From chris at gfz-potsdam.de  Tue Jul  7 03:35:47 2015
From: chris at gfz-potsdam.de (Christoph =?utf-8?Q?Sens-Sch=C3=B6nfelder?=)
Date: Tue, 07 Jul 2015 09:35:47 +0200
Subject: [Moin-user] Moin moin on OSX Yosemite
Message-ID: <web-20632927@cgp2.gfz-potsdam.de>

Hi,


I was happily using MoinX 1.0.3 on my mac. Now I upgraded 
it to Yosemite and I get the attached page whatever I try 
to load.


Is there any newer mac-version around that I could use?


Best regards
Christoph



-------------- next part --------------
A non-text attachment was scrubbed...
Name: Bildschirmfoto 2015-07-07 um 09.33.24.png
Type: image/png
Size: 203883 bytes
Desc: not available
URL: <http://mail.python.org/pipermail/moin-user/attachments/20150707/ee06869a/attachment.png>

From phatbuckett at gmail.com  Tue Jul  7 15:44:05 2015
From: phatbuckett at gmail.com (Darren Spruell)
Date: Tue, 7 Jul 2015 12:44:05 -0700
Subject: [Moin-user] Moin moin on OSX Yosemite
In-Reply-To: <web-20632927@cgp2.gfz-potsdam.de>
References: <web-20632927@cgp2.gfz-potsdam.de>
Message-ID: <CAKVSOJVuV8yGxOpD0LuBBtRaPE9R5qNZe+egZiba7duPGc3+kg@mail.gmail.com>

On Tue, Jul 7, 2015 at 12:35 AM, Christoph Sens-Sch?nfelder
<chris at gfz-potsdam.de> wrote:
> Hi,
>
>
> I was happily using MoinX 1.0.3 on my mac. Now I upgraded it to Yosemite and
> I get the attached page whatever I try to load.
>
>
> Is there any newer mac-version around that I could use?

MoinX maintainer says:

"MoinX is no longer actively maintained since the author no longer
uses the software. I suggest you go for the MoinMoin Desktop Edition
which runs nicely on OS X. The added benifit is that upgrading later
to a dedicated server is really trivial (2009-03-12)."
- http://moinx.antbear.org/

Try: https://moinmo.in/DesktopEdition


Also, kind of weird that your exception screenshot showed you using a
legacy Python environment on Yosemite. Yosemite ships with Python 2.7
but your interpreter was the 2.6 environment...

$ /System/Library/Frameworks/Python.framework/Versions/2.5/Resources/Python.app/Contents/MacOS/Python
 -V
Python 2.6.9

$ python -V
Python 2.7.9

Unless you have special factors, you probably want to use the default
2.7 environment.

-- 
Darren Spruell
phatbuckett at gmail.com



From chris at gfz-potsdam.de  Tue Jul  7 16:27:18 2015
From: chris at gfz-potsdam.de (Christoph =?utf-8?Q?Sens-Sch=C3=B6nfelder?=)
Date: Tue, 07 Jul 2015 22:27:18 +0200
Subject: [Moin-user] Moin moin on OSX Yosemite
In-Reply-To: <CAKVSOJVuV8yGxOpD0LuBBtRaPE9R5qNZe+egZiba7duPGc3+kg@mail.gmail.com>
References: <web-20632927@cgp2.gfz-potsdam.de>
	<CAKVSOJVuV8yGxOpD0LuBBtRaPE9R5qNZe+egZiba7duPGc3+kg@mail.gmail.com>
Message-ID: <web-20641649@cgp2.gfz-potsdam.de>

Hi Darren,


thanks for pointing out the alternative. The desktop 
version?moin-1.9.8 runs fine. But I would now like to 
integrate my old pages in the new wikiserver. Can anyone 
tell me where MoinX stores the content. There is 
no?moin-1.9.8/wiki/data/pages/ folder in the MoinX app.


