ELOG Forum

Demo Discussion

Forum Config Examples Contributions Vulnerabilities

Discussion forum about ELOG, Page 210 of 801

Not logged in

Find | Login | Help

New entries since:

Thu Jan 1 01:00:00 1970

Full | Summary | Threaded | Hide attachments

6404 Entries

Goto page Previous 1, 2, 3 ... 209, 210, 211 ... 799, 800, 801 Next

Wed Jan 18 12:49:39 2006

Re: Email based on not attribute value

Chris Warner wrote:

For instance, I have a server logbook that several people are able to write to. There is one person that is ultimately responsible for this server. I would like to generate an email any time that someone other than the System Administrator creates a new entry.

No, but there is a trick you can use. Put following into your config file:

Attributes = Author, ...
Preset Author = $long_name
Locked Attributes = Author
Options Author = Admin{1}, other{2}
{1}Suppress default = 1

Replace "Admin" with the name of the administrator. The "Author" field gets automatically set to the author name, and it's locked, so there will no be drop-down box which lets you select between "Admin" and "other". Now if the author is equal to "Admin", the condition {1} becomes true, and the "Supress default is executed. This check the "suppress email notificatio" box at the bottom, so normally no email gets sent from the administrator.

1604

Wed Jan 18 12:57:30 2006

Stefan Ritt

stefan.ritt@psi.ch

Bug report

Re: In version 2.6 the themes do not work right on Windows.

Quote:

The URL is fixed at whichever logbook that is selected (e.g. ELOG 2.5.9-4 is <link rel="stylesheet" type="text/css" href="default.css"> & ELOG 2.6.0-1 is <link rel="stylesheet" type="text/css" href="http://localhost:8080/demo/default.css">).

So what is your problem? Can't you access http://localhost:8080/demo/default.css ?

If so, you could use an

URL = http://{your host}:8080/

option in your config file, where you replace {your host} with your real host name.

1605

Wed Jan 18 13:06:50 2006

Re: Attribute substitution in email configuration

Adam Blandford wrote:

Not sure if this functionality is intended or is a bug.

It was not implemented, however you call this Wink

I added that in the current SVN version, so it will be contained in the next release.

1606

Wed Jan 18 13:31:32 2006

Re: Problems with ELOG and Internet Explorer

Have you tried another browser, like Firefox? Do you have the same problems with Firefox? Can you try the following:

Start elogd manually with the "-v" flag, like

elogd -c <your config path> -v -p 8080

and watch the output carefully. When you submit an entry, elogd does redirection. You will see that in the HTTP header you have an entry like

...
Location: https://...
...

This location is taken from the URL statement of your config file. If it's wrong (like if you mixed http:// and https://), your browser will try to load the page from a non-existion location.

1608

Thu Jan 19 10:31:05 2006

Chris Warner wrote:

Users can access root level directories by using a modified URL. I saw on some security web sites that this was a problem in previous versions. Was it not fixed in 2.6?

To recreate enter http://yourhost.yourdomain.com/../../../../etc/passwd

view your password file in the browser.

If this was previously reported, is there a fix?

Chris Warner

Thanks for telling me, I didn't know. I was able to reproduce your problem under certain conditions, and I just released version 2.6.1 to fix it. However it has nothing to do with an old buffer overflow (see elog:941).

I would strongly advise everybody to upgrade as soon as possible.

1610

Thu Jan 19 15:23:02 2006

Re: Access to global configuration in v2.6.1

> I just installed v.2.6.1 coming from the previous 2.6.0 (on Win2000)
> When I access the "configuration" function from a logbook, in the cfg page I only see two buttons in the header
> (save or cancel); in the previous version I saw more buttons there ("global config", "create new logbook" and so
> on), so here I'm unable to access global configuration or logbook management (except for current logbook options).

I tried to reproduce your problem, but could not. In my windows installation it looks fine. You only see the
(save and cancel) buttons only if you go to "Change [global]", otherwise you see the "Change [global]", "Delete
this logbook" etc. buttons. Have you tried with the default elogd.cfg which comes from the distribution?

1612

Thu Jan 19 17:05:22 2006

Re: settings for "show only new entries"

Ulrich Trüssel wrote:

how ca i set the date for the "show only new entries" button? maybe i missed somethin on the elog.cfg description?
thank's for hint! Smile

That button works as follows: When you are active browsing entries, your activity is recorded (only the time) in the password file. Now when you are inactive for more than one hour, you are considered "logged out", and your last activity is taken as a filter for new entries. That means you see new entries since your last activity in the logbook. If you want to see the last day/week/month etc. you can define a quick filter on the date instead.

1614

Thu Jan 19 20:53:01 2006

Re: In version 2.6 the themes do not work right on Windows.

Mark Coudriet wrote:

But I just updated to your new version 2.6.1 & everything is fine now. Thanks for your help! Big grin

Japp. I switched back to relative links for CSS again, seems to give less trouble. Pleased

Goto page Previous 1, 2, 3 ... 209, 210, 211 ... 799, 800, 801 Next

ELOG V3.1.5-3fb85fa6