20954: Calendar Dashlet updates. Fixes: ALF-2907 (meeting workspace issue)
20968: Minor VersionableAspect fix to onDeleteNode policy firing (follow-on for r19507)
20981: Removed Install Jammer installers from V3.3.3
20982: AVMTestSuite - run PurgeTestP after AVMServiceTest (investigating ALF-3611)
20997: Fix for ALF-2605 - updated share-config-custom.xml.sample and removed obsolete extension files
21030: Pulled XAMConnector AMP into main 3.3SP3 codeline. Apart from build changes (incl. EOL), there are no repo changes.
21032: StoreSelector passes through NodeContentContext allowing stores access to node information
21036: Fix ALF-245: Can't delete space that contains "translation without content"
- Delete triggers 'unmakeTranslation'
- Empty translations are marked with sys:temporary before being deleted
21051: More on fix ALF-245. Reduced complexity by not deleting empty translations twice
21064: Merged V3.3 to V3.3-BUG_FIX
20898: Merged HEAD to V3.3
20724: AVMTestSuite - temporarily comment out PurgeTestP
- TODO: investigate intermittent test failure
20903: Incremented version revision
20921: AVM - fix purge store so that vr nodes are actually orphaned (ALF-3627)
20952: Fix for ALF-3704: Module conflict - Alfresco web client config property page missing metadata.
This is application of a fix made to the config service in a hotfix. The change provides a deterministic load order for config files loaded via the ConfigBootstrap spring bean. More importantly it means that config files loaded by modules on different machines in a cluster load in the same order.
The forms client and AWE config files have been updated to take advantage of the new loading order.
21061: Merged PATCHES/V3.1.2 to V3.3 (RECORD ONLY)
20890: ALF-3687: Apply LUCENE-1383 patch to Lucene 2.1.0 to reduce memory leaks from ThreadLocals
20891: ALF-3687: Build classpath fix
20892: Incremented version label
21062: Merged PATCHES/V3.2.1 to V3.3
20897: (RECORD ONLY) Incremented version label
20901: (RECORD ONLY) ALF-3740: Merged V3.3 to PATCHES/V3.2.1
20524: VersionMigrator - option to run as scheduled job (ALF-1000)
20904: (RECORD ONLY) ALF-3732: Merged PATCHES/V3.2.r to PATCHES/V3.2.1
19803: ALF-558: File servers (CIFS / FTP / NFS) can now handle concurrent write operations on Alfresco repository
- ContentDiskDriver / AVMDiskDriver now use retrying transactions for write operations
- Disable EagerContentStoreCleaner on ContentDiskDriver / AVMDiskDriver closeFile() operations so that they may be retried after rollback (Sony zero byte problem)
- Allow manual association of AVM ContentData with nodes so that closeFile() may be retried
- Propagation of new argument through AVM interfaces
20905: (RECORD ONLY) ALF-3732: Rolled back the now unnecessary reference()/dereference() stuff from ALF-558
20906: (RECORD ONLY) ALF-3732: Merged DEV/V3.3-BUG-FIX to PATCHES/V3.2.1
20623: Fix for ALF-3188 : Access Denied when updating doc via CIFS
20907: (RECORD ONLY) ALF-3732: Merged V3.3 to PATCHES/V3.2.1
20173: Propagate IOExceptions from retryable write transactions in AlfrescoDiskDriver
20950: ALF-3779: Upgrades on large repositories from v2.1 and v2.2 were failing on MySQL due to "The total number of locks exceeds the lock table size" errors
- Solution was to add support for new --BEGIN TXN and --END TXN comments and execute LOCK TABLES statements in the same transaction as large INSERT - SELECT statements.
20990: ALF-3789: Concurrency issues with InMemoryTicketComponentImpl
- Previous ETHREEOH-1842 method of caching web session 'ref counts' against tickets could cause tickets to unpredictably fall out of the transactional cache
- Rolled back original ETHREEOH-1842 fix. Would be too much overhead to keep these ref counts consistent across a cluster.
