Re: Kerberos on VM server 64bit, posted by Hal Proctor on Fri May 3 19:09:45 2013
|
| Stefan Ritt wrote: |
|
| Hal Proctor wrote: |
|
I have a logbook installed on a Windows 64 bit VM server 2008 R2 and can access it fine using the password file. However when using Kerberos it does not authenticate correctly. I installed Kerberos and pointed it to the realm an domain controller. Using KINIT command line it appears to accept my password. Any help is appriciated. Perhaps some other diagnostics i could try against the kerberos install
Here is global settings:
port = 49212
ssl = 1
url = https://my-elog.domain.com:49212/
Authentication = Kerberos, file
Kerberos Realm = DOMAIN.COM
Admin User = me
Max content length = 10485760
Password file = pw.txt
Allow password change = 1 (perhaps this is an issue???)
Also...when adding users to the logbook, do you leave the password blank if using Kerberos?
|
You can leave the password just blank.
The "Allow password change = 1" does not make any difference. It works here even with this option.
So I have no idea why you have that problem. Does it work on another computer, i.e. is it related to the 64 bit VM machine?
Best regards,
Stefan
|
The kerberos install, installed the Network Identity Manager and placed krb5 config in my windows directory. Can a server run lsass.exe only? or does the krb5 config file and Network Identity Manager need to be on the server?
|
|
Re: Kerberos on VM server 64bit, posted by Hal Proctor on Fri May 3 19:27:53 2013
|
| Hal Proctor wrote: |
|
| Stefan Ritt wrote: |
|
| Hal Proctor wrote: |
|
I have a logbook installed on a Windows 64 bit VM server 2008 R2 and can access it fine using the password file. However when using Kerberos it does not authenticate correctly. I installed Kerberos and pointed it to the realm an domain controller. Using KINIT command line it appears to accept my password. Any help is appriciated. Perhaps some other diagnostics i could try against the kerberos install
Here is global settings:
port = 49212
ssl = 1
url = https://my-elog.domain.com:49212/
Authentication = Kerberos, file
Kerberos Realm = DOMAIN.COM
Admin User = me
Max content length = 10485760
Password file = pw.txt
Allow password change = 1 (perhaps this is an issue???)
Also...when adding users to the logbook, do you leave the password blank if using Kerberos?
|
You can leave the password just blank.
The "Allow password change = 1" does not make any difference. It works here even with this option.
So I have no idea why you have that problem. Does it work on another computer, i.e. is it related to the 64 bit VM machine?
Best regards,
Stefan
|
The kerberos install, installed the Network Identity Manager and placed krb5 config in my windows directory. Can a server run lsass.exe only? or does the krb5 config file and Network Identity Manager need to be on the server?
|
Installed both on a Windows 2003 R2 server (32bit) and Kerberos not authenticating, yet gievs me a ticket thru kinit. |
|
Re: Blockying user access, posted by Gian Henriques on Wed May 8 19:17:09 2013
|
| Garret Delaronde wrote: |
|
| Gian Henriques wrote: |
|
How can I block access to some tools (like edit, erase, config...) for each user? I want only admin users can edit, erase , etc.
I want know too, how can I erase configuration of SMTP? I make a test with the "elogd -t" command and now every time I create a new entry in my log book I receve the mensage of error to send email, cause I don't configure a SMTP host.
|
Hello, you can use the "Deny" flag in the config file for each logbook.
Deny <function> = <user>
Example: Deny Edit = Gian
simply add as many deny functions as you would like. Its a bit of work if you have a lot of logbooks but its the easiest solution.
Hope that helps.
Elog Syntax guide is helpful for this stuff too.
|
Thanks for help. It work's.
But I want to know if I can block a logbook from a user. For example I have a logbook named "Store". I want only users of the vendors have access to this log. How can I do it?
I didn't find this in manual. |
|
Re: Blockying user access, posted by Gian Henriques on Wed May 8 23:15:34 2013
|
| Gian Henriques wrote: |
|
| Garret Delaronde wrote: |
|
| Gian Henriques wrote: |
|
How can I block access to some tools (like edit, erase, config...) for each user? I want only admin users can edit, erase , etc.
I want know too, how can I erase configuration of SMTP? I make a test with the "elogd -t" command and now every time I create a new entry in my log book I receve the mensage of error to send email, cause I don't configure a SMTP host.
|
Hello, you can use the "Deny" flag in the config file for each logbook.
