Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 44 of 808  Not logged in ELOG logo
icon8.gif   elog server crashed due to cookies send by client, posted by Heinz Junkes on Mon Sep 18 13:49:05 2023 

Our elog instance (elogd 3.1.4 built Jan 13 2021, 20:44:20 revision ce2a48e9) has been running for years without any problems.

We have a new user who consistently crashes the elog:

GET /Omicron-STM-XPS/?rsort=Record%20date HTTP/1.1
Host: elog.fhi-berlin.mpg.de:4821
Cache-Control: max-age=0
DNT: 1
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
sec-gpc: 1
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"
Referer: https://elog.fhi-berlin.mpg.de/elog/isc/Omicron-STM-XPS/
Accept-Encoding: gzip, deflate, br
Accept-Language: el-GR,el;q=0.9,en;q=0.8
Cookie: ufnm=Sotirios Tsatsos; urem=1; elmode=full; elattach=1; sid=CD2B04E2C3F02EA4; googtrans=/en/en; amp_6e403e=aWS6RQd5UjGctj5Ym_cDzA.c2Fsdm9fc290b2thaXRlbkB5YWhvby5jb20=..1hajnscc0.1hajnscc0.0.ac.ac
X-Forwarded-For: 141.14.151.26
X-Forwarded-Host: elog.fhi-berlin.mpg.de
X-Forwarded-Server: elog.fhi-berlin.mpg.de
Connection: Keep-Alive


Received unknown cookie "googtrans"
Received unknown cookie "amp_6e403e"
*** buffer overflow detected ***: terminated
Abort (core dumped)

icon5.gif   elog root path, posted by Antonio Bulgheroni on Thu May 5 11:14:20 2022 

Dear all, 

I have a question for you. On my elog server I have plenty of images not included in any logbook entry, but that nevertheless I would the user to have access to that via the browser. In order words, I would like to have a link like this https://myelog/my_pics_folder/my_pic.png

I have realized that if I put my_pics_folder in the script folder, then it works as I wanted, but I strongly doubt this is the right position. If I put in the resources folder, it is not found and the elogd displays a message saying that my_pics_folder is not a valid logbook.

Do you have any suggestions for this problem? 

 

Thanks in advance and enjoy your day!

toto

icon5.gif   elog reaction is very slow, posted by Philipp Rueckl on Wed Oct 30 19:46:56 2002 
Hello,
I am running Elog V2.1.3 on Solaris 8 and I was very pleased about this 
tool.But now I have a problem: Sometimes it takes a lot of time submitting 
an entry into a logbook, up to 3 minutes. This behaviour does only occur 
sometimes. Did anyone of You experience something like this?
icon5.gif   elog program does not respect "Allow edit" list, posted by Heinz Junkes on Mon Mar 11 11:18:02 2019 

submissions via the elog - program can overwrite entries even if the user has no edit rights

icon7.gif   elog perl script and the command prompt and eof, posted by Arno Teunisse on Thu Sep 7 22:06:00 2006 add2elog.pl
hello

Just wrote a quick and dirty perl script ( See Attachment ) that let's you enter a record into the database. Put it into the directory where the config file is located. It look's at the "attributes = " and the "required attributes = "
within a section in the elog configuration file. The script is using elog.exe to accomplish this.

One problem with the script is that you must press Control_Z ( ^Z ) to store the data into the database.
Does anybody know how to prevent this ? It works also when redirecting the data into the script with a file input.txt. ( add2elog.pl confgi.cfg logbook < input.txt )

I Know this is NOT an elog question but maybe someone is happy with the script and has the answer for me.
icon5.gif   elog password access without users, posted by damon nettles on Tue Nov 16 17:49:54 2004 
is there a way to set up a logbook so that a password is required to get
into it, but no username?
icon5.gif   elog password access without users, posted by damon nettles on Tue Nov 16 17:49:54 2004 
is there a way to set up a logbook so that a password is required to get
into it, but no username?
icon5.gif   elog password , attributes and quoting username and password, posted by Arno Teunisse on Wed Nov 10 23:05:24 2010 

Hello
 

When I want to submit an entrie with elog I have the following problem : ( elogd on windows 7 )
D:\MyProgramFiles (x86)\ELOG>elog -v  -h localhost -p 8080 -l "Knowledge Base" -u "arnot 123abc"  -a "Category=info" -a "OS=HP-UX" -a "Subject=Just testing"
Successfully connected to host localhost, port 8080
Request sent to host:
POST /Knowledge+Base/ HTTP/1.0
Content-Type: multipart/form-data; boundary=---------------------------517428C7722E
Host: NTB100744.simac.local
User-Agent: ELOG
Content-Length: 874


Content sent to host:
---------------------------517428C7722E
Content-Disposition: form-data; name="cmd"

Submit
---------------------------517428C7722E
Content-Disposition: form-data; name="unm"

arnot 123abc
---------------------------517428C7722E
Content-Disposition: form-data; name="upwd"

I9vh6COTmDFzlmSGZ9S1gIC.cUNR0fRSzZOYNzj1LK.
---------------------------517428C7722E
Content-Disposition: form-data; name="exp"

Knowledge Base
---------------------------517428C7722E
Content-Disposition: form-data; name="encoding"

ELCode
---------------------------517428C7722E
Content-Disposition: form-data; name="OS"

HP-UX
---------------------------517428C7722E
Content-Disposition: form-data; name="Subject"

