Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 226 of 796  Not logged in ELOG logo
IDup Date Icon Author Author Email Category OS ELOG Version Subject
  1854   Thu Jun 22 11:38:38 2006 Reply Stefan Rittstefan.ritt@psi.chQuestionLinux2.6.1Re: restrict access
> > You get a login page instead of the selection page if the "Password file = " statement is in the [global]
section
> > and "Protect selection page = 1". You might have to delete all cookies in your browser if you move the password
> > file statement between the [global] and the logbook sections, because otherwise the old cookies might
prevent you
> > from logging out.
> 
> This is not working for me, in Mozilla Firefox I'm still getting a blank page, where IE is giving me an error
> stating that the page is unavailable

If I use following config file:


[global]
port = 8080
password file = passwd
protect selection page = 1

[demo1]
Attributes = Author, Type, Category, Subject

[demo2]
Attributes = Author, Type, Category, Subject


then I don't get a blank page. An unavailable page you should only get whan you use top groups, and want to
access the root. 
  1855   Thu Jun 22 12:10:00 2006 Reply Gerald Ebberinkg.h.p.ebberink@nclr.nlQuestionLinux2.6.1Re: restrict access
> > > You get a login page instead of the selection page if the "Password file = " statement is in the [global]
> section
> > > and "Protect selection page = 1". You might have to delete all cookies in your browser if you move the password
> > > file statement between the [global] and the logbook sections, because otherwise the old cookies might
> prevent you
> > > from logging out.
> > 
> > This is not working for me, in Mozilla Firefox I'm still getting a blank page, where IE is giving me an error
> > stating that the page is unavailable
> 
> If I use following config file:
> 
> 
> [global]
> port = 8080
> password file = passwd
> protect selection page = 1
> 
> [demo1]
> Attributes = Author, Type, Category, Subject
> 
> [demo2]
> Attributes = Author, Type, Category, Subject
> 
> 
> then I don't get a blank page. An unavailable page you should only get whan you use top groups, and want to
> access the root. 
I use the folowing file and do get this error (the company names and other sensitive information has been changed to
something simular but not so sensitive)

[global]
logbook tabs = 1
port = 80
Logbook dir = /srv/elog/logbooks/
URL = http://my.domain/

Protect selection page = 1
Password file = /srv/elog/passwords/main.passwd
Self register = 0
Admin user = Gerald


Group World = Procedures, Work
Group Work = Company, Company2
Group Company = twiddle
Group twiddle = Panels, Bond

[Procedures]
Theme = default
Comment = General Procedures for use with
Attributes = Author, Category, Subject
Options Category = Maintenance, Alignment
Required Attributes = Author, Category
Subdir = Some/dir

[Company2]
Theme = default
Comment = Company2 project Page
Attributes = Author, Category, Subject
Options Category = Scheduling, During Progress, During measuring, After
Required Attributes = Author
Subdir = some/dir

[Panels]
Theme = default
Attributes = Author, Category, Subject
Options Category = Scheduling, During Progress, During measuring, After
Required Attributes = Author
Subdir = Some/dir
Expand default = 2
Protect selection page = 1

[bond]
Theme = default
Attributes = Author, Category, Subject
Options Category = Scheduling, During Progress, During measuring, After
Required Attributes = Author
Subdir = some/dir
  1856   Thu Jun 22 16:01:58 2006 Entry Alan Stonealstone@fnal.govQuestionLinuxELOG V2.6.Change default for suppressing email notification and/or targeting entries manually
I want to change the default for suppressing email notification.

I want to be able to send email to Elog subscribers and to other people
not yet subscribed to the Elog. However, after polling the current
subscribers, they do NOT want to receive email notification for every
new Elog entry by default.

Instead of toggling the "Suppress Email notification", I would like
to toggle "Send Email notification".

I would also like the option to add additional email addresses on the fly.

Thanks in advance for any help.
Alan
  1857   Thu Jun 22 17:19:32 2006 Reply Stefan Rittstefan.ritt@psi.chQuestionLinuxELOG V2.6.Re: Change default for suppressing email notification and/or targeting entries manually

Alan Stone wrote:
I want to be able to send email to Elog subscribers and to other people
not yet subscribed to the Elog. However, after polling the current
subscribers, they do NOT want to receive email notification for every
new Elog entry by default.


The admin user can change the email subscriptions to all users in the Config page, so you just have to go through each user. Alternatively, you can stop the elog server, change the password file manually in any editor, and then restart the elog server.


Alan Stone wrote:
I would also like the option to add additional email addresses on the fly.


You have to change the config file to add new email addresses or you have to add new users.
  1858   Thu Jun 22 20:43:39 2006 Reply Alan Stonealstone@fnal.govQuestionLinuxELOG V2.6.Re: Change default for suppressing email notification and/or targeting entries manually
Thank you for your response. I do not think I posed my questions clearly. Let me try a different way.

