Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 571 of 808  Not logged in ELOG logo
New entries since:Thu Jan 1 01:00:00 1970
ID Date Icon Author Author Email Categorydown OS ELOG Version Subject
  1267   Thu Jul 14 15:58:07 2005 Entry Emiliano GabrielliAlberT@SuperAlberT.itCommentAll A new ELOG user wants to register on "127.0.0.1"
A new ELOG user wants to register on "127.0.0.1"


the scenario is:
- elog on localhost
- stunnel on the external interface

I dont want elog to listen on external interface, so.. why do not use the URL cfg attribute for this issue ?
  1268   Thu Jul 14 17:29:42 2005 Reply Stefan Rittstefan.ritt@psi.chCommentAll Re: A new ELOG user wants to register on "127.0.0.1"

Emiliano Gabrielli wrote:
A new ELOG user wants to register on "127.0.0.1"


the scenario is:
- elog on localhost
- stunnel on the external interface

I dont want elog to listen on external interface, so.. why do not use the URL cfg attribute for this issue ?


You can specify the interface to liste on with the
"-n <interface>"
parameter of elogd.
  1271   Thu Jul 14 19:16:06 2005 Reply Emiliano GabrielliAlberT@SuperAlberT.itCommentAll Re: A new ELOG user wants to register on "127.0.0.1"

Stefan Ritt wrote:

Emiliano Gabrielli wrote:
A new ELOG user wants to register on "127.0.0.1"


the scenario is:
- elog on localhost
- stunnel on the external interface

I dont want elog to listen on external interface, so.. why do not use the URL cfg attribute for this issue ?


You can specify the interface to liste on with the
"-n <interface>"
parameter of elogd.


I know Smile

the following is the configuration I'm telling about... and it raises the problem reported
albert@YYYYYYYYY:~$ ps axu | grep elog
elog     22348  1.0  1.9 23660 20408 ?       Ss   11:32   4:54 /usr/sbin/elogd -f /var/run/elogd.pid -c /etc/elog.conf -d /var/lib/elog -s /usr/share/elog -p 8081 -n 127.0.0.1 -x -D
root     22353  0.0  0.2 45436 2276 ?        Ss   11:32   0:17 /usr/sbin/stunnel -o /var/log/elog/elog_daemon.log -p /etc/ssl/certs/stunnel_XXXXXXX.pem -d XXXXXX.roma2.infn.it:8080 -r 127.0.0.1:8081
  1302   Sat Jul 23 15:46:06 2005 Reply Stefan Rittstefan.ritt@psi.chCommentAll Re: A new ELOG user wants to register on "127.0.0.1"
Ok, I kind of misunderstood the "-n" parameter. It is the interface to listen to, which is not necessarily the host name as seen from outside. I changed that in the following way:

  • if the URL option is present, the host name is taken from there
  • if the URL option is not present, elog calls gethostname()/gethostbyname() to retrieve the local host name

the host name which comes from these two possibilities is used internally in all cases where it's needed, like email notifications.
  1403   Thu Sep 1 18:26:38 2005 Reply ralphbelog@spampot.comComment  Re: something for the wishlist: 'Recent Changes'

Heiko Scheit wrote:
A 'Recent Changes'-link (option) that lists entries that were changed
recently, where 'recent' can be changed from 1,2,3...(some maximum)
days.


Two possible solutions:

1. Use ELOG's RSS support (look for "RSS Title" in the config syntax help). I added an RSS icon to each entry with "Bottom Text=<a href="http://myserver:8080/mylogbook/elog.rdf"><img border=0 height="14" width="36" src="/Rssicon_3614.gif" alt="[RSS]"></a>

2. Add a new attribute "Revised" and config it as follows: "Locked attributes = Revised" and "Subst on Edit Revised = $date". It'll get updated each time the entry gets updated. Then all you just need to create a link to "http://yourserver:8080/yourlogbook/page?mode=summary&rsort=Revised"

Best regards, Ralph.
  1591   Fri Jan 13 02:37:10 2006 Agree Chris Warnerchristopher_warner@dcd.uscourts.govCommentLinux Re: LDAP

Stefan Ritt wrote:

Carl Shirey wrote:
I know you want to make ELOG a stand alone program. But is there a way to still make a stand alone but have the option work with LDAP?
FYI
Elog works great we us it for our shift carryover and we have about 25 people useing it and I have heard no complants with it.
Thanks


I added your vote to the "PAM" authentication on the wishlist, since PAM contains an LDAP module.


Please Add my vote too. I think that would be great.
  1615   Fri Jan 20 02:53:40 2006 Smile Chris Warnerchristopher_warner@dcd.uscourts.govCommentLinux2.6Re: Buffer Overflow?

Stefan Ritt wrote:

Chris Warner wrote:
Users can access root level directories by using a modified URL. I saw on some security web sites that this was a problem in previous versions. Was it not fixed in 2.6?

To recreate enter http://yourhost.yourdomain.com/../../../../etc/passwd

view your password file in the browser.

If this was previously reported, is there a fix?

Chris Warner


Thanks for telling me, I didn't know. I was able to reproduce your problem under certain conditions, and I just released version 2.6.1 to fix it. However it has nothing to do with an old buffer overflow (see elog:941).

I would strongly advise everybody to upgrade as soon as possible.


Thanks for the quick response!
  1732   Tue Feb 28 11:26:22 2006 Reply Alex Halex@synergie-inf.comCommentWindows2.6.1-1668Re: MOptions problem ?
> Hi Holger,
> 
> > Which ELOG version do you use?
> I'am using the version V2.6.1-1653 of Elog 
> 
> > From which logbook are the screenshots? (I assume it's Liste - right?)
> Right :)!
> 
> I've just seen that Stefan has build a V2.6.1-1663 version of ELOG.
> I try to install this new version and gave you answer as soon as possible :)!

Now I'am using the Elog V2.6.1-1668 and same probleme.
I think it's a data problem. I have edited my logbooks\Liste\050302a.log with an Hexadecimal editor and found one 
carruage return juste before the 
ELOG V3.1.5-3fb85fa6