You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@jspwiki.apache.org by "Ahmad, Naveed1 " <na...@citi.com> on 2009/06/08 09:21:46 UTC

RE: URGENT -- UTF-* encoding issue

I have recently upgraded to 2.8.2 and have a major problem with Character encoding in some pages. (UTF-8)

"Select Start ¬タモ Run ¬タモ and"

Single Quotes/ Double Quotes and Hypthens (-) are being rendered in   wiki  as some wierd character? Once I edit the file it appears ok - in   unix  the orginal file is fine.  Any help would be very much appreciated. 
 
Thanks, 
 
Naveed.  

RE: MultipleWikis >> Security 2.3 FAQ

Posted by "Volkar, John M." <JV...@medrad.com>.
> security for each wiki is controlled by the jspwiki.policy 
> file in WEB-INF

Right got it, and so is jspwiki.properties similarly (typically?)
located there. 

I want to specify the policy file location just like I do the property
file location using
jspwiki.propertiesfile="\somepath\to\jspwiki.properties" as a <Context>
parameter...

I was hoping that was mentioned on the "Security 2.3 FAQ" page.

For now, I'll just edit the policy files under WEB-INF, but this doesn't
play nice with MultipleWikis...  (docBase == a war file).


-----Original Message-----
From: Andrew Jaquith [mailto:andrew.r.jaquith@gmail.com] 
Sent: Monday, June 08, 2009 8:23 AM
To: jspwiki-user@incubator.apache.org
Cc: <js...@incubator.apache.org>
Subject: Re: MultipleWikis >> Security 2.3 FAQ

John -- I don't know the answer to question #1 offhand, but as for #2,  
security for each wiki is controlled by the jspwiki.policy file in WEB- 
INF. Each wiki has its own. You can also use a "global" policy file by  
specifying the JVM property java.security.policy, but note that this  
option will go away in 3.0. (Many people found global policies  
confusing.)

On Jun 8, 2009, at 6:57, "Volkar, John M." <JV...@medrad.com> wrote:

> I was looking into setting up a 2.8.x with security, and was looking  
> to
> see if jspwiki.policy could be set in server.xml  as a context  
> parameter
> like I do for the jspwiki.properties file (see MultipleWikis page).
>
> There is a question on the MultipleWikis page about this that links to
> page "Security 2.3 FAQ".  This appears to require a login, I (of  
> course)
> have forgotten what I used for the jspwiki.org site, and attempted to
> re-register.  In several attempts to register I get a "invalid  
> profile"
> message (presumably because one of the elements I was using to  
> register
> existed my old profile?).  So I'm wanting the info on that page, so I
> figure fine, I'll just register as a temporary user "SnarfBlatt", and
> just use that profile...
>
> The registration succeeded, but when I then tried to access the page
> "Security 2.3 FAQ", I get a "Forbidden" message.  The site shows me as
> Authenticated as "SnarfBlatt", but access is denied?
>
>
> So two questions:
> 1) Why can't I get to the page "Security 2.3 FAQ" as SnarfBlatt?   
> (Idle
> curiosity/annoyance)
> and
> 2) How can I override the jspwiki.policy on a per-wiki basis when
> setting up MultipleWikis?
>
> Regards,
> John Volkar
>

Re: MultipleWikis >> Security 2.3 FAQ

Posted by Andrew Jaquith <an...@gmail.com>.
John -- I don't know the answer to question #1 offhand, but as for #2,  
security for each wiki is controlled by the jspwiki.policy file in WEB- 
INF. Each wiki has its own. You can also use a "global" policy file by  
specifying the JVM property java.security.policy, but note that this  
option will go away in 3.0. (Many people found global policies  
confusing.)

