Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 143 of 807  Not logged in ELOG logo
ID Date Icon Authordown Author Email Category OS ELOG Version Subject
  227   Wed Feb 19 09:37:30 2003 Smile Stefan Rittstefan.ritt@psi.ch   Re: Participation on development of ELOG
> We are interested in using your ELOG (which we consider to be a wonderful 
> application) even more. We would like to make a few adaptations in your 
> source code, above all to add some functionality that we are missing.
> 
> I was wondering if there is a way we could coordinate the development 
> together. For instance, would it be of your interest to receive the code 
> adaptations we do and implement it in your future releases? 

Sure, I'm very interested in those and ready to merge it into the main 
development tree.

- Stefan
  228   Wed Feb 19 09:47:32 2003 Reply Stefan Rittstefan.ritt@psi.chQuestion  Re: Postdating the Entry Date
> Is is possible to postdate the Entry Date for an entry?
> 
> The documentation lists the ability to forward date an entry, but I don't 
> see any ability to backdate an entry (edit the date to a date in the past).
> 
> Given that the entry date is part of the logbook entry file structure, it 
> wasn't obvious how to make this change.

The date is part of the logbook entry file structure because it's considered 
as a "stamp" which cannot be changed, so to document the real date when the 
message was written. In some installations this is very important.

If you need to change the date more freely, I would recommend to add another 
attribute which can be changed at will. Up to now this has to be a string 
variable so users have to make sure to enter the date in proper format, but 
you can prepopulate that with the current date like:

Attributes = Author, ..., Real date
Preset Real date = $date

This way the current date occurs in that field, but can be changed 
(backdated).

Note that the entry date can be changed directly in the YYMMDDa.log files in 
the data directory, if one has write access there and the elogd daemon is not 
running.
  233   Mon Feb 24 13:20:19 2003 Idea Stefan Rittstefan.ritt@psi.ch   ELOG source code from CVS
To obtain the newest source code of ELOG, go to the CVS repository at

http://midas.psi.ch/cgi-bin/cvsweb/elog/src

It contains usually the newest bug fixes, which will show up in the next 
realease. On the other hand it can also contain some new features, which 
are not yet fully tested, so care should be taken when using it. The 
revision comments usually explain what is new in that revision.
  234   Mon Feb 24 13:22:06 2003 Question Stefan Rittstefan.ritt@psi.chBug report  Re: Themes BUG ?
> Is the DEFAULT theme somehow hardcoded for the login screen and the main 
> menu ?

Yes, this was in and certainly is not correct. So I fixed it, the new code 
can be obtained vom CVS (see elog:233).
  235   Mon Feb 24 14:40:30 2003 Reply Stefan Rittstefan.ritt@psi.chQuestion  Re: Email notification
This problem has been fixed as well (elog:233).
  238   Wed Feb 26 10:13:10 2003 Idea Stefan Rittstefan.ritt@psi.chRequest  Re: elogd.cfg
> Stefan and friends,
> 
> without breaching your own security, could it be possible to see what the 
> elogd.cfg file looks like, also if others would like to post theirs, this 
> would be great in building exmaples etc, obviosly an security related or 
> mail server entries hashed out.

Ok, good idea. I made a new logbook "Config Examples" on this server, where 
everybody can add new configuration examples. I added a few covering the 
logbooks on this server as a starting point. Just click on "Config Examples" 
at the top of this page!
  239   Wed Feb 26 10:34:12 2003 Reply Stefan Rittstefan.ritt@psi.chComment  Re: Security (passwords over web browser)
> Stefan - Just to say that this is an excellent piece of work well done.

Thanks.
 
> 1) is there a way around seeing the password in text when self 
regestering, 
> if I turn this option off when the user changes his password will this 
> password still be seen?

Where did you see the password? Was it on this logbook or on your own? Did 
you use "self register" equal 3 or 2? The password should never be visible 
in plain text, so after you submit it (during registration or login), the 
page gets immediately redirected since the password is contained in the 
URL. After the redirection, it is not visible any more. Now it might happen 
that the redirection takes a few seconds, depending on the network speed, 
then you see it for this few seconds. But in an intranet installation, this 
should not happen.

> 2) I have changed all the files to be owned on my RedHat Server by the 
> user:group as elog:elog and set and moved the logbooks to another 
directory 
> other than in /usr/local/elog namely /home/elog/logbooks, my concern is 
is 
> I was to upgrade to a newer version would it be a simple install over the 
> top? any caveats?

Yes, if you upgrade, the new version will again to into /usr/local/elog 
unless you tell "rpm" to relocate the package. Unfortunately I'm not a 
specialist with "rpm", but you might figure it out yourself (just try to 
reinstall the same version and look where the files go wiht "rpm -ql elog").
  243   Fri Mar 7 09:39:45 2003 Reply Stefan Rittstefan.ritt@psi.chBug report  Re: https:// changed to http:// when submit button is clicked
> > I'm using elog 2.3.1 on redhat 7.1 and using stunnel to redirect from port
> > 443 to 8080. When I try to add a new record (click submit) https:// in the
> > browser gets changed to http://. I ve tried three browsers all with the 
same
> > result. If I go into the address field and change it to https:// after
> > getting a 404 error it works. The record gets posted.

This is due to a change we had to do in the redirection of the pages. If you 
submit a page, the result is a redirection using the HTTP 
statement "Location: ..." inside the header. While this was a relative link 
in the previous versions, we changed this into an absolute link, which then 
agrees with the standard. But since elgod does not know if it runs 
under "http:" or "https:", you have now to add the line

URL = https://your.server:port

into elogd.cfg. I will add this note into the documentation.

- Stefan
ELOG V3.1.5-3fb85fa6