Invalid API key

I have created a testing account on Binance and I am getting this message
error {'code': -2015, 'msg': 'Invalid API-key, IP, or permissions for action.'} 401.
Does it mean that the programme can only be used with 'real' account or has Binance change their requirements? Anyone tested it recently.
Thanks in advance

Thanks for the suggestion. I will try that.

Thanks for the suggestion. Looking at the code, I noticed that you develop everything from the beginning instead of using Binance API which would be a more standard approach.
Actually, I was using the testnet API rather than the real one. Anyhow, I managed to change the hostname in the code and it seems to be working. However, I am getting the following errors:
请求:/api/v3/openOrders, 发生了错误: Expecting value: line 1 column 1 (char 0)
请求:/api/v3/openOrders, 发生了错误: Expecting value: line 1 column 1 (char 0)
请求:/api/v3/openOrders, 发生了错误: Expecting value: line 1 column 1 (char 0)
请求:/api/v3/openOrders, 发生了错误: Expecting value: line 1 column 1 (char 0)
请求:/api/v3/openOrders, 发生了错误: Expecting value: line 1 column 1 (char 0)
cancel orders: None
请求:/api/v3/ticker/bookTicker, 发生了错误: Expecting value: line 1 column 1 (char 0)
请求:/api/v3/ticker/bookTicker, 发生了错误: Expecting value: line 1 column 1 (char 0)
请求:/api/v3/ticker/bookTicker, 发生了错误: Expecting value: line 1 column 1 (char 0)
请求:/api/v3/ticker/bookTicker, 发生了错误: Expecting value: line 1 column 1 (char 0)
请求:/api/v3/ticker/bookTicker, 发生了错误: Expecting value: line 1 column 1 (char 0)
bid_price: 0, ask_price: 0
buy orders: []
------------------------------
sell orders: []
请求:/api/v3/ticker/bookTicker, 发生了错误: Expecting value: line 1 column 1 (char 0)
请求:/api/v3/ticker/bookTicker, 发生了错误: Expecting value: line 1 column 1 (char 0)
请求:/api/v3/ticker/bookTicker, 发生了错误: Expecting value: line 1 column 1 (char 0)
请求:/api/v3/ticker/bookTicker, 发生了错误: Expecting value: line 1 column 1 (char 0)
请求:/api/v3/ticker/bookTicker, 发生了错误: Expecting value: line 1 column 1 (char 0)
bid_price: 0, ask_price: 0

I was using the default config settings:
{
"platform": "binance_spot",
"symbol": "BTCUSDT",
"api_key": "XXX",
"api_secret": "XXX",
"gap_percent": 0.001,
"quantity": 0.001,
"min_price": 0.01,
"min_qty": 0.001,
"max_orders": 1,
"proxy_host": "",
"proxy_port": 0
}
It could be that Binance has changed its APIs, so it does not accept orders any more?
Thanks
Didi

Why not use the real one, the testing network maybe not working for some expected reasons. Using the real one does not cost too much. You just need to deposit only 20USDT or less than 100USDT will work.


Hangs on ceph-mon : collect admin and bootstrap keys

I am attempting to setup Ceph Jewel via Ceph Ansible on Debian Jessie using backports. ceph-common deploys fine but I got stuck on ceph-mon : collect admin and bootstrap keys.
I was able to resolve the issue by running the playbook with cephx set to false, and then running again with cephx set to true.

@tbenst did the monitor start? If we can't collect keys it usually means the monitor didn't start.

Correct, the monitor did not start

I think we are having the same issue on RedHat systems, I'm investigating at the moment.

@tbenst can you check again from master? I believe #764 fixes it.

Looks good, thanks!!

cool!

I have s still this problem when I use a ubuntu wily release.
When first provision, I had showed some 404 error because monitor cannot find wily's ceph download's directory.
But 2nd provision, I hadn't shown that error, but just hangs on ceph-mon..

@maxtortime if you have an issue with package install this is not ceph-ansible's fault, it is more a platform hiccup.
Where does it hang now?

I renewed my reply to #818 .

I am experiencing this issue as well: they playbook locks up during ceph-mon: collect admin and bootstrap keys. I am using ceph-ansible master, deploying Jewel on Ubuntu 14.04 targets. It appears as though it is hanging on a newly spawned instance of ceph-create-keys, which has slightly different parameter stylings than the instance of ceph-create keys that seemed to be started by ceph-mon? e.g.:
Ssl  23:11   0:47 /usr/bin/ceph-mon --cluster=ceph -i test-storage1 -f --setuser ceph --setgroup ceph
Ss   23:11   0:01 /usr/bin/python /usr/sbin/ceph-create-keys --cluster=ceph -i test-storage1
S+   23:23   0:00 /usr/bin/python /usr/sbin/ceph-create-keys --cluster ceph --id test-storage1

No monitor_interface and public_network don't need to be on the same LAN, however the public_network should be accessible from all the mons.

It turns out I think the issue was due to the fact that ceph-mon was still running when I was redeploying with configuration changes. If I sudo stop ceph-all on all nodes prior to running the playbook, it appears to get beyond that task and finish successfully. The playbook does not appear to restart osds on those nodes (I am colocating mons and osds in this case, which I know is not recommended, but I hope isn't too terrible?) so I then go back and sudo start ceph-all and I get a healthy cluster.

I'm seeing this on a clean setup with Fedora 23 as the host.  The mon never generates the admin key. I'm investigating, but this is definitely an issue.

This appears to be related to running upstream dev (currently v11.0.0-2347-g11c9039).  Switching to stable does not exhibit this hang.

@leseb, I also had this problem. I think this fixes it: https://github.com/ceph/ceph/pull/11123
I'm going to give it a try once gitbuilders is done.

@leseb, I can confirm ceph/ceph#11123 fixes it.

Thanks @dang and @batrick for looking into this.
If https://github.com/ceph/ceph/pull/11123 fixes the issue, I think we can re-close this.
Let me know.

I'm seeing this issue on trying to bootstrap a cluster with 3 mons ; ansible is hanging at "collect admin and bootstrap keys" and each mon is syslogging sto-1-1 ceph-create-keys[31795]: INFO:ceph-create-keys:ceph-mon is not in quorum: u'probing'
All the machines can reach each others mon addresses.
This is Ubuntu 16.04 (distro packages). Happy to provide more debugging if it helps.

I am still running into this issue. I thought my previous comment about sudo stop ceph-all fixed it, but apparently not. I also have the latest ceph in which ceph-create-keys def_keys() is quite different from the the one mentioned in ceph/ceph#11123 so it does not appear to be the source of the problem.
The hang at "collect admin and bootstrap keys" eventually returns but it never created the client.admin key so the following task "wait for client.admin key exists" eventually times out and everything errs.
Any ideas? I am just deploying to a single mon and osd (colocated) within a VM for now.
Thanks.

I see the problem: ceph-mon is listening on port 6789 on the IP of the public_network and not on the IP of the monitor_interface
When I run ceph-create-keys manually I can see that it is attempting to contact the mon on the wrong address.
In my group_vars/all I have monitor_interface set to the interface for one network, then both public_network and private_network are set for yet two other networks.
According to /etc/ceph/ceph.conf the mon host = <IP_ADDRESS> which is the correct IP address of the monitor_interface and the public network = 10.0.30/0/24 and private network = 10.0.40/24.
ceph-mon is listening only on the public network's <IP_ADDRESS>:6789
Is this expected behavior? Seems as though I must set monitor_interface to be the same interface as public_network in order to get it to work.
Thanks.

I've never really encountered that. Usually we can have 3 different networks: mon, public and cluster. Unless you have a real need for isolation and want to separate public from monitor then you should use different subnet. IMHO keeping monitor and public network as part of the same subnet is fine.

I presume ceph-mon should listen on the interface defined by monitor_interface right? In this case it seems like there might be a bug somewhere that is causing it to listen on the interface associated with the public_network.

@mclamb You're right, do you mind opening a new issue describing this?
Thanks!

I had the same issue with v2.0 release. Here are the steps I did:
Clone the repo and switch to v2.0 release:
git clone https://github.com/ceph/ceph-ansible.git
cd ceph-ansible
git checkout v2.0

Create vagrant_variables.yml and site.yml
cp vagrant_variables.yml.sample vagrant_variables.yml
cp site.yml.sample site.yml

Set ceph_stable to true in Vagrantfile:
  ansible.extra_vars = {
      cluster_network: "#{CLUSTER_SUBNET}.0/24",
      journal_size: 100,
      public_network: "#{PUBLIC_SUBNET}.0/24",
      ceph_stable: 'true'
  }

Create VMs:
vagrant up --no-provision --provider=virtualbox
vagrant provision

Then it hangs at
TASK [ceph-mon : collect admin and bootstrap keys] *****************************

I'm using Ansible <IP_ADDRESS> with Mac OS X.
"cephx set to false" did not work. Any other workaround?

@jiwhiz can you check the state of the monitor?
@mclamb we just pushed this patch in Ceph to fix this issue: https://github.com/ceph/ceph/pull/12188


Add option "allow collapse all" and "active section"

Add new options:
1. Allow collapse all? allow_collapsed_all
2. Active section active_section

active_section:0 => default
active_section:1 => open the 2nd section
active_section:-1 => open nothing

We need these options back in the HTML of VC Accordion @daomapsieucap

@zrvincent @tung13041996 : Done with commit https://github.com/viivue/bcnb/commit/36ecb66fcfdfdb84669863c48b6f0d5f387fb64a

Added in version v1.0.1

Good job @tung13041996  🎉


⚠ Bofrost.es has degraded performance

In a400565, Bofrost.es (https://www.bofrost.es) experienced degraded performance:

HTTP code: 200
Response time: 1694 ms

Resolved: Bofrost.es performance has improved in e8c30e8 after 6 minutes.


min and max time does not work

When reporting a bug, please be sure to check if the issue still persists with react-native original date/time pickers:
Under the hood react-native-modal-datetime-picker uses react-native original DatePickerAndroid, TimePickerAndroid and DatePickerIOS.
Before reporting a bug, try swapping react-native-datetime-picker with react-native original date/time pickers to check if the problem persists.
When reporting a bug, please be sure to include the following:

[ ] The outcome of the react-native-modal-datetime-picker swap described above
[ ] A descriptive title
[ ] An isolated way to reproduce the behavior (example: GitHub repository with code isolated to the issue that anyone can clone to observe the problem)
[ ] What version of react-native-modal-datetime-picker you're using, and the platform(s) you're running it on (iOS, Android, device)
[ ] What packages or other dependencies you're using
[ ] The behavior you expect to see, and the actual behavior

When you open an issue for a feature request, please add as much detail as possible:

[x] A descriptive title
[ ] A description of the problem you're trying to solve, including why you think this is a problem
[ ] An overview of the suggested solution
[ ] If the feature changes current behavior, reasons why your solution is better

Please note by far the quickest way to get a new feature is to file a Pull Request.

min and max time validation is used in most of the apps  as min and max date props

Hey @niteshsingh0129, please follow the issue template first (try the native components and provide some code with the expected results).
I can't understand the description of the issue, I'm issue.

it's not the issue,it's a feature just like you provide props of minimumDate and maximumDate. there should also props of minimumTime and maximumTime

Oh! Just set the time in either ‘minimumDate’ or ‘maximumDate’

As you said ,pass the minimum time in minimumDate props but, it does not reflect on the time picker as passing the minimum date in minimumDate props reflect in the date picker . how to fix it please, clarify it

Try using iOS Datepicker and let me know if it works here.

How is this closed? What about Android?