Thanks
Christoph


On Tue, 7 Jul 2015 12:44:05 -0700
  Darren Spruell <phatbuckett at gmail.com> wrote:
> On Tue, Jul 7, 2015 at 12:35 AM, Christoph 
>Sens-Sch?nfelder
> <chris at gfz-potsdam.de> wrote:
>> Hi,
>>
>>
>> I was happily using MoinX 1.0.3 on my mac. Now I 
>>upgraded it to Yosemite and
>> I get the attached page whatever I try to load.
>>
>>
>> Is there any newer mac-version around that I could use?
> 
> MoinX maintainer says:
> 
> "MoinX is no longer actively maintained since the author 
>no longer
> uses the software. I suggest you go for the MoinMoin 
>Desktop Edition
> which runs nicely on OS X. The added benifit is that 
>upgrading later
> to a dedicated server is really trivial (2009-03-12)."
> - http://moinx.antbear.org/
> 
> Try: https://moinmo.in/DesktopEdition
> 
> 
> Also, kind of weird that your exception screenshot 
>showed you using a
> legacy Python environment on Yosemite. Yosemite ships 
>with Python 2.7
> but your interpreter was the 2.6 environment...
> 
> $ 
>/System/Library/Frameworks/Python.framework/Versions/2.5/Resources/Python.app/Contents/MacOS/Python
> -V
> Python 2.6.9
> 
> $ python -V
> Python 2.7.9
> 
> Unless you have special factors, you probably want to 
>use the default
> 2.7 environment.
> 
> -- 
> Darren Spruell
> phatbuckett at gmail.com




From philip.colmer at linaro.org  Tue Jul 21 04:05:38 2015
From: philip.colmer at linaro.org (Philip Colmer)
Date: Tue, 21 Jul 2015 09:05:38 +0100
Subject: [Moin-user] Why multiple user files for individual users?
Message-ID: <CAKTSSTgO-efUUX1ynFZLgggVcWcVOCdQSH3i6nSJLWnJHN9dbA@mail.gmail.com>

Hi

Having cleaned up the data/user directory on my system, I've spotted that
some users occasionally are still ending up with multiple files for their
account.

I've diff'ed the files and the only difference is the last_saved field so
I'm struggling to understand why moin is creating subsequent files ...

Thanks.

Philip
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/moin-user/attachments/20150721/60dacb83/attachment.html>

From idekerlab.bdemchak at gmail.com  Tue Jul 28 21:37:20 2015
From: idekerlab.bdemchak at gmail.com (Barry Demchak)
Date: Tue, 28 Jul 2015 18:37:20 -0700
Subject: [Moin-user] Permissions for New Account page
Message-ID: <043001d0c99f$1cd4de40$567e9ac0$@gmail.com>

Hi -

 

I have inherited a Moin Moin that has an odd behavior:

 

The new account page (ourdomain.com/cgi-bin/moin.cgi/?action=newaccount)
displays just fine if I'm already logged in. But if I'm not logged in (as
would a new user be), I get a permission violation ("You are not allowed to
use this action.").

 

I think the permission setup is missing the point . a new user can't already
be logged in. Or . possibly I'm missing the point. (Could this be intended
to operate this way??)

 

Can you help me get this New Account page configured so that new users can
create accounts?

 

Thanks!

 

vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv

: Barry Demchak, PhD

: National Resource for Network Biology (NRNB)

: UC San Diego

: Department of Medicine

: Medical Sciences Research (MSR) Building, Room 3A15

:  <https://sosa.ucsd.edu/confluence/display/~bdemchak/Home>
https://sosa.ucsd.edu/confluence/display/~bdemchak/Home

: Land line: (858) 822-4756, Mobile: (858) 452-8700

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/moin-user/attachments/20150728/a10e20de/attachment.html>

From paul at boddie.org.uk  Wed Jul 29 07:28:34 2015
From: paul at boddie.org.uk (Paul Boddie)
Date: Wed, 29 Jul 2015 13:28:34 +0200
Subject: [Moin-user] Permissions for New Account page
In-Reply-To: <043001d0c99f$1cd4de40$567e9ac0$@gmail.com>
References: <043001d0c99f$1cd4de40$567e9ac0$@gmail.com>
Message-ID: <201507291328.35265.paul@boddie.org.uk>

On Wednesday 29. July 2015 03.37.20 Barry Demchak wrote:
> 
> I have inherited a Moin Moin that has an odd behavior:
> 
> The new account page (ourdomain.com/cgi-bin/moin.cgi/?action=newaccount)
> displays just fine if I'm already logged in. But if I'm not logged in (as
> would a new user be), I get a permission violation ("You are not allowed to
> use this action.").
> 
> I think the permission setup is missing the point . a new user can't
> already be logged in. Or . possibly I'm missing the point. (Could this be
> intended to operate this way??)

