
processing features enabled. http://p.sf.net/sfu/kodak-com
_______________________________________________
Openupload-devel mailing list
Ope...@li...
https://lists.sourceforge.net/lists/listinfo/openupload-devel

[openupload-devel] download are incomplete

[Hester, A. <And...@eu...>]

I have 2 sites up, both members only.  One is for outbound file transfers and one for inbound transfers (temporary).  

The inbound site seemed to be working fine until I took a day off to go to the Dr.

Now I am getting reports that the files are being corrupted.

I had a chance to log in this am and confirmed that while the files are uploaded correctly, the same files when downloaded are only 261 bytes.  Oddly enough, I looked at the files table and found that there is a record in there that has a size of 261.  Of course there are many others of varying sizes.

Could it be stuck on a corrupt file?

Also, I don't see the same files in the db as in the data directory? should I?

While trying to fix this I noticed that there was a mime type plugin rule for un registered users that I hadn't noticed before.  I deleted that rule on the idea that it might be causing the download to fail. The only change I've made recently that I can think of is allowing multiple uploads, bu I changed that back and that didn;t resolve the issue either.


Thanks for any help.

-Andy

Re: [openupload-devel] 2 ideas for OpenUpload

[Peter V. <pv...@dy...>]

am 06.05.2009 18:16 schrieb Andy Hester:
> 2.  The second item is related to the way the system works.  OpenUpload 
> is great for our organization for transferring file from inside the 
> company to vendors, customers, etc.  For transferring large files from 
> customers, vendors, etc inbound to our internal users, not so much.

Yeah! We managed to bring biggies of up to 700MB by means of OpenUpload
to the outside world. I promised to my users: "I will look for a
solution where customers can send big files in."

So, I would really like to have such a feature implemented in OpenUpload!

> 1. Internal user with an account logs in to the OpenUpload site.
> 2. Internal user fills out form very similar to existing form and sends 
> it to vendor, customer, whoever
> 3. External user receives email with one time random alphanumericly 
> generated url and included password from internal user.
> 4. External user clicks link and goes to OpenUpload site and is allowed 
> to upload file(s).
> 5. Internal user receives email with link to download file and password.

The handling for the customer has to be as simple as possible and the
above proposal sounds quite simple.

Peter

Re: [openupload-devel] 2 ideas for OpenUpload

[Alessandro B. <ts...@br...>]

Andy, both of this requests are in the "Feature Requests".

Andy Hester ha scritto:
> I have two ideas that I would like the community's input on.  These 
> ideas are coming from a corporate/enterprise type scenario and may not 
> be applicable to everyone.  The first one is pretty straight forward and 
> should be fairly simple for a developer.  The second one is a little 
> more complex.
> 
> 1.  I would like to be able to scan files for viruses after upload.  
> Normally, you would scan the stream during upload, but I don't object to 
> writing the file to disk and then scanning it.  I am using the site on a 
> linux server and I am looking at php-clamavlib.  I am sure that we would 
> want this to be a plugin form.  I might be able to hack through this 
> with some help.
> 
> http://www.howtoforge.com/scan_viruses_with_php_clamavlib
> 

The antivirus is pretty straight forward (very similar to the compress 
plugin, imho). And am not really sure it needs to use that lib

I'm neutral (+0) on this one.

> 2.  The second item is related to the way the system works.  OpenUpload 
> is great for our organization for transferring file from inside the 
> company to vendors, customers, etc.  For transferring large files from 
> customers, vendors, etc inbound to our internal users, not so much.
> 
> I realize that the ultimate correct solution would be for the vendors, 
> customers, etc to get their own OpenUpload server and provide us a place 
> to download their files.  However, the sad truth is that many 
> organizations are not going to do this and I will still have users that 
> need to get the files from outside.
> 
> If I were going to design a tool that works for outside in transfers, I 
> think it should work like this:
> 
> 1. Internal user with an account logs in to the OpenUpload site.
> 2. Internal user fills out form very similar to existing form and sends 
> it to vendor, customer, whoever
> 3. External user receives email with one time random alphanumericly 
> generated url and included password from internal user.
> 4. External user clicks link and goes to OpenUpload site and is allowed 
> to upload file(s).
> 5. Internal user receives email with link to download file and password.
> 
> It seems like all of the peices are there, they just need to be 
> re-arranged.  I would be interested to know what others think about this 
> both the need and the solution.  I think it would make a great addition 
> as an additional mode that the site can operate in.  Perhaps it would 
> require a separate site to live in, but I'm not sure that would be such 
> a bad thing.
> 
> Like:
> inbound.transfers.com
> outbound.trnasfer.com
> each operating in a different mode.
> 

This would need some coding and a new db table for the tokens, but it's 
defenately a must have option.