@mmazzarolo we need this feature for android in my opinion this feature has high importance!
any solution for max/min time limit to work both on ios and android ?
or workaround i need this!

How is this closed? What about Android?

the minumDate work on iOS but not on Android

Any update on this? I wanted to also implement min max time on a single day e.g.
July 10, 2022 I can only chose between 8:00 am to 6 pm

any update about this one


Question for next time - Detectron2

Hi @rwightman ,
Thank you for your great job.
Have you a plan for integration into detectron2?
The question is how do you think the performance is still keep like that if you intergrate to detectron2.
Thank you so much.

@wenjun90 I thought it'd be fairly easy to combine, but looking closer it seems like it'd be some work to adapt things, the organization of detectron2 is a fair bit different, some adaptation would be needed for yxyx to xyxy, and the resulting models would be not be compatible weight wise and likely need some differences in code, etc. At this point I'd say the plan to integrate the two is low on my priority list, I'd want to experiment with different backbones and bifpn variations, semantic segmentation, and better augmentations using the current minimal framework first.

I'll close this and leave #1 open


Extract asset package and update server api

I created a review PR for this PR. Mainly solve 2 problems:

temp save asset metadata, so we can avoid multiple query for one asset metadata
abandon transaction in asset scan

But we still have to solve other problems before merge:

Extract asset timeline into a separate collection
Check other balances events and update the raw addresses to db
Handle batch asset transfers. It will be very slow to handle a batch call with thousands or event hundreds transfers


[Qt] polish #6315

This fixes my nits, feel free to merge and squash ;).

Thanks! Will push

Closing, was included now upstream.


Hydrogen keybindings

Moving the discussion from here and here.

Shall we add a setting to enable the keybindings that we would like to introduce in Hydrogen v1.0.0?
? hydrogen:inspect
C-enter hydrogen:run
S-enter hydrogen:run-and-move-down
A-C-enter hydrogen:run-cell
A-S-enter hydrogen:run-cell-and-move-down
? hydrogen:add-break-point
S-backspace hydrogen:remove-latest-break-point
S-A-backspace hydrogen:remove-all-break-points
? hydrogen:clear-results
A-S-C-enter hydrogen:run-all

Currently, we're shadowing
S-C-enter hydrogen:run-and-move-down editor:newline-above
C-backspace hydrogen:clear-results editor:delete-to-beginning-of-word

hydrogen:clear-results on the mac is mapped to cmd-alt-backspace, is ctrl-alt-backspace available on linux and windows?
For me I have hydrogen:inspect mapped to cmd-ctr-i to avoid complications with atom-script (which uses cmd-i and shift-cmd-i) but that wouldn't work on windows. What do you think about alt-i?
For hydrogen:add-break-point on mac, cmd-ctrl-b would work, but I couldn't come up with a great shortcut for windows. A second option would be C-S-m and rename "break-point" to something with "marker" in it.

@n-riesco Shall we add a setting to enable the keybindings that we would like to introduce in Hydrogen v1.0.0?
I like this idea, but is there an easy way of changing between two sets of keybindings in atom?

On 21/06/16 23:11, Lukas Geiger wrote:

|hydrogen:clear-results| on the mac is mapped to cmd-alt-backspace, is ctrl-alt-backspace available on linux and windows?

It's assigned to bracket-matcher:remove-matching-brackets.

For me I have |hydrogen:inspect| mapped to cmd-ctr-i to avoid complications with |atom-script| (which uses cmd-i and shift-cmd-i) but that wouldn't work on windows. What do you think about alt-i?

alt-i is free in linux

For |hydrogen:add-break-point| on mac, cmd-ctrl-b would work, but I couldn't come up with a great shortcut for windows. A second option would be C-S-m and rename "break-point" to something with "marker" in it.

shit-ctrl-b would work in linux

@n-riesco <https://github.com/n-riesco> Shall we add a setting to enable the keybindings that we would like to introduce in Hydrogen v1.0.0?

I like this idea, but is there an easy way of changing between two sets of keybindings in atom?

I don't know if there is an API to do this dynamically, but if there isn't, we can hack our way like this:

define hydrogen-exp:* commands that are equivalent to the corresponding hydrogen:*. This experimental commands would run only if the experimental setting is enabled. If it isn't enabled, they would call evt.abortKeyBinding().

register the exp and no-exp keybindings in keymap/hydrogen.cson

https://atom.io/docs/api/v1.8.0/KeymapManager

We can rename the keymaps folder (so no keymaps are loaded by default) and use atom.keymaps.loadKeymap to load the desired keymaps file.
But in order to make this work, we have to remove the activationCommands from package.json because there would be no way of activating Hydrogen with a keymap. Instead Hydrogen would be activated on startup of atom.

What would be the drawbacks of activating Hydrogen on startup?
I guess we could do something like this:

on startup invoke:

Config.onDidChange with a callback to handle changes in the Hydrogen setting to toggle the experimental features;
and atom.workspace.observeActivePaneItem with another callback to:

dispose previous subscriptions (commands, observers, keymaps)
if there isn't a running kernel for this pane, only register commands and the keymap to start a kernel
if there is a running kernel, then register all the commands and the full keymap

Relevant links:

https://atom.io/docs/api/v1.8.0/Config#instance-onDidChange
https://atom.io/docs/api/v1.8.0/Workspace#instance-observeActivePaneItem
https://atom.io/docs/api/v1.8.0/KeymapManager#instance-loadKeymap
https://github.com/atom/atom/blob/v1.8.0/src/package.coffee#L220

@lgeiger The main problem I see with the KernelManager.loadKeymap is that it doesn't return the the corresponding CompositeDisposible, that would allow us to unload the keymap when the experimental setting changes.
At the moment I think that the hacky way I proposed above is easier.

You're right. With kernelManager.loadKeymap changing the keymap would require a restart of Atom.


Split blobs

Split blobs to send to DAs

Repo: https://github.com/calindra/sequencer

nonodo celestia send my-movie.mp4
my-movie.mp4 has 10MB
split into 10 files of Xmb
let tx1 = 1mb
let tx2 = 1mb
let tx3 = 1mb
let tx4 = 1mb
let tx5 = 1mb
let tx6 = 1mb
let tx7 = 1mb
let tx8 = 1mb
let tx9 = 1mb
let tx10 = 1mb
let tx11 = [tx1, ..., tx10]
send the tx11 to celestia


CUDA Error: Device-Side Assert Triggered

My training runs but on the 10th epochs I have this error. I tried using different python versions but seem to always have that error stopping the training. I purposefully did not paste all the '/opt/conda/conda-bld/pytorch_1678402379298/work/aten/src/ATen/native/cuda/ScatterGatherKernel.cu:144: operator(): block: [3,0,0], thread: [125,0,0] Assertion idx_dim >= 0 && idx_dim < index_size && "index out of bounds" failed.' as there are way more.
/opt/conda/conda-bld/pytorch_1678402379298/work/aten/src/ATen/native/cuda/ScatterGatherKernel.cu:144: operator(): block: [3,0,0], thread: [125,0,0] Assertionidx_dim >= 0 && idx_dim < index_size && "index out of bounds"failed. /opt/conda/conda-bld/pytorch_1678402379298/work/aten/src/ATen/native/cuda/ScatterGatherKernel.cu:144: operator(): block: [3,0,0], thread: [126,0,0] Assertionidx_dim >= 0 && idx_dim < index_size && "index out of bounds"failed. /opt/conda/conda-bld/pytorch_1678402379298/work/aten/src/ATen/native/cuda/ScatterGatherKernel.cu:144: operator(): block: [3,0,0], thread: [127,0,0] Assertionidx_dim >= 0 && idx_dim < index_size && "index out of bounds"` failed.
Exception in thread Thread-1:
Traceback (most recent call last):
File "/home/avalin/.conda/envs/pointcept_117/lib/python3.8/threading.py", line 932, in _bootstrap_inner
self.run()
File "/home/avalin/.conda/envs/pointcept_117/lib/python3.8/site-packages/tensorboardX/event_file_writer.py", line 202, in run
data = self._queue.get(True, queue_wait_duration)
File "/home/avalin/.conda/envs/pointcept_117/lib/python3.8/multiprocessing/queues.py", line 111, in get
res = self._recv_bytes()
File "/home/avalin/.conda/envs/pointcept_117/lib/python3.8/multiprocessing/connection.py", line 216, in recv_bytes
buf = self._recv_bytes(maxlength)
File "/home/avalin/.conda/envs/pointcept_117/lib/python3.8/multiprocessing/connection.py", line 414, in _recv_bytes
buf = self._recv(4)
File "/home/avalin/.conda/envs/pointcept_117/lib/python3.8/multiprocessing/connection.py", line 383, in _recv
raise EOFError
EOFError
[W CUDAGuardImpl.h:124] Warning: CUDA warning: device-side assert triggered (function destroyEvent)
Traceback (most recent call last):
File "tools/train.py", line 42, in
main()
File "tools/train.py", line 31, in main
launch(
File "/gpfs/home4/avalin/CityThesis/Pointcept/pointcept/engines/launch.py", line 74, in launch
mp.spawn(
File "/home/avalin/.conda/envs/pointcept_117/lib/python3.8/site-packages/torch/multiprocessing/spawn.py", line 239, in spawn
return start_processes(fn, args, nprocs, join, daemon, start_method='spawn')
File "/home/avalin/.conda/envs/pointcept_117/lib/python3.8/site-packages/torch/multiprocessing/spawn.py", line 197, in start_processes
while not context.join():
File "/home/avalin/.conda/envs/pointcept_117/lib/python3.8/site-packages/torch/multiprocessing/spawn.py", line 160, in join
raise ProcessRaisedException(msg, error_index, failed_process.pid)
torch.multiprocessing.spawn.ProcessRaisedException:
-- Process 0 terminated with the following error:
Traceback (most recent call last):
File "/home/avalin/.conda/envs/pointcept_117/lib/python3.8/site-packages/torch/multiprocessing/spawn.py", line 69, in _wrap
fn(i, *args)
File "/gpfs/home4/avalin/CityThesis/Pointcept/pointcept/engines/launch.py", line 137, in _distributed_worker
main_func(*cfg)
File "/gpfs/home4/avalin/CityThesis/Pointcept/tools/train.py", line 24, in main_worker
trainer.train()
File "/gpfs/home4/avalin/CityThesis/Pointcept/pointcept/engines/train.py", line 168, in train
self.run_step()
File "/gpfs/home4/avalin/CityThesis/Pointcept/pointcept/engines/train.py", line 186, in run_step
self.scaler.scale(loss).backward()
File "/home/avalin/.conda/envs/pointcept_117/lib/python3.8/site-packages/torch/_tensor.py", line 487, in backward
torch.autograd.backward(
File "/home/avalin/.conda/envs/pointcept_117/lib/python3.8/site-packages/torch/autograd/init.py", line 200, in backward
Variable._execution_engine.run_backward(  # Calls into the C++ engine to run the backward pass
RuntimeError: CUDA error: device-side assert triggered
Compile with TORCH_USE_CUDA_DSA to enable device-side assertions.
`

I have a similar issue when I enabled AMP and trained with PTv3 + PPT. See Issue https://github.com/Pointcept/Pointcept/issues/249#issue-2289986447.

Mine crashes after 3 epochs on the same line self.scaler.scale(loss).backward().

Yes, one known issue. Two suggestions:

disable AMP;
Enable clip on gradient. (I haven't try this)

当我启用 AMP 并使用 PTv3 + PPT 进行训练时，我遇到了类似的问题。请参阅问题#249（评论）。

Hello, I set enable_amp to False and still get the error RuntimeError: CUDA error: device-side assert triggered. Is there any other solution?


support LDAP

Hi,
tl;dr Oragono could have multiple password backends, incl. PAM on UNIXes, libsasl2, or it could talk to LDAP. PAM and libsasl2 are very customizable, but just LDAP would be enough.
PAM and libsasl2 probably require CGo to be acceptable, but hiding this code behind a build-tag is an option.

