Skip to content

Latest commit

 

History

History
989 lines (839 loc) · 81 KB

RELEASE_NOTES.md

File metadata and controls

989 lines (839 loc) · 81 KB
Raw

The development branch is master. It can be used for testing and reporting errors.

For production systems, you are advised to use the stable branch (currently 15.12). This branch receives bug fixes as they arrive, during 12 months at least.

Version 15.12

This release received important contributions from the community. The major one being that the project delivers generic artifacts (WARs, Debian & RPM packages, Docker images), which allow for a wider distribution by removing the need for compilation. A strong focus was also laid on infrastructure, with the integration of the docker image generation process in the main repository and also with the automation of the install process allowed by ansible.

New features:

Enhancements:

  • extractorapp and mapfishapp now use the wfs-ng geotools module: #1267
  • analytics: improved performance on huge databases #556
  • ogc-server-statistics: logs user roles too #1108
  • ldapadmin: administrator can modify a user's uid and the user is informed by email #1109
  • ldapadmin: new TEMPORARY virtual group, holding users from the shadowAccount objectClass with a shadowExpire attribute.
  • header: new sub-menu dedicated to administrators #1010
  • mapfishapp: improved addons init #1006
  • mapfishapp: measurement tools are now an addon, see the README
  • mapfishapp: layergroup detection and reduced functionalities #1091
  • extractorapp: text file for failure instead of html file #1272
  • security-proxy: does not require clients presenting the jakarta or apache-httpclient user-agent to provide a valid basic auth #960
  • security-proxy: fix user-agent matching/authorization checking flow #1188
  • ldap: search fields indexed #881
  • dev: add configuration to run geOrchestra with multiple jetty instances #1112

Bug fixes:

  • security-proxy: fixed a long-standing issue with sessions #1069. They now last 24 hours by default #1177
  • ogc-server-statistics: does not log OGC requests to external servers anymore #1058
  • ldapadmin: blanking a field is now allowed #1086
  • ldapadmin: now allows using the plus char in email address #1128
  • ldapadmin: fixed SMTP servers refusing ICMP protocols makes the deploy fail #991
  • ldapadmin: fixed group filter not applying correctly on selections 56e350
  • ldapadmin: members of the PENDING group are not able to reset their password anymore #1002
  • ldapadmin: API returns json content-type #1115
  • ldapadmin: fixed encoding of email in URL #1129
  • ldapadmin: set restangular version in CDN #1270

According to our release policy, geOrchestra 14.06 is not supported anymore.

UPGRADING:

When upgrading your instance, you need to choose between the following alternatives:

Generic WARs expect to find their configuration in a folder, typically bootstrapped from the content of the georchestra/datadir repository (branch 15.12 !). This folder will generally be /etc/georchestra and the webapps will be aware of this location through the use of the tomcat additional parameter -Dgeorchestra.datadir=/etc/georchestra.

Packages provide:

  • the WAR files, typically in /usr/share/lib/georchestra-MODULENAME/,
  • their own copy of the /etc/georchestra folder. If using packages, it is your responsibility to symlink WAR files in your tomcat webapps folder, for automatic deployment of the webapps.

Keep in mind that the default configurations (either "template config" or "data dir") consider that geOrchestra runs on a SSL-enabled server. If this is not the case, please check carefully your datadir with #1123 in mind.

  • Mapfishapp has been revamped to allow dynamic customization of addons and contexts. This means that 2 new controllers are now responsible of the JSON blocks that were previously present in the GEOR_custom.js file. As a result, it introduced some stricter conventions that have to be respected so that the controllers can function correctly:

    • Contexts: in "datadir-mode" (ie with the -Dgeorchestra.datadir parameter), contexts should be uploaded to <georchestra.datadir>/mapfishapp/contexts/context.wmc along with a picture (<georchestra.datadir>/mapfishapp/contexts/images/context.jpg or .png). Contexts belonging to the webapp (as a result of compilation, for instance) are also taken into account by the controller (in the contexts/ subdirectory).

Imagine you had one context referenced in your GEOR_custom.js as such:

     CONTEXTS: [{
         label: "My context",
         thumbnail: "app/img/contexts/osm.png",
         wmc: "default.wmc",
         tip: "A unique OSM layer",
         keywords: ["background"]
     },{
         ...

The label, tip and keywords fields are now dynamically extracted from the context file. As a result, the default.wmc file should be edited to integrate the Title (matches label), Abstract (matches tip) and Keywords (matches keywords) strings, eg:

<?xml version="1.0" encoding="UTF-8"?>
<ViewContext xmlns="http://www.opengis.net/context" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="1.1.0" id="default" xsi:schemaLocation="http://www.opengis.net/context http://schemas.opengis.net/context/1.1.0/context.xsd">
  <General>
    <Window width="1373" height="709"/>
    <BoundingBox minx="455462.822367389977" miny="6838526.51230099984" maxx="875255.821295570000" maxy="7055302.35806940030" SRS="EPSG:2154"/>
    <Title>My context</Title>
    <Abstract>A unique OSM layer</Abstract>
    <KeywordList>
      <Keyword>background</Keyword>
    </KeywordList>

  • Addons: in "datadir-mode", they need to be stored either in <georchestra.datadir>/mapfishapp/addons/ (recommended) or in the app/addons/ subdirectory of the webapp. Without the georchestra.datadir parameter, only the ones belonging to the webapp are taken into account.

  • As a result of #1040, LDAP groups are now groupOfMembers instances rather than groupOfNames instances. In addition, the PENDING_USERS group was renamed to PENDING. You have to migrate your LDAP tree, according to the following procedure (please change the dc=georchestra,dc=org string for your own base DN and provide a suitable password):

    • dump your ldap groups with:
    ldapsearch -H ldap://localhost:389 -xLLL -D "cn=admin,dc=georchestra,dc=org" -w your_ldap_password -b "ou=groups,dc=georchestra,dc=org" > /tmp/groups.ldif
    • migration:
sed -i 's/PENDING_USERS/PENDING/' /tmp/groups.ldif
sed -i 's/groupOfNames/groupOfMembers/' /tmp/groups.ldif
sed -i '/fakeuser/d' /tmp/groups.ldif

 sudo ldapadd -Y EXTERNAL -H ldapi:/// -f groupofmembers.ldif

  • drop your groups organizationalUnit (ou)

  • import the updated groups.ldif file.

  • As a result of #1108 and #556, the ogc-server-statistics model has been changed. To upgrade your database, you should follow this procedure:

wget https://raw.githubusercontent.com/georchestra/georchestra/15.12/ogc-server-statistics/populate_stats_roles.py

In this script, change the values of the following variables according to your configuration: LDAP_URI, BIND_WITH_CREDENTIALS, LDAP_BINDDN, LDAP_PASSWD, GROUPS_DN, GROUP_OBJECT_CLASS.

Create a virtual env for python :

virtualenv migr-ogcstatistics
cd migr-ogcstatistics/
source bin/activate
easy_install ldap3

Then run the script:

python populate_stats_roles.py > /tmp/ogc-server-statistics-migration.sql

Check the sql migration file looks good.