+1 on this one.

Don't think that the different "domains" is needed, but it could be an 
option (you'd probably need to maintain the 2 different sites though, or 
use the modrewrite ...)


I plan on implementing this in next version (0.5 which I plan should 
have some major structure changes, but minimal to the user/admin), but 
if you provide patches I'll be pleases to push them (we can still do a 
0.4.1 version :) )

Alessandro

[openupload-devel] 2 ideas for OpenUpload

[Andy H. <and...@eu...>]

I have two ideas that I would like the community's input on.  These 
ideas are coming from a corporate/enterprise type scenario and may not 
be applicable to everyone.  The first one is pretty straight forward and 
should be fairly simple for a developer.  The second one is a little 
more complex.

1.  I would like to be able to scan files for viruses after upload.  
Normally, you would scan the stream during upload, but I don't object to 
writing the file to disk and then scanning it.  I am using the site on a 
linux server and I am looking at php-clamavlib.  I am sure that we would 
want this to be a plugin form.  I might be able to hack through this 
with some help.

http://www.howtoforge.com/scan_viruses_with_php_clamavlib

2.  The second item is related to the way the system works.  OpenUpload 
is great for our organization for transferring file from inside the 
company to vendors, customers, etc.  For transferring large files from 
customers, vendors, etc inbound to our internal users, not so much.

I realize that the ultimate correct solution would be for the vendors, 
customers, etc to get their own OpenUpload server and provide us a place 
to download their files.  However, the sad truth is that many 
organizations are not going to do this and I will still have users that 
need to get the files from outside.

If I were going to design a tool that works for outside in transfers, I 
think it should work like this:

1. Internal user with an account logs in to the OpenUpload site.
2. Internal user fills out form very similar to existing form and sends 
it to vendor, customer, whoever
3. External user receives email with one time random alphanumericly 
generated url and included password from internal user.
4. External user clicks link and goes to OpenUpload site and is allowed 
to upload file(s).
5. Internal user receives email with link to download file and password.

It seems like all of the peices are there, they just need to be 
re-arranged.  I would be interested to know what others think about this 
both the need and the solution.  I think it would make a great addition 
as an additional mode that the site can operate in.  Perhaps it would 
require a separate site to live in, but I'm not sure that would be such 
a bad thing.

Like:
inbound.transfers.com
outbound.trnasfer.com
each operating in a different mode.

-Andy

Re: [openupload-devel] Active Directory

[Alessandro B. <ts...@br...>]

Hi Andy,

Andy Hester ha scritto:
> Alessandro Briosi wrote:
>> ok, it should now be fixed in SVN. Attaching it so you can test it 
>> (and others might review it )
>> It's more a hack then a real solution. (I need to re-think about this)
>>
> So I replaced the ldap.inc.php file and made the changes to 
> config.inc.php and it functions as expected now.  The user is 
> recognized, the login was displayed (we changed index.tpl to test for 
> this), the links show 'My Files' and 'Logout' as expected.  Thanks for 
> the fix! 
> 
Good.

> The only question I have about it is why the default group was set to 
> 'Domain Users'?  Could it be set for example to another group in my open 
> upload OU?  The reason I ask is that we may include 'domain users' in 
> our 'open upload users' group to grant user access.  I'm not sure what 
> effect this would have.  Other than this point, I'm not sure why this is 
> a hack.
> 

That's exactly why this is a hack. There is no easy way to find out the 
primary user group (Domain Users should be the default, but not always)
If you add Domain Users to the OU groups then Open Upload should be able 
to also see that groups (so the basedn must change). I'm not sure Open 
Upload would handle this group in group thing right now.