It would be great if username+password could be checked on a backend separate from the rest.
I run a Samba4 server to serve as a single store of user accounts (both for passwords, and for other generic user account information such as real name).
This is, on my side, used for:

accounts in Prosody for XMPP,
accounts in Dovecot for IMAP,
accounts in Postfix for SMTP,
provide username+password portion handling for an OAuth2 server,
log into a Windows with it,
log into Gerrit
etc

How?

Mostly things go straight into checking password via a direct LDAP bind,
sometimes it's LDAP bind+username lookup+actual LDAP bind for password check
sometimes things go through PAM towards LDAP,
sometimes libsasl2 + LDAP (though it could be libsasl2 + PAM + LDAP., not sure).

Gecos fields are also populated from LDAP.
Adding IRC to the mix would be great.

We're pretty averse to C dependencies, but I'm definitely interested in adding LDAP support via one of the various pure-Go client libraries.
One of the questions I have is whether LDAP support would be an all-or-nothing config option (as in, flip a switch in the config file, and now all authentication and account management are deferred to LDAP) or whether they would exist side by side (some accounts managed by the LDAP server, some natively in Oragono). A similar question is whether to allow all valid LDAP accounts access (or perhaps only accounts that match some piece of LDAP-managed metadata?) or require the Oragono operator to manually create the accounts (e.g., with a variant of NS SAREGISTER).

If I were the one making a design decision here, I'd just offer a password-checking interface{} and (presumably necessary?) user info interface{}.
They're in my mind two different things: as an example of previous art, on Linux, password checks are generally a responsibility of PAM, and other information is served from NSS's passwd database.
I personally would find the password-checking part more important and useful; I can add user info to BoltDB, but I would prefer not to write a tool to sync user password changes into it.
interface{}-based stuff usually translates into easily fakeable implementations, for go test purposes.

Two initial implementations for password checker would then be use current BoltDB (?) database or the LDAP store.
Third implementation could be a CombinedAuthenticator implementation which accepts a list of concrete backends to use. This is what PAM does; in PAM you can say 'call into LDAP; if that fails, call into a module that reads /etc/passwd; if that fails, deny login'. So in this Combined implementation you would translate this into 'check LDAP; if that fails, check native store; if that fails, deny login'.
An additional debug module (doesn't even have to be a struct{}; it could live on top of a type AcceptPassword bool) could accept any username, too: see PAM's pam_permit.so module.
Constructing the auth system like this (pluggable password check + pluggable userdb) would allow one to write a module with an optional C dependency on PAM or anything else, really. Perhaps write a gRPC client, even, to have an external service check the password!

And if you opt to also go for a pluggable userinfo store, a writable userinfo store wouldn't translate well onto LDAP. I wouldn't want an IRC server writing into my LDAP server, so having a layered approach e.g. CombinedUserInfoStore where I can use LDAP only as a fallback store, possibly blocking writes into some properties such as realname and password, would be great.

Side note: If SASL is also rearchitected along similar lines, one could optionally write a SASL handler that uses libsasl2's systemwide configuration in. This would allow adding SASL mechanisms written for the libsasl2 plugin approach; check out this client- AND server-side SASL mechanism implementation for XOAUTH2.

I think we might be talking about different things. When you say "offer a password-checking interface{}", are you saying "offer it to developers who will then make non-first-party code changes to Oragono"? The assumption I was making is that all functionality will be implemented in trunk, then controlled by the operator using the config file.
I agree that it's inappropriate for Oragono to try to store ircd-specific data in LDAP.

I’d certainly prefer the changes to happen in trunk — forks of a healthy
project rarely survive long. However, it’s good to structure things in a
way that would allow adding more implementations. That’s all I meant.
If the interface{} is designed and used well, even an optional PAM-based
implementation could be contributed (which would pull in some C code). Or
it could be maintained in a fork. Or out-of-tree.
I’m not sure my approach to talking to LDAP in my toy projects is best, but
perhaps I can attempt a demo PR over the holidays.
Sent from Gmail Mobile

That makes sense, thanks.
The plan is that Oragono will always maintain some amount of user data in its own database (either buntdb or some other remote datastore, via an abstraction layer, see #357).
I'm definitely interested in a proof-of-concept PR that integrates an LDAP client. In particular, if you're in a position to choose an LDAP client library that is clean, small, well-maintained, and doesn't have weird transitive dependencies, and then write a PoC for integrating it into oragono, that would be really helpful.
In terms of pluggable password checking, most of the authentication extensions we're looking at aren't using SASL PLAIN at all (#502, #175, #414) --- this one is sort of an exception.

Regarding e.g. #175, you'd get SCRAM-SHA-256 for free with libsasl2, and
(not sure) SASL EXTERNAL as well for #414.
I'd be happy enough to get LDAP stuff working. I might tackle that then.

I've renamed this ticket to "support LDAP", we can spin off additional subtickets as needed.

Some implementation notes:

Operators who want to use LDAP will turn off user registration (set accounts.registration.enabled to false), turn on accounts.require-sasl.enabled, and then configure LDAP in a new subsection of the accounts section.
This section will contain information on how to talk to the LDAP server and how to do "DN resolution" (I'm personally unclear on what exactly that involves :-)
It should also have some way to control which valid LDAP accounts are allowed to log into Oragono (I'm not sure what sources of LDAP metadata this functionality can draw on)
The place to add LDAP support is probably inside AccountManager.AuthenticateByPassphrase. If LDAP is enabled in the config, instead of trying to check the passphrase against a bcrypt hash in the local database, it'll call out to the LDAP server. It should autocreate an account in the database if necessary, with blank local credentials (no local passphrase hash, no certfp).
I'm not sure whether LDAP should completely replace local credentials when enabled, or whether failed LDAP logins should try to fall back to local passphrase checking.
When we design this functionality, we should keep in mind #414, which gets into a lot of the same issues (having an alternative source of truth for authentication, autocreating accounts on first login, etc.)

I'm not sure whether LDAP should completely replace local credentials when enabled, or whether failed LDAP logins should try to fall back to local passphrase checking.

Places I've been at it's been common when running any kind of external authentication to have at least one local account that can be used. If it's an easy option then we should aim to do that.

Grafana implementation for reference: https://github.com/grafana/grafana/blob/b20a258b72d3130747118c6f3c535fc5d1b3a15f/pkg/services/ldap/ldap.go#L151

This is the grafana example LDAP config (it clarifies the intended values of some of the configs referenced in the code): https://grafana.com/docs/grafana/latest/auth/ldap/#configuration-examples

Closed by #783


AURO MIGRATION: Update node to v22

Resolves AlaskaAirlines/auro-templates#6
Summary by Sourcery
Update Node to v22 and revise contributing guidelines.
Build:

Update Node to v22.

CI:

Update CI to test on Node 20 and 22.

Documentation:

Revise contributing guidelines, including updating issue and pull request templates, code of conduct, and stale bot configuration.

Closed in favor of pr from beta


SD TTNN: UNet2DConditionModel

Implement subgraph UNet2DConditionModel and make two tests: one for 256x256 image size and one for 512x512 image size.
Have one test file named something like test_unet_2d_condition_model.py and inside it two tests test_unet_2d_condition_model_256x256 and test_unet_2d_condition_model_512x512. Tests should be parametrized with following input shapes:

[ ] Shape 1: 256x256
sample: [2, 4, 32, 32]

[ ] Shape 2: 512x512
sample: [2, 4, 64, 64]

For both the cases above:

timestep: [1, 1, 2, 320]
encoder_hidden_states: [1, 2, 77, 768]
class_labels: None
attention_mask: None
cross_attention_kwargs: None
return_dict: True

Consolidating all the sub-modules that are used in UNet2DConditionModel.
Pipeline is complete with initial version. We are currently, incorporating changes w.r.t. ttnn.conv2d
Once the pipeline is tested, we'll update the commit.
Current commit is incomplete. Link for the WIP commit is here

While using the provided test_case for torch Unet2DConditionModel. We face the following issue:
Input_shapes:
sample: [2, 4, 32, 32]
timestep: [1, 1, 2, 320]
encoder_hidden_states: [1, 2, 77, 768]
    968         # broadcast to batch dimension in a way that's compatible with ONNX/Core ML
--> 969         timesteps = timesteps.expand(sample.shape[0])
    970
    971         t_emb = self.time_proj(timesteps)

RuntimeError: expand(torch.FloatTensor{[1, 1, 2, 320]}, size=[2]): the number of sizes provided (1) must be greater or equal to the number of dimensions in the tensor (4)

In the test file of tt_lib SD model ,models/experimental/stable_diffusion/tests/test_unbatched_stable_diffusion.py.
They are using the following shapes for  model.
For torch model:
sample: [1, 4, 32, 32]
timestep=[]
encoder_hidden_states = [1, 77, 768]
For tt_lib model:
sample: [1, 4, 32, 32]
timestep=[1,1,1,320]
encoder_hidden_states = [1,1, 77, 768]
So, we are testing the ttnn Unet2DConditionModel model with the shapes which is used for tt_lib model.

Filing an issue

[ ] SD TTNN: "ValueError" when UNet2DConditionModel pipeline

This is just for tracking - the progress is tracked here #4801

The ttnn Unet2dConditionModel pipeline is tested and we get the following results,
Shape 1: 256x256
sample: [2, 4, 32, 32]
PCC : ~ 0.77
Shape 2: 512x512
sample: [2, 4, 64, 64]
PCC: ~ 0.88
Corresponding PR #5119
We are now working on upbringing the model, As the PCC is below 0.99.

We get the following PCC,
Shape 1: 256x256
sample: [2, 4, 32, 32]
PCC : 0.8175485707367309
Shape 2: 512x512
sample: [2, 4, 64, 64]
PCC: 0.8933607489801786
After incorporating changes of cross_attention sub-module.
As there was a issue in this sub-module related to implementation of replacement for full op.

After updating the basic transformer block to include the attention_head_dim parameter, there is a change in PCC.
We get the following PCC,
Shape 1: 256x256
sample: [2, 4, 32, 32]
PCC : 0.8602609920505647
Shape 2: 512x512
sample: [2, 4, 64, 64]
PCC: 0.8830488277184041

PR is merged, closing the ticket.


Tweak CI for forked PRs and better release process

Two changes here:

Builds a new docker image after a tag is created, so we don't have to wait for the previous merge-commit CI to finish
Skips docker push and codecov updates on forked PRs, as secrets are not available

Would it make sense to integrate rok8s scripts into this ci process?

I'm not sure. @sudermanjr any thoughts?

Also enabled CircleCI on forked PRs in the CircleCI settings. Thanks!


Creep and shrinkage automatic calculation in SetConcreteMaterialProperties Gh component

https://femdesign-api.discourse.group/t/creep-calculation-node/138
Note:

@Marco-Pellegrino

duplicate of #936


After prerequisites, running 'bash' from Command Prompt does not install WSL distributions in Insider Preview Build 16226. You are directed to https://aka.ms/wslstore where distro is not yet available

This bug-tracker is monitored by developers and other technical types.  We like detail!  So please use this form and tell us, concisely but precisely, what's up.  Please fill out ALL THE FIELDS!
If you have a feature request, please post to the UserVoice.  If you're reporting a BSOD, don't post here!  Instead, e-mail<EMAIL_ADDRESS>and if possible attach the minidump from "C:\Windows\minidump".