Next step is to execute the two migration scripts:

wget https://raw.githubusercontent.com/georchestra/georchestra/15.12/ogc-server-statistics/update_to_1512.sql -O /tmp/update_to_1512.sql
psql -d georchestra -f /tmp/update_to_1512.sql
psql -d georchestra -f /tmp/ogc-server-statistics-migration.sql

Please note that the ogc-server-statistics-migration.sql script might take a very long time, depending on your database size.

Finally, ensure geOrchestra database user is owner of database. If your database is dedicated to geOrchestra (no other apps are running in same database), you can use following procedure to reset ownership of all objects to selected user, for example www-data :

wget https://raw.githubusercontent.com/georchestra/georchestra/15.12/postgresql/fix-owner.sql -O /tmp/fix-owner.sql
psql -d georchestra -f /tmp/fix-owner.sql
psql -d georchestra -c "SELECT change_owner('mapfishapp', 'www-data');";
psql -d georchestra -c "SELECT change_owner('downloadform', 'www-data');";
psql -d georchestra -c "SELECT change_owner('ldapadmin', 'www-data');";
psql -d georchestra -c "SELECT change_owner('ogcstatistics', 'www-data');";
psql -d georchestra -c "SELECT change_owner('public', 'www-data');";
# if you deploy geonetwork :
psql -d georchestra -c "SELECT change_owner('geonetwork', 'geonetwork');";

And if you deploy geofence :

psql -d georchestra -c "SELECT change_owner('geofence', 'www-data');";

Finally, you can drop maintenance function :

 psql -d georchestra -c "DROP FUNCTION change_owner(text, text);";

Version 15.06

This release brings several key enhancements:

  • support for the newer Debian 8 "Jessie", including tomcat 7, 8 & apache 2.4,
  • standard geoserver artifacts can now be used instead of the "geOrchestra flavoured geoserver",
  • travis-ci service integration, with improved test coverage,
  • lighter artifacts.

Other enhancements include:

  • mapfishapp: redirect to iD as OSM editor - see #992,
  • mapfishapp: gml & kml export of results - see #995,
  • mapfishapp: the admin may restrict all metadata searches to a specific extent, while the user may now restrict his search to the current map extent - see #964,
  • mapfishapp: added possibility to filter visible features in POSTed layers with CQL - see #921,
  • proxy: intercepts "connection refused" errors - see #963,
  • doc: added SASL configuration for remote AD - see #958.

Full list of issues on GitHub issue tracker, tagged with milestone 15.06.

Please note that:

  • the protocol between the security proxy and the apps was slightly modified as a result of #920. This means that the proxy and webapps from this release are not backward-compatible: you cannot use mapfishapp from 15.06 with a 14.12 security-proxy.
  • geOrchestra 14.01 is not supported anymore.

Many thanks to all contributors for this great release !

Version 14.12

This release received contributions from the GeoBretagne, GéoPicardie, CIGALsace, CRAIG, Rennes Métropole, Le Puy en Velay and Université de Franche-Comté projects. It comes with an improved install documentation.

According to our release policy, geOrchestra 13.09 is not supported anymore.

New features:

  • extractorapp: native raster resolution extracted by default - see #726,
  • geofence: ability to configure the map SRS - see #732,
  • geoserver: updated to version 2.5.4 with geofence - see #677,
  • ldapadmin: identify users not members of a SV_* group - see #834,
  • mapfishapp: context restoring - option to reset map or not - see #302,
  • mapfishapp: spatial query using previous results' geometries - see #752,
  • mapfishapp: streetview addon - see #774,
  • mapfishapp: direct geodata file loading via URL - see #754,
  • mapfishapp: added a button to remove all layers - see #753,
  • mapfishapp: new syntax for CSW querier - see #760 and the README,
  • mapfishapp: png printing - see #814,
  • mapfishapp: print extent handling improvement - see #813,
  • mapfishapp: give easy access to WMS/WFS layer details - see #346,
  • mapfishapp: export current map context as a "map metadata" - see #751,
  • mapfishapp: revamp of the "add layers" window - see #718,
  • mapfishapp: help message popping down when tools are loaded and available,
  • mapfishapp: if filled, wmc title and abstract are now displayed on context restored - see #816,
  • mapfishapp: filter contexts by keywords - see #866.

Enhancements:

  • extractorapp: editable combobox for resolution selection - see #726,
  • extractorapp: warn user when the extraction area is too large before the extraction is fired - see #726,
  • extractorapp: better emails - see #750,
  • ldapadmin: test suite improved - see #843,
  • mapfishapp: print extent fully visible,
  • mapfishapp: print templates improved - see #17,
  • mapfishapp: geometry from query stored forever in browser/LocalStorage (rather than cookie),
  • mapfishapp: warn users about chrome 36/37 issue,
  • mapfishapp: filter out WFS services not supporting POST,
  • mapfishapp: i18n neutral nopreview image for csw querier - see #775,
  • mapfishapp: load data from catalog improvement - see #756,
  • mapfishapp: advanced csw querier syntax help - see #478,
  • mapfishapp: addons can be placed in toolbars now - see #132,
  • proxy: handle a list of servers for which the x-forwarded headers should not be sent (typically geo.admin.ch) - see #782,
  • georchestra: german translations generalized - see #777,
  • georchestra: the maven build is now aware of the javascript build outcome - see #809.

Bug fixes:

  • analytics: fixed global csv export - see #835,
  • analytics: fixed log4j config issue - see #785,
  • analytics: fixed broken double click to see details - see #883,
  • build: fixed by migrating from OpenGeo to Boundless repository and also by setting up our own repository,
  • cas: fixed "after logging in from /cas/login the header does not show the connected user" - see #837,
  • catalogapp: fixed missing log4j configuration file - see #861,
  • config: fixed proxy targets wrong connector for geoserver - see c2dca7,
  • epsg-extension: fixed the EPSG:27572 SRS for use in mapfishapp and extractorapp - see #379,
  • extractorapp: workaround a geoserver issue for EPSG:4326 bboxes,
  • extractorapp: fixed WCS specific regexp in checkPermission method,
  • geonetwork: fixed LDAP sync - see 6a7e69,
  • geonetwork: in associated resource panel from editor, fixed failure to add link to service metadata record,
  • geonetwork: schema iso / fra - fixed missing description for "funder",
  • ldapadmin: fixed renaming group name leads to corrupted LDAP entry - see #810,
  • ldapadmin: fixed unescaped quotes in translations - see #890,
  • mapfishapp: fixed js error on vector layer selection - see #785,
  • mapfishapp: fixed missing SLD_VERSION WMS parameter, which is mandatory from version 1.3.0 on - see #636,
  • mapfishapp: modified MAP_DOTS_PER_INCH value in order to fix WMS/WMTS layer overlay - see #736,
  • mapfishapp: fixed WMTS style switch for GeoWebCache versions >= 1.5,
  • mapfishapp: fixed WMTS legend printing issue,
  • mapfishapp: workaround for IE11 bug, see #773,
  • mapfishapp: fixed several programming errors in the cadastre addon,
  • mapfishapp: restore record opaque status from layer transitionEffect,
  • mapfishapp: fixed the csw queryable "Type" case,
  • mapfishapp: fixed erroneous area measurements - see #838,
  • mapfishapp: fixed spanish lang file formatting - see 043ef1,
  • proxy: fixed a vulnerability where client could access localhost resources via proxy url, see 5c9b4d,
  • proxy: prevented the use of the ogcproxy in production (it is required for development purposes only),
  • proxy: restored access to public layers through qgis, udig and arcgis clients - see b077f8,
  • proxy: checkhealth now targets the main geOrchestra database by default, see a1d825,
  • proxy: force preemptive basic auth for GeoFence client to GeoServer REST - see 2c2b74,
  • server-deploy: fixed wrong webapp names (geoserver-webapp, geofence-webapp, geowebcache-webapp),
  • georchestra: many small fixes related to HTTPS support, eg #745, #840 and #780,
  • georchestra: css3 border-radius property replaces browser (moz and webkit) implementations.

