the idea gnue-report is principally good yea I like that the time someone told me... :) but wouldn't it be nice to electronically send an invoice to antoher party than to print it and send it per snail mail? when I'm finding a replacement for the printing. SachaS: It would be but there are something else, security.. :( the printing part should be left out :) well it is more then printing now. dcmwai: very good point. security IS very important to business to business. but with using SSL, encryption, non-repudiation, public key infrastructure you CAN get security and there are business that someone authorization is require to after you have issue the PO right? yes public key... But it will still be hard... mfivis (~michaelfi@pool-68-237-25-90.ny325.east.verizon.net) left irc: dcmwai: very good. someone within the company might have to say: yep this PO is OK. but that is inside gnue (maybe, some workflow system). ebxml only cares about exchanging messages, in a secure way, between parties unless we have something that will generate a hash with the same po and person and if it is not change... but that will be hard as the hash is changing with contents each po will have its own hash So unless there is a way to generate something all the time is same.. there will be not way to verify this hadn. no problem ok i am not sure what you are talking about :) HAHA :) I'll be back after having my lunch. let have your :) s/your/your's ok i am back from lunch...see you later ha :) Action: dcmwai is back and reading SachaS presentation good ;) time to make the doughnuts har aria is on the list on Page 39 :) ;) Done... SachaS: still want to know about the security problem in my mind? ok dcmwai. a very quick howto :) the collaborative business process is in the center first people HAVE to define those business processes fourtheca (Melissa@melissa22.student.umd.edu) joined #gnuenterprise. fourtheca (Melissa@melissa22.student.umd.edu) left #gnuenterprise. these business processes define which messages are exchanged, in which order, at what time etc. Well as you see on the public and private key world You have Your Private (which sotre in secret) and Public is on the outside... second each party creates a collaboration protocol profile wait wait :) ok, I'll let you finished it :) yes so each party creates a collaboration protocol profile (cpp). in this cpp the party references the collaborative busienss process. ok. so each party says in which collaborative business process they are active. also they have to say which role that they play the buyer role or the seller role for example or the shipper role or any role that is possible in the collaborative business process ok. thats NOT enough can we be all role at a time :) the idea is to have a party for each role ok ignore my last question. if the collaborative business process has four roles (buyer, seller, insurance company, shipping company) you might think that there are 4 parties playing a role each but it is possible that a company does shipping AND insurance so that one party could play two roles ok? ok YEs it is not enough to reference the collaborative business process and the role so this is your problem? each party has to declare HOW they are sending and receving those messages which are exchanged during a collaborative business process not my problem yet :) each party has to declare HOW they are sending and receving those messages which are exchanged during a collaborative business process got this one? yep for example the party who sends the purchase order says: I send the purchase order. I encrpyt it with algorithm X and here is the public key for it. ok the party who receives the purchase order says: I decrypt the purchase order with algorithm X and here is my public key for it 1st hint both NEED the same algorithm X, right? yep also each party says with which transport protocol tehy are a) sending the message and b) receving the message so it can be http or smtp each party then can go and say I use a secure transport protocol party a says in its CPP I use SSL for my secure transport protocol party b also says in its CPP that it uses SSL as a secury transport protocol ok with me? both parties define these information in a Collaboration Protocol Profile. dcmwai, with me? ok good next step: before next step.... ;) so both parties have a CPP. they then will register their CPP at a registry (a website) ok that is on your presentation they register that CPP along some more information( like they are into furniture, oprating in australia and