Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 271 of 807  Not logged in ELOG logo
ID Date Icondown Author Author Email Category OS ELOG Version Subject
  66363   Mon May 18 12:28:00 2009 Reply Stefan Rittstefan.ritt@psi.chQuestionWindows2.7.6-2191Re: Mail and logged in user

 

Arno Teunisse wrote:

Hello

Was playing with elog. I send mail to the persons involved with a elog entrie. This mail produces something like this ( rather default) .

 Logbook: Accelerator  Message ID: 4    Entry time: 05/10/09 21:48:25     In reply to: 3

When I am logged in into elog , clicking on the Message ID 4 or 3 from the mail client , elog is started with the logged in user at that time and it's permissions.  So instead of starting a new elog session ( and getting the guest permission ) I get the permission of the currently logged in user.( Could be the administrator / root) . The process will function correctly i no one is logged in into elog. I've tested this on a local machine, so I cannot say if the same happens when multiple  machines are used. So, maybe it's a bug, maybe it's my testing  configuration. 

Do not know if i explained  the problem clear enough, but is seems something that could be examined.

By the way : thanks for this great and free program. 

 

This is not a bug, this is a feature! Once you log in to ELOG, your credentials are stored in cookies of your local browser. If you access a logbook entry, like via the link you in your email, you still use that credentials. If you clear all cookies of your browser, or log out explicitly from ELOG, then of course you will only get guest access. 

  66364   Tue May 19 15:19:16 2009 Reply soren poulsensoren.poulsen@cern.chBug reportLinux2.7.6Re: E-log crash

Stefan Ritt wrote:

 

soren poulsen wrote:

Hi

I am having a little problem with e-log that I can easily reproduce.

I have defined a number of constraints on my e-log fields and I am testing what happens when the user does not respect them.

So this only happens when I am not observing the input formats or the mandatory fields.

This is the GDB trace. This is not very verbose, so I must learn to use the other tracers, I guess.

Server listening on port 8079 ...
 
Program received signal SIGSEGV, Segmentation fault.
0x0000000000414077 in is_script (
    s=0x7fff1a0b89a0 "<a href=\"https://edh.cern.ch/Document/DAI/\"\"></a>")
    at src/elogd.c:5414
5414       for (i = 0; script_tags[i][0]; i++) {
(gdb)

Soren

 

It would be best if I could reproduce your problem. So can you start from a very simple configuration file, add your constraints until the problme happens, and then send me the config file? 

Hi

The problem is not exactly what I thought, but I did track it down. Here is a logbook definition that reliably creates a segmentation fault in e-log. This logbook's only useful purpose is in fact to create a segmentation fault:

You select "New", then "Select", without entering anything.

--------------

Login user = Admin

Attributes = Link

Change Link = <a href="https://$Link"">$Link</a>

---------------

I would be able to create some more debugging information of course, if needed.
 

Regards

Soren

 

  66365   Tue May 19 23:43:20 2009 Reply Arno TeunisseA.teeling3@chello.nlQuestionWindows2.7.6-2191Re: Mail and logged in user

Stefan Ritt wrote:

 

Arno Teunisse wrote:

Hello

Was playing with elog. I send mail to the persons involved with a elog entrie. This mail produces something like this ( rather default) .

 Logbook: Accelerator  Message ID: 4    Entry time: 05/10/09 21:48:25     In reply to: 3

When I am logged in into elog , clicking on the Message ID 4 or 3 from the mail client , elog is started with the logged in user at that time and it's permissions.  So instead of starting a new elog session ( and getting the guest permission ) I get the permission of the currently logged in user.( Could be the administrator / root) . The process will function correctly i no one is logged in into elog. I've tested this on a local machine, so I cannot say if the same happens when multiple  machines are used. So, maybe it's a bug, maybe it's my testing  configuration. 

Do not know if i explained  the problem clear enough, but is seems something that could be examined.

By the way : thanks for this great and free program. 

 

This is not a bug, this is a feature! Once you log in to ELOG, your credentials are stored in cookies of your local browser. If you access a logbook entry, like via the link you in your email, you still use that credentials. If you clear all cookies of your browser, or log out explicitly from ELOG, then of course you will only get guest access. 

 Thanks Stefan

This was probably a buggy bug report. Was just testing things out on a local machine and cookies were send to the local machine. so the mail was using these cookies also.

In Practice this could never happen. 