- Instead, avoid invalidating tickets on web session timeout and only do it on explicit log out.
- Now tickets maintained in non-transactional shared cache so they can't drop out unpredictably
- Logic for ticket inactivity timeout caching improved so that it should work across a cluster
20991: (RECORD ONLY) Incremented version label
20993: ALF-3789: Fixed Spring configuration backward compatibily issue with previous fix
- Ticket cache bean name restored to ticketsCache. This is actually now a non-transactional cache.
- Also externalized parameters so that they can now be controlled by alfresco-global.properties without any bean overrides
authentication.ticket.ticketsExpire=false
authentication.ticket.expiryMode=AFTER_FIXED_TIME
authentication.ticket.validDuration=PT1H
20994: Eclipse classpath fixes for unit testing after ant build
21057: ALF-3592: PassthruCifsAuthenticator now auto-creates / imports users who do not already exist in Alfresco
- At least one of the following properties must be true for this to happen
synchronization.autoCreatePeopleOnLogin
synchronization.syncWhenMissingPeopleLogIn
- Also improved debug logging of unknown passthru domains
21063: Merged PATCHES/V3.2.r to V3.3
21037: ALF-3793: Final attempt at realigning saved XForm data with a modified Schema
- removeRemovedNodes / insertUpdatedNodes / insertPrototypeNodes replaced by a one stop recursive process that builds a new instance tree from scratch
- Nodes copied over in correct order
- Missing nodes added in and extra nodes discarded
- Prototype nodes appended at appropriate points
21038: (RECORD ONLY) Incremented version label
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@21065 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
20128: Reverse part of previous build fix that breaks other tests ...
20129: ALF-202, ALF-1488: Fixed portlets in alfresco.war
- Stop excluding portlet.xml from alfresco.war
- Used JSR 286 ResourceURL solution to get upload iframes to work in portlets
- Removed horrific hacks concerning faces session map resolution in portlets and upload servlet
- WebClientPortletAuthenticator now dispatches to a helper servlet, AuthenticatorServlet, allowing it to use identical servlet mechanisms to authenticate / sign-on the user
- Portlet Authenticated user now set consistently in application-scoped attribute, so web client, web script portlets and client portlet share same notion of user ID
- Application.inPortalServer flag now thread local (and thread safe!)
20130: Merged BRANCHES/V2.2 to BRANCHES/V3.3
13819: *RECORD ONLY* ACT-6420 - Office 2003 "Install for all users" - DO NOT MERGE
20131: Merged BRANCHES/V3.1 to BRANCHES/V3.3
19600: *RECORD ONLY* ALF-2205 - CLONE: Office Plugin: filename overlaps the plugin UI if longer than 40 characters without spaces
Merged V3.2 to V3.1 (Adobe)
17499: ETHREEOH-2322 - Office Plugin: filename overlaps the plugin UI if longer than 40 characters without spaces
19443: ALF-2131 - Office webscripts: Missing close brace, '}'
20132: ALF-2749 - temporarily skip couple of -ve checks (for MS SQL Server only)
20133: Merged BRANCHES/V3.2 to BRANCHES/V3.3
19550: *RECORD ONLY* ALF-1091 - Only 15 tags displayed in Tags section in Browser pane
20134: Adding files missed during first commit of Meeting Workspace code
20135: Merged V3.2 to V3.3
19814: *RECORD ONLY* Fix for ALF-2322 - discussion topic containing non-ascii characters cannot be saved
19934: *RECORD ONLY* Fix for ALF-2512 - ability to execute JavaScript via cmd servlet by a non-admin user disabled by default.
