[ECODP-dev] test machine to release 00.09.03 with CKAN security patch (ODP-300 & ODP-291 support)

Thu Oct 24 14:06:36 UTC 2013

Hi Jurgen,

Thanks for setting up the server. John is off now until Monday afternoon
(hence why we were asking for this earlier in the week) so we will verify
the patch once he's back.

Best,

Darwin

*Darwin Peltan*

*Project Manager  |  skype: darwinp  |  twitter:
@darwin<http://twitter.com/darwin>
*

*The Open Knowledge Foundation <http://okfn.org/>*

*Empowering through Open Knowledge*

*http://okfn.org/  |  @okfn <http://twitter.com/OKFN>  |  OKF on
Facebook<https://www.facebook.com/OKFNetwork> |
Blog <http://blog.okfn.org/>  |  Newsletter<http://okfn.org/about/newsletter>
*
*
CKAN | http://ckan.org | @ckanproject <http://twitter.com/ckanproject>
|open source data management platform
*

On 24 October 2013 14:56, Jurgen Vannerom <jurgen.vannerom at tenforce.com>wrote:

> Darwin, ****
>
>
> We have brought up the test system with a recent copy of production data.
> ****
>
> When do you think you can validate the patch and let us know the outcome?*
> ***
>
> ** **
>
> Thanks in advance & ****
>
> ** **
>
> *Best Regards, *****
>
> * *****
>
> *Jurgen Vannerom*****
>
> *Project Manager*   ****
>
>  ****
>
> E-mail:   jurgen.vannerom at tenforce.com****
>
> Phone:  ****
>
> Mobile: *+32 497591362*****
>
> Skype:   *Belgium2003*****
>
>  ****
>
> ** **
>
> *From:* ecodp-dev-bounces at lists.okfn.org [mailto:
> ecodp-dev-bounces at lists.okfn.org] *On Behalf Of *Darwin Peltan
> *Sent:* maandag 21 oktober 2013 17:32
> *To:* Project list for EC ODP CKAN project
> *Subject:* Re: [ECODP-dev] test machine to release 00.09.03 with CKAN
> security patch (ODP-300 & ODP-291 support)****
>
> ** **
>
> Hi Bert,****
>
> ** **
>
> I'm glad it's clear now. When do you think you'd be able to get us access
> to the test data please? This is obviously quite urgent now.****
>
> ** **
>
> Thanks,****
>
> ** **
>
> Darwin****
>
>
> ****
>
> *Darwin Peltan*****
>
> *Project Manager**  |  skype: darwinp  |  twitter: @darwin<http://twitter.com/darwin>
> *****
>
> *The Open Knowledge Foundation <http://okfn.org/>*****
>
> *Empowering through Open Knowledge*****
>
> *http://okfn.org/  |  @okfn <http://twitter.com/OKFN>  |  OKF on Facebook<https://www.facebook.com/OKFNetwork> |
> Blog <http://blog.okfn.org/>  |  Newsletter<http://okfn.org/about/newsletter>
> *****
>
> *
> **CKAN | **http://ckan.org** |** @ckanproject<http://twitter.com/ckanproject>
> ** | open source data management platform*****
>
> ** **
>
> On 21 October 2013 16:12, Bert Van Nuffelen <
> bert.van.nuffelen at tenforce.com> wrote:****
>
> Hi Darwin,
>
> ****
>
> On the call we discussed the need for a release 00.09.00x version. Not the
> need for the data. Maybe obvious for you, not for me.****
>
> best,****
>
> Bert****
>
> ** **
>
> 2013/10/21 Darwin Peltan <darwin.peltan at okfn.org>****
>
> Hi Bert,****
>
>
> This was requested in my email on Monday 14th of October on the thread
> about ODP-291 copied below and we also discussed it in the call. ****
>
> ** **
>
> Best,****
>
> ** **
>
> Darwin****
>
> ** **
>
> -----------****
>
> ** **
>
> This would require a change to one of the Python files - This could be
> supplied as a patch but this is obviously more risky that going through the
> whole release cycle. Whichever approach is taken we would need 10F to
> create a test environment with the latest version of release 09 installed
> and a up to date copy of the live DB so the change can be verified with
> realistic test data before being delivered to the PO. ****
>
> ** **
>
> -----------------****
>
>
> ****
>
> *Darwin Peltan*****
>
> *Project Manager**  |  skype: darwinp  |  twitter: @darwin<http://twitter.com/darwin>
> *****
>
> *The Open Knowledge Foundation <http://okfn.org/>*****
>
> *Empowering through Open Knowledge*****
>
> *http://okfn.org/  |  @okfn <http://twitter.com/OKFN>  |  OKF on Facebook<https://www.facebook.com/OKFNetwork> |
> Blog <http://blog.okfn.org/>  |  Newsletter<http://okfn.org/about/newsletter>
> *****
>
> *
> CKAN | http://ckan.org | @ckanproject <http://twitter.com/ckanproject> |
> open source data management platform*****
>
> ** **
>
> On 21 October 2013 15:59, Bert Van Nuffelen <
> bert.van.nuffelen at tenforce.com> wrote:****
>
> Hi Darwin,****
>
> I promised you last week a release 00.09.00. Which I did. On tuesday there
> was not requested by you that it would contain a "production" copy of the
> database. I am actually surprised myself by your question.****
>
> ** **
>
> best regards,****
>
> Bert****
>
> ** **
>
> 2013/10/21 Darwin Peltan <darwin.peltan at okfn.org>****
>
> Dear Bert,****
>
> ** **
>
> I have to say that I'm slightly taken aback by your email. Our joint
> customer has a major issue with the live version of their site. Just under
> a week ago we discussed the actions to resolve this and you agreed that you
> would set-up a test site with a copy of the production data. This is