malysia) yes. thats the one sceanrio... so I am searching for a CPP in the registry. I search for a party which is into furniture AND is in australia or malaysia and .... the registry returns my your CPP. with me? but that is not the real problem on the security . wait wait :) Yep I know what you meant ok Action: dcmwai is Samrt enough :) :) ok <_> then I have to crate a Collaboration Protocol Agreement from these two CPP's. 2 CPPs -> 1 CPA ok the agreement between YOU and ME yep ok the process of getting 1 CPA from 2 CPPs is called the CPA formation that was my study, the last 2 years! wow 2 years, time goes so quick... ok nevermind :) the tool spits out a CPA in this CPA is the information what role you are playing ... and what role I am playing it also has the information that you send message X via http it also has the information that I am listening/receiving message X via http. it has even the http port then it has information for each message the algorithm you use to encrypt the message the algorithm i use to decrypt the message boht have to be the same it has the information of my public key and the information of your public key so here we have the security part ONCE you deploy this CPA your ebXML messaging system takes my public key and encrypts the message and then takes your private key and encryptes the message the messaing system must know your private key (which is no problem because it is at your place) and it has my public key from the CPA. then you send the message my application then uses my priavte key to decrypt it and uses your public key decrypt it again. I'm still here following :) and when the CPA says that the message goes over SSL the messaging system can find my certificate in the CPA to authenciate my HTTP server and my messaging system also knows your certificate from the CPA. . there are open source ebXML messaging systems available! not gpl though oh is it? the freeebxml.org or openebxml.org? freebxml.org See to me the encryption is cute :) s/see/seem the ebXML specification are well thought specifications ... HTTP + Private key and Private (RSA) method by companies, organisations around the world from different areas ... Ok over SSL for example yes. so you can do it ... do what ... :) you can achieve secure messaging :) SachaS: in you method secure messaging only happen on 2 condition how do you mean? 1) You have an Fix Ip server Or Fix Cn name http over ssl check it own validation using the IP or CNAme When the Ip/The CNAME (www.xxx.yyy) is not the same as the one on the CA it is invalide ByIt own. what is the CNAME? CNAME is a conacial Name in the Dns server ... Action: dcmwai wounder if he sleep wrong. SachaS: goto https://amtbmy.serveftp.org (This will be a right CA, self sert) but if you use this https://webmail.amtbmy.serveftp.org (it will still goto the same address but will say this is not the right CA) The 2nd Condition is .. There is a 3rd Parties to validate your SSL Cert. But this is more easier to achieves then the 1st problem s/sleep/spell :) https://webmail.amtbmy.serveftp.org works for me ... but dcmwai. i admit i have not implemented any security into my tools Yep but it will ask you say. This cert is not having the same name blah blah... Click YEs tono conform.. so i did not come around ssl problems first hand ... SachaS: Well it is something really new. and really Bad news is ... yes You need one IP Per SSL Address :( I'm not sure if that is solved in IPv6 but it will be an issue for Ip4 the server certificate has an IP which must be the IP the server has at the time a client access the server? the client checks that, right? YEp the client checks if the ip of the certificate is the same as the ip the server is running atm. SachaS: IP/NAME will work ok thank you dcmwai. i did not know that SachaS: you are welcome. so both parties need a fixed ip to enable ssl ... SachaS: wait :) :) if they have a fixed ip all good ;) ok i wait :) SachaS: what I meant is, at one IP, You only can have one SSL connection... so I'm a hosting company... I host Company A, B and C transection server over "one IP" ok it will not work, I'll need at least 3 IP for each of them to Work... em.. let me rephase... I meant I'll need 3 IP for all company to work That is the real problem behind. ok. the site you are surfing https://amtbmy.serveftp.org is on a dynamic Ip and Cert is bind to CNAME hmmm so I can only have one https connection but not another one... Action: dcmwai is damn in typing... you mean you can have only one certificate for it .... but that one