- user script execution privileges can be reactivated if required via web-client-config flag <allow-user-script-execute>
19935: *RECORD ONLY* Corrected imports for 3.2 compatability
20136: Merge Dev to V3.3
20104 : ALF-676 - imapFolders patch fails if versionable aspect is mandatory on cm:content
20137: Workaround for ALF-2639: Sharepoint: Share Edit Online uses Share protocol rather than Alfresco protocol to build link
- Replace "https:" protocol with "http:" when generating "Edit Online" URL
20138: Merged V3.1 to V3.3
18204: *RECORD ONLY* Merged DEV/TEMPORARY to 3.1
17837: ETHREEOH-3801: Creating users via the api does not add them to the user store
18577: *RECORD ONLY* Fix for ETHREEOH-4117, based on CHK-11154
19373: *RECORD ONLY* Merged V3.2 to V3.1
19216: ENH-506 - allow script compilation to be disabled for repository tier. Fix to unreported issue with return aspect array from a ScriptNode.
20139: Merged V2.2 to V3.3
18518: *RECORD ONLY* Fix for ETWOTWO-1375
18522: *RECORD ONLY* Merged DEV-TEMPORARY to V2.2
18440: TinyMCE HTML Image gets invalid path
18503: ETWOTWO-1035: Error message when bypassing the 'close' and directly clicking on breadcrumb link after a deployment
18504: ETWOTWO-1035: Error message when bypassing the 'close' and directly clicking on breadcrumb link after a deployment
18578: Merged DEV-TEMPORARY to V2.2
18528: ETWOTWO-1114: Missing 'Required' items are not highlighted in the error when missed
19094: *RECORD ONLY* Merged V3.1 to V2.2
14015: Fixes for ETHREEOH-1864 and ETHREEOH-1840
20140: Remove unwanted @overide
20141: Lazy schema introspection to shave off a few seconds on startup
- Saves about 5s on dev machine
- Hibernate still has to look at the DB metadata, though
20144: Merged V2.2 to V3.3
18859: (RECORD ONLY) ALF-1882: Merged V3.2 to V2.2
17292: ETHREEOH-1842: Ticket association with HttpSession IDs tracked so that we don't invalidate a ticket in use by multiple sessions prematurely
- AuthenticationService validate, getCurrentTicket, etc. methods now take optional sessionId arguments
18864: (RECORD ONLY) ALF-1882: Fixed compilation error from previous checkin.
20145: Merged V3,1 to V3.3
19584: (RECORD ONLY) ALF-2207: Merged V3.2 to V3.1 (Adobe)
18277: Merged DEV_TEMPORARY to V3.2
18178: ETHREEOH-3222: ERROR [org.alfresco.webdav.protocol] WebDAV method not implemented - PROPPATCH
19660: (RECORD ONLY) ALF-2266: Merged V3.2 to V3.1 (Adobe)
19562: Merged DEV/BELARUS/V3.2-2010_02_24 to V3.2
19244: ALF-1816: Email templates can no longer be selected when creating a rule for the action 'Send email to specified users' following an upgrade
- New patch has been created to create invite email templates and notify email templates folders if those are absent. Also it moves default notify and invite templates into appropriate folders.
19662: (RECORD ONLY) Incremented version label
19663: (RECORD ONLY) Corrected version label
19779: (RECORD ONLY) Incremented version label
20148: Merged PATCHES/V3.2.r to V3.3
20029: ALF-2624: Avoid NPE in LDAP sync when there are dangling references and improve logging
20053: (RECORD ONLY) Incremented version number
20151: ALF-2749 - unit test fix (re-arranged -ve checks for txn boundaries, functionally equivalent)
20152: Merged HEAD to BRANCHES/V3.3: (RECORD ONLY)
20050: Fix ALF-2637: objectTypeId updatability reported as "readonly" rather then "oncreate"
20051: Fix for ALF-2609: CMIS ACL mapping improvements
20052: Fix for ALF-2609: CMIS ACL mapping improvements
20086: Fix re-opened ALF-2637: "objectTypeId" updatability reported as "readonly" rather then "oncreate"
20125: Fix ALF-2728: AtomPub renditions are not rendered as part of cmis:object, although their rel links are.
