ID |
Date |
Icon |
Author |
Author Email |
Category |
OS |
ELOG Version |
Subject |
773
|
Mon Nov 15 09:54:45 2004 |
| Marc Neiger | m.neiger@synergie-inf.com | Info | All | 2.5.4-6 | Re: Announcement of RSS feeds |
IE 6 chokes on the XML, below is what I get for
http://midas.psi.ch/elogs/Forum/elog.rdf
(sorry this is in french).
So I assume all rss reader parsing the file with the MS XML parser shall also
have a problem, this is the case with Avant Browser integrated RSS reader.
Cheer,
Marc
------------------------------------------------------
La page XML ne peut pas être affichée
Impossible d'afficher l'entrée XML en utilisant la feuille de style XSL.
Corrigez l'erreur, puis cliquez sur le bouton Actualiser ou réessayez
ultérieurement.
--------------------------------------------------------------------------------
Un caractère incorrect a été trouvé dans un contenu de texte. Erreur de
traitement de la ressource http://midas.psi.ch/elog...
<title>Re: $message id gives wrong value - Gernman traslalation of Back, posted
by Ulrich Tr |
941
|
Mon Feb 14 12:36:30 2005 |
| Stefan Ritt | stefan.ritt@psi.ch | Info | Linux | Windows | 2.5.7 | ELOG security vulnerability fixed, IMPORTANT!!!! |
Dear ELOG users,
It has been brought to my attention that ELOG has a vulnerability through
which one can obtain a remote shell (meaning to log in to your machine
through elog). There is even an exploit available which demonstrates that
both for linux and windows.
This is a severe security problem for all logooks which can be seen from
outside, even if they have password protection on. I strongly recommened to
upgrade to elog version 2.5.7 as soon as possible if you run a public elog
server.
Here is some explanation for the technically interested:
The problem arises from a strcpy() in the decode_post() routine, which
triggers a buffer overflow when attachment file names longer than 256
characters are submitted. I replaced (hopefully) all strcpy() with strlcpy()
to fix this problem, but if someone sees a location which I have missed,
please tell me.
The second vulnerability had to do with write passwords. If you put a "write
password = xxx" statement into your config file, it was still possible to
download the config file with a special hand-written URL, and decode the
write password, which is usually only base-64 encoded unless you haven't
compiled elog with the -DHAVE_CRYPT flag. I have changed that so if a write
password is present, the download is only possible when this password is
submitted in each request. If this has some effects on synchronizing of
logbooks, please let me know.
Stefan Ritt |
943
|
Mon Feb 14 18:49:44 2005 |
| Recai Oktas | roktas@omu.edu.tr | Info | Linux | 2.5.7 | Re: ELOG security vulnerability fixed, IMPORTANT!!!! |
Attention to Debian users;
I've prepared the fixed package and also contacted to Debian Security Team for
an urgent security upload. Since then you may wish to update your package from
the following URL:
http://l10n-turkish.alioth.debian.org/debian/elog_2.5.7+r1558-1_i386.deb
Or you can also make an update via apt-get by adding the below line to your
'/etc/apt/sources.list' file:
deb http://l10n-turkish.alioth.debian.org/debian/ ./
> The second vulnerability had to do with write passwords. If you put a "write
> password = xxx" statement into your config file, it was still possible to
> download the config file with a special hand-written URL, and decode the
> write password, which is usually only base-64 encoded unless you haven't
> compiled elog with the -DHAVE_CRYPT flag.
FYI, Debian package has already been compiled with this flag.
-- Recai Oktas, Maintainer of Debian package |
1002
|
Wed Mar 23 05:56:35 2005 |
| Recai Oktas | roktas@omu.edu.tr | Info | Linux | | New Debian package (2.5.8+r1592) -- needs testing |
Hi to all,
I've prepared a new Debian package. This version will probably be the one
which you'll find in Sarge/stable.
There are some invasive changes in this version which call for a serious
test. In accordance with a suggestion, I've changed the configuration
mechanism. For details, please read the NEWS.Debian file attached.