On Jun 8, 2009, at 6:57, "Volkar, John M." <JV...@medrad.com> wrote:

> I was looking into setting up a 2.8.x with security, and was looking  
> to
> see if jspwiki.policy could be set in server.xml  as a context  
> parameter
> like I do for the jspwiki.properties file (see MultipleWikis page).
>
> There is a question on the MultipleWikis page about this that links to
> page "Security 2.3 FAQ".  This appears to require a login, I (of  
> course)
> have forgotten what I used for the jspwiki.org site, and attempted to
> re-register.  In several attempts to register I get a "invalid  
> profile"
> message (presumably because one of the elements I was using to  
> register
> existed my old profile?).  So I'm wanting the info on that page, so I
> figure fine, I'll just register as a temporary user "SnarfBlatt", and
> just use that profile...
>
> The registration succeeded, but when I then tried to access the page
> "Security 2.3 FAQ", I get a "Forbidden" message.  The site shows me as
> Authenticated as "SnarfBlatt", but access is denied?
>
>
> So two questions:
> 1) Why can't I get to the page "Security 2.3 FAQ" as SnarfBlatt?   
> (Idle
> curiosity/annoyance)
> and
> 2) How can I override the jspwiki.policy on a per-wiki basis when
> setting up MultipleWikis?
>
> Regards,
> John Volkar
>

Re: MultipleWikis >> Security 2.3 FAQ

Posted by Thomas Engelschmidt <te...@zama.org>.
Sorry, pressed send prematurely

Which validates users and groups, created in user.xml and groups.xml.
If using ldap authentication, the users isnt necessarily created in  
user.xml.

regards
Thomas

On Jun 8, 2009, at 20:28 , Thomas Engelschmidt wrote:

> Which validates users and groups, created in user.xml and groups.xml.
> If using ldap authentication, the users isnt nessarily
>
> On Jun 8, 2009, at 19:56 , Janne Jalkanen wrote:
>
>>
>> ...which is a really good reason to start working on a separate ACL  
>> editor...
>>
>> /Janne
>>
>> On 8 Jun 2009, at 20:21, Harry Metske wrote:
>>
>>> John,
>>>
>>> if you still need the info on http://www.jspwiki.org/wiki/Security2.3FAQ 
>>> ,
>>> you can view it now.
>>> There was an ALLOW statement on it that wasn't between comment  
>>> brackets.
>>>
>>> regards,
>>> Harry
>>>
>>> 2009/6/8 Volkar, John M. <JV...@medrad.com>
>>>
>>>> I was looking into setting up a 2.8.x with security, and was  
>>>> looking to
>>>> see if jspwiki.policy could be set in server.xml  as a context  
>>>> parameter
>>>> like I do for the jspwiki.properties file (see MultipleWikis page).
>>>>
>>>> There is a question on the MultipleWikis page about this that  
>>>> links to
>>>> page "Security 2.3 FAQ".  This appears to require a login, I (of  
>>>> course)
>>>> have forgotten what I used for the jspwiki.org site, and  
>>>> attempted to
>>>> re-register.  In several attempts to register I get a "invalid  
>>>> profile"
>>>> message (presumably because one of the elements I was using to  
>>>> register
>>>> existed my old profile?).  So I'm wanting the info on that page,  
>>>> so I
>>>> figure fine, I'll just register as a temporary user "SnarfBlatt",  
>>>> and
>>>> just use that profile...
>>>>
>>>> The registration succeeded, but when I then tried to access the  
>>>> page
>>>> "Security 2.3 FAQ", I get a "Forbidden" message.  The site shows  
>>>> me as
>>>> Authenticated as "SnarfBlatt", but access is denied?
>>>>
>>>>
>>>> So two questions:
>>>> 1) Why can't I get to the page "Security 2.3 FAQ" as SnarfBlatt?   
>>>> (Idle
>>>> curiosity/annoyance)
>>>> and
>>>> 2) How can I override the jspwiki.policy on a per-wiki basis when
>>>> setting up MultipleWikis?
>>>>
>>>> Regards,
>>>> John Volkar
>>>>
>>>>
>>
>