> essential so that we can test our patch with realistic test data . Now
> after we've been waiting almost a week you tell us you can't do this
> because you can't access your own server? ****
>
> ** **
>
> I'm sorry but please can you try again. ****
>
> ** **
>
> Darwin****
>
>
> ****
>
> *Darwin Peltan*****
>
> *Project Manager**  |  skype: darwinp  |  twitter: @darwin<http://twitter.com/darwin>
> *****
>
> *The Open Knowledge Foundation <http://okfn.org/>*****
>
> *Empowering through Open Knowledge*****
>
> *http://okfn.org/  |  @okfn <http://twitter.com/OKFN>  |  OKF on Facebook<https://www.facebook.com/OKFNetwork> |
> Blog <http://blog.okfn.org/>  |  Newsletter<http://okfn.org/about/newsletter>
> *****
>
> *
> CKAN | http://ckan.org | @ckanproject <http://twitter.com/ckanproject> |
> open source data management platform*****
>
> ** **
>
> On 21 October 2013 14:54, Bert Van Nuffelen <
> bert.van.nuffelen at tenforce.com> wrote:****
>
> Hi John,****
>
> That backup is on the 01.00.00 test system, which is unaccessible because
> it sits on a machine with the same IP.****
>
> I propose you test and evaluate it with your own test data.
>
> kind regards,****
>
> Bert****
>
> ** **
>
> ** **
>
> 2013/10/16 John Glover <john.glover at okfn.org>****
>
> Hi Bert,****
>
> ** **
>
> Thanks. Could you also please load the most recent dump of the 09
> production database (the backups directory that Dimitrios mentioned before
> is no longer on the server)?****
>
> ** **
>
> I will investigate the issue with logging in after I have written and
> tested the patch.****
>
> ** **
>
> Regards,****
>
> John****
>
> ** **
>
> On 16 October 2013 15:20, Bert Van Nuffelen <
> bert.van.nuffelen at tenforce.com> wrote:****
>
> Hi John and Darwin,****
>
> 212.71.25.148 has been setup to release 00.09.03. + the suggested changes
> to remove the https setup temporary.****
>
> For ODP-300:****
>
> There is a system admin user created api/api and a data publisher
> bert/bert.****
>
> What we have now is that with this setup if you login as bert, then clear
> your cookies in your browser and then login as api you see bert.****
>
> Secondly if Dimitrios logs in on another computer as api then he is also
> 'bert'.****
>
> I have the feeling that the suggestion for removing the https setup have a
> drastic impact on the correct user management.****
>
> best regards,****
>
> Bert
> ****
>
>
> --
> Bert Van Nuffelen
>
> Semantic Technologies Software Architect at TenForce
> www.tenforce.be
>
> Bert.Van.Nuffelen at tenforce.com
> Office: +32 (0)16 31 48 60
> Mobile:+32 479 06 24 26
> skype: bert.van.nuffelen ****
>
> ** **
>
> _______________________________________________
> Ecodp-dev mailing list
> Ecodp-dev at lists.okfn.org
> http://lists.okfn.org/mailman/listinfo/ecodp-dev****
>
> ** **
>
>
> _______________________________________________
> Ecodp-dev mailing list
> Ecodp-dev at lists.okfn.org
> http://lists.okfn.org/mailman/listinfo/ecodp-dev****
>
>
>
>
> --
> Bert Van Nuffelen
>
> Semantic Technologies Software Architect at TenForce
> www.tenforce.be
>
> Bert.Van.Nuffelen at tenforce.com
> Office: +32 (0)16 31 48 60
> Mobile:+32 479 06 24 26
> skype: bert.van.nuffelen ****
>
>
> _______________________________________________
> Ecodp-dev mailing list
> Ecodp-dev at lists.okfn.org
> http://lists.okfn.org/mailman/listinfo/ecodp-dev****
>
> ** **
>
>
> _______________________________________________
> Ecodp-dev mailing list
> Ecodp-dev at lists.okfn.org
> http://lists.okfn.org/mailman/listinfo/ecodp-dev****
>
>
>
>
> --
> Bert Van Nuffelen
>
> Semantic Technologies Software Architect at TenForce
> www.tenforce.be
>
> Bert.Van.Nuffelen at tenforce.com
> Office: +32 (0)16 31 48 60
> Mobile:+32 479 06 24 26
> skype: bert.van.nuffelen ****
>
>
> _______________________________________________
> Ecodp-dev mailing list
> Ecodp-dev at lists.okfn.org
> http://lists.okfn.org/mailman/listinfo/ecodp-dev****
>
> ** **
>
>
> _______________________________________________
> Ecodp-dev mailing list
> Ecodp-dev at lists.okfn.org
> http://lists.okfn.org/mailman/listinfo/ecodp-dev****
>
>
>
>
> --
> Bert Van Nuffelen
>
> Semantic Technologies Software Architect at TenForce
> www.tenforce.be
>
> Bert.Van.Nuffelen at tenforce.com
> Office: +32 (0)16 31 48 60
> Mobile:+32 479 06 24 26
> skype: bert.van.nuffelen ****
>
>
> _______________________________________________
> Ecodp-dev mailing list
> Ecodp-dev at lists.okfn.org
> http://lists.okfn.org/mailman/listinfo/ecodp-dev****
>
> ** **
>
> _______________________________________________
> Ecodp-dev mailing list
> Ecodp-dev at lists.okfn.org
> http://lists.okfn.org/mailman/listinfo/ecodp-dev
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.okfn.org/mailman/private/ecodp-dev/attachments/20131024/abccd0b3/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 17552 bytes
Desc: not available
URL: <https://lists.okfn.org/mailman/private/ecodp-dev/attachments/20131024/abccd0b3/attachment-0001.png>