You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@roller.apache.org by rj...@tcs.com on 2006/08/28 14:54:37 UTC

Comment Authentication Error in Internet Explorer

Hi,
     I am doing R&D for using roller in our project for a portal. I am 
using oracle 9i for roller and followed all steps for roller Installation 
on oracle. I am using default roller.properties file for property 
settings. When I want to add a comment to my blog providing right answer 
to mathematical question then first time it is adding. The second time 
when I try to add from same window the same mathematical question is asked 
and irrelative of whether I check the box Remember my Information or not, 
the Comment authentical failed error is shown. There is no exception in my 
roller.log or tomcat log file. While adding a template in preferences I 
recieve oracle exception. But UI says that template is added. No template 
is added in the list. I have replaced CLOB to varchar2(4000) in oracle 
script given by roller. Somewhere on mailing list its written that Comment 
authentication error is coming in IE and not on firefox. I tried that and 
got same results. Its working on firefox and not on IE. I am using 
Internet Explorer. 6.0.2900.2180
The roller properties file is: 


# Licensed to the Apache Software Foundation (ASF) under one or more # 
contributor license agreements.  The ASF licenses this file to You # under 
the Apache License, Version 2.0 (the "License"); you may not # use this 
file except in compliance with the License.
# You may obtain a copy of the License at #
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software # 
distributed under the License is distributed on an "AS IS" BASIS, # 
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and # 
limitations under the License.  For additional information regarding # 
copyright in this work, please see the NOTICE file in the top level # 
directory of this distribution.

# roller.properties
#
# This file is for meant for Roller deployment properties # Any properties 
that don't change at runtime are defined here # # You can override the 
values in this file in a couple ways ..
#   1. define a roller-custom.properties file and place it somewhere
#       at the root of one of your classpath locations.
#       for example:
#           $TOMCAT_HOME/common/classes
#           $ROLLER_LOCATION/WEB-INF/classes
#
#   2. specify a custom properties file via jvm option
#       example:
#           roller.custom.config=/path/to/properties/file
#
#   **NOTE: if you run multiple instances of roller on the same server
#           then you should beware of the fact that the override options 
above
#           may affect *all* of you running instances.  if you want to do
#           custom overrides for each instance then you must do it by
#           placing a roller-custom.properties file at WEB-INF/classes/ in
#           each of you roller installations.
#
# properties in this file are accessed like this ...
#    RollerConfig.getProperty("propname");

# User management settings

# True to enable group blogging. False to prevent users from creating more 


# than one weblog and from joining other weblogs.
groupblogging.enabled=true

#---------------------------------
# Property expansion settings

# Values of the properties in this list get system property expansion # 
applied to them when loaded.
config.expandedProperties=uploads.dir,search.index.dir

#----------------------------------
# Upload settings

# The directory in which Roller will upload files uploads.dir=C:/Documents 
and Settings/185507/roller_data/uploads

# The context path under which resoures will be made available 
uploads.url=/resources

#----------------------------------
# Search index settings

# Enables indexing of weblog entries and comments and enables search 
servlet search.enabled=true # Directory in which search index is to be 
created (delete this directory to # force Roller to recreate the entire 
search index) search.index.dir=C:/Documents and 
Settings/185507/roller_data/search-index
# Whether or not to include comments in the search index.  If this # is 
false, comments are not included in the index.
search.index.comments=false

#----------------------------------
# Cache settings.
# Remember ... times are in seconds
# Default settings suitable for 100 user system

# Cache properties all follow the given format ...
#     cache.<cache_id>.<prop>=<value>
# we then pass all <prop>=<value> pairs into the cache manager when the 
cache # is being constructed.  this makes it easy to add cache properties 
that can # be used by the specified CacheFactory you are using.
#
# NOTE: it is expected that property validation happens in the 
CacheFactory
#-----------------------------------

# The default cache implementation we want to use 
cache.defaultFactory=org.apache.roller.util.cache.ExpiringLRUCacheFactoryImpl
cache.customHandlers=
cache.filter.rss.size=1000
cache.filter.rss.timeout=3600
cache.filter.ifmodified.size=900
cache.filter.ifmodified.timeout=1800
cache.filter.page.size=1000
cache.filter.page.timeout=3600

