Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 305 of 808  Not logged in ELOG logo
ID Date Icon Authordown Author Email Category OS ELOG Version Subject
  66851   Wed Jul 21 12:33:39 2010 Reply Stefan Rittstefan.ritt@psi.chQuestionLinuxlatestRe: Enable user to view only, not post/delete.

Denis Perevalov wrote:

I have a question. Is there a way to enable user to view only, not post/delete in my elog. Also I would like to allow them to view only certain categories of my messages.

The first thing you can do with "Guest menu commands", where you enable only those commands which can't change or delete entries. The second thing you can only do if you put your entries into two separate logbooks, a public and a private one. 

  66853   Wed Jul 21 16:38:05 2010 Reply Stefan Rittstefan.ritt@psi.chQuestionLinux2.7.8Re: Subst variables and Execute

soren poulsen wrote:

Hi

 

I am trying to use this line from the documentation:

Execute new = echo "New message wiht ID $message id of type $type from $long_name on $remote_host" >> /tmp/elog.log

It does not seem to have the intended effect (of printing a line with the message id, etc in the file /tmp/elog.log
)

How can I make this line work ?

Soren

Have you started the server with the "-x" flag as written in the documentation? 

  66860   Tue Jul 27 11:35:40 2010 Reply Stefan Rittstefan.ritt@psi.chQuestionAll2.7.5Re: Mail when elog entry is expired

Johan Schuring wrote:

Hi,

 

Is it possible to set a timestamp on an elog entry say for about 5 days in the future, when it is expired and there are no modifications with the entry you will get a mail.

I cannot find it with search in this forum or is the guides.

It can be very handy when it is possible.

When it is not available, is it possible to make a feature request for it.

This is not possible at the moment. Sounds to me more like a calendar function. What you could do however is to define an attribute of type "datetime", which you can populate with the expiration date. Then you can do a search to look for entries which are past the expiration date. But you have to do that manually like once per day or so. 

  66862   Wed Jul 28 16:38:07 2010 Reply Stefan Rittstefan.ritt@psi.chBug reportWindows2.7.8Re: More adventures with SSL

Chuck Brost wrote:

Stefan,

Everything has been working great since we last spoke (Version 2.7.8), until InfoSec decided to change how the Certs were created.  Now they come with a little bit of code in the .key file before the Hash.. when I put the new .CRT and .KEY in the SSL folder I am asked on starting Elogd to provide a "PEM PassPhrase".  As you can expect, if you do not enter one, or the incorrect one, it does not just turn off SSL, it exits the program.  The key begins like this in the new versions:

-----BEGIN RSA PRIVATE KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: DES-EDE3-CBC,ACF4A8B263EAA51D

(that little encode piece on the end is not the actual one in the key.  I am assuming it is a passphrase key so it will know what the right passphrase is that should be entered.

We are assuming that this is the "Install password" they have set up to use to install the certs on all of the IIS servers we have.  If that is indeed the case.. Does elog save this passphrase somewhere?  does Elog save it in the registry? does it save it encrypted? Or with access security permissions set on the keys?  I have a feeling that the answer to most of this is probably "no", but to know where we go from here, that is the place to start.

Thanks

Chuck

The pass phrase should not be stored anywhere for security reasons. Actually ELOG cannot stored it encrypted, because strong encryption is a one-way encryption which cannot be reverted, so ELOG would have to store it in plain text, which is not good. Actually all SSL web servers have this problem. See for example:

http://www.akadia.com/services/ssh_test_certificate.html

In Step 3 they tell you how to remove the pass phrase for Apache. The same holds true for ELOG.

  66863   Wed Jul 28 16:55:32 2010 Reply Stefan Rittstefan.ritt@psi.chQuestionAll2.7Re: What *exactly* do "clone" and "mirror" do?

David McKee wrote:

We have been hosting logbook far (geographically and in internet hops) from our experimental site. Recently we have (finally!) gotten reliable on-site internet, and would like to host the log book on-site.

I have a suspicion that some combination of the -C, -m, and -M flags will allow me to migrate the logbook automagically and with a minimum risk of trouble from concurrent operation on the logbook, and to maintain the existing version as a mirror of the new official on-site version. But documentation is not being very helpful. Can someone say a few more words about what these options do?

 


I've been experimenting as I compose this and have a suggestion for language that might be useful somewhere in the documentation:

In this context "to clone" means to copy the configuration file and all data files associated with a log book so that I can host an identical logbook on a new host (that is this is the command to migrate a logbook).  After cloning the two installation are identical, but no effort is made to keep them so: if you continue to run both copies post made to one will not be reflected in the other.

Is this correct?

I'm still not clear on what the -m and -M options do.

Yes this is correct. But actually you do not necessarily need that. If you want to migrate a logbook to another server, you can just copy over the elog directory containing the configuration file and the logbooks. That's it. Mirroring now means manually triggered or periodic synchronization between two servers to keep the logbooks in sync. Like if an entry is entered on one server, it gets copied over to the other server automatically. That works in both directions. The periodic mirroring can be done using the options "Mirror server" and "Mirror cron" in the configuration files. It can be manually triggered using the "-m" and "-M" flags. But I guess in your case it's enough to copy over the elog tree just once. 

  66865   Wed Jul 28 17:08:55 2010 Reply Stefan Rittstefan.ritt@psi.chQuestionLinux2.7.8Re: Subst variables and Execute

soren poulsen wrote:

There is sometimes a problem with substitutions like "Execute delete = echo $message id".

It seems the problem is that if you delete a logbook entry that is not created with the current logbook attributes, the substitution variables are replaced with the variable name, and not the variable value.

In this example, according to the log file it becomes SHELL "message id" instead of SHELL "234", if the logbook entry is 234.

Soren

I tried to reproduce it, but it always worked for me. So I need a step-by-step instruction from you on how to reproduce the problem, ideally starting from the demo logbook from the distribution. Only if I can reproduce the problem, I will be able to fix it. 

  66866   Wed Jul 28 17:15:33 2010 Reply Stefan Rittstefan.ritt@psi.chRequestAll2.7.7Re: alphabetize Quick Filter items?

Dennis Seitz wrote:

Stefan Ritt wrote:

Dennis Seitz wrote:

 

Ok, I implemented

Sort attribute options = 1

in the current SVN revision. 

 I've tried adding this statement to my cfg file but the attributes are still unsorted in the QuickFilter menus. Was this implemented in 2.7.7?

Shouldn't an existing configuration file entry like
Options Type = C, D, A, B
be sorted in the QuickFilter menu as A B C D?

You need revision 2252 or later. So you have to upgrade to 2.7.8. 

 We have upgraded to 2.7.8 but this still doesn't seem to work. The quick menus are still unsorted. Does it work for you?

Sorry, there was a typo, you need

Sort attribute options <attribute> = 1

where <attribute> is the name of the attribute to be sorted (in case you want some attributes sorted, but not all). 

  66868   Wed Jul 28 17:26:17 2010 Reply Stefan Rittstefan.ritt@psi.chQuestionLinux2.7.8-2278Re: Disable forward/backward navigation keystrokes?

Bryan Moffit wrote:

I wondered if there was a config line that enabled/disabled the forward and backward navigation keystrokes that were implemented in 2.7.0?

The current definitions (Control-PgUp/PgDown/Home/End) interfere with those keys I use to navigate between tabs in Firefox.  It'd be nice if they could either be turned off.. or redefined.

They are defined in

<ELOG directory>\scripts\elcode.js

Just go to the browse(evt) function and redefine or remove them there. 

ELOG V3.1.5-3fb85fa6