From gerv at mozilla.org Fri Sep 4 11:44:04 2015 From: gerv at mozilla.org (Gervase Markham) Date: Fri, 4 Sep 2015 12:44:04 +0100 Subject: Remove approval requirement for trunk? In-Reply-To: References: Message-ID: <55E98404.2040206@mozilla.org> On 28/08/15 01:33, Dave Miller wrote: > I like this idea. I'm pretty sure we trust the folks with review permissions these days, and like you said, a- on trunk is rare. Well, you're the project lead, and no-one else has objected, so let's call this done :-) Approval is no longer required on trunk except for patches which touch the DB (or change DB types, e.g. for custom fields, because if someone creates a new one, then it'll have the wrong type if there's a revert). Basically, non-rollbackable patches. Gerv From kevin.penrose at gmail.com Fri Sep 4 14:38:10 2015 From: kevin.penrose at gmail.com (Kevin Penrose) Date: Fri, 4 Sep 2015 07:38:10 -0700 (PDT) Subject: Bugzilla config problem or Netbeans plugin issue?? Message-ID: <24b45cbe-0271-4e87-ad7f-83294785111e@googlegroups.com> I have a Bugzilla install as follows: * This is Bugzilla 4.4.9 on perl 5.18.2 * Running on Linux 3.13.0-61-generic #100-Ubuntu SMP Wed Jul 29 11:21:34 UTC 2015 I have installed the NetBeans Bugzilla plugin v. 1.1.72. I am using NetBeans 8.0.2. There are many, many, posts about integrating netbeans and bugzilla, and the last bug report in netbeans.org says that things have been fixed, yada, yada, but I have problems. I CAN submit and edit bugs to the netbeans.org bugzilla system from said netbeans configuration. I CAN set up a repository and query my local bugzilla install from netbeans configuration. However, for my local repository, I CANNOT edit or submit new tasks. I continually prompted to enter validation credentials, and even though when I press the validate button it says "connection successful", it just cycles for a bit and presents the dialog again to validate. I end up cancelling the update. As I said, this works with the netbeans.org/bugzilla site. My bugzilla configuration is pretty much vanilla, running under apache2 on the linux server. The web interface works perfectly. Can anyone provide any insight as to where I might look to straighten this out. Side note: the netbeans bugzilla issue for this, which is marked resolved, mentions plugin 1.1.75 for the bugzilla plugin. But, lo and behold, the buzilla plugin is nowhere to be found on the netbeans plugin repository. A shame, since I work in a small company, we don't need anything as complex as jira, etc. Thanks. _______________________________________________ dev-apps-bugzilla mailing list dev-apps-bugzilla at lists.mozilla.org https://lists.mozilla.org/listinfo/dev-apps-bugzilla From gerv at mozilla.org Mon Sep 7 12:53:13 2015 From: gerv at mozilla.org (Gervase Markham) Date: Mon, 7 Sep 2015 13:53:13 +0100 Subject: Bugzilla config problem or Netbeans plugin issue?? In-Reply-To: <24b45cbe-0271-4e87-ad7f-83294785111e@googlegroups.com> References: <24b45cbe-0271-4e87-ad7f-83294785111e@googlegroups.com> Message-ID: <55ED88B9.5040005@mozilla.org> On 04/09/15 15:38, Kevin Penrose wrote: > There are many, many, posts about integrating netbeans and bugzilla, > and the last bug report in netbeans.org says that things have been > fixed, yada, yada, but I have problems. I think you are unlikely to find anyone here who uses that plugin, and it's not maintained by us. You need to contact the authors of the plugin. > My bugzilla configuration is pretty much vanilla, running under > apache2 on the linux server. The web interface works perfectly. > > Can anyone provide any insight as to where I might look to straighten > this out. When you run checksetup.pl, do you have all the modules you need for the API to work? Gerv _______________________________________________ dev-apps-bugzilla mailing list dev-apps-bugzilla at lists.mozilla.org https://lists.mozilla.org/listinfo/dev-apps-bugzilla From jochen.wiedmann at gmail.com Wed Sep 16 10:00:32 2015 From: jochen.wiedmann at gmail.com (Jochen Wiedmann) Date: Wed, 16 Sep 