20153: Merged HEAD to BRANCHES/V3.3: (RECORD ONLY)
20067: Fix ALF-2691: Choice display names in Type Definition are not escaped properly in AtomPub binding
20154: ALF-1598: Share - Edit online missing on preview page
- Note: The details page doesn't know when Office opens the file, so may show stale information.
20156: Build/unit test - comment-out force re-index (IndexCheckServiceImplTest)
20157: Office add-in: Missing i18n string found whilst investigating ALF-605: Script error appears when start typing not-existent user in "Assign to" filed
- Changed behaviour slightly so that "start workflow" panel remains if error occurred during submit
20164: Fix trailing commas that MSIE doesn't like. Plus fix for renamed webscript reference.
20168: Attempting to fix failing test in ThumbnailService.
The change adds some extra logging and exception info too.
20169: Build/unit test - temporarily put back "force re-index" (IndexCheckServiceImplTest)
- TODO: re-work test for build env
20170: Fix NPE (AVMStoreImpl.createSnapshot)
- see DBC-HEADPOSTGRESQL-34
20173: Propagate IOExceptions from retryable write transactions in AlfrescoDiskDriver
20176: Merge from V3.2 to V3.3. Merge ok'ed by Steve.
20175: JMX configuration of enterprise logging broken
20178: JodConverter loggers are now exposed in JMX.
This follows on from check-ins 20175 (on V32) and 20176 (on V33) which fixed the JMX logging for enterprise code.
20180: Fixes ALF-2021 by adding new date format properties and exposing YUI widget options.
20185: Various core fixes and additional debug output. Part of ALF-1554.
20186: Fix for OpenOffice multiple versions per edit problem. ALF-1554.
20187: Merged BRANCHES/DEV/V3.3-BUG-FIX to BRANCHES/V3.3:
20181: IndexCheckServiceImplTest - by default, check test store only (reduces current ent build time by nearly 1 hour !)
20188: Fix -exploded build target for Share to copy core classes folder
20191: Merged HEAD to BRANCHES/V3.3: (RECORD ONLY)
20190: Fix ALF-2774: Atompub createDocument with versioningState=checkedout followed by checkin does not create major version, Fix ALF-2782: AtomPub binding incorrectly handles atom:title when no value is provided (often done for compliant atom entry)
20193: Merge 3.2 to 3.3:
19759: Fix for CIFS/CheckInOut.exe save of working copy breaks lock on original file. ALF-2028. (Record-only)
19760: Fix for working copy checked out via CIFS is not accessible until FileStateReaper expires file state. ALF-962. (Record-only)
20195: Form fields for numbers are now rendered much smaller that text fields following feedback from meetups. Must be included in 3.3 as requested by Paul.
20197: Rules: Size property is now more userfriendly & IE bugs are solved
- Numbers and booleans where posted as strings to the server making property comparisons against properties such as "Size" to fail on the server
- Size, encoding & mimetype are now options by default in the "IF/Unless" drop downs
- When comparing Size properties a "bytes" label is placed to the right of the text field
- "Show more..." menu now displays aspect/type ids on mouse hover in the tree
- "Show more..." menu now displays a new column for the property name in the list next to the property displayLabel
- The list in the "Show more..." menu now stays in its place instead of being pushed down in some browsers
- IE css fixes to make rules look good in IE 6, 7 & 8
- Fixed IE 6 & 7 issue with generateDomId & getAttribute("id") not being in sync
- Fixed IE 6 & 7 issue where Selector.query only worked with "id" as root attribute
20199: Merge 3.1 to 3.3 (All record-only):
14483: Merged HEAD to v3.1:
13942 Added FTP IPv6 support. MOB-714.
14484: Merged HEAD to v3.1:
13943 Added FTP IPv6 configuration. Added the ftp.ipv6 property. MOB-714.
14523: Add trailing 'A' to CIFS server name, removed by recent checkin.
14916: Fixes for local domain lookup when WINS is configured. ETHREEOH-2263.
