New OpenKM User

[zdundore]

i will do so at the end of this week. I am trying to get OpenKM ready for a presentation tomorrow. If i don't get the external emailing working before then its ok, but i guess the bigger sticking point with management is that users have the ability to delete files. We want to give the users the ability to change files, and upload new ones, but i don't see how its possible to give them write ability without deletion rights. is there somewhere in the web interface that i can get more granular with security rights?

[zdundore]

I found the problem with the external email addresses. I need to configure the relay options on Exchange so that the machine OpenKM was running on was an authorized relay client. Everything is working great now! I am still wondering about being able to get more granular with security permissions. Basically users should be able to upload and check out files, but not have the ability to remove those files from the system. Is this possible?

[jllort]

In OpenKM 5.0 it'll be solved your problem easilly because we'll introduce more grants levels, like modify permisions, etc...

In OpenKM 4.0. I think the only way is removing write permisions before uploading. Scripting could be a way to make it automatically, the most easy way is removing write access to user who has uploaded the file.

[zdundore]

Awesome I look forward to the new version. Here is a brief write up on using IIS to redirect your traffic to the OpenKM site.

Using IIS to redirect all Port 80 Traffic to OpenKM

1. Install IIS and setup a web site on the machine you have OpenKM installed on.
2. Open the IIS admin console.
3. Right click the website you created and click properties.
4. Click the "Home Directory" tab and change the option to "A redirection to a URL" and type in your OpenKM web page in the text box below it.
5. This now makes it possible to have a clean web address, i.e. http://openkm.domain.com/. Anyone that goes to that address would then be redirected to the proper web page.

[jllort]

Thanks for your notes zdundore, I'll try on my windows server, and referrer in our wiki

[zdundore]

So everything is working great, i have OpenKM setup on our FTP server in our DMZ and i can send out notifications to our domain and externally. I only have one issue unresolved.

I have the email setup to come from DMS@domain.com but it comes through as from administrator@domain.com. Any ideas there?

[jllort]

in your mail-service.xml is declared as DMS and appears with administrator ? try looking mail server configuration and setting debug on into mail-service.xml file to see that all goes fine during sending

[zdundore]

i am going to post two entries, one with my mail-service.xml file and the other will be the debug info. I am not seeing where the information is being pulled from so maybe a couple more eyes could help.

[zdundore]

<!-- OpenKM -->
<mbean code="org.jboss.mail.MailService" name="jboss:service=OpenKM">
<attribute name="JNDIName">java:/mail/OpenKM</attribute>
<attribute name="User">dms</attribute>
<attribute name="Password">agraind</attribute>
<attribute name="Configuration">
<configuration>
<property name="mail.transport.protocol" value="smtp"/>
<property name="mail.smtp.host" value="mail.agraind.com"/>
<property name="mail.smtp.port" value="25"/>
<property name="mail.from" value="dms@agraind.com"/>
<property name="mail.debug" value="true"/>
</configuration>
</attribute>
<depends>jboss:service=Naming</depends>
</mbean>
</server>

[zdundore]

