Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 2 of 234  Not logged in ELOG logo
icon5.gif   no availability of el8 and el9 rpm, posted by scott on Wed Feb 21 10:39:21 2024 
Hi,

I checked the RPM download page and found that there is no RPM available to install ELOG on el8 and el9 based OS.
    icon2.gif   Re: no availability of el8 and el9 rpm, posted by Laurent Jean-Rigaud on Wed Feb 21 11:15:38 2024 
Hi,

EPEL retired the ELOG package for security reason.

You can build from GIT source as described in elog:Forum/69732 .
       icon2.gif   Re: no availability of el8 and el9 rpm, posted by Konstantin Olchanski on Wed Feb 21 21:20:56 2024 
> EPEL retired the ELOG package for security reason

no, this is not what happened, we (I) requested removal of elog packages from epel, debian and ubuntu because they had obsolete pre-cve (insecure) 
          icon2.gif   Re: no availability of el8 and el9 rpm, posted by Laurent Jean-Rigaud on Thu Feb 22 00:53:26 2024 
> > EPEL retired the ELOG package for security reason

> no, this is not what happened, we (I) requested removal of elog packages from epel, debian and ubuntu because they had obsolete pre-cve (insecure) 
             icon2.gif   Re: no availability of el8 and el9 rpm, posted by Stefan Ritt on Thu Feb 22 08:12:28 2024 
> I spent one hour yesterday to install almalinux in VM on my laptop, clone repo, rebuild ELOG RPM, install the new rpm and start elogd. 
> You should have several VM on a shield for that :-P 
                icon2.gif   Re: no availability of el8 and el9 rpm, posted by Laurent Jean-Rigaud on Thu Feb 22 11:59:03 2024 
> > I spent one hour yesterday to install almalinux in VM on my laptop, clone repo, rebuild ELOG RPM, install the new rpm and start elogd. 
> > You should have several VM on a shield for that :-P 
                   icon2.gif   Re: no availability of el8 and el9 rpm, posted by Stefan Ritt on Fri Feb 23 08:40:26 2024 bitbucket-pipelines.yml
> For my curiosity, I've just clone ELOG repo on Bitbucket to try the process. That's pity : pipelines are currently broken (incident traced in status page
https://status.atlassian.com/). 
> The goal is to build elog and pkg file for Ubuntu (docker images list : https://status.atlassian.com/). Next steps should to create a AlmaLinux VM to
                      icon2.gif   Re: no availability of el8 and el9 rpm, posted by Laurent Jean-Rigaud on Fri Feb 23 18:00:41 2024 elog-EL7_c11_patch.diffBitbucket_pipeline_with_elx.pngBitbucket_access_to_artifacts.pngbitbucket-pipelines.yml
Hi Stefan,

> As you saw I use the bitbucket pipeline for CI/CD. The current bitbucket-pipelines.yml is pretty simple (see attachment). If you make me
one which does the rpmbuild automatically, I'm more than happy to upload and use it. The downside there is that it only works for so long. As you saw
                         icon2.gif   Re: no availability of el8 and el9 rpm, posted by Stefan Ritt on Mon Feb 26 17:39:56 2024 
Many thanks for your files and instructions. I integrated this into the official elog pipeline, so now the RPMs can be downloaded from https://elog.psi.ch/elog/download.html
and they will be updated automatically after each commit. If you succeed with any Debian/Ubunto I'm happy to add that. What's missing now is an
easy way to compile for Windows (which I don't have anymore).
                            icon2.gif   Re: no availability of el8 and el9 rpm, posted by Antonio Bulgheroni on Mon Feb 26 21:18:23 2024 
+1 for a Windows pipeline!

 




Stefan
                            icon2.gif   Re: no availability of el8 and el9 rpm, posted by Laurent Jean-Rigaud on Mon Feb 26 22:23:05 2024 
Hi Stefan,

Nice to have up to date RPMs.

For .DEB, I contact the Ubuntu maintainer for its build script, and cool, he replied that he's searching for it. That's could help me
                               icon2.gif   Re: no availability of el8 and el9 rpm, posted by Antonio Bulgheroni on Tue Feb 27 06:59:06 2024 
Many thanks for all your efforts!




Laurent
Jean-Rigaud wrote:



Hi Stefan,
                               icon2.gif   Re: no availability of el8 and el9 rpm, posted by Stefan Ritt on Tue Feb 27 07:35:15 2024 



Laurent Jean-Rigaud
wrote:



For Windows target, It's supported in Bitbucket but only with private
agent :-(
                                  icon2.gif   Re: no availability of el8 and el9 rpm, posted by Laurent Jean-Rigaud on Tue Feb 27 16:55:39 2024 
Elogd for windows has an option -install which normally does it. Is it working on last Windows version (or the one enclosed in elog:Forum/69664) ?

If Yes, a simple install-as-a-service.bat can be added to archive :-)
                                  icon2.gif   Re: no availability of el8 and el9 rpm, posted by Laurent Jean-Rigaud on Mon Mar 4 10:10:50 2024 Build_started.txt
Hi Stefan,

Some updates for Windows version.

