Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 406 of 808  Not logged in ELOG logo
ID Date Icon Author Author Emaildown Category OS ELOG Version Subject
  69869   Fri Mar 21 23:51:08 2025 Reply Konstantin Olchanskiolchansk@triumf.caQuestionLinuxlatestRe: Host ELOG on Raspberry Pi for small lab
> is there an instruction document how to exacly host the ELOG on a server for example a raspberry pi?

would be same as on any other linux machine, in the nutshell:

- install generic raspbian (R-12 is current version)
- setup the network
- setup apache2 https with automatic https certificate renewal using certbot
- setup apache2 redirect to elogd port 8080
- setup elogd on port localhost:8080

some of this is written up here:
https://daq00.triumf.ca/DaqWiki/index.php/Ubuntu#Install_apache_httpd_proxy_for_midas_and_elog

in theory you can run elogd without apache https proxy, but I find computer security
people are quite happy when I tell them that I run apache https with SSLlabs score "A+".

also I believe elogd does not support automatic https certificate renewal, running
it behind apache https solves that.

another consideration, specifically for RaspberryPi, they use SD flash for storage,
and unlike SATA and NVMe SSDs, SD flash does not have SMART to report flash read,
write and wear-out problems. So you may run into unexpected SD flash failures. We do.

do daily/hourly rsync to backup/archive storage to avoid total data loss if this happens.

also be aware that SD flash is very slow, compared to normal PC SSDs. read speed is not too
bad, but write speed is quite abysmal.

as solution to this, RPi5 can have a PCIe/NVMe dongle, you can try that instead of SD flash.

K.O.
  66881   Wed Aug 25 02:49:44 2010 Question Owen LaGardeolagarde@gmail.comQuestionLinux2.7.8honor "user" field in the Apache SSL request object or environment variables in SSL process groups?

Will elog defer user identification and authorization to the ssl engine of a *local* Apache proxy?  I'd like to try elog in a site that requires the service port positively authenticate and identify users via smartcard certificate ID.  Per SOP they have Apache+mod_ssl setting SSLUserName=SSL_CLIENT_S_DN_CN which sets both the SSL request object's "user" field and the REMOTE_USER environment var relative to the mod_ssl's session's process group leader.  Users auth with Apache's mod_ssl as a single-signon replacement for web apps which have traditional native, internal user accounts/passwords, but those passwords are subsumed by the Apache/smartcard/mod_ssl setup.  The web apps define internal accounts matching the users' cert IDs but do not allow any management of the [unused] passwords.  Can elog do this?

  67182   Fri Feb 10 11:54:35 2012 Entry Olaf Kastenolaf.kasten@deutschebahn.comBug reportLinux | Windows2.9.0ssl problems

 Hi there,

I have a connection problem with an actual elog installation. Many Browsers like as Chrome, Firefox and IE don't  connect to the elog server with ssl = 1 in elogd.cfg. 

I tested with Firefox 3.6 and IE 7 installations and there are no problems.

I guess it's a bug. Does someone have a suggestion to solve that problem?

Thx. Olaf

  67193   Mon Feb 13 21:44:05 2012 Reply Olaf Kastenolaf.kasten@deutschebahn.comBug fixLinux | Windows2.9.0Re: ssl problems
> > well it's not a server but my laptop, but yeah, the elog server and the browser ran on the same machine, no iptables.
> 
> Strange: I thought I was able to reproduce your problem, but no: whatever browser I try I can access ELOG with SSL if
> browser and ELOG are running on the same host. Same as you: clean install but no problem occurs. I haven't tried on a
> newer operating system yet. Still I tend to believe that it would not reproduce your problem. Maybe I'll try at home
> with ubuntu. Let's first wait what the other two report: if those problems are not related to firewall issues, Stefan
> will likely see into it anyway.

Well, it's definitely not a firewall problem. I tried it on hosts in different networks and of course in the same subnet as 
the elog server. As I wrote I tried it with different browsers on different OS and everywhere I had same issues if I used 
newer browsers. So I guess there are interoperability problems between elog and newer browsers.

And by the way if I change ssl = 1 to ssl = 0 there are no problems with any browsers.

But I want to use the ssl feature because security reasons.

Hope Stefan could locate and fix the problem.

Thx
  67611   Wed Nov 13 16:26:32 2013 Reply Olaf Kastenolaf.kasten@deutschebahn.comQuestionLinux2.9.2-1Re: kerberos authentication NOT working

Andreas Luedeke wrote:

Hal Proctor wrote:

Fabio Sella wrote:

Hi guys,

we configured a kdc server using OPENLDAP as backend. We installed on it elog and configured the Kerberos Authentication on one logbook as follows:

Authentication = Kerberos, File
Kerberos Realm = TEST.COM
Password file = ./pwd.xml

 
Detect language » Italian
 

 

Even if the kinit comand is retrieving correctly a ticket for the user tsearch@TEST.COM(we see it using klist and tcpdump on lo interface), elogd kerberos authentication is not working.

We tried using tcpdump for troubleshooting but no traffic is generated on the loopback interface.