Your Windows build number:  (Type ver at a Windows Command Prompt)

What you're doing and what's happening:  (Copy&paste specific commands and their output, or include screen shots)

What's wrong / what should be happening instead:

Strace of the failing command, if applicable:  (If <cmd> is failing, then run strace -o strace.txt -ff <cmd>, and post the strace.txt output here)

See our contributing instructions for assistance.

Yeah. Opensuse is actually up right now.
If you want to install Ubuntu to the legacy location, type lxrun /install.  The other distros will be coming up to the store shortly

Warning: lxrun.exe is only used to configure the legacy Windows System for Linux distribution.

That message gave me a good chuckle this morning. +1 for comedic value.

@therealkenc Yeah the new manager is called wslconfig.

should we post here what we find out about the new distro apps?
Right now there are 2 distros on the Store: SUSE Linux Enterprise Server 12 and OpenSUSE Leap 42.
The URL https://aka.ms/wslstore won't find anything because they didn't use the word WSL on the distro description.
Both installed correctly but only on the system drive C:. "Move" feature from Apps Settings don't work yet.
Now each distro is on the Local/Packages folder and has a rootfs folder with everything inside, home folder included.
They can be running simultaneously but right now they lack the distro Icon on taskbar.

This feature is still in development.  Pease be patient everything will be sorted out soon.

@onomatopellan - Title of this issue is constituted with two sentences, "After prerequisites, running 'bash' from Command Prompt does not install WSL distributions in Insider Preview Build 16226" and "You are directed to https://aka.ms/wslstore where distro is not yet available."
For "You are directed to https://aka.ms/wslstore where distro is not yet available", #2212 is still opened.

@sunjoong I totally missed that. Thanks.

Canonical is available in the Windows store . Closing this issue out.


Content does not reflow on resize

Testing #34868
When the terminal has text flowing over many lines it does not reflow the text to full window size (or a reduced window size).

The native terminal does do this and this does work on Windows for our integrated terminal.
Sean

Duplicate https://github.com/Microsoft/vscode/issues/23688


Fixing that Id should be increment when batching requests with certain RPC providers.

We are currently transitioning our RPCs to Chainstack. When multiple requests are combined into a single HTTP request, we ensure that each RPC request is assigned a unique ID.

@dlebee can you confirm if it works? Maybe the results come back unordered and something else need to change (unsure)

I only confirmed its crashing, we had to use child class and reflection to fix it for now, so I can confirm tomorrow.
right now the batch code assumes the response come in the same order they are sent, so I assume the order should remain the same?

I think the assumption that the order is the same hold with a real bitcoin core, but fail with Chainstack. In such case, you should just order the responses based on the id.


IndexError: tuple index out of range CNN Tensor flow

I'm working on a convolutional network in tensor flow and I get the following error:
IndexError: tuple index out of range
when I feed my data to the model  for training I do not know how to fix it. Below is the main function code. I think that my error is in y (labels). I think that the problem is the format of the labels that I can get from input_pipeline function, but I don't know how to fix it.
`def main(unused_argv):
images_batch,labels_batch=input_pipeline(train_path,batch_size,num_epochs)

with tf.Session() as sess:

    #Inicializamos las variables
    init_op=tf.group(tf.global_variables_initializer(),tf.local_variables_initializer())
    sess.run(init_op)

    #Corremos las filas(queue) que se crearon en el grafico computacional
    tf.train.start_queue_runners(sess=sess)

   detector=tf.estimator.Estimator(model_fn=cnn_model,model_dir="/tmp/gun_cnn_detector")

    train_fn=tf.estimator.inputs.numpy_input_fn(
        x={"x":images_batch.eval()},
        y=labels_batch.eval(),
        batch_size=10,
        num_epochs=None,
        shuffle=True)
   detector.train(
        input_fn=train_fn,
        steps=2)

    writer = tf.summary.FileWriter('.')
    writer.add_graph(tf.get_default_graph())`

`def input_pipeline(filenames,batch_size,num_epochs):
filename_queue=tf.train.string_input_producer([filenames],num_epochs=num_epochs,shuffle=True)
images,labels=read_file(filename_queue)
return images,labels`

I tried a lot of things. Below is the read function. Also I have another question: when I decode my image, what is the correct format? float32 or uint8?
`def read_file(filename_queue):
#Funcion para leer el archivo tf.record, y retornamos el next recrod
reader=tf.TFRecordReader()
_,serialized_example=reader.read(filename_queue)

#Se decodifica el tf.record retornando un diccionario
feature={'train/image':tf.FixedLenFeature([],tf.string),
         'train/label':tf.FixedLenFeature([],tf.int64)}
features=tf.parse_single_example(serialized_example,features=feature)

#Convertimos el string a numeros de los decodificados features
image=tf.decode_raw(features['train/image'],tf.float32)* (1 / 255.0)

#Convertimos a datos
label=tf.cast(features['train/label'],dtype=tf.int32)

#Reshape data
image=tf.reshape(image,[224,224,3])

return image,label`

This is the error I get:
/Library/Frameworks/Python.framework/Versions/3.6/lib/python3.6/site-packages/h5py/init.py:36: FutureWarning: Conversion of the second argument of issubdtype from float to np.floating is deprecated. In future, it will be treated as np.float64 == np.dtype(float).type. from ._conv import register_converters as _register_converters Traceback (most recent call last): File "/Users/David/Desktop/David/General/Tesis/Practica/Programas/CNN/CNN.py", line 113, in tf.app.run() File "/Library/Frameworks/Python.framework/Versions/3.6/lib/python3.6/site-packages/tensorflow/python/platform/app.py", line 126, in run _sys.exit(main(argv)) File "/Users/David/Desktop/David/General/Tesis/Practica/Programas/CNN/CNN.py", line 104, in main steps=2) File "/Library/Frameworks/Python.framework/Versions/3.6/lib/python3.6/site-packages/tensorflow/python/estimator/estimator.py", line 363, in train loss = self._train_model(input_fn, hooks, saving_listeners) File "/Library/Frameworks/Python.framework/Versions/3.6/lib/python3.6/site-packages/tensorflow/python/estimator/estimator.py", line 843, in _train_model return self._train_model_default(input_fn, hooks, saving_listeners) File "/Library/Frameworks/Python.framework/Versions/3.6/lib/python3.6/site-packages/tensorflow/python/estimator/estimator.py", line 853, in _train_model_default input_fn, model_fn_lib.ModeKeys.TRAIN)) File "/Library/Frameworks/Python.framework/Versions/3.6/lib/python3.6/site-packages/tensorflow/python/estimator/estimator.py", line 691, in _get_features_and_labels_from_input_fn result = self._call_input_fn(input_fn, mode) File "/Library/Frameworks/Python.framework/Versions/3.6/lib/python3.6/site-packages/tensorflow/python/estimator/estimator.py", line 798, in _call_input_fn return input_fn(**kwargs) File "/Library/Frameworks/Python.framework/Versions/3.6/lib/python3.6/site-packages/tensorflow/python/estimator/inputs/numpy_io.py", line 175, in input_fn if len(set(v.shape[0] for v in ordered_dict_data.values())) != 1: File "/Library/Frameworks/Python.framework/Versions/3.6/lib/python3.6/site-packages/tensorflow/python/estimator/inputs/numpy_io.py", line 175, in if len(set(v.shape[0] for v in ordered_dict_data.values())) != 1: IndexError: tuple index out of range [Finished in 3.9s with exit code 1]

Thank you for your post. We noticed you have not filled out the following field in the issue template. Could you update them if they are relevant in your case, or leave them as N/A? Thanks.
Have I written custom code
OS Platform and Distribution
TensorFlow installed from
TensorFlow version
Bazel version
CUDA/cuDNN version
GPU model and memory
Exact command to reproduce

It has been 15 days with no activity and the awaiting response label was assigned. Is this still an issue?

It has been 30 days with no activity and the awaiting response label was assigned. Is this still an issue?

We are closing this issue for now due to lack of activity. Please comment if this is still an issue for you. Thanks!


Structured Buffer hidden counter display

Description
I have a Structured Buffer that has a hidden counter, and I'm using it a bit like an append buffer in a way that I can retrieve the counter using IncrementCounter(). However, in a renderdoc capture I can't see this counter unless it's bound to a drawcall or dispatch. Is there a way to could see the counter in a similar way as the Buffer Contents?
Steps to reproduce
Bind a structured buffer, call IncrementCounter() on it, now try to visualize it in renderdoc.
Environment

RenderDoc version: 1.6 nightly
Operating System: Windows 10
API: D3D11

I'm kind of on the fence about this. I see what you mean that there's no way to inspect that data when it's not bound to the pipeline, but I'm kind of loathe to add dedicated UI and plumbing for this API-specific feature that's pretty niche. It would be one thing if there was no way to see the counter value at all, but it is visible in the pipeline state viewer as you say.
Being honest I'm leaning towards saying this is not important enough a feature to merit being added. The counter has never been visible anywhere else and no-one has mentioned this before, so I don't think it's something where there's a huge importance on being able to access that data another way. That's not the only factor, some features are rarely used but worth adding, I'm just not sure this is one of them.
Can you explain what situation you're hitting where you need to see the counter value when the buffer isn't bound? Is this a very important thing to be able to visualise, or is this just something you noticed in passing but you're fine checking the counter value through the pipeline state?

Honestly if it's going to be a huge hassle for you I'm probably fine with it not being visible, I thought it may have been a reasonably quick thing to fix. I was implementing the counter feature for something I'm doing and noticed that my count was being lost somewhere in the pipeline (due to a bug), but I couldn't really pinpoint where.
As I've fixed it already and based on your comment it probably doesn't merit the time and effort you say it would take to implement it. Thanks a lot for looking into it.

Good to know that it's not critical. It's a fair request to make it's just something where the associated costs may outweigh the value it brings. I'm usually pretty strict with myself too where I never remove features even if they cause problems because I find it annoying when I have something I rely on and it's removed from a program. I'd rather not add a feature at all, than add it then remove it because it's not worth the maintenance cost. Hence being careful sometimes about adding new features.
The hassle is that the counter isn't part of the buffer's data so it has to have special handling all the way along the codebase. For buffers in general all APIs have commonalities, and many API differences can be abstracted out in the buffer viewer. This can't though and that leaky abstraction will appear everywhere.
If this were a purely D3D11 tool and I had infinite time, it's something I would probably tackle. But to a certain degree little API quirks like this may not get perfect treatment - hence the counter being passed with the pipeline state instead of as a separate value with special display. There are other cases like shader linkage in D3D11 which isn't handled well at all but since no-one uses it I can get away with that :). With GL for example it has all sorts of weird and nonsensical edge cases that I probably won't ever support.
I'll leave this open for a little while in case I have a bright idea on how to handle it without adding too much cost, but otherwise I will close it.

OK that commit is about as good a solution as I think is reasonable. It tries emulates the behaviour from D3D12 where the counter is explicitly stored in a buffer (which is what D3D11's boils down to, aside from API obfuscation), so each UAV has its own fake 4-byte buffer to contain the counter:

You can then jump to that resource and click 'view contents' and it will bring up the counter value as if it were a 4-byte buffer that's bound:

And then you can view that at any time. It's not perfect and it does kind of "lie" about the API, but hopefully anyone using hidden counters will understand that it's not a real buffer.