It could be the case that new users would be added manually by superusers:

https://moinmo.in/FeatureRequests/DisableUserCreation

This is also covered here:

https://moinmo.in/HowTo/ManagingAccountCreation

> Can you help me get this New Account page configured so that new users can
> create accounts?

If your authentication mechanism makes use of existing accounts from other 
systems (the Web server, LDAP, and so on), then new account creation probably 
isn't required anyway. 

Otherwise, it might be useful to allow new account creation, but then it is 
important to introduce additional measures to prevent spam registrations. Off 
the top of my head, I suggest:

Account verification: https://moinmo.in/HowTo/ManagingAccountCreation

Textchas for registration and editing: https://moinmo.in/HelpOnSpam

A trusted editors group (see the ManagingAccountCreation page above)

This is what we used for the Mailman Wiki and it seems to work fairly well. 
Some more details...

Account verification works fairly well, but it doesn't really seem to stop 
spammers. At most, it just filters out some of them, but it also manages to 
slow down registrations, too.

Textchas are effective, but you have to choose a good question: "what is 2 + 
2" or similar things are not effective; you need to choose something that a 
random spammer would not be able to find out by just looking at the question. 
Various wikis choose to have the answer to a simple "what is the password" 
question as a secret that is shared by other means.

Having a trusted editors group may mean that you impose access control on the 
entire wiki insisting that before anyone can edit anything they must be added 
to the trusted editors group. Thus, "groupless" users may only read things and 
cannot start editing straight away. This effectively adds another hurdle for 
spammers: they may get as far as registering an account, but then their 
account needs to be "approved".

Once upon a time, I did make an extension that permitted the review of edits 
so that people could just start editing, but where their edits were queued and 
hidden from site users, but it's arguably better to just put obstacles in the 
path of spammers as early as possible in order to prevent later tidying-up or 
administration effort. For genuine users, the above measures shouldn't really 
be much of a burden.

[...]

> https://sosa.ucsd.edu/confluence/display/~bdemchak/Home

And if your department ever wishes to migrate from Confluence...

https://moinmo.in/ConfluenceConverter

...we may have the solution for that as well. ;-)

Paul



From paul at boddie.org.uk  Wed Jul 29 08:49:31 2015
From: paul at boddie.org.uk (Paul Boddie)
Date: Wed, 29 Jul 2015 14:49:31 +0200
Subject: [Moin-user] Why multiple user files for individual users?
In-Reply-To: <CAKTSSTgO-efUUX1ynFZLgggVcWcVOCdQSH3i6nSJLWnJHN9dbA@mail.gmail.com>
References: <CAKTSSTgO-efUUX1ynFZLgggVcWcVOCdQSH3i6nSJLWnJHN9dbA@mail.gmail.com>
Message-ID: <201507291449.31682.paul@boddie.org.uk>

On Tuesday 21. July 2015 10.05.38 Philip Colmer wrote:
> Hi
> 
> Having cleaned up the data/user directory on my system, I've spotted that
> some users occasionally are still ending up with multiple files for their
> account.
> 
> I've diff'ed the files and the only difference is the last_saved field so
> I'm struggling to understand why moin is creating subsequent files ...

Are the permissions different between the old and new files?

Paul



From idekerlab.bdemchak at gmail.com  Wed Jul 29 20:58:18 2015
From: idekerlab.bdemchak at gmail.com (Barry Demchak)
Date: Wed, 29 Jul 2015 17:58:18 -0700
Subject: [Moin-user] Permissions for New Account page
In-Reply-To: <201507291328.35265.paul@boddie.org.uk>
References: <043001d0c99f$1cd4de40$567e9ac0$@gmail.com>
	<201507291328.35265.paul@boddie.org.uk>
Message-ID: <011301d0ca62$d36aec30$7a40c490$@gmail.com>

Hi, Paul --

Thanks for the excellent response.

