ID |
Date |
Icon |
Author |
Author Email |
Category |
OS |
ELOG Version |
Subject |
242
|
Thu Mar 6 20:49:31 2003 |
| Robert Keeney | rkeeney@dfs.state.fl.us | Bug report | | | Re: https:// changed to http:// when submit button is clicked | > I hope this is not something I did.
>
> I'm using elog 2.3.1 on redhat 7.1 and using stunnel to redirect from port
> 443 to 8080. When I try to add a new record (click submit) https:// in the
> browser gets changed to http://. I ve tried three browsers all with the same
> result. If I go into the address field and change it to https:// after
> getting a 404 error it works. The record gets posted.
Just an update: It does the same thing when I click the back button |
241
|
Thu Mar 6 20:37:16 2003 |
| Robert Keeney | rkeeney@dfs.state.fl.us | Bug report | | | https:// changed to http:// when submit button is clicked | I hope this is not something I did.
I'm using elog 2.3.1 on redhat 7.1 and using stunnel to redirect from port
443 to 8080. When I try to add a new record (click submit) https:// in the
browser gets changed to http://. I ve tried three browsers all with the same
result. If I go into the address field and change it to https:// after
getting a 404 error it works. The record gets posted. |
240
|
Thu Feb 27 10:53:09 2003 |
| Etienne Van Caillie | etienne.vancaillie@mba.be | Request | | | Re: elogd.cfg | > Stefan and friends,
>
> without breaching your own security, could it be possible to see what the
> elogd.cfg file looks like, also if others would like to post theirs, this
> would be great in building exmaples etc, obviosly an security related or
> mail server entries hashed out.
>
> I am a tad new at this stuff, but eventually would try my hand at getting
> hold of the source code and compiling on AIX and then intergrating into
> shell and error reporting. - OK .. a bit in the furture anyway, if someone
> has already done this please post.
>
> kind regards Aamir
we do recompile a version with ShellOnsubmit and ShellParam
and it works ! actually only on windows
when all test will be finish we'll send the version to Stefan Ritt
Attributes = By, Type, Categorie, Subject, Dossier, Remarks, email1
....
ShellOnSubmit = c:\test\shellTest\Debug\shellTest.exe
ShellParam = /Params %By %Type %Subject %Dossier %Remarks %
email1 /quietMode "test test"
|
239
|
Wed Feb 26 10:34:12 2003 |
| Stefan Ritt | stefan.ritt@psi.ch | Comment | | | Re: Security (passwords over web browser) | > Stefan - Just to say that this is an excellent piece of work well done.
Thanks.
> 1) is there a way around seeing the password in text when self
regestering,
> if I turn this option off when the user changes his password will this
> password still be seen?
Where did you see the password? Was it on this logbook or on your own? Did
you use "self register" equal 3 or 2? The password should never be visible
in plain text, so after you submit it (during registration or login), the
page gets immediately redirected since the password is contained in the
URL. After the redirection, it is not visible any more. Now it might happen
that the redirection takes a few seconds, depending on the network speed,
then you see it for this few seconds. But in an intranet installation, this
should not happen.
> 2) I have changed all the files to be owned on my RedHat Server by the
> user:group as elog:elog and set and moved the logbooks to another
directory
> other than in /usr/local/elog namely /home/elog/logbooks, my concern is
is
> I was to upgrade to a newer version would it be a simple install over the
> top? any caveats?
Yes, if you upgrade, the new version will again to into /usr/local/elog
unless you tell "rpm" to relocate the package. Unfortunately I'm not a
specialist with "rpm", but you might figure it out yourself (just try to
reinstall the same version and look where the files go wiht "rpm -ql elog"). |
238
|
Wed Feb 26 10:13:10 2003 |
| Stefan Ritt | stefan.ritt@psi.ch | Request | | | Re: elogd.cfg | > Stefan and friends,
>
> without breaching your own security, could it be possible to see what the
> elogd.cfg file looks like, also if others would like to post theirs, this
> would be great in building exmaples etc, obviosly an security related or
> mail server entries hashed out.
Ok, good idea. I made a new logbook "Config Examples" on this server, where
everybody can add new configuration examples. I added a few covering the
logbooks on this server as a starting point. Just click on "Config Examples"
at the top of this page! |
237
|
Tue Feb 25 22:35:44 2003 |
| Aamir Khan | aamir@aamir.uk.com | Request | | | elogd.cfg | Stefan and friends,
without breaching your own security, could it be possible to see what the
elogd.cfg file looks like, also if others would like to post theirs, this
would be great in building exmaples etc, obviosly an security related or
mail server entries hashed out.
I am a tad new at this stuff, but eventually would try my hand at getting
hold of the source code and compiling on AIX and then intergrating into
shell and error reporting. - OK .. a bit in the furture anyway, if someone
has already done this please post.
kind regards Aamir |
236
|
Tue Feb 25 22:18:57 2003 |
| Aamir Khan | aamir@aamir.uk.com | Comment | | | Security (passwords over web browser) | Stefan - Just to say that this is an excellent piece of work well done.
I have just started an internal company Elog server, couple of
clarifications :
1) is there a way around seeing the password in text when self regestering,
if I turn this option off when the user changes his password will this
password still be seen?
2) I have changed all the files to be owned on my RedHat Server by the
user:group as elog:elog and set and moved the logbooks to another directory
other than in /usr/local/elog namely /home/elog/logbooks, my concern is is
I was to upgrade to a newer version would it be a simple install over the
top? any caveats?
thanks again an absolute dream program.
kind regards Aamir |
235
|
Mon Feb 24 14:40:30 2003 |
| Stefan Ritt | stefan.ritt@psi.ch | Question | | | Re: Email notification | This problem has been fixed as well (elog:233). |
|