Nice! I was thinking this was as good as dead, thanks for going the extra mile, it's much appreciated :)


AfterEffects: Move implementation to OpenPype

Changes

removed aftereffects implementation

Related to PR https://github.com/pypeclub/OpenPype/pull/2543

Task linked: OP-2404 Move AfterEffects to OpenPype


Graphed now takes two separate scaling factors

When I showed the new graphed function to the teacher, she immediately requested being able to specify the X and Y scales separately. So, I changed graphed to accommodate that. This is an incompatible change, but nobody should be using it yet, so I guess it is OK.
While I was at it, I also implemented wideGraphed as a proof of concept. I don't want to step on anybody's toes, but I would be happy to go ahead and implement wideCoordinatePlane if you want.
Here is a link to the code that the teacher did immediately after I provided her with the interface:
https://blackeyepeas.phys.lsu.edu/cwn/#Pf93EdrftpZNnpiWXJi4BBQ

Thanks for the quick fix!  I had not pushed your earlier change to production yet, so I can guarantee no one used it there.
If you want to add wideCoordinatePlane in Extras, go for it. I'm considering you the owner of those packages for now, so you're free to add whatever you like there.  As far as the coordinate plane issues discussed in #938 and #941, I'd like to think a bit before committing to something in the core API there.


feat: new conversation hotkey ( opt + / )

add hot key to create new conversation (opt + /) on macos

working on better hotkey system rn


Added left and right control keys

I have a use case where my application has to distinguish between left and right control keys (automating Farming Simulator). I think this is all that needs to be done. I've looked up the proper Linux, MacOS, and Windows keycodes (or at least what a quick Googlin' says is proper). It builds in my Debian Jessie VM. My Windows environment isn't set up for C/C++ development and I don't have access to a Mac so this would need to be built and tested on those systems.
I noticed there are two references in the keypress.c (if (flags & MOD_CONTROL) WIN32_KEY_EVENT_WAIT(K_CONTROL, dwFlags); and if (flags & MOD_CONTROL) X_KEY_EVENT_WAIT(display, K_CONTROL, is_press);) for Windows and Linux respectively to (I'm guessing) deal with using the ctrl keys as modifiers. Would this need modifying here to make sure that the proper ctrl key is used as a modifier?
I'm pretty much flying blind here, but the ability to distinguish between left and right control keys is a must have for me (and I'm sure others). I'm willing to work with the maintainers on making sure this code is correct and working.
Thanks

I also need Right Control. I tried building it on Windows, and this is the output I get:
$ node-gyp rebuild
gyp info it worked if it ends with ok
gyp info using<EMAIL_ADDRESS>gyp info using<EMAIL_ADDRESS>| win32 | x64
gyp info spawn c:\Python27\python.EXE
gyp info spawn args [ 'c:\\Users\\Daniel\\AppData\\Roaming\\npm\\node_modules\\node-gyp\\gyp\\gyp_main.py',
gyp info spawn args   'binding.gyp',
gyp info spawn args   '-f',
gyp info spawn args   'msvs',
gyp info spawn args   '-G',
gyp info spawn args   'msvs_version=auto',
gyp info spawn args   '-I',
gyp info spawn args   'c:\\Users\\Daniel\\Desktop\\Projects\\elgato-stream-deck-test\\node_modules\\robotjs\\build\\config.gypi',
gyp info spawn args   '-I',
gyp info spawn args   'c:\\Users\\Daniel\\AppData\\Roaming\\npm\\node_modules\\node-gyp\\addon.gypi',
gyp info spawn args   '-I',
gyp info spawn args   'C:\\Users\\Daniel\\.node-gyp\\6.7.0\\include\\node\\common.gypi',
gyp info spawn args   '-Dlibrary=shared_library',
gyp info spawn args   '-Dvisibility=default',
gyp info spawn args   '-Dnode_root_dir=C:\\Users\\Daniel\\.node-gyp\\6.7.0',
gyp info spawn args   '-Dnode_gyp_dir=c:\\Users\\Daniel\\AppData\\Roaming\\npm\\node_modules\\node-gyp',
gyp info spawn args   '-Dnode_lib_file=C:\\Users\\Daniel\\.node-gyp\\6.7.0\\<(target_arch)\\node.lib',
gyp info spawn args   '-Dmodule_root_dir=c:\\Users\\Daniel\\Desktop\\Projects\\elgato-stream-deck-test\\node_modules\\robotjs',
gyp info spawn args   '-Dnode_engine=v8',
gyp info spawn args   '--depth=.',
gyp info spawn args   '--no-parallel',
gyp info spawn args   '--generator-output',
gyp info spawn args   'c:\\Users\\Daniel\\Desktop\\Projects\\elgato-stream-deck-test\\node_modules\\robotjs\\build',
gyp info spawn args   '-Goutput_dir=.' ]
gyp info spawn C:\Program Files (x86)\MSBuild\14.0\bin\msbuild.exe
gyp info spawn args [ 'build/binding.sln',
gyp info spawn args   '/clp:Verbosity=minimal',
gyp info spawn args   '/nologo',
gyp info spawn args   '/p:Configuration=Release;Platform=x64' ]
Building the projects in this solution one at a time. To enable parallel build, please add the "/m" switch.
  robotjs.cc
  win_delay_load_hook.cc
c:\users\daniel\desktop\projects\elgato-stream-deck-test\node_modules\robotjs\src\os.h(26): warnin
g C4005: 'STRICT': macro redefinition (compiling source file ..\src\robotjs.cc) [c:\Users\Daniel\D
esktop\Projects\elgato-stream-deck-test\node_modules\robotjs\build\robotjs.vcxproj]
  C:\Program Files (x86)\Windows Kits\8.1\Include\shared\minwindef.h(23): note: see previous defin
  ition of 'STRICT' (compiling source file ..\src\robotjs.cc)
..\src\robotjs.cc(593): warning C4267: 'argument': conversion from 'size_t' to 'const unsigned int
', possible loss of data [c:\Users\Daniel\Desktop\Projects\elgato-stream-deck-test\node_modules\ro
botjs\build\robotjs.vcxproj]
..\src\robotjs.cc(729): warning C4267: 'initializing': conversion from 'size_t' to 'uint32_t', pos
sible loss of data [c:\Users\Daniel\Desktop\Projects\elgato-stream-deck-test\node_modules\robotjs\
build\robotjs.vcxproj]
c:\users\daniel\desktop\projects\elgato-stream-deck-test\node_modules\nan\nan_new.h(208): warning
C4244: 'argument': conversion from 'size_t' to 'double', possible loss of data (compiling source f
ile ..\src\robotjs.cc) [c:\Users\Daniel\Desktop\Projects\elgato-stream-deck-test\node_modules\robo
tjs\build\robotjs.vcxproj]
  ..\src\robotjs.cc(669): note: see reference to function template instantiation 'v8::Local<v8::Nu
  mber> Nan::New<v8::Number,size_t>(A0)' being compiled
          with
          [
              A0=size_t
          ]
  deadbeef_rand.c
  mouse.c
  keypress.c
  keycode.c
  screen.c
  screengrab.c
  snprintf.c
  MMBitmap.c
..\src\deadbeef_rand.c(26): warning C4267: 'return': conversion from 'size_t' to 'uint32_t', possi
ble loss of data [c:\Users\Daniel\Desktop\Projects\elgato-stream-deck-test\node_modules\robotjs\bu
ild\robotjs.vcxproj]
..\src\mouse.c(114): warning C4267: '=': conversion from 'size_t' to 'LONG', possible loss of data
 [c:\Users\Daniel\Desktop\Projects\elgato-stream-deck-test\node_modules\robotjs\build\robotjs.vcxp
roj]
..\src\mouse.c(115): warning C4267: '=': conversion from 'size_t' to 'LONG', possible loss of data
 [c:\Users\Daniel\Desktop\Projects\elgato-stream-deck-test\node_modules\robotjs\build\robotjs.vcxp
roj]
..\src\mouse.c(349): warning C4244: '+=': conversion from 'double' to 'size_t', possible loss of d
ata [c:\Users\Daniel\Desktop\Projects\elgato-stream-deck-test\node_modules\robotjs\build\robotjs.v
cxproj]
..\src\mouse.c(350): warning C4244: '+=': conversion from 'double' to 'size_t', possible loss of d
ata [c:\Users\Daniel\Desktop\Projects\elgato-stream-deck-test\node_modules\robotjs\build\robotjs.v
cxproj]
..\src\snprintf.c(965): warning C4267: '=': conversion from 'size_t' to 'int', possible loss of da
ta [c:\Users\Daniel\Desktop\Projects\elgato-stream-deck-test\node_modules\robotjs\build\robotjs.vc
xproj]
..\src\snprintf.c(911): warning C4267: 'initializing': conversion from 'size_t' to 'int', possible
 loss of data [c:\Users\Daniel\Desktop\Projects\elgato-stream-deck-test\node_modules\robotjs\build
\robotjs.vcxproj]
..\src\snprintf.c(939): warning C4267: 'initializing': conversion from 'size_t' to 'int', possible
 loss of data [c:\Users\Daniel\Desktop\Projects\elgato-stream-deck-test\node_modules\robotjs\build
\robotjs.vcxproj]
..\src\snprintf.c(956): warning C4267: 'initializing': conversion from 'size_t' to 'int', possible
 loss of data [c:\Users\Daniel\Desktop\Projects\elgato-stream-deck-test\node_modules\robotjs\build
\robotjs.vcxproj]
..\src\screengrab.c(118): warning C4267: 'function': conversion from 'size_t' to 'int', possible l
oss of data [c:\Users\Daniel\Desktop\Projects\elgato-stream-deck-test\node_modules\robotjs\build\r
obotjs.vcxproj]
..\src\snprintf.c(976): warning C4267: 'initializing': conversion from 'size_t' to 'int', possible
 loss of data [c:\Users\Daniel\Desktop\Projects\elgato-stream-deck-test\node_modules\robotjs\build
\robotjs.vcxproj]
..\src\screengrab.c(119): warning C4267: 'function': conversion from 'size_t' to 'int', possible l
oss of data [c:\Users\Daniel\Desktop\Projects\elgato-stream-deck-test\node_modules\robotjs\build\r
obotjs.vcxproj]
..\src\snprintf.c(988): warning C4267: 'initializing': conversion from 'size_t' to 'int', possible
 loss of data [c:\Users\Daniel\Desktop\Projects\elgato-stream-deck-test\node_modules\robotjs\build
\robotjs.vcxproj]
     Creating library c:\Users\Daniel\Desktop\Projects\elgato-stream-deck-test\node_modules\robotj
  s\build\Release\robotjs.lib and object c:\Users\Daniel\Desktop\Projects\elgato-stream-deck-test\
  node_modules\robotjs\build\Release\robotjs.exp
  Generating code
  Finished generating code
  robotjs.vcxproj -> c:\Users\Daniel\Desktop\Projects\elgato-stream-deck-test\node_modules\robotjs
  \build\Release\\robotjs.node
gyp info ok

But when I try to use right control, I get the following exception:
c:\Users\Daniel\Desktop\Projects\elgato-stream-deck-test\server.js:88
      robot.keyTap('c', 'right_control');
            ^

Error: Invalid key flag specified.
    at Error (native)

I figured it out, using this won't work:
robot.keyTap('c', 'right_control');

because right_control is not defined in CheckKeyFlags in robotjs.cc. To fix it, you need to split the key press into a separate key toggle:
robot.keyToggle('right_control', 'down');
robot.keyTap('c');
robot.keyToggle('right_control', 'up');

@danieltian Thanks for testing on Windows! Now if only we could get a Mac build tested...

Mac build looks like it's working. Should be merged. But I'd say fix the bug as mentioned above.

Awesome. Thanks @rj0495 . I'll have to get my environment set up again (drive died on me in a spectacular way a week or so ago) and get the bug taken care of.