14921: Merge HEAD to V3.1:
14599: Fixes to file server ACL parsing, part of ETHREEOH-2177
14930: Updated svn:mergeinfo
15231: Fix for cut/paste file between folders on CIFS. ETHREEOH-2323.
15570: Merge 3.2 to 3.1:
15548: CIFS server memory leak fixes (clear auth context, session close). ETHREEOH-2538
15571: Merge 3.2 to 3.1:
15549: Check for null ClientInfo in the setCurrentUser() method and clear the auth context. Part of ETHREEOH-2538.
15550: Fixed performance issue in the continue search code, add warn level output of folder search timing.
15572: Update svn:mergeinfo
15627: Merge 3.2 to 3.1:
15626: Fixed NetBIOS reports an invalid packet during session connection, and connection stalls for a while. JLAN-86.
15628: Update svn:mergeinfo
15780: Fix for MS Office document locking issue. ETHREEOH-2579.
15827: Fixed bug in delete node event processing.
16160: Minor change to debug output
16162: Add support for the . and .. pseudo entries in a folder search.
16163: Added timstamp tracking via the file state cache, blend cached timestamps into file info/folder search results.
16555: Fix for processing of NetBIOS packets over 64K in the older JNI code. Part of ETHREEOH-2882.
16556: Fix for CIFS session leak and 100% CPU when connect/disconnecting quickly. ETHREEOH-2881.
16559: Fix for ACL parsing in the standalone JLAN Server build. JLAN-89.
16666: Fix for CIFS cannot handle requests over 64K in JNI code, causes session disconnect, standalone server. JLAN-91.
16709: Fixed the FTP not logged on status return code, now uses reply code 530. JLAN-90.
16710: Added CIFS NT status code/text for the 'account locked' status, 0xC0000234. ETHREEOH-2897.
16717: Fixed setAllowConsoleShutdown setting in standalone server can cause infinite loop. JLAN-38.
16718: Fix for Alfresco and AVM spaces are empty when viewed by FTP and Alfresco is run as non-root. ETHREEOH-2652.
16727: Fix for unable to connect via FTP via Firefox (when anonymous logons are not enabled). ETHREEOH-2012.
16987: Merge 2.2 to 3.1:
13089: (record-only) Fix "Read-Write transaction" exception, when the user does not exist. ETWOTWO-1055.
13091: (record-only) Fix for NFS server "Read-Write transaction started within read-only transaction" exception. ETWOTWO-1054.
14190: (record-only) Fix for cut/paste a folder from Alfresco CIFS to local drive loses folder contents. ETWOTWO-1159.
14191: (record-only) Additional fix for CIFS 'No more connections' error. ETWOTWO-556
14199: (record-only) Fix for NFS problem with Solaris doing an Access check on the share level handle. ETWOTWO-1225.
14210: (record-only) Added support for FTP EPRT and EPSV commands, on IPv4 only. ETWOTWO-325.
14216: (record-only) Fixed FTP character encoding, ported UTF8 normalizer code from v3.x. ETWOTWO-1151.
14229: (record-only) Remove unused import.
14655: (record-only) Convert content I/O exceptions to file server exceptions during write and truncate. ETWOTWO-1241.
14825: (record-only) Add support for the extended response to the CIFS NTCreateAndX call, back port of ETWOTWO-1232.
15869: (record-only) Port of desktop action client side EXE fixes from v3.x. ETWOTWO-1374.
17130: Fix for cannot delete file via CIFS that has a thumbnail associated with it. ETHREEOH-3143 and ETHREEOH-3115.
17359: Fix for CIFS/Kerberos/SPNEGO logon problem with Win2008/Win7 client. ETHREEOH-3225.
17839: Rewrite the rename file logic to handle MS Office file rename patterns. ETHREEOH-1951.
17842: Missing file from previous checkin.
17843: Re-use open files for the same session/process id so that writes on each file handle go to the same file. Port of ETWOTWO-1250.