# This sets how many minutes into the future we look to prepare # entries 
posted into the future which need to be invalidated from the cache.
# It is very unlikely that this should ever need to be changed
cache.futureInvalidations.peerTime=3

# Main page cache (this is low on purpose) cache.mainpage.size=10 
cache.mainpage.timeout=1800 # set "true" to NOT cache the custom pages for 
users who are logged in cache.mainpage.excludeOwnerEditPages=false

# Weblog page cache (all the weblog content) cache.weblogpage.size=400 
cache.weblogpage.timeout=3600 # set "true" to NOT cache the custom pages 
for users who are logged in cache.weblogpage.excludeOwnerEditPages=false

# Weblog page last-modified-date cache
# you want this fairly high, like weblogs * 10, with long timeouts 
cache.ifmodified.weblogpage.size=1000
cache.ifmodified.weblogpage.timeout=14400

# Feed cache (xml feeds like rss, atom, etc) cache.feed.size=200 
cache.feed.timeout=3600

# Feed last-modified-date cache
# you want a reasonable size, like weblogs * 2, with long timeouts 
cache.ifmodified.feed.size=200 cache.ifmodified.feed.timeout=14400

# Planet cache (planet page and rss feed) cache.planet.size=10 
cache.planet.timeout=1800 # set "true" to NOT cache the custom pages for 
users who are logged in cache.planet.excludeOwnerEditPages=false

#----------------------------------
# Secure login configs

# Enables HTTPS for login page only
securelogin.enabled=false

# Enable scheme enforcement?
# Scheme enforcement ensures that specific URLs are viewed only via HTTPS 
schemeenforcement.enabled=false # URL patterns that require HTTPS 
schemeenforcement.https.urls=/j_security_check,/login-redirect.jsp,/login.jsp,\
/user.do,/editor/yourProfile.do,/admin/user.do,/editor/userdata

# Password security settings
passwds.encryption.enabled=false
passwds.encryption.algorithm=SHA

#----------------------------------
# Enabled plugins ... remember, order does matter!!

# Weblog entry editor plugins
plugins.page=\
org.apache.roller.presentation.velocity.plugins.convertbreaks.ConvertLineBreaksPlugin
\
,org.apache.roller.presentation.velocity.plugins.topictag.TopicTagPlugin \ 
,org.apache.roller.presentation.velocity.plugins.search.WikipediaLinkPlugin
\
,org.apache.roller.presentation.velocity.plugins.search.GoogleLinkPlugin \ 
,org.apache.roller.presentation.velocity.plugins.textile.TextilePlugin \ 
,org.apache.roller.presentation.velocity.plugins.acronyms.AcronymsPlugin \ 
,org.apache.roller.presentation.velocity.plugins.bookmarks.BookmarkPlugin
\
,org.apache.roller.presentation.velocity.plugins.email.ObfuscateEmailPlugin
\
,org.apache.roller.presentation.velocity.plugins.smileys.SmileysPlugin \ 
,org.apache.roller.presentation.velocity.plugins.readmore.ReadMorePlugin

#----------------------------------
# scheduled tasks, each is comma separated list of classes

# Comma separated list of task classnames to be executed once per day 
tasks.daily=org.apache.roller.presentation.TurnoverReferersTask\

# Needed to enable nightly fetching of blacklist 
#,org.apache.roller.presentation.BlacklistUpdateTask\

# Daily Planet task: syncs weblog list with Roller, refreshes Technorati 
stats #,org.apache.roller.presentation.planet.SyncWebsitesTask

# Comma separated list of task classnames to be executed hourly 
tasks.hourly=\

# Hourly Planet task: refresh latest entry list from all weblogs in list 
#org.apache.roller.presentation.planet.RefreshEntriesTask

#----------------------------------
# Velocity settings

velocity.properties=/WEB-INF/velocity.properties
velocity.toolbox.file=/WEB-INF/toolbox.xml

