Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 700 of 808  Not logged in ELOG logo
New entries since:Thu Jan 1 01:00:00 1970
ID Date Icon Author Author Email Categorydown OS ELOG Version Subject
  67233   Tue Apr 10 10:08:33 2012 Reply Stefan Rittstefan.ritt@psi.chBug reportWindows2.9.1Re: Preset Text?
> Hi Stefan,
> 
> I'm having a problem with 'Preset Text' now behaving differently in the latest release (2.9.1)?
> My config file for example has always had: 'Preset Text = This is a test.', previously 'This is a test' was put
> verbatim into the text area, now it seems to think whatever follows 'Preset Text =' is always a file and I end
> up with 'File <i> This is a test. <i> cannot be found'?
> 
> I did notice a 'Print warning if "preset text" file cannot be found' line in the latest release notes, does this
> now mean wherever I have used the method above I will now need to make a text file to match?
> 
> I'm using them embedded in conditional attributes if that makes any difference?
> 
> Thanks for your help.

Thanks for reporting this bug. I fixed it in SVN revision 2447.
  67234   Tue Apr 10 15:35:07 2012 Reply Stefan Rittstefan.ritt@psi.chBug reportLinux2.9.1-2444Re: segfault on empty, non-writable passwd file

Achim Dreyer wrote:

 

Segfault when password file is empty and not writable a segmentation fault is generated when a new user tries to register:

 

root#  > passwd

root#  chown root.root passwd

root#  chmod 644 passwd

root#  grep -i usr elogd.cfg

root#


kernel: [515323.672377] elogd[31048]: segfault at 78 ip 00000000004ba780 sp 00007fff03cd2078 error 4 in elogd[400000+dc000]
 

I cannot reproduce this error when running within gdb.

 

Thanks for reporting that bug. I fixed it in SVN revision 2448. 

  67250   Mon Apr 16 11:10:07 2012 Warning Christopher Leechris@chrisandclaire.orgBug reportLinux2435Forgot Password

We seem to have a problem with retrieving user passwords using the forgot password system
This only happens when trying to use the password recovery from the first screen that forces people to log in with the following syntax:

Protect selection page = 1
Password file = XXXXX

On the first page of our elog which can be found at

http://physics.uj.ac.za/elog/

Now currently there is one page that is viewable by guests, so going to this direct link, bypasses the login at the main page
If you try login from this page, and then use the forgot password link, the email that gets sent through will then work.

The first email that gets sent through using the main login page has the following link:
https://physics.uj.ac.za/elog/?redir=%3Fcmd%3DChange+password%26oldpwd%3DYJAATGHSIRRSBLLP&uname=Tester&upassword=YJAATGHSIRRSBLLP

When clicking on the above link normally, it takes you to a NULL user

 

The email link that gets sent from the guest page, that works, looks like this:
https://physics.uj.ac.za/elog/General/?redir=%3Fcmd%3DChange+password%26oldpwd%3DSACWEHJWWHKEXLMO&uname=Tester&upassword=SACWEHJWWHKEXLMO

 

Attached is a copy of the cfg file. The last few logbooks are all actually just copies of TEMPLATE A, so I have removed all their details to make the file easier to read for now
 

  67255   Mon Apr 30 17:05:28 2012 Reply Stefan Rittstefan.ritt@psi.chBug reportLinux2435Re: Forgot Password

Christopher Lee wrote:

We seem to have a problem with retrieving user passwords using the forgot password system 

Thanks for reporting that bug. With the help of your config file I finally could reproduce and fix it. The fix is contained in SVN revision 2462.

  67256   Tue May 1 09:20:00 2012 Cool Christopher Leechris@chrisandclaire.orgBug reportLinux2435Re: Forgot Password

Stefan Ritt wrote:

Christopher Lee wrote:

We seem to have a problem with retrieving user passwords using the forgot password system 

Thanks for reporting that bug. With the help of your config file I finally could reproduce and fix it. The fix is contained in SVN revision 2462.

 Thanks mate.. Glad to know it wasn't just me going insane? I'll keep an eye out for the new file

  67259   Wed May 2 09:17:56 2012 Reply Stefan Rittstefan.ritt@psi.chBug reportLinux2435Re: Forgot Password

Christopher Lee wrote:

Stefan Ritt wrote:

Christopher Lee wrote:

We seem to have a problem with retrieving user passwords using the forgot password system 

Thanks for reporting that bug. With the help of your config file I finally could reproduce and fix it. The fix is contained in SVN revision 2462.

 Thanks mate.. Glad to know it wasn't just me going insane? I'll keep an eye out for the new file

For the new version have a look here: http://midas.psi.ch/elog/faq.html#21 

  67293   Wed Jun 27 14:56:43 2012 Question Graham Medlinglmedlin@ncsu.eduBug reportLinux2.9.2-2455Attachment URL login redirect error

If I have a couple of attachments in a log book entry, I can link to that entry "http://example.edu/elog/Sandbox/7", I get the appropriate log in page, and after logging it, it takes me to the entry.

However, if I link directly an attachment, "http://example.edu/elog/Sandbox/7/1", I receive a plain log in page that doesn't have the stylesheet applied, and logging in, I am directed to " http://example.edu/elog/Sandbox/7/" which throws an invalid error. If I am already logged in the browser, it links correctly. 

I assume the problem must stem from messed up relative URL somewhere, hence the lack of stylesheet, or from the redirect incorrectly handling the /. (Looking at the source for the two login pages, the only difference is "<input type=hidden name=redir value="7">" versus "<input type=hidden name=redir value="7/1">". ) But that reaches the end of my ability...

This breaks the attachment links in emails.

Any help would be much appreciated!

  67314   Mon Aug 20 21:48:08 2012 Question Szu-Ching Pecknerspeckner@nd.eduBug reportLinux2.9.2kerberos authentication

Hello, I have

authentication = kerberos

kerberos Realm = xxx

I ran tcpdump and know elogd server did attempt to contact kerberos server. I could run kinit username@realm_name, and klist shows my ticket fine. 

I receive "kerberos error 256: Decrypt integrity check failed. Please check your kerberos configuration" when I entered my password wrong purposely on login page.

I receive "Invalid user name or password!' when I entered my correct password. 

Please advise. 

 

 

ELOG V3.1.5-3fb85fa6