Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 252 of 807  Not logged in ELOG logo
ID Date Icon Author Author Email Categorydown OS ELOG Version Subject
  66351   Wed May 6 16:03:56 2009 Reply Stefan Rittstefan.ritt@psi.chQuestionWindows2.7.5Re: Multi Logook Login

Yoshio Imai wrote:
Hi, Stefan!


Stefan Ritt wrote:
If "password file = xxx" is however in each individual logbooks configuration, then you get "path=/<lobook>". You can check that by inspecting your browser's cookies. In that case the login name and password cookies are only sent to the URL for that specific logbook. I have not tested that extensively (different browsers, with/without Apache proxy), but if it works reliably, I will put this into the documentation.


We had done so on your advice and in principle this works, but our experience has shown one problem:

We have separated our logbooks into different top groups because of the sheer number of them (i.e. experiment logbooks in one top group with logbook groups for the sub-categories, personal analysis logbooks in another top group etc.). Obviously, the experiment logbooks may share the same login, therefore we have put the "password file" statement into that top group's global section (otherwise, we would have to log on to every beamtime logbook individually, which can be cumbersome when comparing e.g. experiment settings between beamtimes). For the personal logbooks, of course, we use per-logbook-access (i.e. "password file" statement in the individual logbook sections) such that logging on to one's own logbook does not imply access to someone else's logbook. However, since the group/top group structure does not appear in the elog URLs, the cookies for the beamtime logbooks all have the path set to "path=/". This breaks the scheme again (I guess we have sort of "abused" the concept of top groups a little) and it is not possible to work in one of the experiment logbooks in parallel with one's own logbook without having to renew the login when switching the logbook.


Is it possible to modify the elogd such that it first checks if, among the cookies sent, there is one where the path corresponds to the path of the current logbook, and evaluate cookies with "path=/" only if no such cookie is found?

Yoshio


I'm not sure if that helps. As soon as you have top groups, cookies have to use "path=/". I agree it would be best to use URLs in the form "http://<server>/<top group>/<logbook>", but cookies only support one level of directories (at least that was the case when I designed that a few years ago, I'm not sure if that's still the case). The only way around that is to give up top groups and run one elog server for each top group on a different port.
  66353   Wed May 6 20:49:24 2009 Question Alexander Withersalexw@bnl.govQuestionLinux2.7.5-2130help with substituting subjects

I am trying to add additional information to the subject of new entries:

Subst subject = $subject [INCIDENT $message id]
Subst on reply subject = Re: $subject
Fixed Attributes Reply = Subject

However, the new entry subject looks like:

this is my subject [INCIDENT this is my subject [INCIDENT $message id]

I'm not sure if there's a problem with the substitution or if this is just not allowed (I'm having LISP flashbacks).

By the way, if I use "Subst on reply subject" I get the behavior I would like but the original entry in the thread doesn't contain the appended data:

Subst on reply subject = Re: $subject [INCIDENT $message id]

Any help would be appreciated.

Alex

  66355   Thu May 7 13:35:32 2009 Reply Rich Sterlingrbsterli@juno.comQuestionAll2.7.6Re: Office 2007 file attachments download as zip due to mime config

Stefan Ritt wrote:
Rich Sterling wrote:

Are there any plans to add the new mime extensions to the elogd.c source? (Instead of forcing users to use FireFox or Right click, save-as and rename?

 

 Ok, I added the MIME extensions in ELOG Rev. 2196. The forum runs already the updated version, so can you try with the demo attachments from your entry?

 It looks good from here!  Thanks!!

Best Regards,

Rich

  66359   Sun May 10 22:18:56 2009 Question Arno TeunisseA.teeling3@chello.nlQuestionWindows2.7.6-2191Mail and logged in user

Hello

Was playing with elog. I send mail to the persons involved with a elog entrie. This mail produces something like this ( rather default) .

 Logbook: Accelerator  Message ID: 4    Entry time: 05/10/09 21:48:25     In reply to: 3

When I am logged in into elog , clicking on the Message ID 4 or 3 from the mail client , elog is started with the logged in user at that time and it's permissions.  So instead of starting a new elog session ( and getting the guest permission ) I get the permission of the currently logged in user.( Could be the administrator / root) . The process will function correctly i no one is logged in into elog. I've tested this on a local machine, so I cannot say if the same happens when multiple  machines are used. So, maybe it's a bug, maybe it's my testing  configuration. 