# Page model implementation
velocity.pagemodel.classname=org.apache.roller.presentation.velocity.PageModel
# Experimental page model that allows user's access to Planet aggregations 
#velocity.pagemodel.classname=org.apache.roller.presentation.velocity.planet.PlanetPageModel

#----------------------------------
# Persistence settings

persistence.roller.classname=org.apache.roller.business.hibernate.HibernateRollerImpl
persistence.filemanager.classname=org.apache.roller.business.FileManagerImpl

# authenticator settings (experimental)
authenticator.classname=org.apache.roller.presentation.DefaultAuthenticator

#----------------------------------
# comment, referrer and trackback settings

comment.authenticator.classname=org.apache.roller.presentation.velocity.MathCommentAuthenticator
comment.notification.separateOwnerMessage=false
comment.notification.hideCommenterAddresses=false

# enables site full blacklist check on comment posts (default: true) 
site.blacklist.enable.comments=true

# enables site full blacklist check at time of trackback post (default: 
true)
site.blacklist.enable.trackbacks=true

# enables partial blacklist check (not including blacklist.txt) for each 
incoming referrer site.blacklist.enable.referrers=true

# Trackback protection. Set this only if you need to limit the URLs to # 
which users may send trackbacks. Regex expressions are allowed, for
example:
#
trackback.allowedURLs=http://w3.ibm.com/.*||http://another.example.com/.*
trackback.allowedURLs=

#Robot check in referral processing.  If this pattern is set and the 
User-Agent in the #request matches this pattern, all referral processing 
is skipped; this means that #the referral spam check is skipped, the 
request is allowed to proceed, but the #referrer is not recorded and hit 
count is not incremented.  Recommended for large sites #that get a lot of 
legitimate crawler bot traffic.  The pattern here is a suggestion that 
#has been reported to work well.
#referrer.robotCheck.userAgentPattern=.*(slurp|bot|java).*

# Enable built-in referrer processing?
referrers.processing.enabled=true

# Change to true if you want to process referrers asynchronously.
# You can choose how many threads to use and sleep time (in seconds) 
referrers.asyncProcessing.enabled=false
referrers.queue.numWorkers=3
referrers.queue.sleepTime=10

#----------------------------------
# ping settings

# The number of attempts to try to reach a ping target before refusing to 
# requeue it for further retrials. If absent, this defaults to 3.
pings.maxPingAttempts=3

# The interval between ping queue processing runs in minutes.  Must be 
between # 0 and 120. If set to 0, ping queue processing is disabled on 
this server; # this is for clustered environments. Make sure it is nonzero 
on one host in # a cluster.  Don't use the value 0 here to disable ping 
functionality, you # will instead get an infinitely growing ping queue. 
See the documentation on # the properties below to disable ping 
functionality if you need to.
# If absent, this defaults to 5.
pings.queueProcessingIntervalMins=5

# The set of initial common ping targets.  This is used to initialize the 
# database if there are no common ping targets at startup.  Ping targets 
are # specified as a comma-separated list, each target in the form 
{{name}{url}}. 
# To disable initialization of common ping targets, comment this out, or 
set it # to the empty value.  Common targets can be edited in the UI; this 
is just # used to set up some typical ones.
pings.initialCommonTargets=\
{{Technorati}{http://rpc.technorati.com/rpc/ping}}\
,{{Weblogs.com}{http://rpc.weblogs.com/RPC2}}\
,{{blo.gs}{http://ping.blo.gs/}}\
,{{java.blogs}{http://javablogs.com/xmlrpc}}\
,{{blogrolling.com}{http://rpc.blogrolling.com/pinger/}}

# This controls whether users are allowed to add custom ping targets. 
# Set this to false to disallow adding custom targets; if false, the # 
Weblog:Custom Ping Targets menu item will not appear and associated 
actions # will result in access denied messages.  Leave this false or 
commented for # normal behavior. 
# CAUTION: Setting this to true will cause the server to remove all users' 


# existing custom targets on startup.
pings.disallowCustomTargets=false

# This controls whether the Weblog:Pings menu item and its associated 
actions # are enabled.  Set this to false to disallow users from 
configuring autopings # and doing manual pings.  If absent, this defaults 
to true.
# NOTE: There is a separate runtime property (configurable from the # 
Admin:Configuration page, that can be used to suspend ping processing 
without # disabling the UI.
# CAUTION: Setting this to true will cause the server to remove all users' 


# existing autoping configurations on startup. Leave this false or 
commented # for normal behavior.
pings.disablePingUsage=false

# Setting both pings.disallowCustomTarget=true and 
pings.disablePingUsage=true # will effectively disable the ping 
functionality.