In going through all of the options and issues you present, I think I'm
likely lucky to have exactly the configuration I do -- which is that to get
an ID, a new user has to know someone who already has an ID. It could well
be that our wiki was set up this way on purpose precisely to circumvent
spammers and DoS attacks. If that's the case, the major failing is in our
own documentation about how to get an ID, which I can easily correct (and
have!).

Thanks for your treatment of all of the options ... I'll hold onto your
reply in case we ever want to mix things up.

As for changing from Confluence to Moin Moin, it's a fun idea and I
appreciate your pointing it out. The Confluence instance you're referring to
is essentially static. The group that owns it hasn't produced much in the
last 2-3 years, so it probably wouldn't be useful to address this.

That said, I'm very happy to consider Moin Moin for new uses ...
particularly based on the product documentation and your great reply.

Have a great week!

-----Original Message-----
From: Paul Boddie [mailto:paul at boddie.org.uk] 
Sent: Wednesday, July 29, 2015 4:29 AM
To: moin-user at lists.sourceforge.net
Subject: Re: [Moin-user] Permissions for New Account page

On Wednesday 29. July 2015 03.37.20 Barry Demchak wrote:
> 
> I have inherited a Moin Moin that has an odd behavior:
> 
> The new account page 
> (ourdomain.com/cgi-bin/moin.cgi/?action=newaccount)
> displays just fine if I'm already logged in. But if I'm not logged in 
> (as would a new user be), I get a permission violation ("You are not 
> allowed to use this action.").
> 
> I think the permission setup is missing the point . a new user can't 
> already be logged in. Or . possibly I'm missing the point. (Could this 
> be intended to operate this way??)

It could be the case that new users would be added manually by superusers:

https://moinmo.in/FeatureRequests/DisableUserCreation

This is also covered here:

https://moinmo.in/HowTo/ManagingAccountCreation

> Can you help me get this New Account page configured so that new users 
> can create accounts?

If your authentication mechanism makes use of existing accounts from other
systems (the Web server, LDAP, and so on), then new account creation
probably isn't required anyway. 

Otherwise, it might be useful to allow new account creation, but then it is
important to introduce additional measures to prevent spam registrations.
Off the top of my head, I suggest:

Account verification: https://moinmo.in/HowTo/ManagingAccountCreation

Textchas for registration and editing: https://moinmo.in/HelpOnSpam

A trusted editors group (see the ManagingAccountCreation page above)

This is what we used for the Mailman Wiki and it seems to work fairly well. 
Some more details...

Account verification works fairly well, but it doesn't really seem to stop
spammers. At most, it just filters out some of them, but it also manages to
slow down registrations, too.

Textchas are effective, but you have to choose a good question: "what is 2 +
2" or similar things are not effective; you need to choose something that a
random spammer would not be able to find out by just looking at the
question. 
Various wikis choose to have the answer to a simple "what is the password" 
question as a secret that is shared by other means.

Having a trusted editors group may mean that you impose access control on
the entire wiki insisting that before anyone can edit anything they must be
added to the trusted editors group. Thus, "groupless" users may only read
things and cannot start editing straight away. This effectively adds another
hurdle for
spammers: they may get as far as registering an account, but then their
account needs to be "approved".

Once upon a time, I did make an extension that permitted the review of edits
so that people could just start editing, but where their edits were queued
and hidden from site users, but it's arguably better to just put obstacles
in the path of spammers as early as possible in order to prevent later
tidying-up or administration effort. For genuine users, the above measures
shouldn't really be much of a burden.

[...]

> https://sosa.ucsd.edu/confluence/display/~bdemchak/Home

And if your department ever wishes to migrate from Confluence...

https://moinmo.in/ConfluenceConverter

...we may have the solution for that as well. ;-)

Paul

----------------------------------------------------------------------------
--
_______________________________________________
Moin-user mailing list
Moin-user at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/moin-user