09:07:04,509 INFO [Server] JBoss (MX MicroKernel) [4.2.3.GA (build: SVNTag=JBoss_4_2_3_GA date=200807181439)] Started in 1m:24s:625ms
09:07:43,743 INFO [STDOUT] DEBUG: getProvider() returning javax.mail.Provider[TRANSPORT,smtp,com.sun.mail.smtp.SMTPTransport,Sun Microsystems, Inc]
09:07:43,852 INFO [STDOUT] DEBUG SMTP: useEhlo true, useAuth false
09:07:43,852 INFO [STDOUT] DEBUG SMTP: trying to connect to host "mail.agraind.com", port 25, isSSL false
09:07:43,868 INFO [STDOUT] 220 agraexch.agraind.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.3959 ready at Tue, 13 Apr 2010 09:07:44 -0500
09:07:43,868 INFO [STDOUT] DEBUG SMTP: connected to host "mail.agraind.com", port: 25
09:07:43,868 INFO [STDOUT] EHLO agratestvm
09:07:43,868 INFO [STDOUT] 250-agraexch.agraind.com Hello [10.0.2.44]
250-TURN
250-SIZE
250-ETRN
250-PIPELINING
250-DSN
250-ENHANCEDSTATUSCODES
250-8bitmime
250-BINARYMIME
250-CHUNKING
250-VRFY
250-X-EXPS GSSAPI NTLM LOGIN
250-X-EXPS=LOGIN
250-AUTH GSSAPI NTLM LOGIN
250-AUTH=LOGIN
250-X-LINK2STATE
250-XEXCH50
250 OK
09:07:43,884 INFO [STDOUT] DEBUG SMTP: Found extension "TURN", arg ""
09:07:43,884 INFO [STDOUT] DEBUG SMTP: Found extension "SIZE", arg ""
09:07:43,884 INFO [STDOUT] DEBUG SMTP: Found extension "ETRN", arg ""
09:07:43,899 INFO [STDOUT] DEBUG SMTP: Found extension "PIPELINING", arg ""
09:07:43,899 INFO [STDOUT] DEBUG SMTP: Found extension "DSN", arg ""
09:07:43,899 INFO [STDOUT] DEBUG SMTP: Found extension "ENHANCEDSTATUSCODES", arg ""
09:07:43,899 INFO [STDOUT] DEBUG SMTP: Found extension "8bitmime", arg ""
09:07:43,899 INFO [STDOUT] DEBUG SMTP: Found extension "BINARYMIME", arg ""
09:07:43,899 INFO [STDOUT] DEBUG SMTP: Found extension "CHUNKING", arg ""
09:07:43,899 INFO [STDOUT] DEBUG SMTP: Found extension "VRFY", arg ""
09:07:43,899 INFO [STDOUT] DEBUG SMTP: Found extension "X-EXPS", arg "GSSAPI NTLM LOGIN"
09:07:43,899 INFO [STDOUT] DEBUG SMTP: Found extension "X-EXPS=LOGIN", arg ""
09:07:43,899 INFO [STDOUT] DEBUG SMTP: Found extension "AUTH", arg "GSSAPI NTLM LOGIN"
09:07:43,899 INFO [STDOUT] DEBUG SMTP: Found extension "AUTH=LOGIN", arg ""
09:07:43,899 INFO [STDOUT] DEBUG SMTP: Found extension "X-LINK2STATE", arg ""
09:07:43,899 INFO [STDOUT] DEBUG SMTP: Found extension "XEXCH50", arg ""
09:07:43,899 INFO [STDOUT] DEBUG SMTP: Found extension "OK", arg ""
09:07:43,915 INFO [STDOUT] DEBUG SMTP: use8bit false
09:07:43,915 INFO [STDOUT] MAIL FROM:<administrator@agraind.com>
09:07:43,915 INFO [STDOUT] 250 2.1.0 administrator@agraind.com....Sender OK
09:07:43,915 INFO [STDOUT] RCPT TO:<zdundore@agraind.com>
09:07:43,915 INFO [STDOUT] 250 2.1.5 zdundore@agraind.com
09:07:43,915 INFO [STDOUT] DEBUG SMTP: Verified Addresses
09:07:43,915 INFO [STDOUT] DEBUG SMTP: zdundore@agraind.com
09:07:43,915 INFO [STDOUT] DATA
09:07:43,931 INFO [STDOUT] 354 Start mail input; end with <CRLF>.<CRLF>
09:07:43,931 INFO [STDOUT] Date: Tue, 13 Apr 2010 09:07:43 -0500 (CDT)
From: administrator@agraind.com
To: zdundore@agraind.com
Message-ID: <6910243.01271167663743.JavaMail.dms@agraind.com>
Subject: AGRA File Notification -
/okm:root/Sandbox/CompanyA/Project1/Bids/OfficeStandard.txt
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_0_17238530.1271167663712"
charset: UTF-8

------=_Part_0_17238530.1271167663712
Content-Type: text/plain
Content-Transfer-Encoding: 7bit


Document: /okm:root/Sandbox/CompanyA/Project1/Bids/OfficeStandard.txt
User: okmAdmin
Message:Test message.

------=_Part_0_17238530.1271167663712
Content-Type: text/html
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=UTF-8" http-equiv="Content-Type"/>
</head>
<body>
<img src="http://agratestvm:8080/OpenKM/es.git.op ... b>Document: </b><a href="http://dms.agraind.com:8080/OpenKM/es.g ... r/><b>User: </b>okmAdmin<br/><b>Message:</b>Test message.<br/>
</body>
</html>
------=_Part_0_17238530.1271167663712--