UPGRADING:

As said previously, the documentation was improved in order to reflect the most recent project changes. Most notably, it is now in line with the "3 tomcats"-based setup that drives the template configuration since geOrchestra 14.06.
It also includes an interesting "how to upgrade your config" generic guide (that you should read, and maybe contribute to !).

config changes

We introduced a new global config option: shared.url.scheme which defaults to http.
Set to https (along with shared.server.port to 443) if your SDI requires it. Do not forget to also change the base url of GeoServer and GeoNetwork in their respectives admin GUI.

In mapfishapp's GEOR_custom.js:

  • the WMS_SERVERS, WMTS_SERVERS, WFS_SERVERS config options have been removed. The server definitions are now loaded via separate XHR's. You should migrate your content into the newly introduced myprofile/mapfishapp/*.json files.
  • CONTEXT_LOADED_INDICATOR_DURATION was added to handle the "context loaded" popping down indicator duration. It defaults to 5 seconds. Set to 0 to disable the indicator.
  • CONTEXTS was an array of arrays. It is now an array of objects.

Eg, in 14.06:

[
    ["OpenStreetMap", "app/img/contexts/osm.png", "default.wmc", "A unique OSM layer"], 
    [...]
]

From 14.12 on:

[{
    label: "OpenStreetMap",
    thumbnail: "app/img/contexts/osm.png",
    wmc: "default.wmc",
    tip: "A unique OSM layer",
    keywords: ["OpenStreetMap", "Basemap"]
}, {
    ...
}]

Also, the print templates have been improved.
If you made changes to the previous templates, you have to migrate them, or you may also keep your older templates.

In extractorapp's GEOR_custom.js, several new javascript config options have been added, related to #726: SUPPORTED_RESOLUTIONS, DEFAULT_RESOLUTION, METADATA_RESOLUTION_XPATH. Make sure your configuration is up to date with the template configuration, or you will get these variable defaults.

Note also the addition of an excluded directory in the template configuration. The content of this directory will be ignored when creating the configuration jar, which is deployed in each webapp. This is a convenient way to store scripts and so on, versioned with your configuration.

new repositories

We decided to publish resources for your server "htdocs" folder. Have a look at our georchestra/htdocs repository to get some inspiration.

As you may know, since geOrchestra 14.06, we recommend to start from our minimal GeoServer "data dir", rather than using GeoServer's default. For the 14.12 release, we also decided to publish a minimal GeoNetwork data dir too !

apache configuration

In geOrchestra's security proxy, there's an OGC proxy which we use to circumvent browser's same origin policy. To prevent anyone to use this proxy (see #755), we recommend to restrict access to the proxy by checking the request Referer header, eg for apache <= 2.2 with:

SetEnvIf Referer "^http://my\.sdi\.org/" mysdi
<Proxy http://localhost:8180/proxy/*>
    Order deny,allow
    Deny from all
    Allow from env=mysdi
</Proxy>

There's also another improvement when your SDI is not globally accessed through https: securing your communications to the ldapadmin webapp through the following:

RewriteCond %{HTTPS} off
RewriteCond %{REQUEST_URI} ^/ldapadmin/?.*$
RewriteRule ^/(.*)$ https://%{SERVER_NAME}/$1 [R=301,L]

This can also be used to secure other modules, eg analytics, downloadform...

building

If you experience build issues, please clear your local maven repository (rm -rf ~/.m2/repository/), then try again.

Our continuous integration process now checks every day that all geOrchestra modules (including GeoFence) build smoothly.
We also make sure that the following geoserver extensions are compatible: app-schema, authkey, charts, control-flow, css, csw, dds, dxf, feature-aggregate, feature-pregeneralized, geosearch, gdal, imagemap, inspire, istyler, kml, libjpeg-turbo, mysql, ogr, pyramid, script, spatialite, xslt, wps, w3ds. They can be integrated in your geoserver deployment by adding them in the build command line, eg with

./mvn -Dserver=template -Dmaven.test.skip=true -Pgeofence -Pcontrol-flow,css,csw,gdal,inspire,kml,libjpeg-turbo,ogr,pyramid,spatialite,wps,w3ds clean install

Version 14.06

Contributions from Rennes, CIGAL, GeoBretagne, GeoPicardie, PIGMA, GeoBolivia, ViennAgglo & developers on their free time.
Note on the 13.06 release: end-of-life was in april, earlier this year. As a result, it will not receive bug fixes anymore.

New features:

  • GeoWebCache standalone is now part of the geOrchestra suite

Enhancements:

