Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 322 of 808  Not logged in ELOG logo
    icon2.gif   Re: kerberos authentication NOT working, posted by Andreas Luedeke on Mon Nov 4 15:07:40 2013 

Hal Proctor wrote:

Fabio Sella wrote:

Hi guys,

we configured a kdc server using OPENLDAP as backend. We installed on it elog and configured the Kerberos Authentication on one logbook as follows:

Authentication = Kerberos, File
Kerberos Realm = TEST.COM
Password file = ./pwd.xml

 
Detect language » Italian
 

 

Even if the kinit comand is retrieving correctly a ticket for the user tsearch@TEST.COM(we see it using klist and tcpdump on lo interface), elogd kerberos authentication is not working.

We tried using tcpdump for troubleshooting but no traffic is generated on the loopback interface.

Did someone solve this problem or do you have an idea on how to make the kerberos authentication working?

Thanks

 I have asked for same help, and no one has answered with a solution on implementing a kerberos .  I saw exactly what you were seeing. (did you try fully qualifying the domain within the username field for logon?  \\TEST.COM\username)

I still couldn't get it to work

 Just my two cent:
- did you edit the Makefile to compile elogd with kerberos (USE_KRB5   = 1)?
- did you look into the elogd logfile for error messages at start-up or at login time?
I can only say that I got it working right away - that is the case when you learn least.
Maybe you should post your specific software versions: operating system (in my case Scientific Linux 5.1 (Boron)), Kerberos version (klist -V), etc.
 
English (auto-detected) » English
 
    icon2.gif   Re: kerberos authentication NOT working, posted by Olaf Kasten on Wed Nov 13 16:26:32 2013 

Andreas Luedeke wrote:

Hal Proctor wrote:

Fabio Sella wrote:

Hi guys,

we configured a kdc server using OPENLDAP as backend. We installed on it elog and configured the Kerberos Authentication on one logbook as follows:

Authentication = Kerberos, File
Kerberos Realm = TEST.COM
Password file = ./pwd.xml

 
Detect language » Italian
 

 

Even if the kinit comand is retrieving correctly a ticket for the user tsearch@TEST.COM(we see it using klist and tcpdump on lo interface), elogd kerberos authentication is not working.

We tried using tcpdump for troubleshooting but no traffic is generated on the loopback interface.

Did someone solve this problem or do you have an idea on how to make the kerberos authentication working?

Thanks

 I have asked for same help, and no one has answered with a solution on implementing a kerberos .  I saw exactly what you were seeing. (did you try fully qualifying the domain within the username field for logon?  \\TEST.COM\username)

I still couldn't get it to work

 Just my two cent:
- did you edit the Makefile to compile elogd with kerberos (USE_KRB5   = 1)?
- did you look into the elogd logfile for error messages at start-up or at login time?
I can only say that I got it working right away - that is the case when you learn least.
Maybe you should post your specific software versions: operating system (in my case Scientific Linux 5.1 (Boron)), Kerberos version (klist -V), etc.
 
English (auto-detected) » English
 

 I'm having same issue. Kerberos is working on Apache on same ubuntu 12.04 server. I used the USE_KRB5 option for compiling elog.

Does anyone  have an idea to solve that problem? 

icon5.gif   Report Generating Tool?, posted by Hal Goldfarb on Mon May 21 09:41:57 2018 

Has anyone developed a report tool for elog?  I would like to be able to sort certain items and send them to either a printer, or an email (external to my own use).

If not, any ideas on an easy means of doing this?  I write a lot of Perl, so that would be an option for me if the text is easily obtained.

Thanks

    icon2.gif   Re: Report Generating Tool?, posted by Stefan Ritt on Mon May 21 21:37:36 2018 

Switch to the "summary" display (try it with this forum). You get headers (like "category"). Clicking on it sorts by that attribute. Then display "all" entries, or use the "find" option to search in certain time periods, then just print the web page.

Alternatively, expeort logbook entries as CSV files, load them into a spreadsheet program, and do the sorting and printing there.

Stefan

Hal Goldfarb wrote:

Has anyone developed a report tool for elog?  I would like to be able to sort certain items and send them to either a printer, or an email (external to my own use).

If not, any ideas on an easy means of doing this?  I write a lot of Perl, so that would be an option for me if the text is easily obtained.

Thanks

 

    icon2.gif   Re: Report Generating Tool?, posted by Hal Goldfarb on Tue May 22 06:55:21 2018 

I don't see an "export" option in the documentation, only "import."  Printing the web page is probably not what I want.

Stefan Ritt wrote:

Switch to the "summary" display (try it with this forum). You get headers (like "category"). Clicking on it sorts by that attribute. Then display "all" entries, or use the "find" option to search in certain time periods, then just print the web page.