Just testing
---------------------------517428C7722E
Content-Disposition: form-data; name="Text"

Category=info
---------------------------517428C7722E

Response received:
HTTP/1.1 404 Not Found
Server: ELOG HTTP 2.8.0-2331
Content-Type: text/html;charset=ISO-8859-1
Connection: Close

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html><head>
<META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW">
<title>ELOG error</title>
<link rel="stylesheet" type="text/css" href="default.css">
</head>
<body><center>
<table class="dlgframe" width="50%" cellpadding="1" cellspacing="0"<tr><td class="errormsg"><i>Error: Attribute <b>Category</b> not supplied.</i><p>
Please go back and enter the <b>Category</b> field.
</td></tr>
<tr><td class="errormsg"><script language="javascript" type="text/javascript">
document.write("<button type=button onClick=history.back()>Back</button>");
</script>
<noscript>
Please use your browser's back button to go back
</noscript>
</td></tr>
</table>
</center></body></html>

Error: Missing required attribute "Category" 

Please Notice that I've put quotes around : -u "username password" ( the documentation shows that this is not necessary) .  But now it failes to see a required attribute.  

When I leave out the quotes in the -u part , it just hangs despite the -vvv on the server console and the -v option  used in the elog command line. Nothing happens. No output at the server debug screen. 
I'm Not using SSL , nor have i used a certificate. It's just a good old  plain html server. ( As far as i can see )

This is the main section in my config and the section I want to change :
[global]
port = 8080
;SSL = 1
;Resource dir = d:/elog.dir
;Logbook dir = d:/elogbooks.dir
CSS = simac1.css
;SMTP host = mailhost.chello.nl
SMTP host = vldexc1.simac.local
Title image URL =
\\vldfps1\algemeen\FM&O\Klanten
Title image = <img border="0" width="25%" src="simac.jpg">
Use Lock = 1   ; When a message is edited an other user will be noticed.
; Please notice : Options Category is now global, and sorted
Options Category = Backup,Database,Filesysteem,Info,Monitoring,Mount,Other,Performance,Security,Upgrade, Add User, IP info, Known Issues,  I-share OchtendControle
Self register = 1  # user can create an account
;Password file = passwd
Admin user = arnot
Logbook Tabs = 0
Protect Selection page = 1
Main Tab = MAIN

 

 

 


; Iedereen mag in het TEXT gedeelte aanpassingen uitvoeren.
Restrict edit = 0
 

[Knowledge Base]

Comment = <I>Knowledge base</I>
Help URL = help.html
Logfile = c:/Program files/elog/Knowledge_Base.log
; use user level password access

;Login expiration = 10

;Self register = 1  # user can create an account
; How is the time displayed :
Time format = %A, %B %d, %Y, %H:%M

; look and feel
Guest menu commands = List,Back, Find, Login, Help
Guest find menu commands = Find, Login, Help
Date format = %B %d, %Y
List menu commands = List,New,Find,Select,Import,Config,Logout,Last day,Help
; attributes
Attributes = Author, Author Email, Category, Klanten,Machine, OS ,Version,Archive, Subject
Options Archive = boolean
Options OS  = UNIX{10} , AIX {100} , HP-UX{200}, Redhat ES{300}  , Suze{400} , Debian{500}
{10}  Options Version = ALL
{100} Options Version = 5.1,5.2,5.3,6.1,6.2,6.3
{200} Options Version = 11.10,11.20,11.23
{300} Options Version = 4.7,4.8,4.9,5.0,5.1
{400} Options Version = 10.1,10.2,10.3,11.0,11.1,
{500} Options Version = 6.0 (sqeeze),5.0 (lenny),4.0 (etch),3.1 (sarge),3.0 (woody),2.2 (potato),2.1 (slink),2.0 (hamm)
Options Klanten = Frieslandbank{AA} , Arag{BB}, Super de Boer{CC},NRE{DD}
{AA}Options Machine = rc1lphmc01,rc1lptr01,rc1upas02,rc1upas03,rc1upas04,rc1upas05,rc1upas06,rc1upas07,rc1upas08,rc1upas22,rc1upav1,rc1updb05,rc1updb21,rc2lphmc01,rc2lptr01,rc2upas02,rc2upas32,rc2updb31,rc2updw33,rc2uuav1
{BB}Options Machine = Arag-lin1,Arag-lin2,Arag-lin3,Arag-lin4,Arag-lin5,Arag-lin6
{CC}Options Machine = xai61032
{DD}Options Machine = server27,server32,server37,server38,server40


Extendable options = Category, Klanten
Required Attributes = Category, OS ,Subject
List Display =  Subject, Category, Klanten,Machine, OS ,Version,Archive
Thread display = $Subject, entered by $author on $Entry time
Quick filter =  Category, OS,Klanten
Display mode = threaded
; title as shown in the browser
Page Title = Accelerator Logbook - $subject

; preset author and email
Preset Author = $long_name
Preset Author Email = $user_email

; these attributes cannot be changed
Locked Attributes = Author, Author Email

; only author can change its own entry
; See restrict edit in the global section

; options for reply
Subst on reply subject = Re: $subject
;Remove on reply = Author, Author Email
Preset on reply Author = $long_name
Preset on reply Author Email = $user_email

; No Email notification
Suppress Email to users = 1   # 1 = do not send mail , 0 = send mail
##############################################################################################                                                                                                                                                        

Any help will be appreciated .....

ELOG V3.1.5-3fb85fa6