17861: Merge 2.2 to 3.1:
17803: Re-use open files for the same session/process id so that writes on each file handle go to the same file. ETWOTWO-1250. (Record-only)
18432: Added FTP data port range configuration via <dataPorts>n:n</dataPorts> config value. ETHREEOH-4103.
18451: Fixed incorrect FTP debug level name.
20200: Merge PATCHES/V3.2.1 to 3.3:
20142: Added debug output to dump the restart file name for FindFirst/FindNext folder searches (via the 'Search' debug output level).
20201: Merge PATCHES/V3.2.1 to 3.3:
20143: Fix for files being skipped during a long folder listing via CIFS, ALF-2730.
20202: Update svn:mergeinfo
20219: Fix for ALF-2791 - correction to changes in rev 20129 so the upload file servlet path is generated for all cases.
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@20567 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
17533: Fix for unreported issue for events with multiple days (secondary elements) aren't filtered correctly when view is filtered by tags
17535: ETHREEOH-3411 - Alert appears when loading My Dashboard when Documents I'm editing dashlet is aded and site name was edited with XSS text
17536: Fixes for various forms issues (ETHREEOH-3398, ETHREEOH-3273, ETHREEOH-3339 & ALFCOM-3587) and reverted accidentally checked in log4j.properties file
- Folders can now have tags applied in edit form
- Working copy nodes have their cm:name property set to protected
- Removed mandatory marker from checkbox control (if you have a boolean there is always a value so no need to mark as mandatory)
- Potential security issue
17537: ETHREEOH-1908 - .docx word documents are not displayed in 'Word Documents' category in 'Document List' component. Also fixed some i18n strings.
17538: Fix for ETHREEOH-3085 and ETHREEOH-3341.
- NTLM/Kerberos, Tomcat/JBoss5 and JSF client now play nicely on session timeout and display the correct configured page on first login.
- Tested Share NTLM works correctly with above changes.
17539: Fix for ETHREEOH-3368: UI does not show multi-valued MLText propertis as localisable
17543: Merged DEV_TEMPORARY to V3.2
17529: Fix for ETHREEOH-3186 & ETHREEOH-3187
17544: Fix for ETHREEOH-1509 - Manage action is not applied for task resources part from My Tasks tab in Office Addins if user already opens another task.
17547: Fix for ETHREEOH-1709 - AccessDeniedException - Download Servlet not re-directing user to login page.
- WebDav path now resolved to a noderef as system user - then the permission test for READ_CONTENT is performed directly on the resulting noderef.
17548: Fix for ETHREEOH-3137 - Tags created for All day event are not displayed in Tags pane.
17551: Final part of fix for ETHREEOH-2161 includes solution for ETHREEOH-3270.
- An admin user can now optionally disable the execute of Rules and the Archive of nodes during a folder delete operation.
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@18128 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
17475: ETHREEOH-3295: Fix to AuthorityMigrationPatch
- Forces transaction retry if worker thread reaches child authority before a parent authority
- Tested on Kev's 3.1.1 repository with ~20,000 bulk loaded users and ~2,000 Share sites
- Now completes in 5 minutes as opposed to 45
17461: ETHREEOH-3268: Added MutableAuthenticationService.isAuthenticationCreationAllowed () to allow conditional display of external user invitation UI
17450: ETHREEOH-2762: Correction to previous fix. Do not generate new name when working copy copied back on check in.
17440: ETHREEOH-3295: Fixed logging in FixNameCrcValuesPatch
17439: ETHREEOH-2762: Improved behaviour when a working copy is copied
- Working copy aspect already removed the working copy aspect on copy
- Now derives a new name from the node checked out from and a UUID, preserving the extension
17438: ETHREEOH-2690: Fix sequencing of jgroups system property setting
- declared dependency between internalEHCacheManager and jgroupsPropertySetter
17436: ETHREEOH-3295: Further performance improvements to AuthorityMigrationPatch
- authority created at same time as all its parent associations to save lots of reindexing, as per LDAP sync
- multi-threaded BatchProcessor (as used by LDAP sync, FixNameCrcValuesPatch) used to process work in 2 threads in batches of 20, report progress every 100 entries and handle transaction retries
- BatchProcessor now promoted to its own package
17394: Fix for license issue in local enterprise builds.