Alternatively, expeort logbook entries as CSV files, load them into a spreadsheet program, and do the sorting and printing there.

Stefan

Hal Goldfarb wrote:

Has anyone developed a report tool for elog?  I would like to be able to sort certain items and send them to either a printer, or an email (external to my own use).

If not, any ideas on an easy means of doing this?  I write a lot of Perl, so that would be an option for me if the text is easily obtained.

Thanks

 

 

    icon2.gif   Re: Report Generating Tool?, posted by Stefan Ritt on Tue May 22 11:11:43 2018 

Click on "Find", select "Export to CSV", optionally select filter criteria, then press "Search".

Stefan

Hal Goldfarb wrote:

I don't see an "export" option in the documentation, only "import."  Printing the web page is probably not what I want.

Stefan Ritt wrote:

Switch to the "summary" display (try it with this forum). You get headers (like "category"). Clicking on it sorts by that attribute. Then display "all" entries, or use the "find" option to search in certain time periods, then just print the web page.

Alternatively, expeort logbook entries as CSV files, load them into a spreadsheet program, and do the sorting and printing there.

Stefan

Hal Goldfarb wrote:

Has anyone developed a report tool for elog?  I would like to be able to sort certain items and send them to either a printer, or an email (external to my own use).

If not, any ideas on an easy means of doing this?  I write a lot of Perl, so that would be an option for me if the text is easily obtained.

Thanks

 

 

 

    icon2.gif   Re: Report Generating Tool?, posted by Andreas Luedeke on Wed May 23 16:19:48 2018 

Here's a little example for a query for this logbook:

curl -f -s -k "https://elog.psi.ch/elogs/Forum/?jcmd=Search&mode=CSV1&last=7&Category=^Question%24"

You can easily process this output with perl, to create reports. I use it for example to create counts for specific enties, like "Bug reports" that are not "closed", and show the results in some other user interfaces.

Cheers, Andreas

Stefan Ritt wrote:

Switch to the "summary" display (try it with this forum). You get headers (like "category"). Clicking on it sorts by that attribute. Then display "all" entries, or use the "find" option to search in certain time periods, then just print the web page.

Alternatively, expeort logbook entries as CSV files, load them into a spreadsheet program, and do the sorting and printing there.

Stefan

Hal Goldfarb wrote:

Has anyone developed a report tool for elog?  I would like to be able to sort certain items and send them to either a printer, or an email (external to my own use).

If not, any ideas on an easy means of doing this?  I write a lot of Perl, so that would be an option for me if the text is easily obtained.

Thanks

 

 

icon5.gif   password protect a logbook with Apache redirect, posted by Matt Newville on Wed May 2 17:06:35 2012 
Hi,

I'm trying to set up elogd, running on port 8080 behind an Apache server on port 80, using mod_proxy to redirect
to the elogd server, and the recommended

Redirect permanent /elogbook http://example.com/elogbook/
ProxyPass /elogbook/         http://example.com:8080/

This works well for non-password-protected logbooks, but for password protected (that I can access fine via port
8080), I keep getting shown the Login page, even with valid username / password.    

Poking around the code, it appears (probably not too surprisingly) that the issue lies in check_login().  
For example, 

   /* if invalid or no session ID, show login page */
  if (!skip_sid_check && !sid_check(sid, user_name)) {
      if (isparam("redir"))
         strlcpy(str, getparam("redir"), sizeof(str));
      else
         strlcpy(str, isparam("cmdline") ? getparam("cmdline") : _cmdline, sizeof(str));
      /* avoid recursive loops with ?cmd=Login */
      if (stristr(str, loc("Login")))
         str[0] = 0;
      /*  added write_logfile here...
          char mstr[250];
          sprintf(mstr, "show_login B %s isparam: %d, cmd: %d, skip_sid_check: %d, sid_check: %d",
                         user_name,  isparam("redir"), isparam("cmdline"), skip_sid_check, sid_check(sid,
user_name));
           write_logfile(lbs, mstr);

        */
      show_login_page(lbs, str, 0);
      return FALSE;
}

and the logfile shows that user_name is blank(!!) and redir, cmdline, skip_sid_check, and sid_check(sid,
user_name) all to be 0.   In fact, isparam("unm") and isparam("upwd") are also 0, which explains why user_name
is blank.   But the log file also shows

LOGIN user "username" (attempt)
LOGIN user "username" (success)

just prior to this!

I'd guess that the form POST methods aren't being forwarded correctly, but I haven't looked at it in any more
detail.   

Is there a way to make this (password protecting logbooks while also using a proxy to Apache) work?

Thanks!
ELOG V3.1.5-3fb85fa6