Did someone solve this problem or do you have an idea on how to make the kerberos authentication working?

Thanks

 I have asked for same help, and no one has answered with a solution on implementing a kerberos .  I saw exactly what you were seeing. (did you try fully qualifying the domain within the username field for logon?  \\TEST.COM\username)

I still couldn't get it to work

 Just my two cent:
- did you edit the Makefile to compile elogd with kerberos (USE_KRB5   = 1)?
- did you look into the elogd logfile for error messages at start-up or at login time?
I can only say that I got it working right away - that is the case when you learn least.
Maybe you should post your specific software versions: operating system (in my case Scientific Linux 5.1 (Boron)), Kerberos version (klist -V), etc.
 
English (auto-detected) » English
 

 I'm having same issue. Kerberos is working on Apache on same ubuntu 12.04 server. I used the USE_KRB5 option for compiling elog.

Does anyone  have an idea to solve that problem? 

  801   Sat Nov 20 19:44:57 2004 Entry Ognyan Kulevogi@fmi.uni-sofia.bgRequestAll Partial Bulgarian translation
Hi, we are using ELOG for keeping track of a server maintainance.  I've
translated some of ELOG's strings.  The file is attached.  There will be
more translations, when I get inspired again ;-)
Attachment 1: eloglang.bulgarian
# To use Bulgarian translation, add the following lines to [global]:
#   Charset = windows-1251
#   Language = bulgarian

New = Създаване
Edit = Редактиране
Delete = Изтриване
Reply = Отговаряне
Download = Изтегляне
Find = Търсене
Select = Избиране
Last day = Последен ден
Move to = Преместване към
Copy to = Копиране към
Config = Настройване
Admin = Администриране
Login = Влизане
CSV Import = Импортиране на CSV
Logout = Излизане
Help = Помощ

Date = Дата
Author = Автор
Type = Тип
Category = Категория
Subject = Тема
Text = Текст

Back = Връщане
Submit = Запазване

New user = Нов потребител
Save = Запазване
Requested = Заявен
Activate = Активиране
Please login = Моля, влезте
Username = Потребител
Password = Парола
ID = ID
Logbook = Дневник
Goto ELOG home page = Сайт на ELOG
Upload = Слагане
Cancel = Прекъсване
Update = Обновяване
Search = Търсене
Last 10 = Последни 10
Change %s = Промяна на %s
Delete this logbook = Изтриване на този дневник
Rename this logbook = Преименуване на този дневник
Create new logbook = Създаване на нов дневник
Remove user = Изтриване на потребител
Forgot = Забравяне
Synchronize = Синхронизиране
Page %d of %d = Страница %d от %d
Logged in as = Влязъл сте като
Last x = Последен
Full = Пълен
Summary = Обобщен
Threaded = Нишковиден
Previous = Предишна
Last = Последна
First = Първа
Next = Следваща
First entry = Първи запис
Previous entry = Предишен запис
Next entry = Следващ запис
Last entry = Последен запис
Message ID = ID на съобщение
Entry time = Време на записа
Reply to this = Отговаряне на това
Please enter attribute '%s' = Моля, въведете атрибут "%s"
No attachment file specified = Не е зададен файл за прикачане
Submit modified ELOG entry? = Запазване на променен запис
Entry has been modified = Записът е променен
are required = са задължителни
Fields marked with = Полетата отбелязани с
Add %s = Добавяне на %s
please select = моля, изберете
Submit as HTML text = Запазване като HTML
Suppress Email notification = Подтискане на уведомяване чрез ел.поща
Resubmit as new entry = Запазване като нов запис
Attachment = Прикачен файл
GetPwdFile = GetPwdFile
A old entry has been updated on %s = Стар запис е обновен с %s
Email sent to = Изпращане на ел.поща до
  860   Wed Dec 22 12:28:22 2004 Entry Ognyan Kulevogi@fmi.uni-sofia.bgOtherAll Complete Bulgarian translation
Thanks to Recai Oktas, who encourage me to complete the Bulgarian
translation for the Debian elog package, the Bulgarian translation is
completed and attached.
Attachment 1: eloglang.bulgarian.gz
  67410   Wed Jan 2 14:04:41 2013 Question Barendoffice@amtc2.comQuestionWindows2.9.2Hide/Un-hide Commands based on Attribute Option value

Hi Stefan,

Happy New Year!

I ran several searches thru the forum but I could not detect a suitable entry on the following:

Is it possible to hide/un-hide the Commands, like "Edit", "Reply", "Duplicate", from the Menu based upon an Option of an Attribute?

E.g. Attributes = Status, .. | Options Status = Open, Closed

When Status = "Open"; the Menu Commands "Edit", "Reply" and "Duplicate" are available.

When Status = "Closed"; the Menu Commands "Edit", "Reply" and "Duplicate" are hidden/not available.

-or-

Can this only be accomplished using 2 Logbooks (Open / Closed) and move an entry from "Open" to "Closed" where the Logbook "Closed" is not using the Commands  "Edit", "Reply", "Duplicate".

 

Kind regards,

Barend

ELOG V3.1.5-3fb85fa6