2015 12:00:32 +0200 Subject: Several VHosts, one database Message-ID: Hi, I'd like to ask, whether the following idea is sound: I've got a bugzilla installation, where several Intranets are connected to a single machine. As a consequence, the machine has multiple network interfaces, and, in particular, multiple IP adresses. Depending on the users intranet, a different IP address is used as the browsers URL. It is therefore mandatory, that the urlbase parameter varies, depending on the browsers URL. I intend to resolve the problem as follows: For every IP address, I'll create a VHost in Apache, with a configuration like SetEnv PROJECT "Name of Net" Likewise, I'll be setting up Bugzilla once for every net with PROJECT="Name of Net" perl checksetup.pl The various Bugzilla Vhosts will be configured to share a single database. I won't be able to share the data directories, but I hope that will be fine. In essence, I will have the same situation that I would have when clustering Bugzilla, only without the shared data directories. Are there any problems I will have to expect? Thanks, Jochen -- The next time you hear: "Don't reinvent the wheel!" http://www.keystonedevelopment.co.uk/wp-content/uploads/2014/10/evolution-of-the-wheel-300x85.jpg From theycallmefish at gmail.com Wed Sep 16 13:18:44 2015 From: theycallmefish at gmail.com (Ryan Wilson) Date: Wed, 16 Sep 2015 07:18:44 -0600 Subject: Several VHosts, one database In-Reply-To: References: Message-ID: I can confirm that this method works (My production setup currently has 4 domains using the same database). I have a few warnings involving not sharing the data directory. Any template changes you do require a ./checksetup.pl run for each PROJECT. Also, if you have Bugzilla configured to store attachments locally, you will run into problems when accessing a bug from a host other than the one the bug was added in. I can, however, confirm that replacing the attachments directory in all but one setup with a symbolic link to the remaining setup and configuring apache to accept symlink read/write eliminates that problem entirely. On Wed, Sep 16, 2015 at 4:00 AM, Jochen Wiedmann wrote: > Hi, > > I'd like to ask, whether the following idea is sound: > > I've got a bugzilla installation, where several Intranets are > connected to a single machine. As a consequence, the machine has > multiple network interfaces, and, in particular, multiple IP adresses. > Depending on the users intranet, a different IP address is used as the > browsers URL. > > It is therefore mandatory, that the urlbase parameter varies, > depending on the browsers URL. I intend to resolve the problem as > follows: > > For every IP address, I'll create a VHost in Apache, with a configuration > like > > SetEnv PROJECT "Name of Net" > > Likewise, I'll be setting up Bugzilla once for every net with > > PROJECT="Name of Net" perl checksetup.pl > > The various Bugzilla Vhosts will be configured to share a single > database. I won't be able to share the data directories, but I hope > that will be fine. > > In essence, I will have the same situation that I would have when > clustering Bugzilla, only without the shared data directories. > > Are there any problems I will have to expect? > > Thanks, > > Jochen > > > > -- > The next time you hear: "Don't reinvent the wheel!" > > > http://www.keystonedevelopment.co.uk/wp-content/uploads/2014/10/evolution-of-the-wheel-300x85.jpg > - > To view or change your list settings, click here: > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From jochen.wiedmann at gmail.com Wed Sep 16 18:59:17 2015 From: jochen.wiedmann at gmail.com (Jochen Wiedmann) Date: Wed, 16 Sep 2015 20:59:17 +0200 Subject: Several VHosts, one database In-Reply-To: References: Message-ID: Thanks, Ryan! On Wed, Sep 16, 2015 at 3:18 PM, Ryan Wilson wrote: > I can confirm that this method works (My production setup currently has 4 > domains using the same database). > > I have a few warnings involving not sharing the data directory. Any template > changes you do require a ./checksetup.pl run for each PROJECT. Also, if you > have Bugzilla configured to store attachments locally, you will run into > problems when accessing a bug from a host other than the one the bug was > added in. I can, however, confirm that replacing the attachments directory > in all but one setup with a symbolic link to the remaining setup and > configuring apache to accept symlink read/write eliminates that problem > entirely. > > On Wed, Sep 16, 2015 at 4:00 AM, Jochen Wiedmann > wrote: >> >> Hi, >> >> I'd like to ask, whether the following idea is sound: >> >> I've got a bugzilla installation, where several Intranets are >> connected to a single machine. As a consequence, the machine has >> multiple network interfaces, and, in particular, multiple IP adresses. >> Depending on the users intranet, a different IP address is used as the >> browsers URL. >> >> It is therefore mandatory, that the urlbase parameter varies, >> depending on the browsers URL. I intend to resolve the problem as >> follows: >> >> For every IP address, I'll create a VHost in Apache, with a configuration >> like >> >> SetEnv PROJECT "Name of Net" >> >> Likewise, I'll be setting up Bugzilla once for every net with >> >> PROJECT="Name of Net" perl checksetup.pl >> >> The various Bugzilla Vhosts will be configured to share a single >> database. I won't be able to share the data directories, but I hope >> that will be fine. >> >> In essence, I will have the same situation that I would have when >> clustering Bugzilla, only without the shared data directories. >> >> Are there any problems I will have to expect? >> >> Thanks, >> >> Jochen >> >> >> >> -- >> The next time you hear: "Don't reinvent the wheel!" >> >> >> http://www.keystonedevelopment.co.uk/wp-content/uploads/2014/10/evolution-of-the-wheel-300x85.jpg >> - >> To view or change your list settings, click here: >> > > -- The next time you hear: "Don't reinvent the wheel!" http://www.keystonedevelopment.co.uk/wp-content/uploads/2014/10/evolution-of-the-wheel-300x85.jpg From jochen.wiedmann at gmail.com Thu Sep 17 07:32:05 2015 From: jochen.wiedmann at gmail.com (Jochen Wiedmann) Date: Thu, 17 Sep 2015 09:32:05 +0200 Subject: What creates this error message? Message-ID: Hi, trying to install Bugzilla 5.0 on a Windows Server, getting the error message ./data/SAG/extensions/additional: Permission denied at Bugzilla/Install/Util.pm line 142. I don't get, what creates that error message. Is it the Apache httpd, and I must check the .htaccess file? Or, is it Bugzilla? If the latter, what might be the reasons? Bugzilla::Install::Util.pm, line 142 is the end of the export list, so that part is pointless. Thanks, Jochen -- The next time you hear: "Don't reinvent the wheel!" http://www.keystonedevelopment.co.uk/wp-content/uploads/2014/10/evolution-of-the-wheel-300x85.jpg From jochen.wiedmann at gmail.com Thu Sep 17 07:41:40 2015 From: jochen.wiedmann at gmail.com (Jochen Wiedmann) Date: Thu, 17 Sep 2015 09:41:40 +0200 Subject: What creates this error message? In-Reply-To: References: Message-ID: In the meantime, I moved the .htaccess file out of the way. Still the same message. So, the problem seems to lay within Bugzilla? On Thu, Sep 17, 2015 at 9:32 AM, Jochen Wiedmann wrote: > Hi, > > trying to install Bugzilla 5.0 on a Windows Server, getting the error message > > ./data/SAG/extensions/additional: Permission denied at > Bugzilla/Install/Util.pm line 142. > > I don't get, what creates that error message. Is it the Apache httpd, > and I must check the .htaccess file? Or, is it Bugzilla? If the > latter, what might be the reasons? Bugzilla::Install::Util.pm, line > 142 is the end of the export list, so that part is pointless. > > Thanks, > > Jochen > > > -- > The next time you hear: "Don't reinvent the wheel!" > > http://www.keystonedevelopment.co.uk/wp-content/uploads/2014/10/evolution-of-the-wheel-300x85.jpg -- The next time you hear: "Don't reinvent the wheel!" http://www.keystonedevelopment.co.uk/wp-content/uploads/2014/10/evolution-of-the-wheel-300x85.jpg From