Could the Debian users who follow this forum test it and give some feedback?
You can download the package from the following link:
http://l10n-turkish.alioth.debian.org/debian/elog_2.5.8+r1592-1_i386.deb
Thanks in advance for your participation, |
Attachment 1: NEWS.Debian
|
elog (2.5.7+r1589-1) unstable; urgency=low
* Starting from this version, /etc/default/elog is installed as part
of the package. Following variables (with default values) can
be used in /etc/default/elog:
# Host where elogd will run.
# HOST=localhost
# Be verbose.
# VERBOSE=yes
# Port where elogd will run.
PORT=8080
# Logbook root directory.
LOGBOOKDIR=/var/lib/elog
# Resource directory (i.e. themes, icons).
RESOURCEDIR=/usr/share/elog
These variables will become the command line options of elogd.
Since command line options always supersede the corresponding
options in config file, the existence of such a file provides a
way to discriminate two roles: System admin (root) and Elog admin.
Elog config file (/etc/elog.conf) now represents the Elog admin's
settings, while /etc/default/elog corresponds to the system admin's
settings. For example, if system admin defines the following line,
the Elog admin's port setting in config file will be ignored and
ELOG will always listen port '80' (note that the compiled-in
default port is '8080'):
PORT=80
One can also change the logbook repository location by using the
same mechanism, e.g. to set the data directory as '/srv/elog' (as
suggested in FHS v2.3) use the following line:
LOGBOOKDIR=/srv/elog
Maintainer scripts should gracefully handle this transition. But
please note that those system admin's settings listed above should
not be used in elog.conf, even though Elog allows it.
-- Recai OktaÅŸ <roktas@omu.edu.tr> Sun, 20 Mar 2005 05:09:57 +0200
|
1017
|
Thu Mar 24 12:30:07 2005 |
| Emiliano Gabrielli | AlberT@SuperAlberT.it | Info | Linux | | Re: New Debian package (2.5.8+r1592) -- needs testing |
> Hi to all,
>
> I've prepared a new Debian package. This version will probably be the one
> which you'll find in Sarge/stable.
>
> There are some invasive changes in this version which call for a serious
> test. In accordance with a suggestion, I've changed the configuration
> mechanism. For details, please read the NEWS.Debian file attached.
>
> Could the Debian users who follow this forum test it and give some feedback?
> You can download the package from the following link:
>
> http://l10n-turkish.alioth.debian.org/debian/elog_2.5.8+r1592-1_i386.deb
>
> Thanks in advance for your participation,
btw, what about in including in default/elog also a voice for the "-x" switch ??
It is a security related thing and may be passed only on the command line to the
daemon, so it should be governed by the system elog admin. |
66037
|
Mon Nov 10 13:05:21 2008 |
| Yoshio Imai | | Info | Linux | 2.7.5 | elog init script |
Notice that the following is not true when editing the config file outside of the administrator's "Config" page:
reload)
# Do nothing since ELOG daemon responds to
# the changes in conffile directly.
;;
In our installation, the sysadmin has therefore added the following section for the reload) part of the init script:
reload)
if [ -f $PIDFILE ]; then
echo -n "$DESC to reread config file ... "
kill -HUP `cat "$PIDFILE"`
echo "done"
else
echo "No $PIDFILE found!"
fi
;;
|
66872
|
Mon Aug 2 13:40:02 2010 |
| Stefan Ritt | stefan.ritt@psi.ch | Info | All | 2.8.0 | Important security update of ELOG |
Dear ELOG users,
this is to announce an important security update. As proposed by Lukasz Olejnik (CERN/PSNC), ELOG has now switched to strong encryption of password. So everybody concerned in security is advised to update to the new version 2.8.0. Existing password files for Windows users and Linux users not using HAVE_CRYPT are automatically converted. Those installations which used HAVE_CRYPT in the past under Linux have to ask their users to re-enter their password (via the link "Forgot password") after the upgrade to version 2.8.0.