# This is used for debugging the ping mechanism in Roller.  If this is set 


# to true, pings that would normally be sent will cause log messages to be 
sent # but will NOT actually result in real pings being sent.  Leave this 
false or # commented for normal behavior.
pings.logOnly=false

#----------------------------------
# Planet Aggregator settings

# Set to true to enable the Planet aggregator. This will cause:
# - The main page of Roller will become an aggregated view of all blogs in 
the 
#   Roller database, plus those defined in the Planet group 'external'.
# - A new menu tab will appear for Roller admin users. This allows admins 
to 
#   add/remove newsfeed subscriptions in the 'external' group.
# - Users can then subscribe to several newsfeeds:
#      - http://localhost:8080/roller/rss
#      - http://localhost:8080/roller/planetrss
#      - http://localhost:8080/roller/planetrss?group=external
planet.aggregator.enabled=false

# Planet cache must exist and must be writable by Roller process 
planet.aggregator.cache.dir=/var/roller/planetcache

# Number of queries allowed per day
planet.aggregator.technorati.limit=500

#----------------------------------
# defaults for new weblogs

# list of links to include in root bookmark folder of each new blog # 
format is like so: 
linktitle2|linkurl2,linktitle2|linkurl2,linktitle3|linkurl3
newuser.blogroll=\
Dave Johnson|http://rollerweblogger.org/page/roller,\
Matt Raible|http://raibledesigns.com/page/rd,\
Lance Lavandowska|http://brainopolis.dnsalias.com/roller/page/lance,\

Henri Yandell|http://blog.generationjava.com/roller/page/bayard,\
blogs.sun.com|http://blogs.sun.com,\
jroller.com|http://jroller.com

# comma-separated list of top-level categories to be created in each new 
weblog newuser.categories=\ General,Status,Java,Music,Politics

# Default weblog editor
# The list of available editors is in rollerRuntimeConfigDefs.xml 
newweblog.editor=editor-text.jsp

#----------------------------------
# misc settings

rememberme.enabled=true
breadcrumbs.stacksize=3
debug.memory.enabled=false

# editor theme to be used (corresponds to directory name under /theme) 
editor.theme=tan

#---------------------------------
# settings for various plugins

# Optional site-wide customization settings for the TopicTag plugin.
# n.b. these default settings match the coded default values that would be 


# applied if these were omitted.
org.apache.roller.presentation.velocity.plugins.topictag.TopicTagPlugin.defaultTopicBookmarkName=Default
Topic Site
org.apache.roller.presentation.velocity.plugins.topictag.TopicTagPlugin.defaultTopicSite=http://www.technorati.com/tag
org.apache.roller.presentation.velocity.plugins.topictag.TopicTagPlugin.tagRegexWithBookmark=topic:\\{(.*?)\\}\\[(.*?)\\]
org.apache.roller.presentation.velocity.plugins.topictag.TopicTagPlugin.tagRegexWithoutBookmark=topic:\\[(.*?)\\]
org.apache.roller.presentation.velocity.plugins.topictag.TopicTagPlugin.linkFormatString=<a
rel=\"tag\" href=\"{0}{1}\">{2}</a>

# Set to true to allow only default topic tag site (and avoid costly 
bookmark queries) 
org.apache.roller.presentation.velocity.plugins.topictag.TopicTagPlugin.ignoreBookmarks=true

#---------------------------------
# Experimental settings

# Atom Publishing Protocol (APP) - this is an incomplete and untested # 
implementation of an unfinished IETF specification. 
# Intended only for interoperability testing. DO NOT ENABLE IN PRODUCTION!
webservices.atomprotocol.enabled=false

