ID |
Date |
Icon |
Author |
Author Email |
Category |
OS |
ELOG Version |
Subject |
67198
|
Tue Feb 14 20:41:08 2012 |
| John Doroshenko | doroshenko@physics.rutgers.edu | Bug fix | Linux | Windows | 2.9.0 | Re: ssl problems |
John Doroshenko wrote: |
Andreas Luedeke wrote: |
John Doroshenko wrote: |
Olaf Kasten wrote: |
Hi there,
I have a connection problem with an actual elog installation. Many Browsers like as Chrome, Firefox and IE don't connect to the elog server with ssl = 1 in elogd.cfg.
I tested with Firefox 3.6 and IE 7 installations and there are no problems.
I guess it's a bug. Does someone have a suggestion to solve that problem?
Thx. Olaf
|
Hi!
This just started happening here also. Some users can't get on to a SSL=1 config'd elog using either IE or firefox 10 (win7 or linux) or chrome. SAFARI works. Occurs in 2.8.0 and a newly built (even after
ssl yum updates) 2.9.0 version on SL5.5 system. Seems to accept self signed cert then nothing.. (connection reset message). Tried an stunnel from one port to port running elog
with SSL=0. Same behavior. Doesn't work on some browsers. Any clues?
Thanks,
-John
|
Hi everyone,
it appears that many people have this problem. I believe this is simply a problem of your firewall settings. There are two simple checks you can do to test if I'm right or wrong:
- Run your logbook on the standard port 443 and retry. If the special port has been opened on the firewall, it has been likely only opened for specific clients like firefox 3.6, IE 7, etc. If you use a different client (FF 10, IE 9) the port can be blocked.
- Or just run the browser that does not work on the ELOG server. If it works to access ELOG via localhost, then you know for sure that it is the firewall.
I've actually tested it here at my institute: I've downloaded firefox 10 and could access ELOG on port 443 but couldn't access it on port 444, unless I've started FF10 on the ELOG host.
To John, Olaf and Christian: If you need to be able to use a special port and a certain set of browsers then just contact your computing division or whoever maintains your firewalls.
I hope this settles the matter.
Cheers
Andreas
 ⇄
Detect language » English
PS: I've solved this with the help of google : have a look at http://forums.mozillazine.org/viewtopic.php?p=2295421#2295421 about firewalls
|
Hi,
Thanks for the reply.
The elog server is running SL5.5 (updates applied). As you suggested, I ran firefox 3.6.26 on the elog server via https://localhost:port and it worked fine. Downloaded firefox 10.0.1 and retried
on elog server and get error again: The connection was Reset; The connection to the server was reset while the page was loading.
-John
|
Hi,
One of our sys admins discovered that Firefox 10 appeared to send parts of the initial GET in two parts. As if there was a flush() after the "G" and this caused elog problems. By making the change in
the patch below, the read loop is re-entered again after the 2nd part of the GET comes in. Firefox 10.0.1 then works with ELOG with SSL. Stefan... perhaps you can take a look to see if there is a
better way to accomplish this?
One side effect with it done this way is that if you start a connection (ie, telnet localhost port) and type a single character, the elog will block further connections until the telnet is terminated.
Thank you,
-John Doroshenko |
Attachment 1: fire10elog.patch
|
--- elogd.c.orig 2012-02-14 12:54:05.000000000 -0500
+++ elogd.c 2012-02-14 13:20:13.000000000 -0500
@@ -28805,7 +28805,9 @@
/* finish when empty line received */
pend = NULL;
- if (strncmp(net_buffer, "GET", 3) == 0 && strncmp(net_buffer, "POST", 4) != 0) {
+ if (len < 4) {
+ pend = net_buffer + len;
+ } else if (strncmp(net_buffer, "GET", 3) == 0 && strncmp(net_buffer, "POST", 4) != 0) {
if (len > 4 && strstr(net_buffer, "\r\n\r\n") != NULL) {
pend = strstr(net_buffer, "\r\n\r\n") + 4;
break;
|
67199
|
Wed Feb 15 17:13:08 2012 |
| Mark Bergman | mark.bergman@uphs.upenn.edu | Question | Linux | 2.90 | Re: error message "Command Config is not allowed" after registering |
Mark Bergman wrote: |
After registering, elog displays a page with the message:
Error: Command "Config" is not allowed for user ""
However, the registration is successful. This causes confusion, and results in users registering multiple times.
In the elogd.conf file, I have the directive:
Allow Config = bergman
Any suggestions?
|
I loathe the idea of 'bumping' up one's own posting, but here I go...
