Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 322 of 808  Not logged in ELOG logo
New entries since:Thu Jan 1 01:00:00 1970
ID Date Icon Author Author Email Category OS ELOG Versiondown Subject
  67597   Mon Nov 4 15:07:40 2013 Reply Andreas Luedekeandreas.luedeke@psi.chQuestionLinux2.9.2-1Re: kerberos authentication NOT working

Hal Proctor wrote:

Fabio Sella wrote:

Hi guys,

we configured a kdc server using OPENLDAP as backend. We installed on it elog and configured the Kerberos Authentication on one logbook as follows:

Authentication = Kerberos, File
Kerberos Realm = TEST.COM
Password file = ./pwd.xml

 
Detect language » Italian
 

 

Even if the kinit comand is retrieving correctly a ticket for the user tsearch@TEST.COM(we see it using klist and tcpdump on lo interface), elogd kerberos authentication is not working.

We tried using tcpdump for troubleshooting but no traffic is generated on the loopback interface.

Did someone solve this problem or do you have an idea on how to make the kerberos authentication working?

Thanks

 I have asked for same help, and no one has answered with a solution on implementing a kerberos .  I saw exactly what you were seeing. (did you try fully qualifying the domain within the username field for logon?  \\TEST.COM\username)

I still couldn't get it to work

 Just my two cent:
- did you edit the Makefile to compile elogd with kerberos (USE_KRB5   = 1)?
- did you look into the elogd logfile for error messages at start-up or at login time?
I can only say that I got it working right away - that is the case when you learn least.
Maybe you should post your specific software versions: operating system (in my case Scientific Linux 5.1 (Boron)), Kerberos version (klist -V), etc.
 
English (auto-detected) » English
 
  67611   Wed Nov 13 16:26:32 2013 Reply Olaf Kastenolaf.kasten@deutschebahn.comQuestionLinux2.9.2-1Re: kerberos authentication NOT working

Andreas Luedeke wrote:

Hal Proctor wrote:

Fabio Sella wrote:

Hi guys,

we configured a kdc server using OPENLDAP as backend. We installed on it elog and configured the Kerberos Authentication on one logbook as follows:

Authentication = Kerberos, File
Kerberos Realm = TEST.COM
Password file = ./pwd.xml

 
Detect language » Italian
 

 

Even if the kinit comand is retrieving correctly a ticket for the user tsearch@TEST.COM(we see it using klist and tcpdump on lo interface), elogd kerberos authentication is not working.

We tried using tcpdump for troubleshooting but no traffic is generated on the loopback interface.

Did someone solve this problem or do you have an idea on how to make the kerberos authentication working?

Thanks

 I have asked for same help, and no one has answered with a solution on implementing a kerberos .  I saw exactly what you were seeing. (did you try fully qualifying the domain within the username field for logon?  \\TEST.COM\username)

I still couldn't get it to work

 Just my two cent:
- did you edit the Makefile to compile elogd with kerberos (USE_KRB5   = 1)?
- did you look into the elogd logfile for error messages at start-up or at login time?
I can only say that I got it working right away - that is the case when you learn least.
Maybe you should post your specific software versions: operating system (in my case Scientific Linux 5.1 (Boron)), Kerberos version (klist -V), etc.
 
English (auto-detected) » English
 

 I'm having same issue. Kerberos is working on Apache on same ubuntu 12.04 server. I used the USE_KRB5 option for compiling elog.

Does anyone  have an idea to solve that problem? 

  68804   Mon May 21 09:41:57 2018 Question Hal Goldfarbhalgol60@gmail.comQuestionLinux2.9.2+2014.05.1Report Generating Tool?

Has anyone developed a report tool for elog?  I would like to be able to sort certain items and send them to either a printer, or an email (external to my own use).

If not, any ideas on an easy means of doing this?  I write a lot of Perl, so that would be an option for me if the text is easily obtained.

Thanks

  68805   Mon May 21 21:37:36 2018 Reply Stefan Rittstefan.ritt@psi.chQuestionLinux2.9.2+2014.05.1Re: Report Generating Tool?

Switch to the "summary" display (try it with this forum). You get headers (like "category"). Clicking on it sorts by that attribute. Then display "all" entries, or use the "find" option to search in certain time periods, then just print the web page.

Alternatively, expeort logbook entries as CSV files, load them into a spreadsheet program, and do the sorting and printing there.

Stefan

Hal Goldfarb wrote:

Has anyone developed a report tool for elog?  I would like to be able to sort certain items and send them to either a printer, or an email (external to my own use).

If not, any ideas on an easy means of doing this?  I write a lot of Perl, so that would be an option for me if the text is easily obtained.

Thanks

 

  68806   Tue May 22 06:55:21 2018 Reply Hal Goldfarbhalgol60@gmail.comQuestionLinux2.9.2+2014.05.1Re: Report Generating Tool?

I don't see an "export" option in the documentation, only "import."  Printing the web page is probably not what I want.