If I set the following logbook configuration:

Suppress Email to users = 0

then, every time someone makes a new entry to that logbook, all subscribers get an email, unless
someone checks the "Suppress Email notification" box.

I want to preserve the configuration option. However, I want to invert the default check box, so
that no email is sent to subscribers unless someone takes the extra step to check a box which might
read "Send Email notification".

> You have to change the config file to add new email addresses or you have to add new users.

That would not work for non-admins. I was looking for a non-required
"email to/cc/send to" attribute. Obviously, one can just cut and paste
the entry into your email application.


Stefan Ritt wrote:

Alan Stone wrote:
I want to be able to send email to Elog subscribers and to other people
not yet subscribed to the Elog. However, after polling the current
subscribers, they do NOT want to receive email notification for every
new Elog entry by default.


The admin user can change the email subscriptions to all users in the Config page, so you just have to go through each user. Alternatively, you can stop the elog server, change the password file manually in any editor, and then restart the elog server.


Alan Stone wrote:
I would also like the option to add additional email addresses on the fly.


You have to change the config file to add new email addresses or you have to add new users.
  1859   Thu Jun 22 21:02:16 2006 Reply Stefan Rittstefan.ritt@psi.chQuestionLinuxELOG V2.6.Re: Change default for suppressing email notification and/or targeting entries manually

Alan Stone wrote:
However, I want to invert the default check box, so that no email is sent to subscribers unless someone takes the extra step to check a box which might read "Send Email notification".


Ahh, now I understand Wink
Suppress default =1

should do the job.
  1860   Fri Jun 23 12:29:30 2006 Reply Stefan Rittstefan.ritt@psi.chQuestionLinux2.6.1Re: restrict access
Even with your config file (I just changed the URL) I get the correct behaviour:



and after I supply my credentials:



My full elogd.cfg is attached for your reference.

I'm pretty sure that you did not delete your old cookies. Try from another computer. Make sure to have the most recent version of elog. Start the elogd daemon with the "-v" flag and watch the communication. I get for example:
GET / HTTP/1.1
Host: localhost:8080
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.4) Gecko/20
060508 Firefox/1.5.0.4
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plai
n;q=0.8,image/png,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Cookie: urem=1


==== Return ================================
....

As you can see, only the "urem" cookie is present. After I logged in, I get:
Cookie: urem=1; unm=stefan; upwd=Z2suZgFszgg==

These cookies identify you as logged in, so the login screen does not appear any more.
Attachment 1: elogd.cfg
[global]
logbook tabs = 1
port = 8080
URL = http://localhost:8080/

Protect selection page = 1
Password file = passwd
Self register = 0
Admin user = stefan

Group World = Procedures, Work
Group Work = Company, Company2
Group Company = twiddle
Group twiddle = Panels, Bond

[Procedures]
Theme = default
Comment = General Procedures for use with
Attributes = Author, Category, Subject
Options Category = Maintenance, Alignment
Required Attributes = Author, Category

[Company2]
Theme = default
Comment = Company2 project Page
Attributes = Author, Category, Subject
Options Category = Scheduling, During Progress, During measuring, After
Required Attributes = Author

[Panels]
Theme = default
Attributes = Author, Category, Subject
Options Category = Scheduling, During Progress, During measuring, After
Required Attributes = Author
Expand default = 2
Protect selection page = 1

[bond]
Theme = default
Attributes = Author, Category, Subject
Options Category = Scheduling, During Progress, During measuring, After
Required Attributes = Author

  1861   Fri Jun 23 13:16:57 2006 Reply Gerald Ebberinkg.h.p.ebberink@nclr.nlQuestionLinux2.6.1Re: restrict access
My full elogd.cfg is attached for your reference.

I'm pretty sure that you did not delete your old cookies. Try from another computer. Make sure to have the most recent version of elog. Start the elogd daemon with the "-v" flag and watch the communication. I get for example:

Well actualy these old cookies don't exist, but I found an error in the verbose mode.
GET / HTTP/1.1
Host: hostname
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.4) Gecko/20060608 Ubuntu/dapper-security Firefox/1.5.0.4
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Cookie: urem=0


Remote host "hostname" matches "ALL" in "Hosts deny". Access denied.
Remote host "hostname" matches "hostname" in "Hosts allow". Access granted.
Internal error, no valid header!

As you can see, I have implemented a temporary fix in the way of allowing only certain hosts access.
But where does this Internal error come from.

I use the standard packaged version of elog (V2.6.1) from the Ubuntu repositories.
ELOG V3.1.5-fe60aaf