  • analytics: access is now restricted to members of the MOD_ANALYTICS group only,
  • cas: upgraded to latest CAS Server 4.0.0 release - see #503,
  • cas: members of the PENDING_USERS group are not allowed to login anymore - see #581,
  • cas: unmodified files where removed from template config,
  • cas: username field autocompleted on browsers that support it,
  • catalogapp: german translation,
  • deploy: a default deployment script is now provided by the template config,
  • downloadform: complete revamp, including more testing, see #657,
  • extractorapp: now displays layers using the configured GLOBAL_EPSG srs, if they support it,
  • extractorapp: much improved test coverage,
  • extractorapp: access is now restricted to members of the MOD_EXTRACTORAPP group only,
  • extractorapp admin: access is now restricted to members of the ADMINISTRATOR group only,
  • extractorapp: german translation,
  • extractorapp: the privileged user is allowed to use imp-username/imp-roles headers to impersonate an arbitrary user for security check,
  • extractorapp: improved GDAL/OGR handling,
  • extractorapp: proper reporting in case the OGRDataStore cannot be created, with an invitation to check the GDAL libraries setup,
  • extractorapp: dropped support for geoserver 1.x, which results in better startup performance, see #640,
  • extractorapp: improved db connection pooling wrt download form,
  • extractorapp admin: includes the standard geOrchestra header - see #729,
  • geonetwork: rolling logs + gzipping - see #200,
  • geonetwork: improved IE10 compatibility,
  • geonetwork: disable user management for non-administrators,
  • geonetwork: improved links to WMS and WMC got from ISO19139 records, "distribution" section - see 5e7671 and c53e77,
  • geonetwork: added the possibility to search on a field and suggest on another one - see 4a3a34,
  • geonetwork: improved iso19139.fra schema - see 62057e, fd086f and 0eba33,
  • geoserver: the project now provides a basic data_dir with sensible defaults for geOrchestra - see INSTALL.md#geoserver,
  • geofence: performance improvement for GetCapabilities requests,
  • geofence: allows dynamic styles and remote layers by default,
  • geofence: conforms to the global logging strategy as set by shared maven filters,
  • geofence: allow dynamic geofencing based on inetOrgPerson's "l" field storing the limiting EWKT geometry,
  • header: only members of the MOD_EXTRACTORAP group see the link to the extractor - see #717,
  • ldapadmin: improved compatibility with geofence, by automatic management of unique numeric identifiers for users and groups,
  • ldapadmin: SSHA password encryption,
  • ldapadmin: much improved test coverage,
  • ldapadmin: now takes into account shared.ldap.* values,
  • ldapadmin: now uses configured LDAP users and groups DN instead of hardcoded values,
  • ldapadmin: public context path now set via a shared maven filter - see #721
  • ldapadmin: hyphens are now allowed in user identifiers - see #725,
  • mapfishapp: improved testsuite coverage,
  • mapfishapp: annotation addon improved (outline and fill colors added),
  • mapfishapp: using adequate XML exception format string, depending on WMS version,
  • mapfishapp: max_features and max_length set to higher numbers,
  • mapfishapp: german translation, including for the supported addons (thanks to CIGALsace),
  • mapfishapp: display SLD title before its name - see #597,
  • mapfishapp: file upload is now using a pure JSON implementation,
  • mapfishapp: file upload checks that a SRS can be guessed by OGRFeatureReader, or else falls back onto the pure GeoTools implementation,
  • mapfishapp: file upload supports OSM files to some extent,
  • mapfishapp: proj4js definitions are now local to prevent mixed active content warning in case of HTTPS access, see #602,
  • mapfishapp: only members of the MOD_EXTRACTORAPP group see the "download data" link - see #717
  • mapfishapp: the "remove layer" icon was changed - see #728
  • server-deploy: now supports deploying geofence-webapp,
  • all modules now use the same "georchestra" database by default, including GeoNetwork - see #601,
  • system wide favicon.

Bug fixes:

  • extractorapp: fixed several client-side issues regarding handling of namespaced layer names and virtual services - see #517 and #634,
  • extractorapp: fixed too early expiration of archive download link,
  • extractorapp: fixed protected layer cannot be extracted - see #633,
  • extractorapp: fixed KML export. Note: MIF export via OGR can only work with a patched version of GDAL, or GDAL >= 1.11.1, see gdal#5477,
  • geofence: avoid NPE with dynamic geofencing - #629,
  • geonetwork: shared.geonetwork.language enforced - see #595,
  • geonetwork: keywords-based extent suggestion does not fail anymore with aceentuated chars - see 652e87,
  • geonetwork: fixed extent map cursor position after panel has been scrolled - see 95aa65,
  • geonetwork: fixed classification of spatial data service for better INSPIRE compatibility - see c1017d,
  • geonetwork: avoid JS error when the WMS layer title contains a quote - see 7bbc34,
  • ldapadmin: fixed wrong users count in groups, in case several of them share the same sn field - see 0d7ab2,
  • ldapadmin: group description editing does not detach users from group anymore - see #650,
  • mapfishapp: restored GetFeatureiInfo queries on aggregated layers - see #658,
  • mapfishapp: truly independant tabs in resultspanel - see #671,
  • mapfishapp: fixed missing drillDown option for getFeatureInfo control - see #674,
  • mapfishapp: multilayer querier tool - several issues fixed,
  • mapfishapp: fixed file upload limits values (8Mb limit really enforced) - see #592,
  • mapfishapp: fixed thesaurus keywords request lang - see #624,
  • mapfishapp: compatibility with WMS 1.1.0 servers - see #663,
  • mapfishapp: fixed IE10-specific issue with Ext.data.XmlReader,
  • proxy: ignores non HTTPS request check, to allow OGC web service usage, see a24c74,
  • proxy: returns earlier in case of 403|404 error code - see #506,
  • proxy: really customizable error pages,
  • proxy: always remove incoming sec-* headers,
  • proxy: members of the ADMINISTRATOR group do not need to belong to another SV_* group anymore - see ad6784,
  • proxy: added QuantumGIS to the list of clients triggering basic auth, thus allowing access to protected layers (along with uDig and ArcGIS clients).

INSTALLING:

Please refer to this guide.

UPGRADING:

The way geOrchestra is configured has been streamlined:

  • there are default parameters which are shared by several modules, in config/shared.maven.filters. A "standard" install should not require you to bother about them. But if your setup is different from the default one, you may have to copy one or more of theses properties into your own shared maven filters (read on), in order to be able to customize them.
  • there are also shared parameters which have to be customized for your own instance. These can be found in the build_support/shared.maven.filters file inside your own configuration directory. As your config dir inherits from the template config dir, it should be very similar to georchestra/template:build_support/shared.maven.filters. The shared maven filters from this file override those from config/shared.maven.filters
  • finally, there are parameters for every individual geOrchestra module (geoserver, geofence, mapfishapp, extractorapp, proxy, ldapadmin), which can be customized via the build_support/GenerateConfig.groovy file in your own config dir. Have a look at the one provided by the template config for an example: georchestra/template:build_support/GenerateConfig.groovy.

As a result, a "standard geOrchestra configuration" should not require you to edit more than 2 files: one for the shared parameters, and an other one for module-specific parameters.
Note: copying maven.filter files in your own configuration dir (which was an older practice) is not anymore recommended because it is very difficult to maintain when upgrading version. => you should remove any maven.filter file from your own configuration, and eventually copy the values you had customized into build_support/GenerateConfig.groovy

Build:

The "Jetty Maven2" Repository provided by oss.sonatype.org requires HTTPS now. The fix was pushed to the georchestra and geonetwork repositories, but in the mean time, your /home/$USER/.m2 local repository might have gotten corrupted with html files rather than jars. If you experience compilation errors, you might need to clean your local maven repo, by running rm -rf ~/.m2/repository/org/apache/maven

Upgrading your build is a 2-steps process.
Let's assume your local geOrchestra source code repository is located in /path_to_georchestra_root/.

First you have to update the sources from the remote origin and update yours:

cd /path_to_georchestra_root/
git fetch origin
git checkout 14.06
git submodule sync
git submodule update --init

Then you need to update your configuration directory to align it with the template configuration, branch 14.06.

In the following, we assume that your configuration directory is versioned with git, and has the geOrchestra template config set as "upstream" remote repository:

cd /path_to_georchestra_root/config/configuration/<yours>
git fetch upstream
git merge upstream/14.06

Then you'll probably have to fix some conflicts.
Note: if you do not know how to fix these conflicts, you're probably better off starting again with a fresh fork of the template config directory.

The build process remains unchanged, but there is a difference at the end.
In the previous releases, the artifacts included a "-private" suffix in their name. We were making the assumption that all WARs would be deployed to the same tomcat. This is not the case anymore. This implies that the security proxy now resides in a different servlet container than the proxied webapps. If this is not your case, juste rename them back with the "-private" suffix.

