You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@archiva.apache.org by ma...@apache.org on 2017/03/18 17:33:49 UTC
[1/2] archiva git commit: Adding release notes for 2.2.2
Repository: archiva
Updated Branches:
refs/heads/master a981c1847 -> 2cf09a7f5
Adding release notes for 2.2.2
Project: http://git-wip-us.apache.org/repos/asf/archiva/repo
Commit: http://git-wip-us.apache.org/repos/asf/archiva/commit/f177ba8b
Tree: http://git-wip-us.apache.org/repos/asf/archiva/tree/f177ba8b
Diff: http://git-wip-us.apache.org/repos/asf/archiva/diff/f177ba8b
Branch: refs/heads/master
Commit: f177ba8b7e5bbeed56ef4ace7e62de19a4011f52
Parents: a981c18
Author: Martin Stockhammer <ma...@apache.org>
Authored: Sat Mar 18 18:32:41 2017 +0100
Committer: Martin Stockhammer <ma...@apache.org>
Committed: Sat Mar 18 18:32:41 2017 +0100
----------------------------------------------------------------------
archiva-docs/src/site/apt/release-notes.apt.vm | 52 +++++----------------
1 file changed, 12 insertions(+), 40 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/archiva/blob/f177ba8b/archiva-docs/src/site/apt/release-notes.apt.vm
----------------------------------------------------------------------
diff --git a/archiva-docs/src/site/apt/release-notes.apt.vm b/archiva-docs/src/site/apt/release-notes.apt.vm
index 4a78376..05e336f 100644
--- a/archiva-docs/src/site/apt/release-notes.apt.vm
+++ b/archiva-docs/src/site/apt/release-notes.apt.vm
@@ -38,7 +38,8 @@ Release Notes for Archiva ${project.version}
Apache Archiva ${project.version} is a bugs fix release:
- * NOTE: jdk 1.7 is now prerequisite with Apache Archiva ${project.version}
+ * There are added some fixes to avoid requests from unknown origin
+
* Compatibility Changes
@@ -67,62 +68,33 @@ Release Notes for Archiva ${project.version}
Released: <<???>>
-** New Feature
- * [MRM-1867] - Adding a find jar by checksum functionality to the REST api
+** New Feature
** Improvement
- * [MRM-1390] - Generic metadata should be searcheable in Archiva search
-
- * [MRM-1844] - Allow LDAP groupOfNames
-
-** Bug
-
- * [MRM-770] - Archiva web client does not recognize classifier
-
- * [MRM-813] - Audit log is reporting "Modify File (proxied)" when no proxy connectors exist and the file has not changed
-
- * [MRM-837] - Cannot download SNAPSHOT version
+ * [MRM-1925] - Make User-Agent header configurable for HTTP requests
- * [MRM-935] - Archiva doesn't supports artifact with \<version\>SNAPSHOT\</version\>
+ * [MRM-1874] - Login Dialog triggers multiple events (+messages)
- * [MRM-1145] - RSS tests do not correctly check responses
+ * [MRM-1924] - Increasing timeouts for repository check
- * [MRM-1311] - Logging in ArtifactMissingChecksumsConsumer does not appear in the logs even if configured properly
-
- * [MRM-1486] - ldap.config.mapper.attribute.user.filter using ldap not working correctly with commas.
-
- * [MRM-1767] - When selecting a specific repository to browse, I get an error that I don't have sufficient privileges.