Deny <function> = <user>
Example: Deny Edit = Gian
simply add as many deny functions as you would like. Its a bit of work if you have a lot of logbooks but its the easiest solution.
Hope that helps.
Elog Syntax guide is helpful for this stuff too.
|
Thanks for help. It work's.
But I want to know if I can block a logbook from a user. For example I have a logbook named "Store". I want only users of the vendors have access to this log. How can I do it?
I didn't find this in manual.
|
The only way I find for this trouble is using the "Login user". But we have something best? |
|
Re: Blockying user access, posted by Garret Delaronde on Fri May 10 17:21:50 2013
|
| Gian Henriques wrote: |
|
| Gian Henriques wrote: |
|
| Garret Delaronde wrote: |
|
| Gian Henriques wrote: |
|
How can I block access to some tools (like edit, erase, config...) for each user? I want only admin users can edit, erase , etc.
I want know too, how can I erase configuration of SMTP? I make a test with the "elogd -t" command and now every time I create a new entry in my log book I receve the mensage of error to send email, cause I don't configure a SMTP host.
|
Hello, you can use the "Deny" flag in the config file for each logbook.
Deny <function> = <user>
Example: Deny Edit = Gian
simply add as many deny functions as you would like. Its a bit of work if you have a lot of logbooks but its the easiest solution.
Hope that helps.
Elog Syntax guide is helpful for this stuff too.
|
Thanks for help. It work's.
But I want to know if I can block a logbook from a user. For example I have a logbook named "Store". I want only users of the vendors have access to this log. How can I do it?
I didn't find this in manual.
|
The only way I find for this trouble is using the "Login user". But we have something best?
|
I haven't found a specific way to block viewing a log book.
I use the top groups settings to keep users in the logbooks they only need access to.
Example
Top Group = Logbook Group1, Logbook Group 2
Group Logbook Group 1 = Logbook1, Logbook2
Group Logbook Group 2 = Logbook3, Logbook4
Then only assign users for logbook1 and logbook2 that you wish to view those logbooks only. They would have to go to the specific top group url in order to view the logbooks.
Then you can go to http://elogurl/(top group)/
And essentially just have the users view the only logbooks they are assigned to. |
hyperlink other elog posts, posted by Remington Tyler Thornton on Tue May 28 19:01:42 2013
|
I am on an experiment that used ELOG for all documentation and meeting notes. In our meeting notes we link to elog posts that had been discussed during the meeting. We had done this by hyperlinking the URL to the entry. Recently we had to move our logbook to another machine and so none of our hyperlinks work since the URLs have changed. I noticed that when one creates a new entry in the subject they can reference another post. Is there a way to link another elog in the body of the elog by using its logbook name and id number without having to use a URL?
Thanks in advance |
Re: hyperlink other elog posts, posted by Andreas Luedeke on Wed May 29 14:57:23 2013 
|
| Remington Tyler Thornton wrote: |
|
I am on an experiment that used ELOG for all documentation and meeting notes. In our meeting notes we link to elog posts that had been discussed during the meeting. We had done this by hyperlinking the URL to the entry. Recently we had to move our logbook to another machine and so none of our hyperlinks work since the URLs have changed. I noticed that when one creates a new entry in the subject they can reference another post. Is there a way to link another elog in the body of the elog by using its logbook name and id number without having to use a URL?
Thanks in advance
|
This is one of the rare cases where it helps to read the manual: https://midas.psi.ch/elog/userguide.html#add  (You may need to upgrade to elog 2.9)
If you want to replace the old URLs with the new ones, you can edit the logbook files with the entries. The attached script allows you to do so easily. But be careful, try it on a copy of your data first.
 ⇄
Detect language » English
⇄
Detect language » English
Using:
regreplace "<old-url>" "<new-url>" *a.log
I hope this helps.
Andreas |
|
Re: "full" only changes color, posted by Martin Rongen on Mon Jun 3 15:49:33 2013
|
| Kees Bol wrote: | Hi,
I have the strange problem that when changing to "full"-diplaymode the output looks the same as with "summary", only the color is different. The texts don't appear.
Any idea what can cause this behaviour?
thanks
Kees Bol |
I now have the same problem in 2.9.2. Attached please find the elogd.cfg
Best regards
Martin |