LDAP:

The LDAP repository holds branches for the 13.09, 14.01 and 14.06 releases. In 13.09, groups are instances of posixGroup. From 14.01 to 15.06, they are instances of groupOfNames. Since 15.12, they are instances of groupOfMembers which allows to have empty groups.

Between 14.01 and 14.06 branches, here are the differences:

  • the MOD_EXTRACTORAPP group was created. You should assign to it the users which already had access to extractorapp (typically members of SV_USER)
  • the privileged geoserver user ("shared.privileged.geoserver.user") was renamed from extractorapp_privileged_admin to geoserver_privileged_user because it is no more used only for the extractor.

Databases:

In this release, the GeoNetwork database was merged into the unique default georchestra database. It is now a schema inside the main database.

This change requires that a "geonetwork" db user is created and granted rights:

createuser -SDRIP geonetwork (the expected password for the default config is "www-data")
psql -d georchestra -c 'CREATE SCHEMA geonetwork;'
psql -d georchestra -c 'GRANT ALL PRIVILEGES ON SCHEMA geonetwork TO "geonetwork";'

The full migration process is described in #601/comment. This link also provides hints if you prefer to keep your existing 2-databases setup.

Native libs:

The GDAL java bindings (gdal.jar) are no more provided by webapps, because this can lead to issues when the native libs are loaded several times in the same servlet container. Instead, the bindings should be installed once and for all in a folder accessible by the servlet container.

Please refer to the documentation relative to native libs handling in geOrchestra, section "Tomcat configuration"

Shared maven filters:

Several previous shared maven filters have been removed because they were not truly shared between modules:

  • shared.mapfishapp.docTempDir
  • shared.geofence.*
  • shared.checkhealth.*

You'll find the exact same settings in build_support/GenerateConfig.groovy

shared.geonetwork.dir was removed because it was useless

Seevral shared maven filters were homogeneized:

  • shared.psql.ogc.statistics.db becomes shared.ogc.statistics.db
  • shared.psql.download_form.db -> shared.download_form.db
  • shared.psql.geonetwork.db -> shared.geonetwork.db
  • shared.ldapadmin.db
  • shared.geofence.db

Finally, geonetwork.language was renamed into shared.geonetwork.language

Miscellaneous:

If you're using ldapadmin, make sure you've setup ReCaptcha keys for your own domain.
Hint: search for privateKey in your GenerateConfig.groovy.

French projections (typically EPSG:2154) have been removed from the extractorapp and mapfishapp config files.
Be sure to check your GEOR_custom.js files if you need them.

mapfishapp: GEONETWORK_URL was renamed into GEONETWORK_BASE_URL.
Caution: the expected string for this config option has changed too: from eg. "http://geobretagne.fr/geonetwork/srv/fre" to: "http://geobretagne.fr/geonetwork".

Version 14.01

This release was supported by the GeoPicardie, PIGMA, CIGALsace and GeoBretagne projects. The CRAIG (Centre Régional Auvergnat de l'Information Géographique) is also to be thanked for some nice patches.

New features:

  • GeoFence integration (not activated by default), see #534 and the documentation
  • geoserver: new kml and tiff+tab datastores, see #557
  • geoserver: now supports data security with GWC requests, see GEOS-4217 and geoserver/geoserver#341
  • mapfishapp: multi-layer querier tool (thanks to the CRAIG) - see #435
  • mapfishapp: extractor addon - see the README
  • mapfishapp: OpenLS addon - see the README
  • mapfishapp: editor revamped - read this
  • mapfishapp: document persistence in database - see #443

Enhancements:

  • analytics: translated to ES, thanks to GeoBolivia !
  • analytics: tabs displayed or not based on shared.download_form.activated and shared.ogc.statistics.activated values.
  • doc: improved installation instructions for gdal native libs
  • doc: installation instructions updated with GeoServer fine tuning instructions
  • doc: added a README for mapfishapp addons
  • js minification: test that jsbuild is working, rather than only testing if venv exists
  • ldapadmin: in the mail sent to the moderator, the "from" field is set to the user email - see #380
  • ldapadmin: improved description fields - see #400
  • ldapadmin: added ability to configure fields in users list - read the how-to
  • ldapadmin: in case of duplicated email error, the message is more explicit
  • ldapadmin: the "lost password" has become a "password recovery" page, which is more neutral, and allows one to define a password even if none pre-exists.
  • mapfishapp: WMS DescribeLayer on each WMS layer - see #401
  • mapfishapp: new layer menu item to set layer as baselayer/overlay - see #445
  • mapfishapp: preserve the full attribution information on context save/restore - see #422
  • mapfishapp: cswquerier: better results count
  • mapfishapp: wms layer tab: red crosses removed, icons centered
  • mapfishapp: backbuffer hidden behind baselayer for non-opaque baselayers - see #411
  • mapfishapp: allow to POST the url of a WFS service or layer - see #392
  • mapfishapp: baselayers have a specific color in the layer manager - customizable, see 0a56ed
  • mapfishapp: contextual help bubbles (eg: on layer edit activated), see #466
  • mapfishapp: print now supports WMS 1.3.0-only capable servers, see #511
  • mapfishapp: annotation addon: added an icon & made the window closable
  • mapfishapp: OGC Exception Report handling deactivated during context restore - see #532
  • mapfishapp: allow to show login/logout button in toolbar even if header is shown - see #43
  • mapfishapp: file upload now reports more accurately errors - see #402
  • mapfishapp: file upload: a spinner is shown while a file is uploaded
  • mapfishapp: contexts can now store title + abstract fields - see #443
  • mapfishapp: added ability to send contexts or maps to any external application - see #443
  • ogc-server-statistics: now logging WMTS GetTile, WMS GetStyles + WFS2 operations, see #527
  • proxy: new filter to make basic auth challenge if https and matches user-agent, useful for ArcGIS clients - read the notes
  • proxy: overridable HTTP 40x error pages, see for instance config/defaults/security-proxy/403.jsp
  • proxy: does not send sec-username & sec-roles headers when the user is anonymous, see #223
  • static: module is now called "header"
  • downloadform, ogcstatistics and ldapadmin modules now share the same postgresql database by default, each in their own schema. Please refer to #516 and the migration guide below.