Best regards,
Stefan Ritt |
Draft
|
Wed Jul 22 00:48:21 2015 |
| Banata Wachid Ridwan | jogjacard@yahoo.com | Info | Windows | 3.1.0 | Revision for Indonesian translation |
I got some spa |
Attachment 1: elcode_indonesia.html
|
Attachment 2: eloghelp_indonesia.html
|
Attachment 3: eloglang.indonesia
|
#
# Indonesia translation by Banata and SABO Team (sabo.pusair-pu.go.id)
# Revision 1
# A more recent version may be available at:
# https://bitbucket.org/ritt/elog
#
New = Baru
Edit = Ubah
Delete = Hapus
Reply = Balas
Find = Cari
Last day = Hari terakhir
Last 10 = 10 terakhir
Config = Konfigurasi
Change password = Ubah sandi
Logout = Keluar
Help = Bantuan
Back = Kembali
Submit = Kirim
First = Pertama
Last = Terakhir
Previous = Sebelumnya
Next = Berikutnya
Copy to = Salin ke
Move to = Pindah ke
Save = Simpan
Cancel = Batal
Wrong password = Sandi salah
Please login = Silahkan masuk
Username = Nama pengguna
Password = Sandi
Old password = Sandi lama
New password = Sandi baru
ELOG change password = Ganti kata sandi ELOG
Several logbooks are defined on this host = Beberapa logbook didefinisikan di host ini
Please select the one to connect to = Silahkan pilih salah satu untuk dihubungkan
Change password for user = Merubah sandi untuk pengguna
Logged in as = Masuk sebagai
Entry date = Tanggal catatan
with = dengan
This is the last entry = Ini adalah catatan terakhir
This is the first entry = Ini adalah catatan pertama
Email sent to = Email dikirim ke
Email notification suppressed = Pemberitahuan email dimatikan
please select = silahkan dipilih
Suppress Email notification = Matikan pemberitahuan email
Resubmit as new entry = Kirim ulang sebagai catatan baru
Attachment = Lampiran
Reply to this = Membalas ini
In reply to = Balasan ke
Fields marked with = Kolom ditandai dengan
are required = diperlukan
Please check that it exists and elogd has write access = Silahkan periksa jika ada dan elogd mempunyai akses tulis
Error: Attribute <b>%s</b> not supplied = Kesalahan: Atribut <b>%s</b> tidak diberikan
Please go back and enter the <b>%s</b> field = Silahkan kembali dan isi di bagian <b>%s</b>
Please use your browser's back button to go back = Silahkan gunakan tombol kembali browser anda untuk kembali
ELOG find = Temukan ELOG
Find = Temukan
Search = Cari
Reset Form = Ulangi Isian
Summary only = Hanya ringkasan
Show attachments = Tampilkan ringkasan
Printable output = Keluaran cetak
Sort in reverse order = Urutkan terbalik
Start date = Tanggal mulai
End date = Tanggal akhir
Year = Tahun
Text = Teks
Search all logbooks = Cari semua logbook
Last %d days = %d hari terakhir
Last %d entries = %d catatan terakhir
No entries found = catatan tidak ditemukan
A new entry has been submitted on %s = Catatan baru telah dikirimkan di %s
Logbook = Logbook
Yes = Ya
No = Tidak
Error deleting message: status = Kesalahan menghapus pesan: status
Error: Command "<b>%s</b>" not allowed = Kesalahan: Perintah "<b>%s</b>" tidak diizinkan
Cannot open file <b>%s</b> = Tidak bisa membuka file <b>%s</b>
Cannot write to <b>%s</b> = Tidak bisa menulis ke <b>%s</b>
No SMTP host defined in [global] section of configuration file = Tidak ada host SMTP yang didefinisikan di bagian [global] di file konfigurasi
Display threads = Tampilkan berkas
Logbook is empty = Logbook kosong
Download = Unduh
and all its replies = dan semua balasannya
Message ID = ID Pesan
Not logged in = Tidak masuk
Login = Masuk