Re: MultipleWikis >> Security 2.3 FAQ

Posted by Thomas Engelschmidt <te...@zama.org>.
Which validates users and groups, created in user.xml and groups.xml.
If using ldap authentication, the users isnt nessarily

On Jun 8, 2009, at 19:56 , Janne Jalkanen wrote:

>
> ...which is a really good reason to start working on a separate ACL  
> editor...
>
> /Janne
>
> On 8 Jun 2009, at 20:21, Harry Metske wrote:
>
>> John,
>>
>> if you still need the info on http://www.jspwiki.org/wiki/Security2.3FAQ 
>> ,
>> you can view it now.
>> There was an ALLOW statement on it that wasn't between comment  
>> brackets.
>>
>> regards,
>> Harry
>>
>> 2009/6/8 Volkar, John M. <JV...@medrad.com>
>>
>>> I was looking into setting up a 2.8.x with security, and was  
>>> looking to
>>> see if jspwiki.policy could be set in server.xml  as a context  
>>> parameter
>>> like I do for the jspwiki.properties file (see MultipleWikis page).
>>>
>>> There is a question on the MultipleWikis page about this that  
>>> links to
>>> page "Security 2.3 FAQ".  This appears to require a login, I (of  
>>> course)
>>> have forgotten what I used for the jspwiki.org site, and attempted  
>>> to
>>> re-register.  In several attempts to register I get a "invalid  
>>> profile"
>>> message (presumably because one of the elements I was using to  
>>> register
>>> existed my old profile?).  So I'm wanting the info on that page,  
>>> so I
>>> figure fine, I'll just register as a temporary user "SnarfBlatt",  
>>> and
>>> just use that profile...
>>>
>>> The registration succeeded, but when I then tried to access the page
>>> "Security 2.3 FAQ", I get a "Forbidden" message.  The site shows  
>>> me as
>>> Authenticated as "SnarfBlatt", but access is denied?
>>>
>>>
>>> So two questions:
>>> 1) Why can't I get to the page "Security 2.3 FAQ" as SnarfBlatt?   
>>> (Idle
>>> curiosity/annoyance)
>>> and
>>> 2) How can I override the jspwiki.policy on a per-wiki basis when
>>> setting up MultipleWikis?
>>>
>>> Regards,
>>> John Volkar
>>>
>>>
>


Re: MultipleWikis >> Security 2.3 FAQ

Posted by Janne Jalkanen <ja...@ecyrd.com>.
...which is a really good reason to start working on a separate ACL  
editor...

/Janne

On 8 Jun 2009, at 20:21, Harry Metske wrote:

> John,
>
> if you still need the info on http://www.jspwiki.org/wiki/Security2.3FAQ 
> ,
> you can view it now.
> There was an ALLOW statement on it that wasn't between comment  
> brackets.
>
> regards,
> Harry
>
> 2009/6/8 Volkar, John M. <JV...@medrad.com>
>
>> I was looking into setting up a 2.8.x with security, and was  
>> looking to
>> see if jspwiki.policy could be set in server.xml  as a context  
>> parameter
>> like I do for the jspwiki.properties file (see MultipleWikis page).
>>
>> There is a question on the MultipleWikis page about this that links  
>> to
>> page "Security 2.3 FAQ".  This appears to require a login, I (of  
>> course)
>> have forgotten what I used for the jspwiki.org site, and attempted to
>> re-register.  In several attempts to register I get a "invalid  
>> profile"
>> message (presumably because one of the elements I was using to  
>> register
>> existed my old profile?).  So I'm wanting the info on that page, so I
>> figure fine, I'll just register as a temporary user "SnarfBlatt", and
>> just use that profile...
>>
>> The registration succeeded, but when I then tried to access the page
>> "Security 2.3 FAQ", I get a "Forbidden" message.  The site shows me  
>> as
>> Authenticated as "SnarfBlatt", but access is denied?
>>
>>
>> So two questions:
>> 1) Why can't I get to the page "Security 2.3 FAQ" as SnarfBlatt?   
>> (Idle
>> curiosity/annoyance)
>> and
>> 2) How can I override the jspwiki.policy on a per-wiki basis when
>> setting up MultipleWikis?
>>
>> Regards,
>> John Volkar
>>
>>