certificate many clients can use s/one http connection/ one https services UES YES YEP ok can you assign more than one IP to a machine? (me thinks so) SachaS: you can have as many as you want.. but you need to pay for it.. SachaS: it is not cheap and most dsl company don't allow it. ok. so if we have an ip per party we have no problem SachaS: as you know we have limited IP per company. s/company/country ok so it is depend on your ISP. a goal of ebXML is to enable Small To Medium Enterprises (hope they achieve this goal) and then we can only have about 254*254*254*253 and alot of SME dont have fixed ip Yes that is the problem but because they are doing electronic business they want to use SSL. using another way is better RSA (public and private key method) they just want all security. the encryption is nice... can run with old technology But this encryption will need to be done this way... ok If A send to B and only B need to be the receiver. A send with Encrypted key (Pri A + Pub B) yes. then B will decrypt it with Key (Pri B + Pub A) yes but this will cause another Key management problem as the Private key is on the Server :( haha :) true any yet without password :) hey something I do is: i do backups of my homedirectory, including my private key...how stupid is that? so my private key is on each cd :( so you have to make sure that the Server is secure. so for small companies a solution must include where they DONT have a fixed ip. or they dont even have a server on the net. a message then must be exchanged, in a secure way, via smtp. Yes that is a bad news... :( www.ebxmlasia.org is the asian ebxml group two member from malysia :) Royal Malaysian Customs (www.customs.gov.my) and DagangNet (www.dagangnet.com) Hey that is something I cannot found :) what do you mean? Action: dcmwai never search for any government ... website :) ... SachaS: Something I don't like about gnupg... export of private keys don't need any password.... How stupid.. Action: dcmwai still can't find a reason to tell them why export private key need password... they give me a reason that the private key is uncrackable, Why need a password :) Action: dcmwai read xslt again... :) Action: SachaS goes back to his thesis reinhard (~reinhard@M1264P004.adsl.highway.telekom.at) joined #gnuenterprise. thierry_ (~thierry@musashi.xtensive.com) left irc: "Client exiting" hello all good morning hi reinhard i wanted to write an email to you reinhard, but never got around to write it :) :) thierry (~thierry@musashi.xtensive.com) joined #gnuenterprise. hello gnuers hello thierry, SachaS, reinhard hello dimas dcmwai (~dcmwai@219.95.163.220) left irc: "Client exiting" thierry (~thierry@musashi.xtensive.com) got netsplit. thierry (~thierry@musashi.xtensive.com) returned to #gnuenterprise. good night everyone an early one tonight i am sure dcmwai will stay longer ;) Nick change: SachaS -> SachaZzz thierry_ (~thierry@musashi.xtensive.com) joined #gnuenterprise. thierry (~thierry@musashi.xtensive.com) left irc: Read error: 110 (Connection timed out) mdupont (mdupont@p5080E5A7.dip0.t-ipconnect.de) joined #gnuenterprise. SachaZzz (~Sacha@dialup-196-193.wasp.net.au) left irc: Read error: 110 (Connection timed out) siesel (jan@xdsl-213-196-215-12.netcologne.de) joined #gnuenterprise. w0rd siesel hi mdupont what's up? just getting organised :) ToyMan (~stuq@smtp.dstoys.com) joined #gnuenterprise. jcater (~jcater@cpe-066-061-071-147.midsouth.rr.com) left irc: "Client exiting" siesel (jan@xdsl-213-196-215-12.netcologne.de) left irc: "Client exiting" dcmwai (~dcmwai@219.95.215.24) joined #gnuenterprise. jcater (~jason@w202.z065105010.mem-tn.dsl.cnc.net) joined #gnuenterprise. jamest (~jamest@gw.math.ksu.edu) joined #gnuenterprise. hi all word to tha chillster damn, it's cold this morning yea was in the 60s yesterday in the 40s today :-/ 21F here it's a tit bit nipply hi all cold here too pretty warm in frankfurt its cold here too 34F and for us that is COLD! Here is 26 C :) haha not that Cold :) cripes 33F here Action: jcater thought it was warmer than that wassup derek ? Action: dcmwai goto bath agian :) dsmith (~dsmith@mail.actron.com) joined #gnuenterprise. Fred_Frog (Fred_Frog@199.243.96.248) joined #gnuenterprise. The Mighty Frog stirs. "Where's my goddam hammer of Thor?" the Frog asks. I left it right here when I went to sleeep... reinhard_ (~reinhard@M1264P004.adsl.highway.telekom.at) joined #gnuenterprise. hi dale hi reinhard_ hhehehe Action: dtm stumbles in bewildered and groggy Action: chillywilly steps over an annoying amphibian