Page %d of %d = Halaman %d dari %d
all entries = semua isian
Login name = Nama login
Full name = Nama lengkap
ELOG user config = Konfigurasi pengguna ELOG
ELOG new user = Pengguna baru ELOG
Admin = Admin
Select user = Pilih pengguna
Remove user = Hapus pengguna
New user = Pengguna baru
Retype new password = Ketik ulang sandi baru
New passwords do not match, please retype = Kata sandi tidak cocok, ketik lagi
Retype password = Ketik ulang sandi
exists already = sudah ada
Register as new user = Daftar sebagai pengguna baru
A new ELOG user has been registered on %s = Pengguna ELOG baru terdaftar pada %s
Email = Email
User "%s" registered on logbook "%s" = Pengguna "%s" terdaftar pada logbook "%s"
User [%s] has been deleted = Pengguna [%s] telah dihapus
Hit following URL to activate that account = Ikuti URL ini untuk mengaktifkan akun tersebut
ELOG registration = Pendaftaran ELOG
Your ELOG account has been activated on host = Akun ELOG anda sudah diaktifkan pada host
You can access it at = Anda dapat mengaksesnya di
Are you sure to delete these messages? = Apakah anda yakin ingin menghapus pesan ini?
Select = Pilih
All entries = Semua isian
Day = Hari
Week = Minggu
Month = Bulan
Show last = Tampilkan terakhir
Goto page = Pilih halaman
All = Semua
Display = Tampilan
entries per page = entri tiap halaman
Toggle all = Beralih semua
Selected entries = Isian yang dipilih
Collapse = Sembunyikan
Expand = Bentangkan
Full = Penuh
Summary = Ringkasan
Threaded = Rangkaian
Filters = Filter
Mode = Mode
Options = Pilihan
Error: start date after end date = Kesalahan: tanggal mulai setelah tanggal akhir
and all their replies = dan semua balasannya
Upload = Unggah
Requested = Diminta
A new ELOG user wants to register on "%s" = Pengguna ELOG baru ingin mendaftar pada "%s"
Search text also in attributes = Cari teks dalam atribut
Date = Tanggal
ID = ID
Forgot password? = Lupa sandi?
ELOG password recovery = Pemulihan kata sandi ELOG
No Email address registered with user name <i>"%s"</i> = Tidak ada alamat email yang terdaftar dengan nama pengguna <i>"%s"</i>
Error sending Email via <i>"%s"</i> = Kesalahan mengirim email melalui <i>"%s"</i>
Forgot = Lupa
User "%s" registered on host "%s" = Pengguna "%s" terdaftar pada host "%s"
Enter your user name or email address = Masukkan nama pengguna atau alamat email
Password recovery for ELOG %s = Pemulihan sandi untuk ELOG %s
Host = Host
Your ELOG account has been activated = Akun ELOG anda telah diaktifkan
Maximum number of attachments reached = Jumlah maksimum lampiran telah tercapai
on = pada
Entry is currently edited by = Entri saat ini diedit oleh
recipients = penerima
Suppress shell execution = Matikan eksekusi shell
Update = Perbarui
by = oleh
Change %s = Ubah %s
Add new option here = Tambahkan opsi baru di sini
Expand all = Buka semua
Add %s = Tambahkan %s
Synchronization = Sinkronisasi
Error: Value <b>%s</b> not allowed for boolean attributes = Kesalahan: Fehler: nilai <b>%s</b> tidak diizinkan untuk atribut boolean
Error: Attribute option <b>%s</b> not existing = Kesalahan: Opsi atribut <b>%s</b> tidak ada
Last submission = Pengajuan terakhir
Synchronize = Sinkronkan
No mirror server defined in configuration file = Tidak ada server mirror terdefinisi di file konfigurasi
user = pengguna
Maximum number of replies (%d) exceeded = Telah melebihi jumlah maksimum balasan (%d)
Entry can only be edited %1.2lg hours after creation = Entri hanya bisa diedit %1.2lg jam setelah dibuat
