[ECODP-dev] test machine to release 00.09.03 with CKAN security patch (ODP-300 & ODP-291 support)

Mon Oct 21 14:55:29 UTC 2013

Dear Bert,

I have to say that I'm slightly taken aback by your email. Our joint
customer has a major issue with the live version of their site. Just under
a week ago we discussed the actions to resolve this and you agreed that you
would set-up a test site with a copy of the production data. This is
essential so that we can test our patch with realistic test data . Now
after we've been waiting almost a week you tell us you can't do this
because you can't access your own server?

I'm sorry but please can you try again.

Darwin

*Darwin Peltan*

*Project Manager  |  skype: darwinp  |  twitter:
@darwin<http://twitter.com/darwin>
*

*The Open Knowledge Foundation <http://okfn.org/>*

*Empowering through Open Knowledge*

*http://okfn.org/  |  @okfn <http://twitter.com/OKFN>  |  OKF on
Facebook<https://www.facebook.com/OKFNetwork> |
Blog <http://blog.okfn.org/>  |  Newsletter<http://okfn.org/about/newsletter>
*
*
CKAN | http://ckan.org | @ckanproject <http://twitter.com/ckanproject>
|open source data management platform
*

On 21 October 2013 14:54, Bert Van Nuffelen
<bert.van.nuffelen at tenforce.com>wrote:

> Hi John,
>
> That backup is on the 01.00.00 test system, which is unaccessible because
> it sits on a machine with the same IP.
> I propose you test and evaluate it with your own test data.
>
> kind regards,
>
> Bert
>
>
>
> 2013/10/16 John Glover <john.glover at okfn.org>
>
>> Hi Bert,
>>
>> Thanks. Could you also please load the most recent dump of the 09
>> production database (the backups directory that Dimitrios mentioned before
>> is no longer on the server)?
>>
>> I will investigate the issue with logging in after I have written and
>> tested the patch.
>>
>> Regards,
>> John
>>
>>
>>  On 16 October 2013 15:20, Bert Van Nuffelen <
>> bert.van.nuffelen at tenforce.com> wrote:
>>
>>>  Hi John and Darwin,
>>>
>>> 212.71.25.148 has been setup to release 00.09.03. + the suggested
>>> changes to remove the https setup temporary.
>>>
>>> For ODP-300:
>>>
>>> There is a system admin user created api/api and a data publisher
>>> bert/bert.
>>> What we have now is that with this setup if you login as bert, then
>>> clear your cookies in your browser and then login as api you see bert.
>>> Secondly if Dimitrios logs in on another computer as api then he is also
>>> 'bert'.
>>>
>>> I have the feeling that the suggestion for removing the https setup have
>>> a drastic impact on the correct user management.
>>>
>>> best regards,
>>>
>>> Bert
>>>
>>> --
>>> Bert Van Nuffelen
>>>
>>> Semantic Technologies Software Architect at TenForce
>>> www.tenforce.be
>>>
>>> Bert.Van.Nuffelen at tenforce.com
>>> Office: +32 (0)16 31 48 60
>>> Mobile:+32 479 06 24 26
>>> skype: bert.van.nuffelen
>>>
>>> _______________________________________________
>>> Ecodp-dev mailing list
>>> Ecodp-dev at lists.okfn.org
>>> http://lists.okfn.org/mailman/listinfo/ecodp-dev
>>>
>>>
>>
>> _______________________________________________
>> Ecodp-dev mailing list
>> Ecodp-dev at lists.okfn.org
>> http://lists.okfn.org/mailman/listinfo/ecodp-dev
>>
>>
>
>
> --
> Bert Van Nuffelen
>
> Semantic Technologies Software Architect at TenForce
> www.tenforce.be
>
> Bert.Van.Nuffelen at tenforce.com
> Office: +32 (0)16 31 48 60
> Mobile:+32 479 06 24 26
> skype: bert.van.nuffelen
>
> _______________________________________________
> Ecodp-dev mailing list
> Ecodp-dev at lists.okfn.org
> http://lists.okfn.org/mailman/listinfo/ecodp-dev
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.okfn.org/mailman/private/ecodp-dev/attachments/20131021/a74cd73b/attachment.html>