-
- * [MRM-1807] - Archiva wrapper fail to start
-
- * [MRM-1810] - LDAP - groups config not available in Users Runtime Configuration - Properties
-
- * [MRM-1811] - Users - Manage section: pagination needs to change
-
- * [MRM-1846] - Regression in 2.0.1 : uniqueVersion false not supported
-
- * [MRM-1848] - download links for files mult-dot extensions incorrect in Browse view
+** Bug
- * [MRM-1851] - generic metadata GUI broken
+ * [MRM-1908] - Logged on users can write any repository
- * [MRM-1860] - ClassNotFound exception with JBoss
+ * [MRM-1928] - Bad redirect URL when using Archiva through HTTP reverse proxy
- * [MRM-1863] - RepositoryGroup URL is not build using the Application URL
+ * [MRM-1926] - Invalid checksum files in Archiva repository after download from remote repository
- * [MRM-1864] - Default configuration for central should now use SSL
+ * [MRM-1923] - Fixing bind issue with certain ldap servers, when user not found
- * [MRM-1871] - ConcurrentModificationException in DefaultRepositoryProxyConnectors
+ * [MRM-1909] - Remote repository check fails for https://repo.maven.apache.org/maven2
- * [MRM-1873] - archiva doesn't recognise ldap-group to ldap-users mapping
** Task
- * [MRM-1359] - Remove Maven 1.x functionality
-
- * [MRM-1865] - remove isPermanent from Consumer API
* History
[2/2] archiva git commit: Adding some information about redback
configuration settings
Posted by ma...@apache.org.
Adding some information about redback configuration settings
Project: http://git-wip-us.apache.org/repos/asf/archiva/repo
Commit: http://git-wip-us.apache.org/repos/asf/archiva/commit/2cf09a7f
Tree: http://git-wip-us.apache.org/repos/asf/archiva/tree/2cf09a7f
Diff: http://git-wip-us.apache.org/repos/asf/archiva/diff/2cf09a7f
Branch: refs/heads/master
Commit: 2cf09a7f51faf5310237d11bc354fe541f6e2e46
Parents: f177ba8
Author: Martin Stockhammer <ma...@apache.org>
Authored: Sat Mar 18 18:33:14 2017 +0100
Committer: Martin Stockhammer <ma...@apache.org>
Committed: Sat Mar 18 18:33:14 2017 +0100
----------------------------------------------------------------------
.../site/apt/adminguide/customising-security.apt | 19 +++++++++++++++++++
1 file changed, 19 insertions(+)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/archiva/blob/2cf09a7f/archiva-docs/src/site/apt/adminguide/customising-security.apt
----------------------------------------------------------------------
diff --git a/archiva-docs/src/site/apt/adminguide/customising-security.apt b/archiva-docs/src/site/apt/adminguide/customising-security.apt
index b7a99dd..d42c227 100644
--- a/archiva-docs/src/site/apt/adminguide/customising-security.apt
+++ b/archiva-docs/src/site/apt/adminguide/customising-security.apt
@@ -48,6 +48,7 @@ Archiva Security Configuration
+-----+
# Security Policies
+# -----------------
#security.policy.password.encoder=
security.policy.password.previous.count=6
security.policy.password.expiration.days=90
@@ -55,6 +56,7 @@ security.policy.password.expiration.enabled=true
security.policy.allowed.login.attempt=3
# Password Rules
+# --------------
security.policy.password.rule.alphanumeric.enabled=false
security.policy.password.rule.alphacount.enabled=true
security.policy.password.rule.alphacount.minimum=1
@@ -66,6 +68,23 @@ security.policy.password.rule.numericalcount.enabled=true
security.policy.password.rule.numericalcount.minimum=1
security.policy.password.rule.reuse.enabled=true
security.policy.password.rule.nowhitespace.enabled=true
+
+# Cross Site Request Forgery (CSRF) Prevention
+# --------------------------------------------
+# Enable/Disable CSRF filtering.
+# Possible values: true, false
+rest.csrffilter.enabled=true
+# Base URL used to verify the origin headers of the requests. If not set or empty
+# it tries to determine the base url automatically
+rest.baseUrl=
+# What to do, if the request contains no Origin or Referer header.
+# If true, requests without Origin or Referer Header are denied, otherwise accepted.
+# Possible values: true, false
+rest.csrffilter.absentorigin.deny=true
+# Enable/Disable the token validation only.
+# If true, the validation of the CSRF tokens will be disabled.
+# Possible values: true, false
+rest.csrffilter.disableTokenValidation=false
+-----+
<<Note:>> If installed standalone, Archiva's list of configuration files is <itself> configurable, and