ID |
Date |
Icon |
Author |
Author Email |
Category |
OS |
ELOG Version |
Subject |
67323
|
Wed Aug 29 10:46:49 2012 |
| Stefan Ritt | stefan.ritt@psi.ch | Question | Linux | latest | Re: secure way to allow users create logbook |
Szu-Ching Peckner wrote: |
I don't think there is a good secure way so far, but would like to have your opinion.
If I want user to create logbook for themselves, what's the best way to do it? I guess Execute $attribute = <command> may work, have it write to cfg file, but obviously it impose security problem. Is there a good and secure way to allow user to create logbook themselves?
|
Actually there is no good secure way. What I usually do is to give users admin rights on individual logbooks, then they can change the config of that logbook. Many times adding some attribute is as good as creating new logbooks. Like if you need two logbooks "home" and "work", you can create an attribute "type" and let the type be "home" or "work". With conditional attributes you can make the logbook behave differently for the two values of "type" and get most functionality of two separate logbooks.
- Stefan |
67322
|
Wed Aug 29 10:37:44 2012 |
| Stefan Ritt | stefan.ritt@psi.ch | Question | Linux | V2.8.1-235 | Re: dynamic preset text |
Zbigniew Reszela wrote: |
Dear all,
Is it possible to have a dynamic "preset text" option?
I would like to switch the template file depending on the attribute value. (Of course this attribute values will be a fixed list of options, not extandable).
I see there one difficulty, that: if user already started editing the text body, he could lose this data. But I think that this could be left on user responsibility to take care about it.
Another option could be to always insert the template text on the very beginning of the text body.
Is this feature implemented, or maybe someone have done it by changing the server code?
Cheers
|
This is possible with conditional attributes. An additional trick would be to not show the text body of an attribute is not selected. This way the user first has to select the attribute, then the text field with the specific preset will show up. The configuration would be something along these lines:
Attributes = Type, Subject
Options Type = One{1}, Two{2}, Three{3}
Show text = 0
{1} Preset text = text1
{2} Preset text = text2
{3} Preset text = text3
{1,2,3} Show text = 1
Of course you have to supply proper text files text1, text2, text3.
- Stefan
|
67321
|
Wed Aug 29 10:26:31 2012 |
| Zbigniew Reszela | reszelaz@gmail.com | Question | Linux | V2.8.1-235 | dynamic preset text |
Dear all,
Is it possible to have a dynamic "preset text" option?
I would like to switch the template file depending on the attribute value. (Of course this attribute values will be a fixed list of options, not extandable).
I see there one difficulty, that: if user already started editing the text body, he could lose this data. But I think that this could be left on user responsibility to take care about it.
Another option could be to always insert the template text on the very beginning of the text body.
Is this feature implemented, or maybe someone have done it by changing the server code?
Cheers |
67320
|
Tue Aug 28 23:02:07 2012 |
| Szu-Ching Peckner | speckner@nd.edu | Question | Linux | latest | secure way to allow users create logbook |
I don't think there is a good secure way so far, but would like to have your opinion.
If I want user to create logbook for themselves, what's the best way to do it? I guess Execute $attribute = <command> may work, have it write to cfg file, but obviously it impose security problem. Is there a good and secure way to allow user to create logbook themselves? |
67319
|
Tue Aug 28 22:48:47 2012 |
| Szu-Ching Peckner | speckner@nd.edu | Question | Linux | latest | show permitted individual logbooks on selection page |
How do I make selection page show only list of logbooks that logged on user has access to?
Right now, say I have 4 logbooks, and I have access to 2 of them. I turned on Protect Selection page = 1. So when I go to home page, I need to logon first, then I am given selection page. I am given list of 4 logbooks, I can only click into 2, which is expected.
Instead of given list of 4 logbooks, I would like to know if there is a way to make selection page only contains 2 logbooks which I have access to?
|
67318
|
Mon Aug 27 10:22:37 2012 |
| Stefan Ritt | stefan.ritt@psi.ch | Question | Windows | 2.9.2 | Re: Where do I find information on setting up the text area as a template? |
Chris Jennings wrote: |
I would like to set up the text are as a template. The documentation indicates this can be done however I am unable to find reference to how it is accomplished.
|
Just look in the documentation for "preset text = ...". |
67317
|
Thu Aug 23 14:30:56 2012 |
| Chris Jennings | cjennings@cosma.com | Question | Windows | 2.9.2 | Where do I find information on setting up the text area as a template? |
I would like to set up the text are as a template. The documentation indicates this can be done however I am unable to find reference to how it is accomplished. |
67316
|
Tue Aug 21 17:16:19 2012 |
| Szu-Ching Peckner | speckner@nd.edu | Bug report | Linux | 2.9.2 | Re: kerberos authentication |
Szu-Ching Peckner wrote: |
Szu-Ching Peckner wrote: |
Hello, I have
authentication = kerberos
kerberos Realm = xxx
I ran tcpdump and know elogd server did attempt to contact kerberos server. I could run kinit username@realm_name, and klist shows my ticket fine.
I receive "kerberos error 256: Decrypt integrity check failed. Please check your kerberos configuration" when I entered my password wrong purposely on login page.
I receive "Invalid user name or password!' when I entered my correct password.
Please advise.
|
I forgot to mention, I also have Password file line in elogd.cfg file. Because without password file line, I wouldn't get login screen. I know my test account is not in the main.pwd file. I believe elogd does go to kerberos server to compare password. I just don't get why I get invalid username and password when I entered correct password, while kerberos error (expected) when I enter wrong password.
Authentication = Kerberos
Kerberos Realm = xxx
Password file = main.pwd
|
It's resolved. I read the documentation again, and found out my mistake. I didnt have username defined on password file. |