|
|
|
Demo
Discussion
|
|
Forum
Config Examples
Contributions
Vulnerabilities
|
| Discussion forum about ELOG, Page 603 of 808 |
Not logged in |
 |
|
|
|
|
I got the RPM last week, from the download page. When I run without the -D option it says that it is Version 2.6.0. Since a new version came out in the meantime, I'll give it a try and let you know.
Thanks,
Dimitris |
Re: ELOG v2.6.0 (Linux) crashes while using " Forgot password?", posted by Dimitrios Tsirigkas on Mon Jan 30 10:21:41 2006
|
| Dimitrios Tsirigkas wrote: | | A fix is always for all versions, since I have a common code base. Have you tried Version 2.6.1? |
Yep, 2.6.1 works fine. Thanks,
Dimitris |
Running ELOG under Apache, posted by Dimitrios Tsirigkas on Mon Jan 30 11:41:18 2006
|
Hi,
Sorry if this has been asked elsewhere and I'm missing it. I want to stop users from accessing my elog by loading the URL: http://mycomputerURL:8080 and only make it accessible through http://mycomputerURL/elog. The end goal would be to use Apache to control access. I followed the instructions under "Running elogd under Apache" in the admin guide, but what that did was simply to redirect browsers trying to load ttp://mycomputerURL/elog to http://mycomputerURL:8080.
Thanks,
Dimitris |
|
elog allows me to create user "blahblah ", posted by Dimitrios Tsirigkas on Fri Feb 3 18:15:47 2006
|
Hi,
I noticed that when I register a username that contains whitespaces (eg "boing "), elog allows me to create the user of that name and updates the password file accordingly. It doesn't log me in, but it gives me no error message either. I also found that if I repeat the process it adds yet another entry in the password file, by the same name "boing ". Is that a bug or is there something wrong with my configuration?
Cheers,
Dimitris |
|
Re: elog allows me to create user "blahblah ", posted by Dimitrios Tsirigkas on Fri Feb 3 18:25:32 2006
|
By the way, it is also possible to create a user that doesn't have a password! Shouldn't that be forbidden?
Dimitris |
|
Re: elog allows me to create user "blahblah ", posted by Dimitrios Tsirigkas on Mon Feb 6 16:27:45 2006
|
| Stefan Ritt wrote: |
| Dimitrios Tsirigkas wrote: | | By the way, it is also possible to create a user that doesn't have a password! Shouldn't that be forbidden? |
Well, some people want that! |
Ok, fair enough. But maybe there could be an optional flag in the configuration that disables blank passwords... I wouldn't want some imposter to start entering stuff under the username of another user, so it would be nice if I could have some way of forcing them to have a password, even if it's a one-letter password.
Thanks,
Dimitris |
Posting without logging in!, posted by Dimitrios Tsirigkas on Thu Feb 9 14:15:54 2006
|
Hi all! This is an HTTP POST request submitted from the command line using curl, and providing no authentication information. If I can post as myself using this command, then shouldn't something be done about this? Cheers, Dimitris |
|
Re: Posting without logging in!, posted by Dimitrios Tsirigkas on Fri Feb 10 16:16:11 2006
|
| Stefan Ritt wrote: |
Yes indeed. I fixed that in SVN revision 1655. I upgraded this server so you can try again if it works. |
Just tried it, it's fixed 
Dimitris |