Bug fixes:

  • analytics: fixed wrong password for jdbc postgresql
  • extractorapp: fixed the checkPermission method for local layers
  • extractorapp: fixed impossibility to switch to french when default lang is english or spanish
  • extractorapp: fixed invalid buffer combo text
  • extractorapp: removed useless classes - see #551
  • extractorapp: bbox writer always uses geotools' ShpFeatureWriter, which allows extractorapp to not rely mandatorily on gdal/ogr native libs - see #409
  • extractorapp: fixed parameter order on CheckFormAcceptance bean instantiation - see b299ec
  • extractorapp: fixed wrong jsessionid used to check ability to download resource - see #558
  • extractorapp: fixed CheckFormAcceptance SQL test
  • geonetwork: download form now opens also in metadata view if activated, see #416
  • geonetwork: fixed missing thumbnail in CSW query requesting DC in full mode for profil France records
  • geonetwork: thumbnails: add protocol for JPG (csw)
  • geonetwork: widgets / keyword selection / support 2 concepts with same label
  • geonetwork: editor / XML view / do not escape
  • geonetwork: ISO19110 / fixed missing label. Add the capability to set contact logo.
  • geonetwork: spatial index / fixed corrupted shapefile when empty polygon.
  • geonetwork: ISO19110 / relation now displays title.
  • geonetwork: properly unzip file
  • geonetwork: widgets / properly propagate sortby options.
  • geonetwork: fixed map coords position when page scrolled
  • geonetwork: fixed facet layout issue
  • geonetwork: widgets / add privileges panel to batch operation.
  • geonetwork: ISO19139 / improve labels
  • geonetwork: fixed tooltip display error on IE
  • geonetwork: hide user menu if hideSignOut option is enable IE
  • geonetwork: add option to hide sign out action from user menu.
  • geonetwork: editor / suggestion / save changes before processing
  • geonetwork: RSS / add URL parameter to only return one link for each metadata
  • geonetwork: widgets / action menu is now in a custom element in the template
  • geonetwork: put default list width of some other search criterias to auto
  • geonetwork: search suggestion / properly returned field value with line break
  • geoserver: fixed "inspire extension not deployed"
  • header: fixed IE8 compatibility + header frameborder size set to 0
  • header: the platform-wide language set by shared.language is now enforced in the header module, see #540
  • ldapadmin: fixed incorrect generation of login - see #344
  • ldapadmin: remove user from groups after deleting the user - see #406
  • ldapadmin: prevent race condition when opening /#groups/:group directly.
  • ldapadmin: fixed erroneous admin count - see #405
  • ldapadmin: send HTTP 403 status code when access is forbidden, not 200 - see #244
  • ldapadmin: normalizes the user input so that we consider the uid is always lowercased - see #565
  • ldapadmin: fixed missing header on the account/newPassword page
  • ldapadmin: fixed group ordering in privateui
  • mapfishapp: fixed incorrect styles ordering
  • mapfishapp: annotation addon: fixed label size
  • mapfishapp: fix for vector features incompletely displayed - see #367
  • mapfishapp: buggy legend url does not make the print fail anymore- see #362
  • mapfishapp: window.onbeforeunload should not return null (fixed annoying IE popup)
  • mapfishapp: fixed "too many features" message in referentials search
  • mapfishapp: fixed WMS GetFeatureInfo feature reprojection in IE
  • mapfishapp: always compute data model on getfeatureinfo
  • mapfishapp: always prefer text/html metadataURL entries
  • mapfishapp: fixed WFS2 capabilities - see #373
  • mapfishapp: fixed JPEG layers in WMC loaded as PNG - see #370
  • mapfishapp: connection link in toolbar when header height is set to 0
  • mapfishapp: referential recenter : fix for old fashioned namespace usage
  • mapfishapp: fixed missing dependency to WFSCapabilitiesReader
  • mapfishapp: annotation addon: fixed calling createUrlObject with an object parameter - see #437
  • mapfishapp: in layerfinder, fixed incorrect reference to OpenLayers.i18n method
  • mapfishapp: file upload - the limit is 8MB, not 8GB
  • mapfishapp: file upload - better handling of server-side errors
  • mapfishapp: fixed extra comma (IE) in GEOR_print
  • mapfishapp: fixed wrong popup anchor position on edit - see #456
  • mapfishapp: annotations: fixed popup anchor - see #366
  • mapfishapp: fixed potentially incorrect metadata url - see #454
  • mapfishapp: less strict filtering of suitable images for thumbnail display in CSW querier
  • mapfishapp: fixed missing dependency to WKT format - see #482
  • mapfishapp: fixed incorrect maxScaleDenominator on WMC restored - see #431
  • mapfishapp: attribution logo correctly sized - see #490
  • mapfishapp: fixed wrong proxy selected when the webapp name does not contain private - see #509
  • mapfishapp: fixed various problems in legend printing
  • mapfishapp: fixed missing GEOR.config.USEREMAIL (used by the extractor addon)
  • mapfishapp: set a white background to the overview map in the printed PDF - see #372
  • mapfishapp: overview map now working at most small scales - see #513
  • mapfishapp: fixed magnifier tool - see #500
  • mapfishapp: fixed too much space between elements in FireFox - see #539
  • mapfishapp: print: white background for the overview map, see b09cc9
  • mapfishapp: print: scaled down legend icons to match map icons size, see 436913
  • mapfishapp: print: limit legend texts width, and wrap them, see 78c05d
  • mapfishapp: print: left align the legend to its column container, see d707a8
  • mapfishapp: fixed incorrect metadata URL in csw browser ("add a layer from thesaurus") - see #542
  • ogcservstatistics - fixed missing postgresql driver loading
  • proxy: fixed charset detection in ArcGIS server responses - see #498
  • proxy: removed sec-* headers from client request - see #154
  • proxy: fixed incorrect referer value - see #533
  • header: maintains existing URI parameters when adding the "login" param - see #175
  • build now passes on windows.

UPGRADING:

  • As a result of #569, LDAP groups are now groupOfNames instances rather than posixGroup instances. You have to migrate your LDAP tree, according to the following procedure (please change the dc=georchestra,dc=org string for your own base DN):

    • dump your ldap groups with:
    ldapsearch -H ldap://localhost:389 -xLLL -D "cn=admin,dc=georchestra,dc=org" -w your_ldap_password -b "ou=groups,dc=georchestra,dc=org" > /tmp/groups.ldif
    • migration:
    sed -i 's/\(memberUid: \)\(.*\)/member: uid=\2,ou=users,dc=georchestra,dc=org/' /tmp/groups.ldif
sed -i 's/posixGroup/groupOfNames/' /tmp/groups.ldif
sed -i '/gidNumber/d' /tmp/groups.ldif OR sed -i 's/gidNumber/ou/' /tmp/groups.ldif if geofence is deployed
sed -i 's/objectClass: groupOfNames/objectClass: groupOfNames\nmember: uid=fakeuser/' /tmp/groups.ldif
    • drop your groups organizationalUnit (ou)
    • optionally, have a look at the provided georchestra-memberof.ldif file, which creates & configures the memberOf overlay. As root, and after checking that the file targets the correct database (olcDatabase={1}hdb by default): ldapadd -Y EXTERNAL -H ldapi:// < georchestra-memberof.ldif
    • import the updated groups.ldif file.

  • analytics: the ExtJS submodule path has changed, be sure to run git submodule update --init when you switch branches.

  • databases: the downloadform, ogcstatistics and ldapadmin databases are now merged into a single one named "georchestra". Each webapp expects to find its tables in a dedicated schema ("downloadform" for the downloadform module, "ogcstatistics" for ogc-server-statistics, and "ldapadmin" for ldapadmin). See #535 for the complete patch. If you currently have one dedicated database for each module, you can keep your setup, provided you customize the shared.psql.ogc.statistics.db, shared.psql.download_form.db & shared.ldapadmin.db maven filters in your own config. In any case, you'll have to rename the download schema (of the previous downloadform database) into downloadform, and migrate the tables which were in the public schema of the databases ogcstatistics and ldapadmin into the newly created schemas.