# Atom-like Admin Publishing Protocol (AAPP) - this is an experimental 
admin # protocol based on ideas from the Atom protocol. 
# Intended only for interoperability testing. DO NOT ENABLE IN PRODUCTION!
webservices.adminprotocol.enabled=false

#----------------------------------
# legacy settings (thing that should be deprecated

# settings for old #showNewseeds macro (not related to Planet stuff) 
aggregator.enabled=false aggregator.cache.enabled= 
aggregator.cache.timeout=14400


hibernate.cfg.xml is

<?xml version='1.0' encoding='utf-8'?>
<!--
  Licensed to the Apache Software Foundation (ASF) under one or more
   contributor license agreements.  The ASF licenses this file to You
  under the Apache License, Version 2.0 (the "License"); you may not
  use this file except in compliance with the License.
  You may obtain a copy of the License at

      http://www.apache.org/licenses/LICENSE-2.0

  Unless required by applicable law or agreed to in writing, software
  distributed under the License is distributed on an "AS IS" BASIS,
  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  See the License for the specific language governing permissions and
  limitations under the License.  For additional information regarding
  copyright in this work, please see the NOTICE file in the top level
  directory of this distribution.
-->
<!DOCTYPE hibernate-configuration PUBLIC
        "-//Hibernate/Hibernate Configuration DTD 3.0//EN"
 "http://hibernate.sourceforge.net/hibernate-configuration-3.0.dtd">
<hibernate-configuration>
    <session-factory>
 
        <!-- By default Roller uses a JNDI DataSource -->
        <!--<property
name="connection.datasource">java:comp/env/jdbc/rollerdb</property>-->
        <property name="show_sql">false</property>
 
        <!-- use thread local Session context -->
        <property
name="hibernate.current_session_context_class">thread</property>
 
 
        <!-- select SQL dialect, MySQL by default -->
        <property
name="dialect">org.hibernate.dialect.Oracle9Dialect</property> 
        <!--
        If you want to use HSQLDB, PostgreSQL, DB2 or Derby, Oracle, 
SQLServer then use the right dialect 
        <property
name="dialect">org.hibernate.dialect.HQLDBDialect</property> 
        <property
name="dialect">org.hibernate.dialect.MySQLDialect</property>
        <property
name="dialect">org.hibernate.dialect.PostgreSQLDialect</property>
        <property
name="dialect">org.hibernate.dialect.DB2Dialect</property>
        <property
name="dialect">org.hibernate.dialect.DerbyDialect</property>
        <property
name="dialect">org.hibernate.dialect.Oracle9Dialect</property>
        <property
name="dialect">org.hibernate.dialect.SQLServerDialect</property>
        -->

        <!--
        Examples for configuring Hibernate to use the JDBC Driver Manager
        <property
name="hibernate.connection.driver_class">org.hsqldb.jdbcDriver</property>
        <property
name="hibernate.connection.url">jdbc:hsqldb:hsql://localhost:3219</property>
        <property name="hibernate.connection.username">sa</property>
        <property name="hibernate.connection.password"></property>
        <property
name="hibernate.dialect">org.hibernate.dialect.HSQLDialect</property>

        <property
name="hibernate.connection.driver_class">org.gjt.mm.mysql.Driver</property>
        <property name="hibernate.connection.url"> 
jdbc:mysql://localhost/roller?user=roller&amp;password=tiger</property>
        <property name="hibernate.connection.username">roller</property>
        <property name="hibernate.connection.password">tiger</property>
        <property
name="hibernate.dialect">org.hibernate.dialect.MySQLDialect</property>

        <property
name="hibernate.connection.driver_class">org.postgresql.Driver</property>
        <property
name="hibernate.connection.url">jdbc:postgresql://localhost/rollerdb</property>
        <property name="hibernate.connection.username">scott</property>
        <property name="hibernate.connection.password">tiger</property>
        <property
name="hibernate.dialect">org.hibernate.dialect.PostgreSQLDialect</property>
        -->
 