 

 

  66367   Wed Jun 3 19:53:13 2009 Reply Paul T. Keenerkeener@hep.upenn.eduBug reportOther2.7.5Re: elogd dies after receiving second SIGHUP
> > elogd continues to run after a SIGHUP. If a second SIGHUP is received the daemon terminates.
> > This was observed on Solaris 10 (SPARC).
> > The documentation states that elogd should re-read configuration after receiving SIGHUP.
> 
> I tried to reproduce this but without success. I could send many SIGHUPs without the daemon terminating. Maybe 
> you modified the configuration file in between and elogd barked out because of some wrong configuration? Try to 
> start the daemon interactively and see what exactly happens if you send several SIGHUPs.

The problem is that under Solaris signal handlers installed via signal() get uninstalled *before* the signal handler
is called.  Thus the second time elogd receives a SIGHUP, you get the default action, which is to kill the process.

The solution is to use the POSIX sigaction() call instead of signal(). 
  66368   Thu Jun 4 09:49:13 2009 Reply Stefan Rittstefan.ritt@psi.chBug reportOther2.7.5Re: elogd dies after receiving second SIGHUP
> > > elogd continues to run after a SIGHUP. If a second SIGHUP is received the daemon terminates.
> > > This was observed on Solaris 10 (SPARC).
> > > The documentation states that elogd should re-read configuration after receiving SIGHUP.
> > 
> > I tried to reproduce this but without success. I could send many SIGHUPs without the daemon terminating. Maybe 
> > you modified the configuration file in between and elogd barked out because of some wrong configuration? Try to 
> > start the daemon interactively and see what exactly happens if you send several SIGHUPs.
> 
> The problem is that under Solaris signal handlers installed via signal() get uninstalled *before* the signal handler
> is called.  Thus the second time elogd receives a SIGHUP, you get the default action, which is to kill the process.
> 
> The solution is to use the POSIX sigaction() call instead of signal(). 

Can you try to modify the signal() calls into sigaction(). If this really works under Solaris, I will incorporate this 
then into the distribution.
  66369   Thu Jun 4 14:04:21 2009 Reply Stefan Rittstefan.ritt@psi.chQuestionLinux2.7.6-2198Re: Supress Email to Author of a message?

 

Mike wrote:

I couldn't find an obvious solution to the problem. I'd like to suppress email

notification to the author of a message. I've had some people complaining

that when they use elog they don't want to get an email about what they wrote

since they wrote it.


Is it possible?

 

Actually I do want to receive a copy, just to be sure that the emails got sent out correctly. I agree that an option would be good for that but it's not implemented right now. An alternative solution is to define a filter in their email client to discard these messages (like if subject contains ELOG and sender equals your own mail address).

  66370   Thu Jun 4 14:05:58 2009 Reply Stefan Rittstefan.ritt@psi.chBug reportLinux2.7.6Re: E-log crash

 

soren poulsen wrote:

Hi

I am having a little problem with e-log that I can easily reproduce.

I have defined a number of constraints on my e-log fields and I am testing what happens when the user does not respect them.

So this only happens when I am not observing the input formats or the mandatory fields.

This is the GDB trace. This is not very verbose, so I must learn to use the other tracers, I guess.

Server listening on port 8079 ...
 
Program received signal SIGSEGV, Segmentation fault.
0x0000000000414077 in is_script (
    s=0x7fff1a0b89a0 "<a href=\"https://edh.cern.ch/Document/DAI/\"\"></a>")
    at src/elogd.c:5414
5414       for (i = 0; script_tags[i][0]; i++) {
(gdb)

Soren

 

I had finally the same problem. This is due to a bug indeed inside is_script(). It has been fixed in revision 2201. 

  66371   Thu Jun 4 14:37:54 2009 Reply Stefan Rittstefan.ritt@psi.chBug reportLinux2.7.6Re: User can modify Fixed Attributes Edit when selecting preview

 

Allen wrote:

Hi.  I'm pretty new to ELOG, so I'm not sure if I'm doing something wrong.

 

I have a bunch of fields set so that after an entry has been submitted, they cannot edit certain fields.  When I click the edit button, everything looks restricted as it should be, but if I click Preview, the user is then able to change the fixed attributes.

 

Is there anyway to remove the preview button inside the edit page, or is anyone else having this issue?

 

Thanks for reporting this bug. I fixed it in revision #2203. 

ELOG V3.1.5-3fb85fa6