Re: MultipleWikis >> Security 2.3 FAQ

Posted by Harry Metske <ha...@gmail.com>.
John,

if you still need the info on http://www.jspwiki.org/wiki/Security2.3FAQ,
you can view it now.
There was an ALLOW statement on it that wasn't between comment brackets.

regards,
Harry

2009/6/8 Volkar, John M. <JV...@medrad.com>

> I was looking into setting up a 2.8.x with security, and was looking to
> see if jspwiki.policy could be set in server.xml  as a context parameter
> like I do for the jspwiki.properties file (see MultipleWikis page).
>
> There is a question on the MultipleWikis page about this that links to
> page "Security 2.3 FAQ".  This appears to require a login, I (of course)
> have forgotten what I used for the jspwiki.org site, and attempted to
> re-register.  In several attempts to register I get a "invalid profile"
> message (presumably because one of the elements I was using to register
> existed my old profile?).  So I'm wanting the info on that page, so I
> figure fine, I'll just register as a temporary user "SnarfBlatt", and
> just use that profile...
>
> The registration succeeded, but when I then tried to access the page
> "Security 2.3 FAQ", I get a "Forbidden" message.  The site shows me as
> Authenticated as "SnarfBlatt", but access is denied?
>
>
> So two questions:
> 1) Why can't I get to the page "Security 2.3 FAQ" as SnarfBlatt?  (Idle
> curiosity/annoyance)
> and
> 2) How can I override the jspwiki.policy on a per-wiki basis when
> setting up MultipleWikis?
>
> Regards,
> John Volkar
>
>

MultipleWikis >> Security 2.3 FAQ

Posted by "Volkar, John M." <JV...@medrad.com>.
I was looking into setting up a 2.8.x with security, and was looking to
see if jspwiki.policy could be set in server.xml  as a context parameter
like I do for the jspwiki.properties file (see MultipleWikis page).

There is a question on the MultipleWikis page about this that links to
page "Security 2.3 FAQ".  This appears to require a login, I (of course)
have forgotten what I used for the jspwiki.org site, and attempted to
re-register.  In several attempts to register I get a "invalid profile"
message (presumably because one of the elements I was using to register
existed my old profile?).  So I'm wanting the info on that page, so I
figure fine, I'll just register as a temporary user "SnarfBlatt", and
just use that profile... 

The registration succeeded, but when I then tried to access the page
"Security 2.3 FAQ", I get a "Forbidden" message.  The site shows me as
Authenticated as "SnarfBlatt", but access is denied? 


So two questions:
1) Why can't I get to the page "Security 2.3 FAQ" as SnarfBlatt?  (Idle
curiosity/annoyance) 
and
2) How can I override the jspwiki.policy on a per-wiki basis when
setting up MultipleWikis?

Regards,
John Volkar
 

Re: URGENT -- UTF-* encoding issue

Posted by Harry Metske <ha...@gmail.com>.
can you reproduce this problem on http://sandbox.jspwiki.org ?

Harry


2009/6/8 Ahmad, Naveed1 <na...@citi.com>

> I have recently upgraded to 2.8.2 and have a major problem with Character
> encoding in some pages. (UTF-8)
>
> "Select Start ¬タモ Run ¬タモ and"
>
> Single Quotes/ Double Quotes and Hypthens (-) are being rendered in   wiki
>  as some wierd character? Once I edit the file it appears ok - in   unix
>  the orginal file is fine.  Any help would be very much appreciated.
>
> Thanks,
>
> Naveed.
>