- Replace Community with Enterprise in version.properties during enterprise war building
17365: ETHREEOH-3229: Visited and fixed all SearchService result set leaks
17362: ETHREEOH-3254: Eliminate needless ping to LDAP server in LDAPAuthenticationComponentImpl.implementationAllowsGuestLogin()
17348: ETHREEOH-3003: Fix NPE in Hyperic when LicenseDescriptor has null fields
17316: Merged V3.1 to V3.2
17315: ETHREEOH-3092: PersonService won't let you create duplicate persons anymore.
17314: ETHREEOH-3158: Fix RepoServerMgmt to work with external authentication methods
- AuthenticationService.getCurrentTicket / getNewTicket now call pre authentication check before issuing a new ticket, thus still allowing ticket enforcement when external authentication is in use.
17312: ETHREEOH-3219: Enable resolution of JMX server password file path on JBoss 5
17299: Merged V3.2 to V3.1 (Record only)
17297: ETHREEOH-1593: Changed name of username cookie and fixed login.jsp to decode it properly
17248: ETHREEOH-1593: alfUser cookie value should be base 64 encoded to allow for non-ASCII characters
17297: ETHREEOH-1593: Changed name of username cookie and fixed login.jsp to decode it properly
- thanks Kev!
17292: ETHREEOH-1842: Ticket association with HttpSession IDs tracked so that we don't invalidate a ticket in use by multiple sessions prematurely
- AuthenticationService validate, getCurrentTicket, etc. methods now take optional sessionId arguments
17269: Fix failing unit test
- reinstate original behaviour of AbstractChainingAuthenticationService.getAuthenticationEnabled()
17268: Fix InvitationService
- Runs as system to do privileged AuthenticationService actions
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@18105 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
17667: Branch for SpringSurf integration - from HEAD r17665
17668: Fix to ensure included scripts files are not loaded from a cached classpath loader.
17670: Part 1 of SpringSurf integration - changes relating to spring-surf-core-1.0.0.CI-SNAPSHOT.jar
17674: Part 2 of SpringSurf integration - changes relating to spring-surf-core-configservice-1.0.0.CI-SNAPSHOT.jar
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@17788 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
16662: LDAP sync: improved group association filtering, referential integrity checking, deletion strategy and performance tuning of batch sizes
16648: ETHREEOH-2752: Improved ticket validation fix
- Invalidate user's tickets during person deletion rather than validation or it can mess up chained validation
16647: ETHREEOH-2534: Fixed Sharepoint NTLM authentication
- user details were never getting cached in the session
16579: Small improvement to LDAP error reporting
- Committed errors counted before successes in a logging interval
16515: LDAP sync performance
- Improved full sync strategy - run differential queries to work out required updates/additions and full queries to work out required deletions. Saves updating unchanged nodes.
- Use a TreeSet rather than a HashSet to gather group associations in an attempt to avoid blowing the heap size
16498: More LDAP performance improvements
- Uses thread pool with 4 worker threads and blocking queue to process returned results. The number of worker threads can be controlled by the synchronization.workerThreads property.
- Switched LDAP connection pooling back on again
- Group Associations processsed individually so that errors are collated and we get a better idea of their throughput
- Fixed potential bug. Group membership resolution done with isolated LDAP context to avoid cookies from paging creeping in.
16424: Try switching off LDAP connection pooling to see if it works better with our flaky server.
16414: Further LDAP fault tolerance
- Log causes of group member resolution failures where possible
16413: More fault tolerance for LDAP sync
- Always commit last sync times before overall sync is complete to avoid the 'forgetting' of differential sync information
- DN comparisons should be case insensitive to avoid issues resolving DNs to user and group IDs
16398: Improved monitoring and fault tolerance for LDAP sync
- When the batch is complete a summary of the number of errors and the last error stack trace will be logged at ERROR level
- Each individual error is logged at WARN level and progress information (including % complete) is collated and logged at INFO level after a configurable interval
- In the Enterprise Edition all metrics can be monitored in real time through JMX
- Sanity testing to be performed by Mike!