Has anyone seen this issue, or have any solution? We've got people who register 8 or more times, since they see the "Error" message with each registration. |
67201
|
Thu Feb 16 18:10:33 2012 |
| Stefan Ritt | stefan.ritt@psi.ch | Bug fix | Linux | Windows | 2.9.0 | Re: ssl problems | Yes, there is a new feature called record splitting which causes the browser to send the "G" of the "GET ..." in a dedicated TCP package. This started in FF10, Chrome 17, and it will come in others as well. It only affects direct SSL connections (SSL=1). I fixed the bug in SVN revision #2435. Please update also MXML to revision #73. Let's hope that surprises like that will not happen too often.
- Stefan
|
67202
|
Thu Feb 16 23:56:35 2012 |
| John Doroshenko | doroshenko@physics.rutgers.edu | Bug fix | Linux | Windows | 2.9.0 | Re: ssl problems |
Stefan Ritt wrote: |
Yes, there is a new feature called record splitting which causes the browser to send the "G" of the "GET ..." in a dedicated TCP package. This started in FF10, Chrome 17, and it will come in others as well. It only affects direct SSL connections (SSL=1). I fixed the bug in SVN revision #2435. Please update also MXML to revision #73. Let's hope that surprises like that will not happen too often.
- Stefan
|
Thank you Stefan! I put up your new svn revision and we're back in business. Seems to be working perfectly.
And thank you again for your efforts with regards to ELOG. It is an incredibly handy tool.
-John
|
67203
|
Mon Feb 20 14:53:04 2012 |
| Stefan Ritt | stefan.ritt@psi.ch | Bug fix | Linux | Windows | 2.9.0 | Re: ssl problems |
Stefan Ritt wrote: |
Yes, there is a new feature called record splitting which causes the browser to send the "G" of the "GET ..." in a dedicated TCP package. This started in FF10, Chrome 17, and it will come in others as well. It only affects direct SSL connections (SSL=1). I fixed the bug in SVN revision #2435. Please update also MXML to revision #73. Let's hope that surprises like that will not happen too often.
- Stefan
|
Today I released version 2.9.1 which fixes this problem.
- Stefan |
67210
|
Wed Mar 14 14:38:10 2012 |
| Stefan Ritt | stefan.ritt@psi.ch | Bug report | Linux | 2.9.0-2418 | Re: Truncation of the displayed text in Summary view of the list of entries |
Olivier Callot wrote: |
In the summary view, it seems that the text is truncated at the first "<" character. See https://lblogbook.cern.ch/Shift/48812 for a simple entry, then use the 'list' command to see that only a very small part is displayed.
|
That's a feature 
In the summary view, I cannot use any HTML code, since it will screw up the table layout. Therefore elog searches for any "<" and ">" pairs and removes the text in between. In principle one could do a better job, but I do not want to write a complete HTML interpreter just for that purpose. |
67211
|
Wed Mar 14 14:45:23 2012 |
| Stefan Ritt | stefan.ritt@psi.ch | Bug report | Windows | 2.7.6 | Re: Record Proliferation |
Paraic Fahey wrote: |
Saving, using Submit sees recently updated fields cleared after hitting SUBMIT.
MOre significantly this then leads to a proliferation of instances of the same record being generated in the logfile and consequently on the logbook.
Has anybody a fix or advice on this?
|
I have not heard of that problem before.
The key to fix is to reproduce it, then teach me how to reproduce it. Only errors I can reproduce on my computer I am able to fix.
Best regards,
Stefan |
67214
|
Wed Mar 14 16:04:04 2012 |
| Stefan Ritt | stefan.ritt@psi.ch | Bug report | Linux | 2.9.0-2418 | Re: Truncation of the displayed text in Summary view of the list of entries |
Olivier Callot wrote: |
Stefan Ritt wrote: |
Olivier Callot wrote: |
In the summary view, it seems that the text is truncated at the first "<" character. See https://lblogbook.cern.ch/Shift/48812 for a simple entry, then use the 'list' command to see that only a very small part is displayed.
|
That's a feature 
In the summary view, I cannot use any HTML code, since it will screw up the table layout. Therefore elog searches for any "<" and ">" pairs and removes the text in between. In principle one could do a better job, but I do not want to write a complete HTML interpreter just for that purpose.
|
Well, this is a choice. But if the encoding of the entry is 'plain', you could just avoid checking for embeded HTML. We use the summary view constantly for our main experiment logbook. Thanks anyway.
|
Ok, I fixed that in revision 2442. |
|