I spent last WE to try to build ELOG on Windows from MSVCODE, MSCV, crosschain tool under linux etc, but in vain.
icon5.gif   LDAP over password file, posted by scott on Tue Feb 27 16:00:43 2024 
Hi Team,

Current configuration
icon5.gif   user change under webserver authentication not recognized, posted by Frank Heyroth on Fri Jan 19 15:49:13 2024 
Hi all,

I am using the Apache webserver authentication and redirection over http (not https). I have configured it 1:1 as described in the Adminguide.
In the elog.cfg I set Authentication = Webserver.
    icon2.gif   Re: user change under webserver authentication not recognized, posted by Frank Heyroth on Wed Jan 24 14:50:21 2024 
I found the reason of the bug:
In line 27441 of elogd.cxx the http_user is overwritten by the user saved in the sid_ array as a sideeffect of the sid_check
function:
       icon2.gif   Re: user change under webserver authentication not recognized, posted by Stefan Ritt on Fri Feb 23 15:13:46 2024 
Thanks for the fix, I committed it. Please give it a quicky try sinc I cannot test it here (don't use webserver authentication...)

Stefan




Frank
icon4.gif   http status 200 returned for "file not found", posted by Konstantin Olchanski on Fri Mar 18 00:36:37 2022 
"file not found" should return http code 404. elogd returns code 200 together
with a page containing text "404 not found". This pollutes the browser cache
with wrong content (in this case, we are trying to load a css file, and the browser
    icon2.gif   Re: http status 200 returned for "file not found", posted by Alexey Khudyakov on Tue Jan 30 13:10:38 2024 
> "file not found" should return http code 404. elogd returns code 200 together
> with a page containing text "404 not found". This pollutes the browser cache
> with wrong content (in this case, we are trying to load a css file, and the browser
       icon2.gif   Re: http status 200 returned for "file not found", posted by Stefan Ritt on Fri Feb 23 14:59:29 2024 
> > "file not found" should return http code 404. elogd returns code 200 together
> > with a page containing text "404 not found". This pollutes the browser cache
> > with wrong content (in this case, we are trying to load a css file, and the browser
icon5.gif   ERROR: The certificate of ‘elog.psi.ch’ doesn't have a known issuer, posted by scott on Tue Feb 20 11:49:19 2024 
Hi,

As there is no ELOG available in Epel repository for Rocky9, I tried to install ELOG from https://elog.psi.ch/elog/download/RPMS/elog-latest.el7.x86_64.rpm
    icon2.gif   Re: ERROR: The certificate of ‘elog.psi.ch’ doesn't have a known issuer, posted by Laurent Jean-Rigaud on Tue Feb 20 11:56:14 2024 
Hi

You can use an option to wget to discard certificate checks m.

Btw this rpm file is build for el7 gen aka entreprise linux 7. So it souldn't install  on gen 9....
       icon2.gif   Re: ERROR: The certificate of ‘elog.psi.ch’ doesn't have a known issuer, posted by Konstantin Olchanski on Wed Feb 21 00:12:45 2024 
> wget https://elog.psi.ch/elog/download/RPMS/elog-latest.el7.x86_64.rpm

I confirm, both wget and curl do not work, not happy with https certificate. (current macos)
          icon2.gif   Re: ERROR: The certificate of ‘elog.psi.ch’ doesn't have a known issuer, posted by Laurent Jean-Rigaud on Wed Feb 21 03:13:33 2024 elog-3.1.5-20240221.el9.x86_64.rpm
To have ELOG RPM for EL9, you need to rebuild package from source under EL9 host or VM (i use almalinux9 for this test) :

1- install RPM build tools (csh is used by ELOG scripts. Devel rpms are dependencies) :


sudo dnf install rpm-build gcc gcc-c++ git openssl-devel krb5-devel pam-devel openldap-devel csh


2- retrieve last source
    icon2.gif   Re: ERROR: The certificate of ‘elog.psi.ch’ doesn't have a known issuer, posted by Stefan Ritt on Wed Feb 21 09:16:00 2024 
The chain certificate on elog.psi.ch has been expired, so I installed  the current one and now wget should be happy ;-)

Stefan




scott
icon5.gif   ERROR: The certificate of ‘elog.psi.ch’ doesn't have a known issuer, posted by scott on Tue Feb 20 11:44:30 2024 
Hi,

As there is no ELOG available in Epel repository for Rocky9, I tried to install ELOG from https://elog.psi.ch/elog/download/RPMS/elog-latest.el7.x86_64.rpm
icon5.gif   Webserver Auth Method and Self Registration, posted by James on Sun Feb 18 11:43:07 2024 login-error.pngelogd.cfg
Hi there. I have been testing a set-up of elog behind an Apache reverse proxy using the Webserver auth method. Apache has been configured for LDAPS with
Active Directory allowing us to restrict Elogs by AD group, something not able to be done with the LDAP module.

Testing with Elog 3.1.4 (on Windows) and also Elog 3.1.5 (compiled on Ubuntu 20.04) I experience an issue that when the user logs in for the
icon5.gif   How to not expose elog port when running under a reverse proxy, posted by Nicola on Mon Jan 22 08:22:33 2024 
I am running elog under Apache as explained in the administrator's guide. Everything works fine, butmy IT service complains about the elog port being
publicly exposed, so I have to fix this. As far as I understand when running under a reverse proxy there's no need for the port to be publiuclyexposed,
but I cannot find how to configure the elog server to expose it only locally
    icon2.gif   Re: How to not expose elog port when running under a reverse proxy, posted by Frank Heyroth on Mon Jan 22 20:50:50 2024 
Hi,
as I understand right you can do this in the elogd.cfg via
Interface = 127.0.0.1
ELOG V3.1.5-fe60aaf