Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 416 of 808  Not logged in ELOG logo
ID Date Icon Author Author Emaildown Category OS ELOG Version Subject
  867   Fri Jan 7 17:15:14 2005 Idea David Kappelngreply@gmx.netRequestWindows Re: Extendable options for conditional attributes
> > Playing with all the configuration possibilities I have one issue:
> > I like to use the "Extendable options" but I can't combine them with 
> > the "Conditional attributes".
> 
> That was never ment to work. But I found some time to implement it. If you
> download elog255-4.exe from today it whould work. Let me know if you have
> problems.

Thanks a lot for fixing this issue, especially as it was never planed. I will
test it on Monday afternoon and will give you a reply.
  872   Mon Jan 10 20:42:31 2005 Agree David Kappelngreply@gmx.netRequestWindows Re: Extendable options for conditional attributes
> > > Playing with all the configuration possibilities I have one issue:
> > > I like to use the "Extendable options" but I can't combine them with 
> > > the "Conditional attributes".
> > 
> > That was never ment to work. But I found some time to implement it. If you
> > download elog255-4.exe from today it whould work. Let me know if you have
> > problems.
> 
Hello Stefan,

the changes I asked for, are working as requested. The extandable options are 
inserted into the correct line of the conditional attributes. 

  Thanks.

PS: While testing on a new demo logbook, I first made the mistake to declare 
both options, the first one and the related one as extendable. But I can imagine 
that this was really never ment to be implemented.
  67260   Wed May 2 17:06:35 2012 Question Matt Newvillenewville@cars.uchicago.eduQuestionLinux2.9.2password protect a logbook with Apache redirect
Hi,

I'm trying to set up elogd, running on port 8080 behind an Apache server on port 80, using mod_proxy to redirect
to the elogd server, and the recommended

Redirect permanent /elogbook http://example.com/elogbook/
ProxyPass /elogbook/         http://example.com:8080/

This works well for non-password-protected logbooks, but for password protected (that I can access fine via port
8080), I keep getting shown the Login page, even with valid username / password.    

Poking around the code, it appears (probably not too surprisingly) that the issue lies in check_login().  
For example, 

   /* if invalid or no session ID, show login page */
  if (!skip_sid_check && !sid_check(sid, user_name)) {
      if (isparam("redir"))
         strlcpy(str, getparam("redir"), sizeof(str));
      else
         strlcpy(str, isparam("cmdline") ? getparam("cmdline") : _cmdline, sizeof(str));
      /* avoid recursive loops with ?cmd=Login */
      if (stristr(str, loc("Login")))
         str[0] = 0;
      /*  added write_logfile here...
          char mstr[250];
          sprintf(mstr, "show_login B %s isparam: %d, cmd: %d, skip_sid_check: %d, sid_check: %d",
                         user_name,  isparam("redir"), isparam("cmdline"), skip_sid_check, sid_check(sid,
user_name));
           write_logfile(lbs, mstr);

        */
      show_login_page(lbs, str, 0);
      return FALSE;
}

and the logfile shows that user_name is blank(!!) and redir, cmdline, skip_sid_check, and sid_check(sid,
user_name) all to be 0.   In fact, isparam("unm") and isparam("upwd") are also 0, which explains why user_name
is blank.   But the log file also shows

LOGIN user "username" (attempt)
LOGIN user "username" (success)

just prior to this!

I'd guess that the form POST methods aren't being forwarded correctly, but I haven't looked at it in any more
detail.   

Is there a way to make this (password protecting logbooks while also using a proxy to Apache) work?

Thanks!
  67263   Wed May 2 18:19:18 2012 Smile Matt Newvillenewville@cars.uchicago.eduQuestionLinux2.9.2Re: password protect a logbook with Apache redirect
> I don't remember the details, but originally had the same trouble. I think a "/" at the end of a url got me somewhere. 
> I have defined...
> 
> URL = http://somewhere.edu/elog
> 
> ...in the config file, and my redirect looks like this:
> 
> Redirect /elog http://somewhere.edu/elog/
> ProxyPass /elog/ http://somewhere.edu:8080/
> ProxyPassReverse /elog/ http://somewhere.edu:8080/


Yes, that did it:  Adding the URL to the config file was the key.

Thanks!
  519   Thu Apr 1 19:38:56 2004 Entry damon nettlesnettles@phgrav.phys.lsu.edu Linux2.5.2safari browser issue
we've experienced a problem when using the safari browser to do a search in
our elog. whenever you do a search, the logbook returns an error and the
elog deamon crashes. when we first experienced this problem we were running
version 2.3.9. however, an upgrade to version 2.5.2 doesn't seem to fix the
problem. searches with other browsers (mozilla, internet explorer, ...) go
off without a hitch.
has anyone else observed a similar problem or have any ideas on how to
resolve this issue.
thanks for the help.

elog running on a redhat 9 box
safari running on panther
  788   Mon Nov 15 20:50:01 2004 Question damon nettlesnettles@phgrav.phys.lsu.edu   stunnel problems with new version
i am trying to implement ssl features on our logbooks. however, it seems
that stunnel has drastically changed their program and the usual startup
procedures listed on the elog page don't work.
so, what is the new method for getting elog set up with stunnel?
  792   Mon Nov 15 21:59:56 2004 Reply damon nettlesnettles@phgrav.phys.lsu.edu   Re: stunnel problems with new version
> > i am trying to implement ssl features on our logbooks. however, it seems
> > that stunnel has drastically changed their program and the usual startup
> > procedures listed on the elog page don't work.
> > so, what is the new method for getting elog set up with stunnel?
> 
> stunnel is kind of a deprecated feature. Better use the SSL proxy of Apache,
> as written in the elog admin guide. If someone else figures out how to use the
> more revent stunnel, I'm willing to update the documentation.


okay. that's good to know. i'll try using the apache method instead. but, there is
something wrong with the "secure" link to an example on the elog administrator's
guide.
  798   Tue Nov 16 17:49:54 2004 Question damon nettlesnettles@phgrav.phys.lsu.edu   elog password access without users
is there a way to set up a logbook so that a password is required to get
into it, but no username?
ELOG V3.1.5-3fb85fa6