.
09:07:43,977 INFO [STDOUT] 250 2.6.0 <6910243.01271167663743.JavaMail.dms@agraind.com> Queued mail for delivery
09:07:43,977 INFO [STDOUT] QUIT
09:07:43,977 INFO [STDOUT] 221 2.0.0 agraexch.agraind.com Service closing transmission channel
09:07:47,696 INFO [MultiIndex] Unable to delete obsolete index: _6l
09:08:40,321 INFO [MailService] Mail service 'java:/mail/OpenKM' removed from JNDI
09:08:40,321 INFO [MailService] Mail service 'java:/Mail' removed from JNDI
09:08:40,477 INFO [MailService] Mail Service bound to java:/Mail
09:08:40,477 INFO [STDOUT] DEBUG: JavaMail version 1.4ea
09:08:40,477 INFO [STDOUT] DEBUG: java.io.FileNotFoundException: C:\Program Files\Java\jdk1.6.0_18\jre\lib\javamail.providers (The system cannot find the filespecified)
09:08:40,477 INFO [STDOUT] DEBUG: !anyLoaded
09:08:40,477 INFO [STDOUT] DEBUG: not loading resource: /META-INF/javamail.providers
09:08:40,477 INFO [STDOUT] DEBUG: successfully loaded resource: /META-INF/javamail.default.providers
09:08:40,477 INFO [STDOUT] DEBUG: Tables of loaded providers
09:08:40,477 INFO [STDOUT] DEBUG: Providers Listed By Class Name: {com.sun.mail.smtp.SMTPSSLTransport=javax.mail.Provider[TRANSPORT,smtps,com.sun.mail.smtp.SMTPSSLTransport,Sun Microsystems, Inc], com.sun.mail.smtp.SMTPTransport=javax.mail.Provider[TRANSPORT,smtp,com.sun.mail.smtp.SMTPTransport,Sun Microsystems, Inc], com.sun.mail.imap.IMAPSSLStore=javax.mail.Provider[STORE,imaps,com.sun.mail.imap.IMAPSSLStore,Sun Microsystems, Inc], com.sun.mail.pop3.POP3SSLStore=javax.mail.Provider[STORE,pop3s,com.sun.mail.pop3.POP3SSLStore,Sun Microsystems, Inc], com.sun.mail.imap.IMAPStore=javax.mail.Provider[STORE,imap,com.sun.mail.imap.IMAPStore,Sun Microsystems, Inc], com.sun.mail.pop3.POP3Store=javax.mail.Provider[STORE,pop3,com.sun.mail.pop3.POP3Store,Sun Microsystems, Inc]}
09:08:40,477 INFO [STDOUT] DEBUG: Providers Listed By Protocol: {imaps=javax.mail.Provider[STORE,imaps,com.sun.mail.imap.IMAPSSLStore,Sun Microsystems, Inc], imap=javax.mail.Provider[STORE,imap,com.sun.mail.imap.IMAPStore,Sun Microsystems, Inc], smtps=javax.mail.Provider[TRANSPORT,smtps,com.sun.mail.smtp.SMTPSSLTransport,Sun Microsystems, Inc], pop3=javax.mail.Provider[STORE,pop3,com.sun.mail.pop3.POP3Store,Sun Microsystems, Inc], pop3s=javax.mail.Provider[STORE,pop3s,com.sun.mail.pop3.POP3SSLStore,Sun Microsystems, Inc], smtp=javax.mail.Provider[TRANSPORT,smtp,com.sun.mail.smtp.SMTPTransport,Sun Microsystems, Inc]}
09:08:40,477 INFO [STDOUT] DEBUG: successfully loaded resource: /META-INF/javamail.default.address.map
09:08:40,477 INFO [STDOUT] DEBUG: !anyLoaded
09:08:40,477 INFO [STDOUT] DEBUG: not loading resource: /META-INF/javamail.address.map
09:08:40,477 INFO [STDOUT] DEBUG: java.io.FileNotFoundException: C:\Program Files\Java\jdk1.6.0_18\jre\lib\javamail.address.map (The system cannot find the file specified)
09:08:40,477 INFO [MailService] Mail Service bound to java:/mail/OpenKM

[jllort]

Seems in debug the sender is:

09:07:43,915 INFO [STDOUT] MAIL FROM:<administrator@agraind.com>
09:07:43,915 INFO [STDOUT] 250 2.1.0 administrator@agraind.com....Sender OK

About it <attribute name="User">dms</attribute> the dms user account is associated to administrator@agraind.com ?

You'll must investigate the <property name="mail.from" value="dms@agraind.com"/> in jboss forum, as I understand althought you send as dms the origin mail might be replaced by this. ( Could be some mail server configuration problem too ... really it's a jboss configuration ... I'm not 100% expertice on configuring it ... it's the first time I observed it ).

[zdundore]

Thanks for the pointers i will look into it and share what i find.

[zdundore]

Ok, this didn't take me long. The From email address is reading the email address of the user in OpenKM. For example i have the okmAdmin user's email address setup as administrator@agraind.com. While my user, zdundore, is setup for zdundore@agraind.com. If i login and send a notification then it goes through as from me, but if the administrator logs in and sends a notification it goes through as from him. So why isn't the "mail.from" attribute overriding this in the software?

[jllort]

Are you sure ? could you try sending to other user ? if you're on truth the from mail it'll be this user mail

[zdundore]

This is correct, i sent a notification to a newly created user named Outside and that user has a gmail account. When they received the email it came through as the user that was logged into OpenKM. Weather that be the admin or myself.