The "Domain Users" member attribute does not contain the users which are 
part of if, and also the user memberOf attribute does not contain it.

As I said I need to rethink on how to properly handle the AD backend.
There is this library adLDAP.php which should handle it and is small, so 
I'm wondering if I need to switch to it insthead of using my own.

Of course right now you can change the "Domain Users" value to anything 
you like, but anybody which is able to authenticate against AD whould be 
granted at least the rights of that group.

Alessandro

Re: [openupload-devel] Active Directory

[Andy H. <and...@eu...>]

Alessandro Briosi wrote:
> ok, it should now be fixed in SVN. Attaching it so you can test it 
> (and others might review it )
> It's more a hack then a real solution. (I need to re-think about this)
>
So I replaced the ldap.inc.php file and made the changes to 
config.inc.php and it functions as expected now.  The user is 
recognized, the login was displayed (we changed index.tpl to test for 
this), the links show 'My Files' and 'Logout' as expected.  Thanks for 
the fix! 

The only question I have about it is why the default group was set to 
'Domain Users'?  Could it be set for example to another group in my open 
upload OU?  The reason I ask is that we may include 'domain users' in 
our 'open upload users' group to grant user access.  I'm not sure what 
effect this would have.  Other than this point, I'm not sure why this is 
a hack.

-Andy

Re: [openupload-devel] Active Directory

[Alessandro B. <ts...@br...>]

ok, it should now be fixed in SVN. Attaching it so you can test it (and 
others might review it )
It's more a hack then a real solution. (I need to re-think about this)

you need to change the following in your config.inc.php file

$CONFIG['register']['default_group']='Domain Users';

$CONFIG['ldap']['uid']='sAMAccountName';
$CONFIG['ldap']['userfields'] = array ( 'samaccountname' => 'login', 
'name' => 'name', 'mail' => 'email', 'distinguishedname' => 'uid');

$CONFIG['ldap']['gid']='member';
$CONFIG['ldap']['groupfields'] = array ( 'samaccountname' => 'name', 
'name' => 'description' );

other settings might remain the same.

Alessandro

Alessandro Briosi ha scritto:
> ok there is defenatly something which has changed with SP2 or so. the AD 
> structure now looks pretty strange, and the problems are 2
> 1. searching the user fails
> 2. searching the groups also fails
> 
> I need to find a better way to handle this.
> 
> Alessandro
> 
> Alessandro Briosi ha scritto:
>> Andy Hester ha scritto:
>>> Alessandro Briosi wrote:
>>>> Well, it uses the AD user account to check for the group info, but I'm 
>>>> quite sure the specific 'login' field is not populated.
>>>>
>>>> Try changing the template file.
>>>> templates/index.tpl
>>>>
>>>> insert a new line after line 23 like this: (after {$user.name} ):
>>>> <br />{$user.login}
>>>>
>>>> and see if it prints something after the user name (once you log in).
>>>> If it does, then there is a bug somewhere, and I'll try AD again tomorrow.
>>>>   
>>> It does not print anything after making this change.  It would seem that 
>>> you are correct about the field not being populated, although I am not 
>>> sure why.
>>>
>>>> BTW: is this a 2003 , 2000 , mixed or 2008 AD?
>>>>   
>>> 2003.
>>>
>>>> (I have only tested a 2003 AD domain afair, and it worked with 'cn')
>>>>   
>>> If I use the 'cn' version, nothing happens after login (not even a 
>>> 'Login Incorrect' error, but it does error if I put something bogus into 
>>> the login). But the 'cn' and the sAMAccountName are the same value.
>>>
>>>
>> Maybe it's a rights issue of the "readonly" user. Can you try with an 
>> Administrator account as the "readonly" user to see if this fixes the 
>> problem?
>>
>>
>> That's my last guess for tonight. if this is not the case I'll check AD 
>> tomorrow.
>>
>> Alessandro
>>
>> ------------------------------------------------------------------------------
>> Register Now & Save for Velocity, the Web Performance & Operations 
>> Conference from O'Reilly Media. Velocity features a full day of 
>> expert-led, hands-on workshops and two days of sessions from industry 
>> leaders in dedicated Performance & Operations tracks. Use code vel09scf 
>> and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf
>> _______________________________________________
>> Openupload-devel mailing list
>> Ope...@li...
>> https://lists.sourceforge.net/lists/listinfo/openupload-devel
> 
> ------------------------------------------------------------------------------
> Register Now & Save for Velocity, the Web Performance & Operations 
> Conference from O'Reilly Media. Velocity features a full day of 
> expert-led, hands-on workshops and two days of sessions from industry 
> leaders in dedicated Performance & Operations tracks. Use code vel09scf 
> and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf
> _______________________________________________
> Openupload-devel mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/openupload-devel