droidbittin at gmail.com Mon Sep 21 19:38:08 2015 From: droidbittin at gmail.com (Luna Jernberg) Date: Mon, 21 Sep 2015 12:38:08 -0700 (PDT) Subject: Swedish Bugzilla L10n Message-ID: <00a2689c-bff2-4f85-bdef-11f4863fd1bf@googlegroups.com> Hello i put up a BugZilla as test at work today at http://www.tibble.nu/ and http://tabyfriskola.se/ but saw that there was no Swedish Translation for Bugzilla and that would be kinda neat when working in a swedish school talked a bit to wicked on irc and told him i could help translate when i have time mid/end of October and in November when i got spare time, would be neat if you could send me more info about the l10n process for Bugzilla to bittin at reimu.nl :) _______________________________________________ dev-apps-bugzilla mailing list dev-apps-bugzilla at lists.mozilla.org https://lists.mozilla.org/listinfo/dev-apps-bugzilla From gerv at mozilla.org Wed Sep 23 13:22:48 2015 From: gerv at mozilla.org (Gervase Markham) Date: Wed, 23 Sep 2015 14:22:48 +0100 Subject: Swedish Bugzilla L10n In-Reply-To: <00a2689c-bff2-4f85-bdef-11f4863fd1bf@googlegroups.com> References: <00a2689c-bff2-4f85-bdef-11f4863fd1bf@googlegroups.com> Message-ID: <5602A7A8.90805@mozilla.org> On 21/09/15 20:38, Luna Jernberg wrote: > Hello i put up a BugZilla as test at work today at > http://www.tibble.nu/ and http://tabyfriskola.se/ but saw that there > was no Swedish Translation for Bugzilla and that would be kinda neat > when working in a swedish school talked a bit to wicked on irc and > told him i could help translate when i have time mid/end of October > and in November when i got spare time, would be neat if you could > send me more info about the l10n process for Bugzilla to bittin at > reimu.nl Hey, The best docs on how to localize Bugzilla are here: http://www.bugzilla.fr/docs/makedoc.html Good luck :-) Gerv _______________________________________________ dev-apps-bugzilla mailing list dev-apps-bugzilla at lists.mozilla.org https://lists.mozilla.org/listinfo/dev-apps-bugzilla From leifer at gmail.com Wed Sep 23 20:28:56 2015 From: leifer at gmail.com (Leif Gruenwoldt) Date: Wed, 23 Sep 2015 13:28:56 -0700 (PDT) Subject: REST API to get user name for a Bugzilla API Key Message-ID: Is there a Bugzilla REST API call to determine the user id with for an api key? What I'd like my app to is display the users name once they have authenticated with an api key (as a sanity check they are signed into the right account in case they are sharing a web browser with a friend, etc). Is this possible? I expected something like this to return the user id field but it doesn't. /rest/user/?api_token=foobar or maybe this /rest/valid_login?api_token=foobar _______________________________________________ dev-apps-bugzilla mailing list dev-apps-bugzilla at lists.mozilla.org https://lists.mozilla.org/listinfo/dev-apps-bugzilla From leifer at gmail.com Wed Sep 23 20:45:43 2015 From: leifer at gmail.com (Leif Gruenwoldt) Date: Wed, 23 Sep 2015 13:45:43 -0700 (PDT) Subject: REST API to get user name for a Bugzilla API Key In-Reply-To: References: Message-ID: Terrific. That looks like exactly what I'm looking for. I will be patient then and wait for it to make it upstream. On Wednesday, September 23, 2015 at 4:35:18 PM UTC-4, David Lawrence wrote: > We are working on something like this for BMO that could be ported over > to upstream if someone wanted it. It would need to be updated to work > with the new versionen API scheme. Also I need to update my version as well. > > https://bugzilla.mozilla.org/show_bug.cgi?id=1204683 > > dkl > > Leif Gruenwoldt wrote: > > Is there a Bugzilla REST API call to determine the user id with for an api key? > > > > What I'd like my app to is display the users name once they have authenticated with an api key (as a sanity check they are signed into the right account in case they are sharing a web browser with a friend, etc). Is this possible? > > > > I expected something like this to return the user id field but it doesn't. > > > > /rest/user/?api_token=foobar > > > > or maybe this > > > > /rest/valid_login?api_token=foobar > > _______________________________________________ > > dev-apps-bugzilla mailing list > > dev-apps-bugzilla at lists.mozilla.org > > https://lists.mozilla.org/listinfo/dev-apps-bugzilla > > - > > To view or change your list settings, click here: > > > > -- > David Lawrence > dkl at mozilla.com _______________________________________________ dev-apps-bugzilla mailing list dev-apps-bugzilla at lists.mozilla.org https://lists.mozilla.org/listinfo/dev-apps-bugzilla From lpsolit at gmail.com Sun Sep 27 14:18:07 2015 From: lpsolit at gmail.com (=?UTF-8?B?RnLDqWTDqXJpYyBCdWNsaW4=?=) Date: Sun, 27 Sep 2015 16:18:07 +0200 Subject: Bugzilla can now run as a PSGI application for a huge performance boost Message-ID: <5607FA9F.2020300@gmail.com> Hi all, In case you need some performance boost for your Bugzilla installation, you will be happy to know that I wrote a patch to make it work as a PSGI application. The patch is currently waiting for review, but you can already apply it to your 5.0.1 or 5.1 installation. The performance win is huge when compared to Apache 2.4 running in mod_cgi mode, see https://bugzilla.mozilla.org/show_bug.cgi?id=1201113#c3 When running our QA test scripts, Selenium scripts run 4 times faster with nginx + gazelle than with Apache in mod_cgi mode, and WebServices scripts run 19 times faster! Recordman is webservice_bug_fields.t which runs 88 times faster (4.2 seconds instead of 6.25 minutes)!! Note that the XML-RPC API doesn't play nicely with Plack yet, and so if you still use this deprecated API, you shouldn't apply my patch for now (or tell me how to fix xmlrpc.cgi to make Plack happy, maybe using XMLRPC::Transport::HTTP::Plack?). The JSON-RPC and REST API are working fine. LpSolit From gerv at mozilla.org Tue Sep 29 10:41:48 2015 From: gerv at mozilla.org (Gervase Markham) Date: Tue, 29 Sep 2015 11:41:48 +0100 Subject: Offering full attachment isolation to Bugzilla installations Message-ID: Hi everyone, Over the years, Bugzilla has been beefing up its attempts to avoid problems caused by the fact that attachments can be uploaded by untrustworthy people, and yet those attachments often have to be rendered in the browser - particularly for Bugzillas used for browser development, like BMO. First of all, we moved attachments to their own domain, using the attachmentbase parameter. This stops attachments from being able to access a user's Bugzilla cookies and credentials. It was even possible to give each attachment its own subdomain using wildcards, e.g. bz12345.bmoattachments.org. However, there are some issues that this still doesn't prevent, where attachments can do things to other attachments, which is allowed by the Same Origin Policy because bmoattachments.org is all one origin. In order to get full isolation in modern browsers, you need to host your attachments at one hostname per bug, on a domain which is in the Public Suffix List - http://publicsuffix.org/ . That way, attachments on bug12345.bmoattachments.org cannot access or do anything to attachments on bug54321.bmoattachments.org. The domain "bmoattachments.org" has been added to the PSL for BMO to use for precisely this. However, that leaves everyone else who runs a Bugzilla having to arrange for their own specially-registered domain to be added to the PSL, in order for them to get the same level of security. As the PSL takes some time to update and propagate to all browsers, this is a pain. Therefore, my plan is to register the domain "bzattachments.org", add "*.bzattachments.org" to the PSL, and then offer delegations (e.g. redhat.bzattachments.org, linuxkernel.bzattachments.org) to any bona fide Bugzilla which wants one. They just tell me their nameservers, and I add them to the domain's config. They can then host their attachments at bug12345.company.bzattachments.org, bug54321.company.bzattachments.org etc., and get full isolation. This would be a service provided by the Bugzilla project for the good of the web. Before I execute and