Stefan Ritt wrote:

Switch to the "summary" display (try it with this forum). You get headers (like "category"). Clicking on it sorts by that attribute. Then display "all" entries, or use the "find" option to search in certain time periods, then just print the web page.

Alternatively, expeort logbook entries as CSV files, load them into a spreadsheet program, and do the sorting and printing there.

Stefan

Hal Goldfarb wrote:

Has anyone developed a report tool for elog?  I would like to be able to sort certain items and send them to either a printer, or an email (external to my own use).

If not, any ideas on an easy means of doing this?  I write a lot of Perl, so that would be an option for me if the text is easily obtained.

Thanks

 

 

  68807   Tue May 22 11:11:43 2018 Reply Stefan Rittstefan.ritt@psi.chQuestionLinux2.9.2+2014.05.1Re: Report Generating Tool?

Click on "Find", select "Export to CSV", optionally select filter criteria, then press "Search".

Stefan

Hal Goldfarb wrote:

I don't see an "export" option in the documentation, only "import."  Printing the web page is probably not what I want.

Stefan Ritt wrote:

Switch to the "summary" display (try it with this forum). You get headers (like "category"). Clicking on it sorts by that attribute. Then display "all" entries, or use the "find" option to search in certain time periods, then just print the web page.

Alternatively, expeort logbook entries as CSV files, load them into a spreadsheet program, and do the sorting and printing there.

Stefan

Hal Goldfarb wrote:

Has anyone developed a report tool for elog?  I would like to be able to sort certain items and send them to either a printer, or an email (external to my own use).

If not, any ideas on an easy means of doing this?  I write a lot of Perl, so that would be an option for me if the text is easily obtained.

Thanks

 

 

 

  68810   Wed May 23 16:19:48 2018 Reply Andreas Luedekeandreas.luedeke@psi.chQuestionLinux2.9.2+2014.05.1Re: Report Generating Tool?

Here's a little example for a query for this logbook:

curl -f -s -k "https://elog.psi.ch/elogs/Forum/?jcmd=Search&mode=CSV1&last=7&Category=^Question%24"

You can easily process this output with perl, to create reports. I use it for example to create counts for specific enties, like "Bug reports" that are not "closed", and show the results in some other user interfaces.

Cheers, Andreas

Stefan Ritt wrote:

Switch to the "summary" display (try it with this forum). You get headers (like "category"). Clicking on it sorts by that attribute. Then display "all" entries, or use the "find" option to search in certain time periods, then just print the web page.

Alternatively, expeort logbook entries as CSV files, load them into a spreadsheet program, and do the sorting and printing there.

Stefan

Hal Goldfarb wrote:

Has anyone developed a report tool for elog?  I would like to be able to sort certain items and send them to either a printer, or an email (external to my own use).

If not, any ideas on an easy means of doing this?  I write a lot of Perl, so that would be an option for me if the text is easily obtained.

Thanks

 

 

  67260   Wed May 2 17:06:35 2012 Question Matt Newvillenewville@cars.uchicago.eduQuestionLinux2.9.2password protect a logbook with Apache redirect
Hi,

I'm trying to set up elogd, running on port 8080 behind an Apache server on port 80, using mod_proxy to redirect
to the elogd server, and the recommended

Redirect permanent /elogbook http://example.com/elogbook/
ProxyPass /elogbook/         http://example.com:8080/

This works well for non-password-protected logbooks, but for password protected (that I can access fine via port
8080), I keep getting shown the Login page, even with valid username / password.    

Poking around the code, it appears (probably not too surprisingly) that the issue lies in check_login().  
For example, 

   /* if invalid or no session ID, show login page */
  if (!skip_sid_check && !sid_check(sid, user_name)) {
      if (isparam("redir"))
         strlcpy(str, getparam("redir"), sizeof(str));
      else
         strlcpy(str, isparam("cmdline") ? getparam("cmdline") : _cmdline, sizeof(str));
      /* avoid recursive loops with ?cmd=Login */
      if (stristr(str, loc("Login")))
         str[0] = 0;
      /*  added write_logfile here...
          char mstr[250];
          sprintf(mstr, "show_login B %s isparam: %d, cmd: %d, skip_sid_check: %d, sid_check: %d",
                         user_name,  isparam("redir"), isparam("cmdline"), skip_sid_check, sid_check(sid,
user_name));
           write_logfile(lbs, mstr);

        */
      show_login_page(lbs, str, 0);
      return FALSE;
}

and the logfile shows that user_name is blank(!!) and redir, cmdline, skip_sid_check, and sid_check(sid,
user_name) all to be 0.   In fact, isparam("unm") and isparam("upwd") are also 0, which explains why user_name
is blank.   But the log file also shows

LOGIN user "username" (attempt)
LOGIN user "username" (success)

just prior to this!

I'd guess that the form POST methods aren't being forwarded correctly, but I haven't looked at it in any more
detail.   

Is there a way to make this (password protecting logbooks while also using a proxy to Apache) work?

Thanks!
ELOG V3.1.5-3fb85fa6