16319: Merged HEAD to V3.2
16316: ALFCOM-3397: JBoss 5 compatibility fix
- Relative paths used by LDAP subsystem configuration weren't being resolved correctly
- See also https://jira.jboss.org/jira/browse/JBAS-6548 and https://jira.springsource.org/browse/SPR-5120
16272: ETHREEOH-2752: Once more with feeling!
16261: ETHREEOH-2752: Correct exception propagation.
16260: ETHREEOH-2752: Fix ticket validation
- Current ticket was getting forgotten by previous fix
- Person validation in CHECK mode now done AFTER the current user is set, so that the current ticket is remembered
16243: ETHREEOH-2752: Improve ticket validation used by all authentication filters
- Now takes into account whether person actually exists or not
- Tickets for non-nonexistent persons are now considered invalid and cached session information is invalidated
- New BaseAuthenticationFilter superclass for all authentication filters
- Improved fix to ETHREEOH-2839: WebDAV user is cached consistently using a different session attribute from the Web Client
16233: ETHREEOH-2754: Correction to previous checkin.
- relogin for SSO authentication, logout for normal login page
- logout is default
16232: ETHREEOH-2754: Log Out Action outcome passed as a parameter
- relogin for SSO authentication, login for normal login page
- Means the log out link always leads to the correct place, even when the session has expired
- Also lowered ticket validation error logging to DEBUG level to avoid unnecessary noise in the logs from expired sessions
16220: ETHREEOH-2839: Fixed potential ClassCastExceptions when Alfresco accessed via WebDAV and Web Client links in same browser
- WebDAV side no longer directly casts session user to a WebDAVUser
- ContextListener no longer casts session user to web client user
- Web client side will 'promote' session user to a web client User if necessary via AuthenticationHelper
- All authentication filters made to use appropriate AuthenticationHelper methods
16211: ETHREEOH-2835: LDAP sync batches user and group deletions as well as creations
- Also improved logging of sync failures
16197: ETHREEOH-2782: LDAP subsystems now support search-based user DN resolution
- When ldap.authentication.userNameFormat isn't set (now the default) converts a user ID to a DN by running ldap.synchronization.personQuery with an extra condition tacked on the end to find the user by ID
- Structured directories and authentication by attributes not in the DN such as email address now supported
16189: ALFCOM-3283: Prevent errors when user accepts an invite when not logged in
- new isGuest attribute propagated to user object
- header component (used by accept-invite page) needs to avoid calling prefs and site webscripts for guest user
- Conditional stuff in header template changed to use user.isGuest
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@16896 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
6435: AR-1644 Web Scripts do not provide any control over caching
6469: Replaced EUPL licence with standard license header
6526: AR-1685 Error creating workflow with no document associated
6565: Fix for issue with file Upload in main web-client portlet for JBoss/Liferay portal integration.
6578: AR-1620: Upgraded One-Jar to 0.96-RC4
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@6581 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
svn merge svn://svn.alfresco.com:3691/alfresco/BRANCHES/V2.0@5141 svn://svn.alfresco.com:3691/alfresco/BRANCHES/V2.0@51352 .
- FLOSS
- Some files will need a follow-up
-root/projects/repository/source/java/org/alfresco/repo/avm/wf/AVMRemoveWFStoreHandler.java (not yet on HEAD: 5094)
-root/projects/repository/source/java/org/alfresco/filesys/server/state/FileStateLockManager.java (not yet on HEAD: 5093)
-onContentUpdateRecord (not on HEAD)
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@5167 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
- an out-of-date ticket could be used by the client to call repo services
- after failing to validate an out-of-date ticket, the User object was not being removed from the Session
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@2029 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