Example migration script:

psql -d downloadform -c 'alter schema download rename to downloadform;'

wget --no-check-certificate https://raw.githubusercontent.com/georchestra/georchestra/14.01/ldapadmin/database.sql -O /tmp/ldapadmin.sql
psql -d ldapadmin -f /tmp/ldapadmin.sql
psql -d ldapadmin -c 'GRANT ALL PRIVILEGES ON SCHEMA ldapadmin TO "www-data";'
psql -d ldapadmin -c 'GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA ldapadmin TO "www-data";'
psql -d ldapadmin -c 'GRANT ALL PRIVILEGES ON ALL SEQUENCES IN SCHEMA ldapadmin TO "www-data";'
psql -d ldapadmin -c 'insert into ldapadmin.user_token (uid, token, creation_date) select uid, token, creation_date from public.user_token;'
psql -d ldapadmin -c 'drop table public.user_token;'

wget --no-check-certificate https://raw.githubusercontent.com/georchestra/georchestra/14.01/ogc-server-statistics/database.sql -O /tmp/ogcstatistics.sql
psql -d ogcstatistics -f /tmp/ogcstatistics.sql
psql -d ogcstatistics -c 'GRANT ALL PRIVILEGES ON SCHEMA ogcstatistics TO "www-data";'
psql -d ogcstatistics -c 'GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA ogcstatistics TO "www-data";'
psql -d ogcstatistics -c 'GRANT ALL PRIVILEGES ON ALL SEQUENCES IN SCHEMA ogcstatistics TO "www-data";'
psql -d ogcstatistics -c 'insert into ogcstatistics.ogc_services_log (id, user_name, date, service, layer, request, org) select id, user_name, date, service, layer, request, org from public.ogc_services_log;'
psql -d ogcstatistics -c 'drop table public.ogc_services_log;'
  • download form: the module is disabled by default (shared.download_form.activated=false). Be sure to set the value you want in your shared.maven.filters file.
  • extractorapp:
    • BUFFER_VALUES has changed. If you had a custom value in your GEOR_custom.js file, you have to modify it according to the new syntax.
    • the geobretagne_production env variable has been removed - see #97
  • geoserver: be sure to set the file.encoding tomcat option for geoserver to interpret correctly UTF-8 SLDs (read how).
  • ldapadmin:
    • accessing /ldapadmin/privateui/ is now restricted to members of the MOD_LDAPADMIN group. It is recommended that only members of the ADMINISTRATOR or SV_ADMIN administrative groups belong to MOD_LDAPADMIN, since this group allows privileges escalation.
    • new shared.ldapadmin.db parameter to specify the ldapadmin database name (defaults to "georchestra").
    • the ldapadmin private app is now accessed via /ldapadmin/privateui/ rather than /ldapadmin/privateui/index.html
  • mapfishapp:
    • geonames now require you to create an account in order to enable queries on their free web services (see #563). Please change the default account in your profile's GEOR_custom.js GEONAMES_FILTERS variable.
    • addons: custom addons relying on local web services should no longer assume that the application path is /mapfishapp. Instead, they should use the new GEOR.config.PATHNAME constant, eg here.
    • the app now requires a dedicated database schema, please refer to the INSTALL.md documentation.
    • new config option: SEND_MAP_TO for #443, please read the doc.
    • new config option: FORCE_LOGIN_IN_TOOLBAR
    • the NS_EDIT config option has been removed, and mapfishapp/edit is no longer routed. By default, all layers served by the platform geoserver are editable (see GEOR.custom.EDITABLE_LAYERS), provided the user has the rights to (defaults to members of ROLE_ADMINISTRATOR, see GEOR.custom.ROLES_FOR_EDIT).
    • the contexts referenced in your GEOR.custom.CONTEXTS array are now able to reference layers with their full attribution information (text, logo & link). Have a look at the provided default.wmc.
    • print: some parameters have changed when the print module was updated: maxIconWidth -> iconMaxWidth, maxIconHeight -> iconMaxHeight (see e6231c).
  • ogcservstatistics - disabled by default: shared.ogc.statistics.activated=false. Be sure to set the value you want in your shared.maven.filters file.
  • static: the "static" module has been renamed into "header": your deployment scripts must be adapted, as well as your apache2 configuration (or any other reverse proxy).

Version 13.09

This major release was supported by the GeoPicardie, PIGMA, CIGALsace and GeoBretagne projects. The CRAIG (Centre Régional Auvergnat de l'Information Géographique) is also to be thanked for some nice patches.

New features:

  • mapfishapp: annotation addon with KML export,
  • mapfishapp: geofile upload: support of SHP, MIF/MID, GML, KML by default (uses a geotools implementation). Support of TAB and GPX when OGR is available (read this how to),
  • mapfishapp: WMS + WFS version autodetection,
  • mapfishapp: WMTS 1.0.0 support,
  • mapfishapp: WFS 2.0.0 support,
  • mapfishapp: WMS 1.3.0 support,
  • mapfishapp: OWSContext 0.3.x READ support (WMS layers),
  • mapfishapp: French IGN's GeoPortail webservices support,
  • mapfishapp: Russian translation (!),
  • geoserver: Opaque WMS Layer property support (see #158),
  • ldapadmin: a brand new module is available which allows at the same time to: admin your users in your browser, let your users recover their lost password, and let them register too ! More information in the module README,
  • extractorapp: ship metadata in ZIP (read this how to),
  • extractorapp: now supports KML & TIF+(TFW,TAB) output.

Enhancements:

  • mapfishapp: external libs such as ExtJS updated to 3.4.1.1 (for IE 10 support), GeoExt and OpenLayers updated to master (yeah !). This brings greater navigation ease and support for other cool stuff.
  • mapfishapp: added ability to restore contexts with a projection different from the map's (assuming layers will be able to reproject),
  • mapfishapp: print improved (updated to MapFish Print 2.0 for WMTS and GeoPortail support, brand new templates, natural 91 dpi resolution and new "comment" field),
  • mapfishapp: referentials search is no more case sensitive with WFS2,
  • mapfishapp: improved syntax for metadata search (via CSW), see #325,
  • mapfishapp: true print extent displayed,
  • mapfishapp: querier radius is now dynamically displayed in meters/km,
  • mapfishapp: WFS layers feature selection & attributes viewing,
  • mapfishapp: layer name and source smartly ellipsed with CSS rather than JS,
  • mapfishapp: do not close window on style applied,
  • mapfishapp: layer style list is now alphabetically sorted,
  • mapfishapp: permalink validity displayed in months,
  • mapfishapp: link to layer metadata which is declared as text/html is now prefered over the other links,
  • mapfishapp: addons can now be loaded by default (read how),
  • mapfishapp: added a note on data in the doc,
  • extractorapp: several small fixes for extractorapp reprojection,
  • extractorapp: more visible extract button,
  • extractorapp: auto-deactivate the "Modify the bbox" button,
  • geonetwork: validation report: translated all reported XSD errors in editor,
  • geonetwork: user menu: improved links according to role,
  • geonetwork: RSS: added URL parameter to only return one link for each metadata,
  • geonetwork: widgets: added privileges panel to batch operation,
  • geonetwork: improved icons plus a custom icon for XLS files,
  • SDI Instance name in page titles across the SDI (shared.instance.name, defaulting to "geOrchestra"),
  • everywhere: plain text emails, with the ability to switch back to HTML via shared.email.html,
  • everywhere: all outgoing emails are now prefixed with the platform name,
  • everywhere: better translations.
  • documentation: improved installation instructions