Sorry everyone, releasing and building is currently difficult since I have to spin up a bunch of VMs. I'm going to work on getting TravisCI publishing so it's easier to test and deploy. Thanks for the PR!

Oh. Wow. I suppose I should fix that bug... unless I already did and I forgot

Oh and no problem! Happy that I was able to extend and help others :)

Thank you for your PR!


 IF YOU DO NOT FOLLOW THE FORMAT OR MAKE A GENERIC TOKEN REQUEST YOUR ISSUE WILL BE DELETED WITHOUT COMMENT
YOUR JUSTLIST MUST FOLLOW THE JSON SPECIFICATION
https://github.com/mralaminmain/justlists/blob/main/fristalajym
Checklist

[ ] I understand that this is not the place to request a token listing.
[x] I have tested that my JustList is compatible by pasting the URL into the add a list UI at justswap.org.
[ ] I understand that filing an issue or adding liquidity does not guarantee addition to the justlists website.

Please provide the following information for your token.
JustList URL must be HTTPS.
JustList URL: https://github.com/mralaminmain
JustList Name: FRISTALAJYM
Link to the official homepage of the JustList manager:

I am crypto trx lover

this token very powerfull casino gaming token


Fix broken browser image on get-involved  #363.

Updated the Web Developer Section of Get Involved to use CSS and font icons instead of an image.

I updated the Web Developer section to use FontAwesome icons, instead of the SVG.

Right now on mobile, the icons disappear. I was going to update the mobile view in another pull request.

Very cool, noticed some small issues in the screenshot:

[ ] The line work is pretty dark here. Check the border color for .dark .button.flat
[ ] bottom corners on the "window" part of the drawing should be rounded
[ ] bottom corners on the "text entry" part of the drawing should be rounded
[ ] The text entry should have a slight, light backround
[ ] the "x" is very thick. Might be worth using a × or some other symbol to get a more similar icon.

Fixed in #496


Kong 2.0.3 start error

openssl

kong

openresty

os

error log

Looks like you are missing this (two nginx modules, one for http and one for stream):
https://github.com/Kong/lua-kong-nginx-module
And propably also our paches:
https://github.com/Kong/kong-build-tools/tree/master/openresty-patches

@bungle
I add lua-kong-nginx-module and patches，the error also exist

@a07061625 Can you follow the steps in https://github.com/Kong/kong/blob/master/DEVELOPER.md ?


[QA] NotImplementedError: Cannot copy out of meta tensor; no data!

Describe the question.
Hi, I am trying out InternLM, however I am facing an issue, see below. It seems to be a configuration issue, I have tried every effort to uninstall and reinstall dependencies which do not solve the issue, could you tell me how to sort it out? thank you very much.
Loading checkpoint shards: 100%|████████████████████████████████████████████████████████████| 2/2 [00:14<00:00,  7.16s/it]
Traceback (most recent call last):
  File "/root/InternLM/InternLM/run.py", line 3, in <module>
    model = AutoModelForCausalLM.from_pretrained("internlm/internlm-chat-7b",device_map="auto",trust_remote_code=True).half().cuda()
  File "/root/miniconda3/envs/internlm/lib/python3.10/site-packages/torch/nn/modules/module.py", line 749, in cuda
    return self._apply(lambda t: t.cuda(device))
  File "/root/miniconda3/envs/internlm/lib/python3.10/site-packages/torch/nn/modules/module.py", line 641, in _apply
    module._apply(fn)
  File "/root/miniconda3/envs/internlm/lib/python3.10/site-packages/torch/nn/modules/module.py", line 641, in _apply
    module._apply(fn)
  File "/root/miniconda3/envs/internlm/lib/python3.10/site-packages/torch/nn/modules/module.py", line 641, in _apply
    module._apply(fn)
  [Previous line repeated 2 more times]
  File "/root/miniconda3/envs/internlm/lib/python3.10/site-packages/torch/nn/modules/module.py", line 664, in _apply
    param_applied = fn(param)
  File "/root/miniconda3/envs/internlm/lib/python3.10/site-packages/torch/nn/modules/module.py", line 749, in <lambda>
    return self._apply(lambda t: t.cuda(device))
NotImplementedError: Cannot copy out of meta tensor; no data!

when I removed the following line everything works fine, can anyone explain why?
device_map="auto"

It seems like that it was caused by the lack of gpu memory.

I have sorted out by adding an argument torch_dtype=torch.float16
This thread can be closed


Can you add a section of "Explore data in datasets"?

I am having a hard time to understand how to inspect/explore actual data in datasets.  Creating datasets is well-covered, then, it jumps right to Training models.
Data processing steps are often time and resource consuming.  Please add a section on that subject.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: e258128c-b871-72b0-34e2-e5157977aa17
Version Independent ID: 08a2917b-e921-2a39-9385-ca4ef4bb25d9
Content: Create Azure Machine Learning datasets to access data - Azure Machine Learning
Content Source: articles/machine-learning/how-to-create-register-datasets.md
Service: machine-learning
Sub-service: core
GitHub Login: @MayMSFT
Microsoft Alias: sihhu

thanks for the feedback. You can find out how to explore data here: https://docs.microsoft.com/en-us/azure/machine-learning/how-to-connect-data-ui#data-profile-and-preview

thanks for the feedback. You can find out how to explore data here: https://docs.microsoft.com/en-us/azure/machine-learning/how-to-connect-data-ui#data-profile-and-preview

@alscor thanks for your feedback. This document describes how to access access data from a datastore using python. However, Azure ML Studio (Designer) provides an interactive interface for visualizing  and transforming  your data using our data preparation modules. Otherwise, feel free to check out Data Class reference document and sample notebooks (tabulardataset, filedataset).

@alscor thanks for your feedback. This document describes how to access access data from a datastore using python. However, Azure ML Studio (Designer) provides an interactive interface for visualizing  and transforming  your data using our data preparation modules. Otherwise, feel free to check out Data Class reference document and sample notebooks (tabulardataset, filedataset).


CORS  error for failed JWT validation

Bug description
We use JWT authentication via security.istio.io/v1beta1/RequestAuthentication and security.istio.io/v1beta1/AuthorizationPolicy attached to an Istio ingress gateway, and the corsPolicy feature in VirtualServices attached to that gateway to allow cross origin requests to our API Gateway from our web app.
When JWT validation is successful, requests are successfully passed to our backend services, and responses include the proper CORS headers as defined in the VirtualServices. However, when JWT validation fails, responses do NOT include the proper CORS headers, which leads to browsers throwing CORS errors instead of returning the 40x responses to the javascript.
[ ] Docs
[ ] Installation
[X] Networking
[ ] Performance and Scalability
[ ] Extensions and Telemetry
[X] Security
[ ] Test and Release
[ ] User Experience
[ ] Developer Infrastructure
[ ] Upgrade
Expected behavior
JWT validation failures from RequestAuthentication and authorization failures from AuthorizationPolicy respond with CORS headers as defined in the corsPolicy of VirtualServices
Steps to reproduce the bug

Install Istio control plane with an ingress gateway
configure that gateway with a Gateway resource

apiVersion: networking.istio.io/v1beta1
kind: Gateway
metadata:
  name: foo
  namespace: istio-system
spec:
  selector:
    app: foo
  servers:
  - hosts:
    - 'a.example.com'
    port:
      name: http
      number: 80
      protocol: HTTP
    tls:
      httpsRedirect: true
  - hosts:
    - 'a.example.com'
    port:
      name: https
      number: 443
      protocol: HTTPS
    tls:
      mode: SIMPLE
      privateKey: /etc/istio/certs/foo/tls.key
      serverCertificate: /etc/istio/certs/foo/tls.crt

create a RequestAuthentication resource, specifying JWT authentication for the gateway

apiVersion: security.istio.io/v1beta1
kind: RequestAuthentication
metadata:
  name: foo
  namespace: istio-system
spec:
  jwtRules:
  - forwardOriginalToken: true
    fromHeaders:
    - name: Authorization
      prefix: 'Bearer '
    issuer: https://your.jwt.issuer
    jwksUri: https://your.jwks.endpoint
  selector:
    matchLabels:
      app: foo

Create an AuthorizationPolicy resource, disallowing non-authenticated requests to the gateway

apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
  name: foo
  namespace: istio-system
spec:
  action: ALLOW
  rules:
  - to:
    - operation:
        paths:
        - /*
    when:
    - key: request.auth.claims[iss]
      values:
      - https://your.jwt.issuer
  selector:
    matchLabels:
      app: foo

create a VirtualService resource exposing your service behind the gateway with a corsPolicy

apiVersion: networking.istio.io/v1beta1
kind: VirtualService
metadata:
  labels:
    app: bar
  name: bar
  namespace: default
spec:
  gateways:
  - istio-system/foo
  hosts:
  - a.example.com
  http:
  - corsPolicy:
      allowCredentials: true
      allowHeaders:
      - foo
      allowMethods:
      - GET
      - HEAD
      - OPTIONS
      allowOrigin:
      - https://localhost
      allowOrigins:
      - exact: https://localhost
      maxAge: 30m
    route:
    - destination:
        host: bar.default.svc.cluster.local

make a cross origin request to the gateway with proper JWT token, notice that it does return expected CORS response headers

$ curl -i \
  -H 'Origin: https://localhost' \
  -H 'Access-Control-Request-Method: POST,PUT' \
  -H 'Access-Control-Request-Headers: foo' \
  https://a.example.com \
  -H 'Authorization: Bearer <REDACTED valid token>'

HTTP/2 200
access-control-allow-origin: https://localhost
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-headers: foo
access-control-max-age: 1800
date: Fri, 04 Dec 2020 22:44:59 GMT
server: istio-envoy

make a cross origin request to the gateway WITHOUT proper JWT token, notice that it DOES NOT return expected CORS response headers

$ curl -i \
  -H 'Origin: https://localhost' \
  -H 'Access-Control-Request-Method: POST,PUT' \
  -H 'Access-Control-Request-Headers: foo' \
  https://a.example.com \
  -H 'Authorization: Bearer <REDACTED expired token>'

HTTP/2 401
content-length: 14
content-type: text/plain
date: Fri, 04 Dec 2020 22:47:15 GMT
server: istio-envoy

Jwt is expired

Although the response code and response body may be different, the same behavior is observed wrt missing CORS headers for missing token, invalid token and expired token.
Please help us understand if there is a way to get these authentication and authorization failure responses to include the CORS headers configured in our VirtualService.
Version (include the output of istioctl version --remote and kubectl version --short and helm version --short if you used Helm)
$ istioctl version --remote
client version: 1.6.13
foo version: 1.6.13
telemetry version: 1.6.13
telemetry version: 1.6.13
istiod version: 1.6.13
data plane version: 1.6.13 (X proxies)

$ kubectl version --short
Client Version: v1.19.3
Server Version: v1.14.10-gke.50

How was Istio installed?
using istioctl
Environment where the bug was observed (cloud vendor, OS, etc)
GKE

To make sure I understand the request here, what are the expected CORS headers in the response in case of authentication/authorization errors? Should the error code 401/403 returned as part of the CORS response? It would be great if you can add a link to any RFC so we have a standard to follow.

To make sure I understand the request here, what are the expected CORS headers in the response in case of authentication/authorization errors? Should the error code 401/403 returned as part of the CORS response? It would be great if you can add a link to any RFC so we have a standard to follow.

