Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 122 of 808  Not logged in ELOG logo
icon5.gif   Required Attributes, posted by Eric Krise on Fri May 14 16:53:54 2010 

Is there a way to require a certain attribute on reply, but not on an original entry?  In some cases info. for these fields only exists on reply.

    icon2.gif   Re: Required Attributes, posted by Stefan Ritt on Fri May 14 17:03:36 2010 

Eric Krise wrote:

Is there a way to require a certain attribute on reply, but not on an original entry?  In some cases info. for these fields only exists on reply.

No. There is only "Preset on reply ..." and "Remove on reply...". You could for example require that attribute, preset it for new entries with some dummy value, and remove that value with "Remove on reply...". Maybe that works. 

icon5.gif   change design part of the discussion board, posted by Heinzmann on Sun Jun 6 22:54:55 2010 midas.psi.ch.htm

Hello Stefan,

 

If I would like to change the design of the attached part of the discussion board like:

 

deleting OS: (including blue box) Linux Windows Mac OSX  All  Other (including green box)

 

Where and how could I do this?

 

Thank you

 

 

 

 

 

 

 

 

 

    icon2.gif   Re: change design part of the discussion board, posted by Stefan Ritt on Tue Jun 8 09:02:03 2010 

Heinzmann wrote:

Hello Stefan,

 

If I would like to change the design of the attached part of the discussion board like:

 

deleting OS: (including blue box) Linux Windows Mac OSX  All  Other (including green box)

 

Where and how could I do this?

 

Thank you 

Well, the official forum at midas.psi.ch cannot be changed by you. But if you installed a local logbook similar to the one here, you simple go and edit the configuration file elogd.cfg. Please read the documentation for further information.

    icon2.gif   Re: change design part of the discussion board, posted by Heinzmann on Tue Jun 8 23:08:41 2010 

Stefan Ritt wrote:

Heinzmann wrote:

Hello Stefan,

 

If I would like to change the design of the attached part of the discussion board like:

 

deleting OS: (including blue box) Linux Windows Mac OSX  All  Other (including green box)

 

Where and how could I do this?

 

Thank you 

Well, the official forum at midas.psi.ch cannot be changed by you. But if you installed a local logbook similar to the one here, you simple go and edit the confitguration file elogd.cfg. Please read the documentation for further information.

Stefan,

 

I have done the changes to my logbock, but I think I have done something wrong. As an example, the window where you write in your note is not sized anymore like before. I have to scroll a lot to the right to see the right border of the window.

The only thing I have done was try to delete: the OS:  Linux Window Mac OSC All Other info.

Please could you help me out?

 

    icon2.gif   Re: change design part of the discussion board, posted by Stefan Ritt on Wed Jun 9 08:26:20 2010 

Heinzmann wrote:

I have done the changes to my logbock, but I think I have done something wrong. As an example, the window where you write in your note is not sized anymore like before. I have to scroll a lot to the right to see the right border of the window.

The only thing I have done was try to delete: the OS:  Linux Window Mac OSC All Other info.

How should I know what you have done wrong if you don't tell me. It's like if you call your PC manufacturer and tell him: "My PC is not working, what is wrong?". So please send me your elogd.cfg, and make a few screen shots so that I know what is going on.

icon4.gif   More adventures with SSL, posted by Chuck Brost on Thu Jul 22 16:59:00 2010 

Stefan,

Everything has been working great since we last spoke (Version 2.7.8), until InfoSec decided to change how the Certs were created.  Now they come with a little bit of code in the .key file before the Hash.. when I put the new .CRT and .KEY in the SSL folder I am asked on starting Elogd to provide a "PEM PassPhrase".  As you can expect, if you do not enter one, or the incorrect one, it does not just turn off SSL, it exits the program.  The key begins like this in the new versions:

-----BEGIN RSA PRIVATE KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: DES-EDE3-CBC,ACF4A8B263EAA51D

(that little encode piece on the end is not the actual one in the key.  I am assuming it is a passphrase key so it will know what the right passphrase is that should be entered.

We are assuming that this is the "Install password" they have set up to use to install the certs on all of the IIS servers we have.  If that is indeed the case.. Does elog save this passphrase somewhere?  does Elog save it in the registry? does it save it encrypted? Or with access security permissions set on the keys?  I have a feeling that the answer to most of this is probably "no", but to know where we go from here, that is the place to start.

Thanks

Chuck

    icon2.gif   Re: More adventures with SSL, posted by Stefan Ritt on Wed Jul 28 16:38:07 2010 

Chuck Brost wrote:

Stefan,

Everything has been working great since we last spoke (Version 2.7.8), until InfoSec decided to change how the Certs were created.  Now they come with a little bit of code in the .key file before the Hash.. when I put the new .CRT and .KEY in the SSL folder I am asked on starting Elogd to provide a "PEM PassPhrase".  As you can expect, if you do not enter one, or the incorrect one, it does not just turn off SSL, it exits the program.  The key begins like this in the new versions:

-----BEGIN RSA PRIVATE KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: DES-EDE3-CBC,ACF4A8B263EAA51D

(that little encode piece on the end is not the actual one in the key.  I am assuming it is a passphrase key so it will know what the right passphrase is that should be entered.

We are assuming that this is the "Install password" they have set up to use to install the certs on all of the IIS servers we have.  If that is indeed the case.. Does elog save this passphrase somewhere?  does Elog save it in the registry? does it save it encrypted? Or with access security permissions set on the keys?  I have a feeling that the answer to most of this is probably "no", but to know where we go from here, that is the place to start.

Thanks

Chuck

The pass phrase should not be stored anywhere for security reasons. Actually ELOG cannot stored it encrypted, because strong encryption is a one-way encryption which cannot be reverted, so ELOG would have to store it in plain text, which is not good. Actually all SSL web servers have this problem. See for example:

http://www.akadia.com/services/ssh_test_certificate.html

In Step 3 they tell you how to remove the pass phrase for Apache. The same holds true for ELOG.

ELOG V3.1.5-3fb85fa6