Display full entries = Tampilkan entri penuh
No entry selected for deletion = Tidak ada entri yang dipilih untuk dihapus
Cannot read entry from local logbook = Tidak dapat membaca entri dari logbook lokal
Cannot connect to host %s, port %d = Tidak dapat terhubung dengan host %s, port %d
Cannot receive "%s" = Tidak dapat menerima "%s"
Received wrong entry id "%d" = Menerima id entri salah "%d"
Entry #%d is locked on remote server = Entri #%d dikunci pada server jauh
Cannot save remote entry locally = Tidak dapat menyimpan entri jauh ke lokal
local = lokal
remote = jauh
Please delete %s or %s entry to resolve conflict = Harap menghapus %s atau %s untuk menyelesaikan konflik
Error sending local entry = Kesalahan mengirim entri lokal
Local entry submitted = Entri lokal dimasukkan
Error deleting remote entry = Kesalahan menghapus entri jauh
New entry cannot be written to directory "%s" = Entri baru tidak bisa ditulis ke direktori "%s"
Entry %s cannot be read from logbook "%s" = Entri %s tidak dapat dibaca di logbook "%s"
This entry has been deleted = Entri ini telah dihapus
Entries = Entri
Cannot connect to remote server "%s" = Tidak bisa terhubung dengan server jauh "%s"
Remote server is not an ELOG server = Server jauh bukan server ELOG
Incorrect remote ELOG server version %s = Salah versi server ELOG %s
Error accessing remote logbook = Kesalahan mengakses logbook jauh
Invalid HTTP header = Header HTTP salah
No user name supplied to access remote logbook = Tidak ada nama pengguna yang diberikan untuk mengakses logbook jauh
Synchronizing logbook %s with server "%s" = Sinkronisasi logbook %s dengan server "%s"
Configuration has been changed locally and remotely = Konfigurasi telah dirubah lokal dan jauh
Please merge manually to resolve conflict = Slahkan digabungkan manual untuk menyelesaikan konflik
Logbook "%s" does not exist on remote server = Logbook "%s" tidak ada pada server remote
Entry has been changed locally and remotely = Entri telah diganti lokal dan jauh
Entry deleted locally = Entri lokal dihapus
Changed local entry ID to %d = ID lokal entri dirubah ke %d
Entry deleted remotely = Entri dihapus dari jauh
All entries identical = Semua entri sama
Invalid mirror_id or entry_date = mirror_id atau entry_date tidak benar
Synchronize all logbooks = Sinkronisasi semua logbook
Calendar = Kalender
Remote entry received = Entri dari jauh diterima
Pick a date = Pilih tanggal
Please select at least one '%s' = Silahkan pilih paling tidak satu '%s'
Please select a '%s' = Silahkan pilih '%s'
Please enter month for attribute '%s' = Silahkan masukkan bulan untuk atribut '%s'
Please enter day for attribute '%s' = Silahkan masukkan hari untuk atribut '%s'
Please enter year for attribute '%s' = Silahkan masukkan tahun untuk atribut '%s'
Please enter attribute '%s' = Silahkan masukkan atribut '%s'
Entry time = Waktu entri
Start = Mulai
End = Selesai
From = Dari
After = Setelah
to = untuk
Before = Sebelum
Previous Year = Tahun sebelumnya
Next Year = Tahun berikutnya
Please enter numeric value for '%s' = Silahkan isi nilai numerik untuk '%s'
Error: Attribute <b>%s</b> must be numeric = Kesalahan: Atribut <b>%s</b> harus numerik
3 Months = 3 Bulan
6 Months = 6 Bulan
Error sending local message = Kesalahan mengirim pesan lokal
Error receiving message = Kesalahan menerima pesan
Are you sure to delete this entry? = Apakah anda yakin menghapus entri ini?