Re: [openupload-devel] multiple recipients

[Alessandro B. <ts...@br...>]

AFAIK the php 'mail' command sends to multiple recipients,
putting the e-mail addresses in a semicolon (';') separated list (which 
is what Peter probably is referring to).
So there should only be the need to change the valid e-mail address 
check to split the recipients and check for each of them.

Actually it's only a few lines of code. Maybe it's worth.

The AD thing is obviously a bug, and I'll address it ASAP (the memberof 
ldap attribute has disappeared from AD in the users).

Attached you can find the e-mail plugin with this implemented.
I'll probably will be adding the e-mail check to the My Files too in the 
future, so probably this should go in svn.

For now you can simply replace the email.inc.php in the plugins 
directory with this one.

Then go to the plugin options and enable multiple recipients (put a 1 as 
a value for your users group, or for [Any] group)

Alessandro

Andy Hester ha scritto:
> Peter Velan wrote:
>> Yes, there is some necessity to address more then one recipient. But
>> finally I detected the fine "My Files" feature: As long as your files
>> are on the server, you could define more recipients (one after the
>> other) here!
>>
>>   
> Yeah, I thought of that too.  But I am using AD auth for a largish 
> organization and I don't get the 'My Files' link.  Instead I get a 
> 'Public Files' link which is no good for me.  :(
> So I have hidden the listing feature to maintain the privacy of each 
> user until it is fixed.  And I think that this is an ok solution for 
> multiple recipients too.
> 
> -Andy
> 
> 
> ------------------------------------------------------------------------------
> Register Now & Save for Velocity, the Web Performance & Operations 
> Conference from O'Reilly Media. Velocity features a full day of 
> expert-led, hands-on workshops and two days of sessions from industry 
> leaders in dedicated Performance & Operations tracks. Use code vel09scf 
> and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf
> _______________________________________________
> Openupload-devel mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/openupload-devel

Re: [openupload-devel] multiple recipients

[Andy H. <and...@eu...>]

Peter Velan wrote:
> Yes, there is some necessity to address more then one recipient. But
> finally I detected the fine "My Files" feature: As long as your files
> are on the server, you could define more recipients (one after the
> other) here!
>
>   
Yeah, I thought of that too.  But I am using AD auth for a largish 
organization and I don't get the 'My Files' link.  Instead I get a 
'Public Files' link which is no good for me.  :(
So I have hidden the listing feature to maintain the privacy of each 
user until it is fixed.  And I think that this is an ok solution for 
multiple recipients too.

-Andy

Re: [openupload-devel] multiple recipients

[Peter V. <pv...@dy...>]

am 01.05.2009 16:50 schrieb Andy Hester:
> The site does not seem to support multiple recipients.  Is this 
> correct?  What are your thoughts about the need for multiple recipients...

Yes, there is some necessity to address more then one recipient. But
finally I detected the fine "My Files" feature: As long as your files
are on the server, you could define more recipients (one after the
other) here!

> I am not sure whether it is worth the trouble.

I think its not worth the trouble.

Peter

[openupload-devel] multiple recipients

[Andy H. <and...@eu...>]

The site does not seem to support multiple recipients.  Is this 
correct?  What are your thoughts about the need for multiple recipients...
I am not sure whether it is worth the trouble.

-Andy

Re: [openupload-devel] Active Directory

[Alessandro B. <ts...@br...>]

ok there is defenatly something which has changed with SP2 or so. the AD 
structure now looks pretty strange, and the problems are 2
1. searching the user fails
2. searching the groups also fails

I need to find a better way to handle this.

