Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 564 of 808  Not logged in ELOG logo
New entries since:Thu Jan 1 01:00:00 1970
ID Date Icon Author Author Email Category OS ELOG Versiondown Subject
  1770   Mon Mar 13 12:57:33 2006 Reply Stefan Rittstefan.ritt@psi.chBug reportLinux2.6.1-1671Broken thread structure in Forum?

Yoshio Imai wrote:
I noticed that this thread seems to be broken in the Forum. When I view the thread start in single view (http://midas.psi.ch/elogs/Forum/1739), I have access to all subsequent posts, but the first reply seems to be interpreted like a new thread, i.e. when clicking onto it (http://midas.psi.ch/elogs/Forum/1741), the thread start is no longer displayed and accessible in the list of posts. Is this intentional, or is it a bug?


Some how it got screwed up, such that ID 1741 did not have a back-link to 1739. I have no clue how this could have happened, but I fixed it by manually editing the log file.
  1771   Mon Mar 13 13:19:09 2006 Reply Yoshio ImaiBug reportLinux2.6.1-1671Broken thread structure in Forum?

Stefan Ritt wrote:
I have no clue how this could have happened, but I fixed it by manually editing the log file.


I also have never come across anything like this in our logbooks (approx. 10000 entries), so it doesn't look like a bug.
  1799   Thu Apr 6 20:24:06 2006 Question Yoshio ImaiQuestionLinux2.6.1-1671elog client authentication and attachment comment
Hi again!

I have two questions, one concerning authentication methods for the elog client. Until revision 1642, it was possible to submit entries to a password-protected logbook using the elog client without supplying authentication information. With revision 1671 this is no longer possible. In principle this is good. However, many of our run control programs use the elog client (via rsh to the elog server computer) to submit automatic entries, which fails now. In order for this mechanism to work again, we would have to change the command-line call in the sources, including now the password in clear text. Since this can be considered a security issue, we would like to avoid it if at all possible. I guess my request would go in the direction of PAM support, but would it be possible to revert to the old behaviour as an option? (If you tell me where in the code to look, we could probably also comment out the respective lines ourselves so that you don't have extra work...)

The second remark is about attachment comments. When editing a logbook entry, the attachment upload buttons appear again, but without the comment. Shouldn't it be there, too?

Thanks,

Yoshio
  1801   Fri Apr 7 10:29:49 2006 Reply Stefan Rittstefan.ritt@psi.chQuestionLinux2.6.1-1671Re: elog client authentication and attachment comment

Yoshio Imai wrote:
Until revision 1642, it was possible to submit entries to a password-protected logbook using the elog client without supplying authentication information. With revision 1671 this is no longer possible. In principle this is good. However, many of our run control programs use the elog client (via rsh to the elog server computer) to submit automatic entries, which fails now. In order for this mechanism to work again, we would have to change the command-line call in the sources, including now the password in clear text. Since this can be considered a security issue, we would like to avoid it if at all possible. I guess my request would go in the direction of PAM support, but would it be possible to revert to the old behaviour as an option? (If you tell me where in the code to look, we could probably also comment out the respective lines ourselves so that you don't have extra work...)


There was a quite strong request to not allow unauthorized access via the elog utility. People were also able to submit entries with the "curl" program without supplying authorization. So I rather would not like to go back to the old version. But I would propose a different scheme: We could save the username/password in a file on the server, which is maybe readable only by the owner. Then one could call elog with
elog ... -u @filename

so that the user name and password gets retrieved from the file on the server. This way the password does not have to be passwd over the network. BTW, you also could use ssh instead of rsh to prevent password being sent over the network in plain text.


Quote:

The second remark is about attachment comments. When editing a logbook entry, the attachment upload buttons appear again, but without the comment. Shouldn't it be there, too?


I'll have a look and fix it.
  1803   Mon Apr 10 20:08:02 2006 Reply Yoshio ImaiQuestionLinux2.6.1-1671Re: elog client authentication and attachment comment

Stefan Ritt wrote:
We could save the username/password in a file on the server, which is maybe readable only by the owner.

I have discussed it with the others, and it sounds like a good idea. There is only the debate whether it should be readable by the owner or by the root user of the elog server. I can't tell at the moment which is more favourable ...
  1732   Tue Feb 28 11:26:22 2006 Reply Alex Halex@synergie-inf.comCommentWindows2.6.1-1668Re: MOptions problem ?
> Hi Holger,
> 
> > Which ELOG version do you use?
> I'am using the version V2.6.1-1653 of Elog 
> 
> > From which logbook are the screenshots? (I assume it's Liste - right?)
> Right :)!
> 
> I've just seen that Stefan has build a V2.6.1-1663 version of ELOG.
> I try to install this new version and gave you answer as soon as possible :)!

Now I'am using the Elog V2.6.1-1668 and same probleme.
I think it's a data problem. I have edited my logbooks\Liste\050302a.log with an Hexadecimal editor and found one 
carruage return juste before the 
  1733   Tue Feb 28 12:08:42 2006 Cool Alex Halex@synergie-inf.comInfoWindows2.6.1-1668[SOLVED] Re: MOptions problem ?
Yop,
I think I found the solution! I was in fact a conditions conflict!
See the attached picture for easiest comprehension.
My list box type's conditions (FWL1{1}, FWL2{2}, FWL4{3}, VPN1{4}, VPN2{5}, CLIVPN-PROC{6}) conflict with my Equipment's conditions. It seems that the condition ID must be unique across the whole elogd.cfg.
So I have replaced my "Options Type = FWL1{1}, FWL2{2}, FWL4{3}, VPN1{4}, VPN2{5}, CLIVPN-PROC{6}"
by : "Options Type = FWL1{101}, FWL2{102}, FWL4{103}, VPN1{104}, VPN2{105}, CLIVPN-PROC"
and it works well Smile!
Attachment 1: gotcha.gif
gotcha.gif
  1734   Wed Mar 1 07:48:11 2006 Reply Stefan Rittstefan.ritt@psi.chInfoWindows2.6.1-1668[SOLVED] Re: MOptions problem ?

Alex H wrote:
It seems that the condition ID must be unique across the whole elogd.cfg.


Right. Here is a quote from the Manual:


ELOG Manual wrote:
The only requiremnt is that conditions are unique, meaning that a condition in one option list cannot be used in another list.


So just read the manual Wink
ELOG V3.1.5-3fb85fa6