publicise this plan, does anyone see any problems with it? Gerv _______________________________________________ dev-apps-bugzilla mailing list dev-apps-bugzilla at lists.mozilla.org https://lists.mozilla.org/listinfo/dev-apps-bugzilla From gerv at mozilla.org Wed Sep 30 09:20:55 2015 From: gerv at mozilla.org (Gervase Markham) Date: Wed, 30 Sep 2015 10:20:55 +0100 Subject: Bugzilla Meeting times Message-ID: Hi everyone, It's possible the current time-of-day of the Bugzilla meetings do not work well for everyone who might like to attend. If you have an interest in attending, each time or even sometimes, please can you reply to this message giving your location and timezone, and I can see if there's a happy medium which works for everyone? :-) Gerv _______________________________________________ dev-apps-bugzilla mailing list dev-apps-bugzilla at lists.mozilla.org https://lists.mozilla.org/listinfo/dev-apps-bugzilla From theycallmefish at gmail.com Wed Sep 30 13:57:04 2015 From: theycallmefish at gmail.com (Ryan Wilson) Date: Wed, 30 Sep 2015 07:57:04 -0600 Subject: Bugzilla Meeting times In-Reply-To: References: Message-ID: Provo, Utah. Timezone is MST (UTC?7:00) in Fall and Winter and MDT (UTC?6:00) in Spring and Summer. On Wed, Sep 30, 2015 at 3:20 AM, Gervase Markham wrote: > Hi everyone, > > It's possible the current time-of-day of the Bugzilla meetings do not > work well for everyone who might like to attend. If you have an interest > in attending, each time or even sometimes, please can you reply to this > message giving your location and timezone, and I can see if there's a > happy medium which works for everyone? :-) > > Gerv > _______________________________________________ > dev-apps-bugzilla mailing list > dev-apps-bugzilla at lists.mozilla.org > https://lists.mozilla.org/listinfo/dev-apps-bugzilla > - > To view or change your list settings, click here: > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From denis.roy at eclipse.org Wed Sep 30 14:30:56 2015 From: denis.roy at eclipse.org (Denis Roy) Date: Wed, 30 Sep 2015 10:30:56 -0400 Subject: Bugzilla Meeting times In-Reply-To: References: Message-ID: <560BF220.4000601@eclipse.org> Ottawa, Canada -- Eastern timezone. On 30/09/15 05:20 AM, Gervase Markham wrote: > Hi everyone, > > It's possible the current time-of-day of the Bugzilla meetings do not > work well for everyone who might like to attend. If you have an interest > in attending, each time or even sometimes, please can you reply to this > message giving your location and timezone, and I can see if there's a > happy medium which works for everyone? :-) > > Gerv > _______________________________________________ > dev-apps-bugzilla mailing list > dev-apps-bugzilla at lists.mozilla.org > https://lists.mozilla.org/listinfo/dev-apps-bugzilla > - > To view or change your list settings, click here: > From denis.roy at eclipse.org Wed Sep 30 17:24:38 2015 From: denis.roy at eclipse.org (Denis Roy) Date: Wed, 30 Sep 2015 13:24:38 -0400 Subject: Offering full attachment isolation to Bugzilla installations In-Reply-To: References: Message-ID: <560C1AD6.4020505@eclipse.org> On 29/09/15 06:41 AM, Gervase Markham wrote: > Therefore, my plan is to register the domain "bzattachments.org", add > "*.bzattachments.org" to the PSL, and then offer delegations (e.g. > redhat.bzattachments.org, linuxkernel.bzattachments.org) to any bona > fide Bugzilla which wants one. They just tell me their nameservers, and > I add them to the domain's config. They can then host their attachments > at bug12345.company.bzattachments.org, > bug54321.company.bzattachments.org etc., and get full isolation. This > would be a service provided by the Bugzilla project for the good of the web. > > Before I execute and publicise this plan, does anyone see any problems > with it? > I like the idea. We've been remiss at setting up a dedicated subdomain for attachments and have been fortunate enough to dodge that bullet so far. But this setup would certainly take some pressure off busy Bugzilla sysadmins... D.