Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG  Not logged in ELOG logo
icon5.gif   elog client authentication and attachment comment, posted by Yoshio Imai on Thu Apr 6 20:24:06 2006 
    icon2.gif   Re: elog client authentication and attachment comment, posted by Stefan Ritt on Fri Apr 7 10:29:49 2006 
       icon2.gif   Re: elog client authentication and attachment comment, posted by Yoshio Imai on Mon Apr 10 20:08:02 2006 
Message ID: 1799     Entry time: Thu Apr 6 20:24:06 2006     Reply to this: 1801
Icon: Question  Author: Yoshio Imai  Author Email:  
Category: Question  OS: Linux  ELOG Version: 2.6.1-1671 
Subject: elog client authentication and attachment comment 
Hi again!

I have two questions, one concerning authentication methods for the elog client. Until revision 1642, it was possible to submit entries to a password-protected logbook using the elog client without supplying authentication information. With revision 1671 this is no longer possible. In principle this is good. However, many of our run control programs use the elog client (via rsh to the elog server computer) to submit automatic entries, which fails now. In order for this mechanism to work again, we would have to change the command-line call in the sources, including now the password in clear text. Since this can be considered a security issue, we would like to avoid it if at all possible. I guess my request would go in the direction of PAM support, but would it be possible to revert to the old behaviour as an option? (If you tell me where in the code to look, we could probably also comment out the respective lines ourselves so that you don't have extra work...)

The second remark is about attachment comments. When editing a logbook entry, the attachment upload buttons appear again, but without the comment. Shouldn't it be there, too?

Thanks,

Yoshio
ELOG V3.1.5-fe60aaf