ELOG CSV import = Impor CSV ELOG
Import = Impor
CSV filename = Nama file CSV
Field separator = Pemisah kolom
Edit entry = Edit entri
Delete entry = Hapus entri
CSV Import = Impor CSV
Derive attributes from CSV file = Menurunkan atribut dari CSV
Comma = Koma
Semicolon = Titik koma
Preview import = Pratinjau impor
CSV import preview of %s = Pratinjau impor CSV dari %s
Too many attributes in CSV file = Terlalu banyak atribut di file CSV
%d entries successfully imported = %d Entri sukses diimpor
No 'Attributes' option present in %s = Tidak ada opsi 'Atribut'di %s
CSV ("," separated) = CSV (dipisahkan ",")
CSV (";" separated) = CSV (dipisahkan ";")
Auto detect = Deteksi otomatis
text = Teks
Column header '%s' must be present in CSV file = Tajuk kolom '%s' harus ada di dalam file CSV
Fill text body = Isi tubuh teks
Please re-enter filename = Silahkan masukkan kembali nama file
Last x = x terakhir
Activate = Aktifkan
Entry has been modified = Entri telah dimodifikasi
No attachment file specified = Tidak ada lampiran yang ditentukan
Delete this logbook = Hapus logbook ini
Rename this logbook = Ubah nama logbook ini
Create new logbook = Buat logbook baru
Syntax error in config file = Kesalahan sintaks di file configurasi
Email notification = Pemberitahuan email
Are you sure to delete logbook "%s"? = Apakah anda yakin menghapus logbook "%s"?
Logbook "%s" exists already, please choose different name = Logbook "%s" sudah ada, silahkan pilih nama lain
Rename logbook = Ubah nama logbook
Enter new logbook name = Masukkan nama logbook baru
Logbook name = Nama logbook
Use existing logbook as template = Gunakan logbook yang ada sebagai contoh
none = tidak ada
URL is redirected to: = URL diarahkan ke:
Remote config should be received = Konfigurasi dari jauh seharusnya sudah diterima
Local entry should be submitted = Entri lokal harus dimasukkan
Remote entry should be received = Entri jauh seharusnya diterima
Local entry = Entri lokal
%s should be deleted = %s harus dihapus
Entry should be deleted locally = Entri harus dihapus secara lokal
Local entry ID should be changed to %d = ID entri lokal harus dirubah menjadi %d
Remote entry = Entri jauh
Entry should be deleted remotely = Entri harus dihapus dari jarak jauh
Click here to delete %d entries = Klik disini untuk menghapus entri %d
Click here to delete this entry = Klik disini untuk menghapus entri ini
Maximum number of attribute options exceeded = Jumlah maksimum pilihan atribut telah terlewati
Please increase MAX_N_LIST in elogd.c and recompile = Silahkan meningkatkan MAX_N_LIST di elogd.c dan kompilasi ulang
You can "steal" the lock by editing this entry = Anda bisa "mencuri" kunci dengan mengedit entri ini
Several logbooks groups are defined on this host = Beberapa grup logbook didefinisikan pada mesin ini
Please select one to list the logbooks in that group = Silahkan pilih salah satu logbook dari daftar dalam kelompok
No logbook defined on this server = Tidak ada logbook yang didefinisikan dalam server ini
Goto ELOG home page = Menuju ke halaman utama ELOG
Please enter "%s" = Silahkan masukkan "%s"
Change config file = Ubah file konfigurasi
Please check that it exists and elogd has write access and disk is not full = Silahkan dicek jika ada, mempunuyai hak akses dan disk tidak penuh
Show = Tampilkan
Hide = Sembunyikan
Hide all = Sembunyikan semua
Show all = Tampilkan semua
This logbook requires authentication = Logbook ini memerlukan otentifikasi
Attachment file <b>"%s"</b> empty or not found = File lampiran <b>"%s"</b> kosong atau tidak ditemukan
Case sensitive = Dibedakan
List = Daftar
Date must be between 1970 and 2037 = Tanggal harus antara 1970 dan 2037
... 192 more lines ...
|