and continues on his merry way chillywilly: you're merry and bright today? sure :) reinhard (~reinhard@M1264P004.adsl.highway.telekom.at) left irc: Read error: 111 (Connection refused) Nick change: reinhard_ -> reinhard wb reinhard deee teeee eeeemmmeee ahoy chillywilly: Good Morning! morning :) chillywilly: Did you give your wife flowers or something last night? *tee hee* uh.... Action: chillywilly is just high on life dsmith: hey!! flowers are personal! ;) gotta go take scotty to school brb jcater (~jason@w202.z065105010.mem-tn.dsl.cnc.net) left irc: Read error: 110 (Connection timed out) jcater (~jason@w202.z065105010.mem-tn.dsl.cnc.net) joined #gnuenterprise. #gnuenterprise: mode change '+o jcater' by ChanServ!ChanServ@services. anyone know what you can use to parse the doc strings in python code? pydoc or something like that? pydoc, epidoc, etc err, epydoc whichone do you like? pythondoc and why doesn't gnue use it ;) ;P I just wanna see if I can generate webware api docs i'm going to start in common w/ something was playing with pythondoc last night w/o success chillywilly's gonna port gnue to webware. :-/ a gnue form servlet would be nice...or something ;P forms I have no clue how things would integrate at this point ;) a servlet eh? ;) webware has python servlets and psp ahh hah.. Action: Vee assumed you were speaking java Vee: i'm gonna assume YOU, here in a minute! yahoo! wheeee Action: Vee hears creditors rejoice :-o it should be possible to import gnue code into a servlet hmmm Nick change: mdupont -> bb1800CET-MD ? this might be fun :) chillywilly: what type of servlet? a java? webware I imagine ok later python servlet! java sucks rocks! ;P ok great otherwise you'd have to reimplement a lot of gnue common which is not fun ;P not to mention a waste siesel (jan@xdsl-213-196-214-6.netcologne.de) joined #gnuenterprise. hi all siesel: hi there ahoy dtm :) jbailey (~jbailey@199.212.225.1) joined #gnuenterprise. wendall911 (~wendallc@guardian.nidaho.net) joined #gnuenterprise. Yo to all. hello hey siesel :) siesel, How do I actually pass a parameter from the php to grdcvs? $engine->execute("processReport",array("/share/gnue/gnue-reports/samples/foobulations/monthly2.grd", array("Subtitle=\"April 2002\" begin=\"04/01/2002\" end=\"04/30/2002\""), 0, 0, 0)); I'm not sure why but this way don't work :( array("Subtitle=\"April 2002\" begin=\"04/01/2002\" end=\"04/30/2002\""), Nick change: bb1800CET-MD -> mdupont wtf was bb1800CET-MD? be back at 18:00 CET be back at 18:00 CET would be my guess yeah, or that too CET == germantime haha ... liike that also can What's the -MD ? DOh. Action: dsmith is slow Action: jcater concurs *tee hee* Action: jcater isn't feeling the love I love. love? http://www.engrish.com/detail.php?imagename=mobile_phone.jpg&category=Instructions&date=2002-10-13 jcater? dsmith: yes and that's exactly why I keep telling phone users "Must to keep pleasing phone use partner while on talk, yes!!" dsmith: so THANK YOU. FINALLY. i tell people that again and again and it's like they can't even HEAR ME dtm: do do 900 numbers too? s/do do/you do pleasing phone use partner only 3.99 a minute Talk to on phone for no charge extra with amazing phone use partners. 900 and plus, no good. Not talking while paying, thank you. wow, moving back to KS has had quite the impact on you hasn't it dcmwai: you pass parameters the way ajmitch told you that day. dcmwai: but I've updated the example in cvs to pass paramters, so just look there siesel, ok siesel, you did read the log didn't you :) siesel, ok Night :) why not :) Action: dcmwai waves and say Good Night night siesel, hum.. you make me want to talk more :) siesel, the xslt solution you give me it only work for html, text, csv and fo/kspread ? how about pdf? did that part need some extra work or it is Just a few steps behind? Action: dcmwai linux server halt somehow.. don't know if pam.d if it fail :( Action: dcmwai is 2X km away from the server ... hum have to wait tomorrow ... No remote reboot and serial console? shame on you. =) jbailey, well teach me how to do that? You need hardware support for that. There's a few different solutions, my favourite one is.. erm Well I remote control using SSH all the time.. but in this case (suspected the auth services fail, ssh don't work) What's it called. CRM jbailey: low paid peon? that's my remote solution err, no wait that's what I wish I had jcater, what? I haven't bought one in ages. Basically, it's a PCI card you put in a machine that acts as a serial console and can do remote reboot.