Do not know if i explained  the problem clear enough, but is seems something that could be examined.

By the way : thanks for this great and free program.

 

 

 

  66363   Mon May 18 12:28:00 2009 Reply Stefan Rittstefan.ritt@psi.chQuestionWindows2.7.6-2191Re: Mail and logged in user

 

Arno Teunisse wrote:

Hello

Was playing with elog. I send mail to the persons involved with a elog entrie. This mail produces something like this ( rather default) .

 Logbook: Accelerator  Message ID: 4    Entry time: 05/10/09 21:48:25     In reply to: 3

When I am logged in into elog , clicking on the Message ID 4 or 3 from the mail client , elog is started with the logged in user at that time and it's permissions.  So instead of starting a new elog session ( and getting the guest permission ) I get the permission of the currently logged in user.( Could be the administrator / root) . The process will function correctly i no one is logged in into elog. I've tested this on a local machine, so I cannot say if the same happens when multiple  machines are used. So, maybe it's a bug, maybe it's my testing  configuration. 

Do not know if i explained  the problem clear enough, but is seems something that could be examined.

By the way : thanks for this great and free program. 

 

This is not a bug, this is a feature! Once you log in to ELOG, your credentials are stored in cookies of your local browser. If you access a logbook entry, like via the link you in your email, you still use that credentials. If you clear all cookies of your browser, or log out explicitly from ELOG, then of course you will only get guest access. 

  66365   Tue May 19 23:43:20 2009 Reply Arno TeunisseA.teeling3@chello.nlQuestionWindows2.7.6-2191Re: Mail and logged in user

Stefan Ritt wrote:

 

Arno Teunisse wrote:

Hello

Was playing with elog. I send mail to the persons involved with a elog entrie. This mail produces something like this ( rather default) .

 Logbook: Accelerator  Message ID: 4    Entry time: 05/10/09 21:48:25     In reply to: 3

When I am logged in into elog , clicking on the Message ID 4 or 3 from the mail client , elog is started with the logged in user at that time and it's permissions.  So instead of starting a new elog session ( and getting the guest permission ) I get the permission of the currently logged in user.( Could be the administrator / root) . The process will function correctly i no one is logged in into elog. I've tested this on a local machine, so I cannot say if the same happens when multiple  machines are used. So, maybe it's a bug, maybe it's my testing  configuration. 

Do not know if i explained  the problem clear enough, but is seems something that could be examined.

By the way : thanks for this great and free program. 

 

This is not a bug, this is a feature! Once you log in to ELOG, your credentials are stored in cookies of your local browser. If you access a logbook entry, like via the link you in your email, you still use that credentials. If you clear all cookies of your browser, or log out explicitly from ELOG, then of course you will only get guest access. 

 Thanks Stefan

This was probably a buggy bug report. Was just testing things out on a local machine and cookies were send to the local machine. so the mail was using these cookies also.

In Practice this could never happen. 

 

 

  66366   Fri May 22 00:22:07 2009 Question Mikemike@raghuexim.comQuestionLinux2.7.6-2198Supress Email to Author of a message?

I couldn't find an obvious solution to the problem. I'd like to suppress email

notification to the author of a message. I've had some people complaining

that when they use elog they don't want to get an email about what they wrote

since they wrote it.


Is it possible?

 

Regards,

Mike

  66369   Thu Jun 4 14:04:21 2009 Reply Stefan Rittstefan.ritt@psi.chQuestionLinux2.7.6-2198Re: Supress Email to Author of a message?

 

Mike wrote:

I couldn't find an obvious solution to the problem. I'd like to suppress email

notification to the author of a message. I've had some people complaining

that when they use elog they don't want to get an email about what they wrote

since they wrote it.


Is it possible?

 

Actually I do want to receive a copy, just to be sure that the emails got sent out correctly. I agree that an option would be good for that but it's not implemented right now. An alternative solution is to define a filter in their email client to discard these messages (like if subject contains ELOG and sender equals your own mail address).

ELOG V3.1.5-3fb85fa6