How to prevent file path leaks on a 404 page, posted by Rich Loring on Tue May 12 15:47:33 2020
|
Hello,
We used the Elog RPM binary installation method to install Elog. Our security scanners are complaining that Elog discloses the version information
when you hit a missing page (404 error). How can I hide this version info? Is there a snippet of code somewhere that I can comment out? |
How to prevent file path leaks on a 404 page, posted by Rich Loring on Tue May 12 15:53:17 2020
|
Hello,
We used the Elog RPM binary installation method to install Elog. Our security scanners are complaining that Elog discloses the version information
when you hit a missing page (404 error). How can I hide this version info? Is there a snippet of code somewhere that I can comment out? |
"New User" option does not work when Authentication=Webserver, posted by Jan Just Keijser on Fri May 29 09:27:32 2020
|
Our setup uses "Authentication=Webserver" + no automatic user registration. Thus, logbook admins should add a user by clicking "Config"
and then "New user". However, no matter what they fill in in the "new user " dialog, as soon as they hit "Save" an error
pops up saying that their username (the admin one, not the new one) already exists. I found the following code: |
|
SSL does not work, posted by Hisataka YOSHIDA on Fri Jun 5 03:49:20 2020
|
Hello.
I installed the latest elog (3.1.4-2) in CentOS 7, and it is working well without SSL.
When I enalbled SSL option (SSL = 1) in the "elogd.cfg", and tried to start the elogd, the message below was shown and failed to run. |
|
Re: SSL does not work, posted by Stefan Ritt on Fri Jun 5 13:24:01 2020
|
When you compile elog from the soruces, you need the OpenSSL library to be installed. The CMake build process will then find it and include it in the
compile process. When you use the "make" build process, you have to make sure that SSL is enabled there:
USE_SSL = 1 |
|
email notification for self register 2 3 and 4, posted by pierre brionnet on Mon Jun 8 07:30:06 2020
|
Hi,
I have set up my elog for testing and setup postfix to be able to send email notification for register of new user but whatever i try elog cannot
set email. I try to sent test email in my bash and this is working without problem to my gmail account. |
|
Re: email notification for self register 2 3 and 4, posted by Stefan Ritt on Mon Jun 8 08:11:33 2020
|
Why don't you start elogd interactively with the "-v" flag (verbose) and watch the communication between elog and postfix. Maybe you see
a specific error there.
Stefan |
|
Re: email notification for self register 2 3 and 4, posted by pierre brionnet on Mon Jun 8 08:29:16 2020
|
Hi Stefan, I did run in verbose mode but only got this output with the 587 SMTP port from gmail
Email from <ELog@localhost.localdomain> to XXXX@gmail.com, SMTP host smtp.gmail.com:
220 smtp.gmail.com ESMTP n1sm6153685pfd.156 - gsmtp |