Alessandro

Alessandro Briosi ha scritto:
> 
> Andy Hester ha scritto:
>> Alessandro Briosi wrote:
>>> Well, it uses the AD user account to check for the group info, but I'm 
>>> quite sure the specific 'login' field is not populated.
>>>
>>> Try changing the template file.
>>> templates/index.tpl
>>>
>>> insert a new line after line 23 like this: (after {$user.name} ):
>>> <br />{$user.login}
>>>
>>> and see if it prints something after the user name (once you log in).
>>> If it does, then there is a bug somewhere, and I'll try AD again tomorrow.
>>>   
>> It does not print anything after making this change.  It would seem that 
>> you are correct about the field not being populated, although I am not 
>> sure why.
>>
>>> BTW: is this a 2003 , 2000 , mixed or 2008 AD?
>>>   
>> 2003.
>>
>>> (I have only tested a 2003 AD domain afair, and it worked with 'cn')
>>>   
>> If I use the 'cn' version, nothing happens after login (not even a 
>> 'Login Incorrect' error, but it does error if I put something bogus into 
>> the login). But the 'cn' and the sAMAccountName are the same value.
>>
>>
> 
> Maybe it's a rights issue of the "readonly" user. Can you try with an 
> Administrator account as the "readonly" user to see if this fixes the 
> problem?
> 
> 
> That's my last guess for tonight. if this is not the case I'll check AD 
> tomorrow.
> 
> Alessandro
> 
> ------------------------------------------------------------------------------
> Register Now & Save for Velocity, the Web Performance & Operations 
> Conference from O'Reilly Media. Velocity features a full day of 
> expert-led, hands-on workshops and two days of sessions from industry 
> leaders in dedicated Performance & Operations tracks. Use code vel09scf 
> and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf
> _______________________________________________
> Openupload-devel mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/openupload-devel

Re: [openupload-devel] Active Directory

[Alessandro B. <ts...@br...>]

Andy Hester ha scritto:
> Alessandro Briosi wrote:
>> Well, it uses the AD user account to check for the group info, but I'm 
>> quite sure the specific 'login' field is not populated.
>>
>> Try changing the template file.
>> templates/index.tpl
>>
>> insert a new line after line 23 like this: (after {$user.name} ):
>> <br />{$user.login}
>>
>> and see if it prints something after the user name (once you log in).
>> If it does, then there is a bug somewhere, and I'll try AD again tomorrow.
>>   
> It does not print anything after making this change.  It would seem that 
> you are correct about the field not being populated, although I am not 
> sure why.
> 
>> BTW: is this a 2003 , 2000 , mixed or 2008 AD?
>>   
> 2003.
> 
>> (I have only tested a 2003 AD domain afair, and it worked with 'cn')
>>   
> If I use the 'cn' version, nothing happens after login (not even a 
> 'Login Incorrect' error, but it does error if I put something bogus into 
> the login). But the 'cn' and the sAMAccountName are the same value.
> 
> 

Maybe it's a rights issue of the "readonly" user. Can you try with an 
Administrator account as the "readonly" user to see if this fixes the 
problem?


That's my last guess for tonight. if this is not the case I'll check AD 
tomorrow.

Alessandro

Re: [openupload-devel] Active Directory

[Andy H. <and...@eu...>]

Alessandro Briosi wrote:
> Well, it uses the AD user account to check for the group info, but I'm 
> quite sure the specific 'login' field is not populated.
>
> Try changing the template file.
> templates/index.tpl
>
> insert a new line after line 23 like this: (after {$user.name} ):
> <br />{$user.login}
>
> and see if it prints something after the user name (once you log in).
> If it does, then there is a bug somewhere, and I'll try AD again tomorrow.
>   
It does not print anything after making this change.  It would seem that 
you are correct about the field not being populated, although I am not 
sure why.

> BTW: is this a 2003 , 2000 , mixed or 2008 AD?
>   
2003.

> (I have only tested a 2003 AD domain afair, and it worked with 'cn')
>   
If I use the 'cn' version, nothing happens after login (not even a 
'Login Incorrect' error, but it does error if I put something bogus into 
the login). But the 'cn' and the sAMAccountName are the same value.

> Alessandro
>   
Thanks Alessandro

-Andy