The CORS spec lives as part of the fetch() living spec. It's not incredibly specific about these cases, but it does say that responses to a CORS requests (actual GET/POST requests, or preflight OPTIONS requests) that don't include the Access-Control-* headers are interpreted as the server not understanding the CORS protocol. These responses cause the client to fail the cross-origin request just as if there was a network error, or a generic CORS error.
In authenticated cross-origin requests, though, the client can't distinguish an authorization error from a CORS error. That's why it is expected that CORS-capable endpoints respond to preflight requests with the appropriate CORS headers before applying any authentication filters. Examples abound around the web, just search for "cors preflight 401", and even Google's own apigee docs have examples on how to configure API proxies to respond to CORS preflight requests bypassing authentication.

The CORS spec lives as part of the fetch() living spec. It's not incredibly specific about these cases, but it does say that responses to a CORS requests (actual GET/POST requests, or preflight OPTIONS requests) that don't include the Access-Control-* headers are interpreted as the server not understanding the CORS protocol. These responses cause the client to fail the cross-origin request just as if there was a network error, or a generic CORS error.
In authenticated cross-origin requests, though, the client can't distinguish an authorization error from a CORS error. That's why it is expected that CORS-capable endpoints respond to preflight requests with the appropriate CORS headers before applying any authentication filters. Examples abound around the web, just search for "cors preflight 401", and even Google's own apigee docs have examples on how to configure API proxies to respond to CORS preflight requests bypassing authentication.

we spoke earlier and im sure that this is a solution that will work for you but its work a try. You can use envoy filters to inject headers. you should be able to inspect the response for the 401 or 403 and still include the CORS headers as a stop gap. if you would like, i can dig up more examples.
An example to get you started
apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
  name: lua-filter
  namespace: istio-system
spec:
  workloadSelector:
    labels:
      istio: ingressgateway
  configPatches:
  - applyTo: HTTP_FILTER
    match:
      context: GATEWAY
      listener:
        filterChain:
          filter:
            name: "envoy.http_connection_manager"
            subFilter:
              name: "envoy.router"
    patch:
      operation: INSERT_BEFORE
      value:
       name: envoy.lua
       typed_config:
         "@type": "type.googleapis.com/envoy.config.filter.http.lua.v2.Lua"
         inlineCode: |
            function envoy_on_response(response_handle)
                response_handle:logInfo(" ========= XXXXX ==========");
                response_handle:headers():add("X-User-Header", "worked");
            end

we spoke earlier and im sure that this is a solution that will work for you but its work a try. You can use envoy filters to inject headers. you should be able to inspect the response for the 401 or 403 and still include the CORS headers as a stop gap. if you would like, i can dig up more examples.
An example to get you started
apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
  name: lua-filter
  namespace: istio-system
spec:
  workloadSelector:
    labels:
      istio: ingressgateway
  configPatches:
  - applyTo: HTTP_FILTER
    match:
      context: GATEWAY
      listener:
        filterChain:
          filter:
            name: "envoy.http_connection_manager"
            subFilter:
              name: "envoy.router"
    patch:
      operation: INSERT_BEFORE
      value:
       name: envoy.lua
       typed_config:
         "@type": "type.googleapis.com/envoy.config.filter.http.lua.v2.Lua"
         inlineCode: |
            function envoy_on_response(response_handle)
                response_handle:logInfo(" ========= XXXXX ==========");
                response_handle:headers():add("X-User-Header", "worked");
            end

So basically, the cors filter should come before the jwt_authn filter to get this to work as you're describing. Your best bet is to just re-order the filters like this:
apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
  name: reorder-cors-before-jwt
  namespace: istio-system
spec:
  workloadSelector:
    labels:
      app: istio-ingressgateway
  configPatches:
  - applyTo: HTTP_FILTER
    match:
      context: GATEWAY
      listener:
        filterChain:
          filter:
            name: "envoy.filters.network.http_connection_manager"
            subFilter:
              name: "envoy.filters.http.cors"
    patch:
      operation: REMOVE
  - applyTo: HTTP_FILTER
    match:
      context: GATEWAY
      listener:
        filterChain:
          filter:
            name: "envoy.filters.network.http_connection_manager"
            subFilter:
              name: "envoy.filters.http.jwt_authn"
    patch:
      operation: INSERT_BEFORE
      value:
        name: "envoy.filters.http.cors"
        typed_config:
          "@type": "type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors"

However, I do suggest this become the default behavior if possible. I don't see a case how CORS coming earlier (ie, before JWT) would be harmful. This should work on all of Istio 1.6, 1.7, 1,8.

Thank you very much, after hours of banging my head against the keyboard wondering why CORS didn't work and I find this :)

So basically, the cors filter should come before the jwt_authn filter to get this to work as you're describing. Your best bet is to just re-order the filters like this:
apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
  name: reorder-cors-before-jwt
  namespace: istio-system
spec:
  workloadSelector:
    labels:
      app: istio-ingressgateway
  configPatches:
  - applyTo: HTTP_FILTER
    match:
      context: GATEWAY
      listener:
        filterChain:
          filter:
            name: "envoy.filters.network.http_connection_manager"
            subFilter:
              name: "envoy.filters.http.cors"
    patch:
      operation: REMOVE
  - applyTo: HTTP_FILTER
    match:
      context: GATEWAY
      listener:
        filterChain:
          filter:
            name: "envoy.filters.network.http_connection_manager"
            subFilter:
              name: "envoy.filters.http.jwt_authn"
    patch:
      operation: INSERT_BEFORE
      value:
        name: "envoy.filters.http.cors"
        typed_config:
          "@type": "type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors"

However, I do suggest this become the default behavior if possible. I don't see a case how CORS coming earlier (ie, before JWT) would be harmful. This should work on all of Istio 1.6, 1.7, 1,8.

I think @christian-posta is right here. The cors filter should come before the jwt_authn filter.

For me this is blocking for making POST request with JWT and CORS and I requirse a workaround via reverse-proxies, which is not a clean solution -- even it has minor performance advantages, because of the not needed preflight request.
Hence, see https://github.com/istio/istio/issues/36911

Just FYI to anyone who is trying to figure out how to reorder filters, it seems that the REMOVE operation was broken in a recent version of Istio (I'm not sure which, but I can verify at least on 1.17). The REMOVE operation is now running after all other patches have been applied, meaning the suggestion above will result in not having any CORS filter at all. My hacky workaround was to just insert a duplicate CORS filter.
This was fixed  but has not been released yet.

For those who came here to look for a solution to the REMOVE op bug until it gets released:
The mentioned REMOVE op problem applies to NETWORK_FILTER but not to LISTENER.
So what you can do is REMOVE the listener and ADD the same listener again in the same EnvoyFilter with the original filter_chain patched.
  configPatches:
  - applyTo: LISTENER
    match:
      context: GATEWAY
      listener:
        portNumber: 1234
    patch:
      operation: REMOVE
  - applyTo: LISTENER
    match:
      context: GATEWAY
    patch:
      operation: ADD
      value:
        name: "<IP_ADDRESS>_1234"
        address:
          socket_address:
            address: "<IP_ADDRESS>"
            port_value: 1234
        filter_chains:
          - filter_chain_match:
              server_names: ["myserver.mydomain.com"]
            filters:
              - name: "envoy.filters.network.tcp_proxy"
                typedConfig:
...


Add a cast test case for decimal negative scale

Which issue does this PR close?

Closes #.
Rationale for this change

Clarifying the question at https://github.com/apache/arrow-rs/pull/3139#issuecomment-1327945474.
What changes are included in this PR?

Are there any user-facing changes?

Although I wonder if this should be returning an error?

Why? I think this is correct behavior.

For other types we error on truncation, so I figured we would do the same here, if you're fine with truncation why not just use floats? I dunno, I'm not very knowledgeable about decimals, so happy to defer to you 😅

For other types we error on truncation, so I figured we would do the same here, if you're fine with truncation why not just use floats? I dunno, I'm not very knowledgeable about decimals, so happy to defer to you 😅

This follows current rounding behavior when casting between decimals with different scales. It rounds to nearest neighbor and round up when both neighbors are equidistant. I added one more test to make it more clear.


Inserting empty resultset into a temp table in procedure confuses the result set handling

PHP Driver version
Linux sqlsrv 5.3.0 / 5.4.0
SQL Server version
Any
Client operating system
Ubuntu 16.04
Can be reproduced with the Docker image at https://hub.docker.com/r/lbosqmsft/mssql-php-msphpsql/
PHP version
PHP 7.0.15-0ubuntu<IP_ADDRESS>
Microsoft ODBC Driver version
msodbcsql/xenial,now <IP_ADDRESS>-1
Stored procedure in the server
create procedure sp_test
as
begin

-- Remove the comments from following two lines to make this procedure to work with sqlsrv
-- create table #dummy ( sqlsrvbug int )
-- insert into #dummy values (1)

create table #test ( a int )

/* Insert an empty resultset */
insert into #test
select 1
from (
  select 1 as v
) as q
where q.v  = 99

select 2

end
go

Problem description
If a stored procedure starts with an empty insert into a temp table, the sqlsrv-driver gets confused and is uable to return data from any of the queries that follow.
Expected behavior and actual behavior
The PHP code executes the stored procedure and loops through the result sets. It should show the output second query, but instead stops at the first temp table insert.
Expected result:
Result set #1
array(0) {
}
Result set #2
array(1) {
  [0]=>
  array(1) {
    [0]=>
    int(2)
  }
}

Actual behavior:
Result set #1
array(0) {
}

Repro code or steps to reproduce

Get the docker image from https://hub.docker.com/r/lbosqmsft/mssql-php-msphpsql/
Add the procedure above to SQL Server
Fill in the credentials and run the PHP script from command line:

# php empty_rs.php "sp_test"
empty_rs.php:
<?php

$tSQL = $argv[1];

$serverName = "SERVER";
$connectionOptions = array(
  "Database" => "DATABASE",
  "Uid" => "USERNAME",
  "PWD" => "PASSWORD"
);
$conn = sqlsrv_connect($serverName, $connectionOptions);

$resultset = array();

$i = 1;
$stmt = sqlsrv_query($conn, $tSQL);
do {
  echo 'Result set #'.$i++.PHP_EOL;
  $resultset = array();
  while ($row = sqlsrv_fetch_array($stmt, SQLSRV_FETCH_NUMERIC)) {
    array_push($resultset, $row);
  }
  var_dump($resultset);
} while (sqlsrv_next_result($stmt));

Note that if one adds an insert into a dummy temp table to the beginning of the procedure, everything works.

@slaakso Thank you for reporting this. Do you know if docker is necessary to reproduce this bug? We have not been able to outside of docker.

Docker is not necessary.
Did the installation on Ubuntu 16.04.2 LTS and tested it with that with same results. The database used is Microsoft SQL Server 2012 - 11.0.5343.0 (Intel X86).
Does look like the bug is not related to PHP extension, but mabye to unixodbc, as the same behavior can be replicated with sqlcmd. The sp_test below is the same as the sp_test above.
$ sqlcmd -S <IP_ADDRESS> -U user -P pass
1> sp_test
2> go

(0 rows affected)
1> select 'whatever'
2> go
SqlState 24000, Invalid cursor state
1> select 'whatever again'
2> go
SqlState 24000, Invalid cursor state
1>

So the sqlcmd's connection is messed up and no more commands can be processed. If the dummy temporary table + insert is added to beginning of procedure, everything is working ok. Same as with the PHP script.

I think you are correct, it sounds like this is a unixODBC issue. The default unixODBC that comes with Ubuntu 16.04 is version 2.3.1, and many bugs have been fixed since then. I suggest upgrading your unixODBC to the latest (you will probably need to install it from source).

Yes, this was a unixODBC issue. Fixed with newer unixODBC. Tested with unixODBC 2.3.7.

Thanks, we will close this issue now. Feel free to reopen if the problem crops up again.