Bug fixes:

  • security-proxy: now only sends one referer headers - fixes consuming arcgis web services - read more,
  • geoserver: fixed incorrect WMS 1.3.0 scaledenominator values, see #264,
  • geonetwork: editor: suggestion: changes saved before processing,
  • geonetwork: user menu: IE compatibility issues fixed,
  • static: fixed incorrect login link on CAS pages,
  • cas: fixed IE8 JS error on login page,
  • extractorapp: fixed app loading on IE8,
  • extractorapp: now reports broken or uninstalled GDAL libraries,
  • mapfishapp: WM[T]S GetFeatureInfo geometries on the fly reprojection (at last !) - as a result, it is advised to fill the most widely used SRSes in your country in your GEOR_custom.js config file,
  • mapfishapp: fixed fontFamily not taken into account by styler - also requires apt-get install ttf-mscorefonts-installer,
  • mapfishapp: fixed querier setup issue when WFS service is not available,
  • mapfishapp: more robust layer hydrating from namespaced capabilities,
  • mapfishapp: fixed zooming occuring while drawing features,
  • mapfishapp: mouse position rounding is now correct for ETRS89, RGF93 and other long-lat based projections,
  • mapfishapp: fixed scrolling on a map without any visible layer,
  • mapfishapp: fixed unresolved images for point symbolizer combo,
  • mapfishapp: fixed legend label not appearing when only one class is available,
  • mapfishapp: fixed incorrect describeFeatureType URLs,
  • mapfishapp: fixed undefined addons title and description when lang dict does not exist yet,
  • mapfishapp: fixed broken referentials search in IE8,
  • mapfishapp: fixed broken help url

UPGRADING:

  • mapfishapp:
    • default projection changes from EPSG:2154 to EPSG:3857 (aka Spherical Web Mercator). Your users might need to clear their localStorage, or force loading of the new default context.
    • default MAP_SCALES changes to match the OGC WMTS spec,
  • LDAP: see georchestra/LDAP#2
    • one group was renamed: STAT_USER becomes MOD_ANALYTICS - grants access to the analytics app,
    • an other one was created: MOD_LDAPADMIN - grants access to the LDAPadmin private UI (/ldapadmin/privateui/).
  • The default application language is now English:
    • shared.language = en
    • geonetwork.language = eng
    • default email templates here and there: be sure to override them in your own config !
  • Remember also to fill these new global maven filters:
    • shared.homepage.url - for your SDI home page (might be something like http://my.sdi.org/portal/),
    • shared.instance.name - will be displayed in page titles (eg: GeoMyCompany),
    • shared.email.html - whether to send emails in plain text (default) or HTML,
    • shared.administrator.email - this email receives new account requests (eg: me@mycompany.com)
  • shared maven filters renamed:
    • shared.smtp.replyTo -> shared.email.replyTo
    • shared.smtp.from -> shared.email.from
  • frontend webserver:

Version 13.06

This release was supported by the French GeoPicardie, GeoBretagne and CIGALsace projects, the GIP ATGeRi and individual contributors.

New features:

  • geoserver: updated to 2.3.2,
  • geoserver: patched to include ScaleHint (WMS 1.1.x) and Min/MaxScaleDenominator (WMS 1.3.0) in the capabilities documents, according to the default layer SLD. The patched was accepted in GeoServer master, see http://jira.codehaus.org/browse/GEOS-572

Enhancements:

  • the header is now part of the static module, and all webapps make use of it. As a result, requests to static pass through the security-proxy,
  • the header height can be set across all applications by the way of a unique shared maven filter,
  • mapfishapp: the CSW querier filters results on type = dataset OR series,
  • extractorapp: supported output formats combos made configurable, ECW output format expunged by default,
  • the template config was slimmed down: files where default values are suitable for most deployments were moved to config/defaults,
  • the documentation was improved (mapfishapp, install, manage configs),
  • we now have CI on JS files syntax with Travis !

Bug fixes:

  • fixed the ability to turn off the downloadform with shared.downloadform.activated,
  • mapfishapp: referentials search now sends the map srs in the WFS query to allow feature reprojection,
  • mapfishapp: fixed incorrect thumbnail URLs in CSW querier,
  • mapfishapp: fixed misaligned thumbnail in CSW querier,
  • mapfishapp: fixed window + grid problems on service opening, see issue 109,
  • mapfishapp: fixed error in GEOR.ows.hydrateLayerRecord when falling back to main service,
  • mapfishapp: fixed links to MD sheet, see issue 110,
  • mapfishapp: fixed broken legend after styling, see issue 107,
  • mapfishapp: more robust handling of incoming WMS server URLs (eg: those with a mapfile GET parameter),
  • geonetwork: fixed ldap attribute mapping.

UPGRADING:

  • mapfishapp's default thesaurus has been set to local.theme.test, which is the only one exported by GeoNetwork by default. Feel free to customize to suit your needs,
  • geonetwork upgrade instructions are available here.

Version 13.02

This release was made possible thanks to support from the French GIP ATGeRi (http://cartogip.fr/) and contributors.

New features:

Enhancements:

Bug fixes:

UPGRADING:

  • LDAP tree needs to be migrated as a result of georchestra#91 :
    • ldif export: ldapsearch -xLLL -D "cn=admin,dc=georchestra,dc=org" -W > dump.ldif
    • migration: sed 's/(memberUid: uid=)(.*)(,ou=users,dc=georchestra,dc=org)/memberUid: \2/' dump.ldif > new.ldif
    • ldif import
  • mapfishapp config changes:
    • the print config folder should be moved from YOUR_CONFIG/mapfishapp/print to YOUR_CONFIG/mapfishapp/WEB-INF/print for security reasons, see georchestra#82
    • client side (see GEOR_config.js or GEOR_custom.js for more information):
      • MAP_POS_SRS1 and MAP_POS_SRS2 options have been replaced with POINTER_POSITION_SRS_LIST
      • DEFAULT_WMC option has been replaced with CONTEXTS
      • PRINT_LAYOUTS_ACL allows to fine-tune available printing layouts based on user roles
      • DEFAULT_PRINT_FORMAT is now replaced by DEFAULT_PRINT_LAYOUT
      • DEACCENTUATE_REFERENTIALS_QUERYSTRING option added (controls whether to deaccentuate the referentials widget query string or not)
    • server side:
      • There is a new maven filter for mapfishapp temporary documents: shared.mapfishapp.docTempDir (defaults to /tmp/mapfishapp)
    • don't forget to edit your WMCs to activate back buffers on base layers, see georchestra#42
  • In GeoNetwork, it is now recommended to use OGC:WMS protocol rather than OGC:WMS-1.1.1-http-get-map (or any other WMS tagged with a version) to declare WMS layers, see georchestra#4