        <property
name="hibernate.connection.driver_class">oracle.jdbc.driver.OracleDriver</property>
        <property
name="hibernate.connection.url">jdbc:oracle:thin:@172.17.181.38:1521:NewLeaf</property>
        <property name="hibernate.connection.username">dlog4j</property>
        <property name="hibernate.connection.password">dlog4j</property>
        <property
name="hibernate.dialect">org.hibernate.dialect.Oracle9Dialect</property>
 
 
        <!-- Hibernate L2 Caching -->
        <property
name="hibernate.cache.provider_class">org.hibernate.cache.EhCacheProvider</property>
        <property name="hibernate.generate_statistics">true</property>
        <property
name="hibernate.cache.use_structured_entries">true</property>
 
 
        <!-- Map Roller pojo classes -->
        <mapping resource="org/apache/roller/pojos/BookmarkData.hbm.xml" 
/>
        <mapping resource="org/apache/roller/pojos/CommentData.hbm.xml" />
        <mapping 
resource="org/apache/roller/pojos/EntryAttributeData.hbm.xml" />
        <mapping resource="org/apache/roller/pojos/FolderAssoc.hbm.xml" />
        <mapping resource="org/apache/roller/pojos/FolderData.hbm.xml" />
        <mapping resource="org/apache/roller/pojos/WeblogTemplate.hbm.xml" 

/>
        <mapping 
resource="org/apache/roller/pojos/PingCategoryRestrictionData.hbm.xml" />
        <mapping resource="org/apache/roller/pojos/AutoPingData.hbm.xml" 
/>
        <mapping 
resource="org/apache/roller/pojos/PingQueueEntryData.hbm.xml" />
        <mapping resource="org/apache/roller/pojos/PingTargetData.hbm.xml" 

/>
        <mapping resource="org/apache/roller/pojos/RefererData.hbm.xml" />
        <mapping resource="org/apache/roller/pojos/RoleData.hbm.xml" />
        <mapping 
resource="org/apache/roller/pojos/RollerConfigData.hbm.xml" />
        <mapping resource="org/apache/roller/pojos/UserData.hbm.xml" />
        <mapping 
resource="org/apache/roller/pojos/WeblogCategoryData.hbm.xml" />
        <mapping 
resource="org/apache/roller/pojos/WeblogCategoryAssoc.hbm.xml" />
        <mapping 
resource="org/apache/roller/pojos/WeblogEntryData.hbm.xml" />
        <mapping resource="org/apache/roller/pojos/WebsiteData.hbm.xml" />
        <mapping 
resource="org/apache/roller/pojos/RollerPropertyData.hbm.xml" />
        <mapping 
resource="org/apache/roller/pojos/PermissionsData.hbm.xml" />
        <mapping 
resource="org/apache/roller/pojos/PlanetConfigData.hbm.xml" />
        <mapping 
resource="org/apache/roller/pojos/PlanetGroupData.hbm.xml" />
        <mapping 
resource="org/apache/roller/pojos/PlanetEntryData.hbm.xml" />
        <mapping 
resource="org/apache/roller/pojos/PlanetSubscriptionData.hbm.xml" />
        <mapping 
resource="org/apache/roller/pojos/PlanetGroupSubscriptionAssoc.hbm.xml" />
 
    </session-factory>
</hibernate-configuration>
Riteshkumar Jayeshkumar Banker
Tata Consultancy Services Limited
Mailto: rj.banker@tcs.com
Website: http://www.tcs.com

Riteshkumar Jayeshkumar Banker
Tata Consultancy Services Limited
Mailto: rj.banker@tcs.com
Website: http://www.tcs.com
=====-----=====-----=====
Notice: The information contained in this e-mail
message and/or attachments to it may contain 
confidential or privileged information. If you are 
not the intended recipient, any dissemination, use, 
review, distribution, printing or copying of the 
information contained in this e-mail message 
and/or attachments to it are strictly prohibited. If 
you have received this communication in error, 
please notify us by reply e-mail or telephone and 
immediately and permanently delete the message 
and any attachments. Thank you