Could Not Upload From Android Device

Hello, OCIS developers and community!
Help, please, with problem solution suggestions.
I can upload via desktop browser, but could not via android phone.
Lets start with logs
{"level":"info","service":"proxy","proto":"HTTP/1.1","request-id":"8127bacb-a1bc-40d7-a91e-42ab5f5b952f","remote-addr":"<IP_ADDRESS>:46502","method":"PROPFIND","status":404,"path":"/dav/spaces/d628b8a2-806b-4368-a010-e43d366acd3c$7a43adda-0108-4b2d-acdb-b4d5873cb5ed/20230620_150756.jpg","duration":13.123948,"bytes":201,"time":"2023-06-21T15:07:09.333809904Z","line":"github.com/owncloud/ocis/v2/services/proxy/pkg/middleware/accesslog.go:28","message":"access-log"}
{"level":"info","service":"auth-machine","pkg":"rgrpc","traceid":"00000000000000000000000000000000","time":"2023-06-21T15:07:17.713479824Z","line":"github.com/cs3org/reva/v2@v2.14.1-0.20230621095551-a4c97189e11a/internal/grpc/services/authprovider/authprovider.go:141","message":"user idp:\"https://file.somedomain.by\" opaque_id:\"7a43adda-0108-4b2d-acdb-b4d5873cb5ed\" type:USER_TYPE_PRIMARY  authenticated"}
{"level":"info","service":"gateway","pkg":"rgrpc","traceid":"00000000000000000000000000000000","time":"2023-06-21T15:07:17.725769856Z","line":"github.com/cs3org/reva/v2@v2.14.1-0.20230621095551-a4c97189e11a/internal/grpc/services/gateway/publicshareprovider.go:106","message":"listing public shares"}
{"level":"info","service":"sharing","pkg":"rgrpc","traceid":"00000000000000000000000000000000","publicshareprovider":"list","time":"2023-06-21T15:07:17.726836278Z","line":"github.com/cs3org/reva/v2@v2.14.1-0.20230621095551-a4c97189e11a/internal/grpc/services/publicshareprovider/publicshareprovider.go:234","message":"list public share"}
{"level":"info","service":"storage-system","pkg":"rgrpc","traceid":"00000000000000000000000000000000","time":"2023-06-21T15:07:17.72980532Z","line":"github.com/cs3org/reva/v2@v2.14.1-0.20230621095551-a4c97189e11a/internal/grpc/services/authprovider/authprovider.go:141","message":"user idp:\"internal\" opaque_id:\"9e6080d3-074f-4eb7-9c5f-394c4bcea69d\" type:USER_TYPE_PRIMARY  authenticated"}
{"level":"info","service":"proxy","proto":"HTTP/1.1","request-id":"5f098bcc-b473-4dfd-b5e8-709ea7d0d611","remote-addr":"<IP_ADDRESS>:46506","method":"PROPFIND","status":207,"path":"/dav/spaces/d628b8a2-806b-4368-a010-e43d366acd3c$7a43adda-0108-4b2d-acdb-b4d5873cb5ed/","duration":27.489082,"bytes":1108,"time":"2023-06-21T15:07:17.734125239Z","line":"github.com/owncloud/ocis/v2/services/proxy/pkg/middleware/accesslog.go:28","message":"access-log"}
{"level":"info","service":"auth-machine","pkg":"rgrpc","traceid":"00000000000000000000000000000000","time":"2023-06-21T15:07:17.759343586Z","line":"github.com/cs3org/reva/v2@v2.14.1-0.20230621095551-a4c97189e11a/internal/grpc/services/authprovider/authprovider.go:141","message":"user idp:\"https://file.somedomain.by\" opaque_id:\"7a43adda-0108-4b2d-acdb-b4d5873cb5ed\" type:USER_TYPE_PRIMARY  authenticated"}
{"level":"info","service":"proxy","proto":"HTTP/1.1","request-id":"3df7dbb5-0eac-4793-866b-a6330c6504de","remote-addr":"<IP_ADDRESS>:46512","method":"PROPFIND","status":404,"path":"/dav/spaces/d628b8a2-806b-4368-a010-e43d366acd3c$7a43adda-0108-4b2d-acdb-b4d5873cb5ed/20230620_150756.jpg","duration":15.81095,"bytes":201,"time":"2023-06-21T15:07:17.769703201Z","line":"github.com/owncloud/ocis/v2/services/proxy/pkg/middleware/accesslog.go:28","message":"access-log"}
{"level":"info","service":"auth-machine","pkg":"rgrpc","traceid":"00000000000000000000000000000000","time":"2023-06-21T15:07:20.220701588Z","line":"github.com/cs3org/reva/v2@v2.14.1-0.20230621095551-a4c97189e11a/internal/grpc/services/authprovider/authprovider.go:141","message":"user idp:\"https://file.somedomain.by\" opaque_id:\"7a43adda-0108-4b2d-acdb-b4d5873cb5ed\" type:USER_TYPE_PRIMARY  authenticated"}
{"level":"info","service":"proxy","proto":"HTTP/1.1","request-id":"d6e9b82c-70eb-4dbe-9150-31d0beecfe79","remote-addr":"<IP_ADDRESS>:58476","method":"GET","status":200,"path":"/ocs/v2.php/apps/notifications/api/v1/notifications","duration":13.206571,"bytes":72,"time":"2023-06-21T15:07:20.228451224Z","line":"github.com/owncloud/ocis/v2/services/proxy/pkg/middleware/accesslog.go:28","message":"access-log"}

On android client (latest ftom play market) it prints "unknown error".
Does real domain address is needed to debug?

But, what about normal error message both at server logs and client?


World Prefix gone, wont come back

Suddenly the world prefix in chat does not show anymore, does not come back even after reload en restart server.
checked config, and nothing changed... what could be the issue?

i just did /mvload world. now it shows world again, does this meen mv is not loading world on startup ?


Why doesn't the official {{t}} tag be added?

Issue Summary
Every time I upgrade the version, I have to find it manually and then add it, which is very troublesome. So why doesn't the official version have that label? For example, in the member comment area
Steps to Reproduce
add  {{t}} tag in official version
Ghost Version
5.22.10
Node.js Version
8
How did you install Ghost?
host
Database type
Other
Browser & OS version
No response
Relevant log / error output
No response
Code of Conduct

[X] I agree to be friendly and polite to people in this repository

Please see https://forum.ghost.org/t/hacktoberfest-project-i18n-for-portal-member-emails-comments-ui-sodosearch/33062


Screen flickering - macOS

Describe the bug
The flicker problem has already been observed in client version 3.5.7. It is currently not possible to use the client on an Apple device while it is running. Each time the user receives notifications, messages (DM or from other rooms) while the application is hidden in the dock appear with the application flickering on the screen.
What operating system and which version? - macOS Monterey 12.3.1
Which version of Rocket.Chat (Server)? - 4.3.3
Which version of Rocket.Chat.Electron (Electron/Desktop)? - 3.8.4 (client Electron)
To Reproduce
Steps to reproduce the behavior:

Download Rocket.Chat Electron client (3.8.4)
Open the application
Minimalize the application to the Dock
The screen starts flickering when messages are received

Expected behavior
The client should not be filckering.
Screenshots
https://user-images.githubusercontent.com/93321802/177758869-f733ed3d-7ee3-473d-bb7b-53f093c861f9.mp4
Additional context
Add any other context about the problem here.

Hey there @brknapik, I'm not able to reproduce this issue on the latest version of Rocket.Chat
Could you please upgrade to the latest version of Rocket.Chat(3.8.8) from the App Store, and let us know if you're still facing this issue😄

hey @brknapik ,i want to work into this issue please allow me to do so

I thought  this issue still exists. I am not try new version yet. if I
found then I would definitely let you know
On Tue, 6 Sep, 2022, 7:02 pm Vineet Jain, @.***>
wrote:

I thought it this issue exists. I am not try new version yet. if I found
then I would definitely let you know.
On Tue, 6 Sep, 2022, 6:59 pm PalanikannanM, @.***>
wrote:

hey @brknapik https://github.com/brknapik ,i want to work into this
issue please allow me to do so
Hey there @vineetjain27 https://github.com/vineetjain27 welcome to the
community, could you please tell us if you are you to reproduce the issue
though?
I am not able to reproduce this issue anymore in the latest version of
Rocket.Chat.Electron
—
Reply to this email directly, view it on GitHub
https://github.com/RocketChat/Rocket.Chat.Electron/issues/2443#issuecomment-1238154006,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AWSRS3EO7PZOZ23CLNHNXUDV45BMNANCNFSM525ADUQQ
.
You are receiving this because you were mentioned.Message ID:
@.***>

--
The information contained in this electronic communication is intended
solely for the individual(s) or entity to which it is addressed. It may
contain proprietary, confidential and/or legally privileged information.
Any review, retransmission, dissemination, printing, copying or other use
of, or taking any action in reliance on the contents of this information by
person(s) or entities other than the intended recipient is strictly
prohibited and may be unlawful. If you have received this communication in
error, please notify us by responding to this email or telephone and
immediately and permanently delete all copies of this message and any
attachments from your system(s). The contents of this message do not
necessarily represent the views or policies of BITS Pilani.

Hi,
this problem is solved in version 3.8.9.
Thanks a lot ! 🙂

Hi,
this problem is solved in version 3.8.9.
Thanks a lot ! 🙂

That's awesome @brknapik, glad to hear that !! Thank you so much for re-checking it and closing the issue🙂

I still see flicker in the latest version of RocketChat Desktop for MacOS version 3.8.19.   I only see the problem if the height of the desktop client window or iframe embed is small enough that the pop up menu tries to display a scrollbar.   I also see the issue in Firefox and Chrome on Linux.   I'm using the Docker image for version 5.4.4 on the server side.

https://user-images.githubusercontent.com/1891621/232132415-250690a7-6119-491b-a2be-0953dab01cb4.mov
This is a screen recording of the flicker in the Electron client.


Bug with Monk's Enhanced Journal

Environment Details

Foundry Core Version: 0.8.6
OS & Browser: Windows 10
Hosting: Self

Describe the bug
When changing the journal on Monk's Enhanced Journal the GM Screen also changes
To Reproduce
Steps to reproduce the behavior:
Open any Journal with Monk's Enhanced Journal module enabled
Expected behavior
Not change the Journals on the GM Screen
Screenshots

Hey, thanks for the report. This module looks heavy and it might be straight up incompatible with GM Screen.
I'll see what I can do but this is not going to be super high on my priority list unless I get some more feedback about it.
I would appreciate a less-small video demoing this (I can barely see the image) with only GM Screen and Monks Enhanced Journals enabled.

Here is the video
With monk enabled
https://streamable.com/jzwtqa
With monk disabled
https://user-images.githubusercontent.com/33188462/121435545-7529aa00-c955-11eb-9855-696f0ac275a1.mp4
1st video is on streamable because it was bigger than 10mb

I too would like to have functionality between GM Screen and Monk's enhanced Journal.  I've run into the same issue noted above.  Thank you for all your work on GM Screen, it really adds a lot to our VTT experience.

I found this as I'm having a different issue between Monk's Enhanced Journal and GM Screen though I'm not sure if it's related to this or not.  Are you still seeing this?  I'm unable to reproduce this issue.
Foundry: 0.8.8
MEJ: 1.0.17
GM Screen: 2.7.1

It looks like Ironmonk has a fix on their end pending release. Can one of you double check when the next version of that comes out and let me know if this still could use looking at?

@akrigline, Ill watch out for the release.  Thank you for the heads up.

It looks to me that GM Screen and Monk's enhanced Journal are working well together.