Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 416 of 808  Not logged in ELOG logo
    icon3.gif   Re: Extendable options for conditional attributes, posted by David Kappel on Fri Jan 7 17:15:14 2005 
> > Playing with all the configuration possibilities I have one issue:
> > I like to use the "Extendable options" but I can't combine them with 
> > the "Conditional attributes".
> 
> That was never ment to work. But I found some time to implement it. If you
> download elog255-4.exe from today it whould work. Let me know if you have
> problems.

Thanks a lot for fixing this issue, especially as it was never planed. I will
test it on Monday afternoon and will give you a reply.
    icon14.gif   Re: Extendable options for conditional attributes, posted by David Kappel on Mon Jan 10 20:42:31 2005 
> > > Playing with all the configuration possibilities I have one issue:
> > > I like to use the "Extendable options" but I can't combine them with 
> > > the "Conditional attributes".
> > 
> > That was never ment to work. But I found some time to implement it. If you
> > download elog255-4.exe from today it whould work. Let me know if you have
> > problems.
> 
Hello Stefan,

the changes I asked for, are working as requested. The extandable options are 
inserted into the correct line of the conditional attributes. 

  Thanks.

PS: While testing on a new demo logbook, I first made the mistake to declare 
both options, the first one and the related one as extendable. But I can imagine 
that this was really never ment to be implemented.
icon5.gif   password protect a logbook with Apache redirect, posted by Matt Newville on Wed May 2 17:06:35 2012 
Hi,

I'm trying to set up elogd, running on port 8080 behind an Apache server on port 80, using mod_proxy to redirect
to the elogd server, and the recommended

Redirect permanent /elogbook http://example.com/elogbook/
ProxyPass /elogbook/         http://example.com:8080/

This works well for non-password-protected logbooks, but for password protected (that I can access fine via port
8080), I keep getting shown the Login page, even with valid username / password.    

Poking around the code, it appears (probably not too surprisingly) that the issue lies in check_login().  
For example, 

   /* if invalid or no session ID, show login page */
  if (!skip_sid_check && !sid_check(sid, user_name)) {
      if (isparam("redir"))
         strlcpy(str, getparam("redir"), sizeof(str));
      else
         strlcpy(str, isparam("cmdline") ? getparam("cmdline") : _cmdline, sizeof(str));
      /* avoid recursive loops with ?cmd=Login */
      if (stristr(str, loc("Login")))
         str[0] = 0;
      /*  added write_logfile here...
          char mstr[250];
          sprintf(mstr, "show_login B %s isparam: %d, cmd: %d, skip_sid_check: %d, sid_check: %d",
                         user_name,  isparam("redir"), isparam("cmdline"), skip_sid_check, sid_check(sid,
user_name));
           write_logfile(lbs, mstr);

        */
      show_login_page(lbs, str, 0);
      return FALSE;
}

and the logfile shows that user_name is blank(!!) and redir, cmdline, skip_sid_check, and sid_check(sid,
user_name) all to be 0.   In fact, isparam("unm") and isparam("upwd") are also 0, which explains why user_name
is blank.   But the log file also shows

LOGIN user "username" (attempt)
LOGIN user "username" (success)

just prior to this!

I'd guess that the form POST methods aren't being forwarded correctly, but I haven't looked at it in any more
detail.   

Is there a way to make this (password protecting logbooks while also using a proxy to Apache) work?

Thanks!
    icon7.gif   Re: password protect a logbook with Apache redirect, posted by Matt Newville on Wed May 2 18:19:18 2012 
> I don't remember the details, but originally had the same trouble. I think a "/" at the end of a url got me somewhere. 
> I have defined...
> 
> URL = http://somewhere.edu/elog
> 
> ...in the config file, and my redirect looks like this:
> 
> Redirect /elog http://somewhere.edu/elog/
> ProxyPass /elog/ http://somewhere.edu:8080/
> ProxyPassReverse /elog/ http://somewhere.edu:8080/


Yes, that did it:  Adding the URL to the config file was the key.

Thanks!
icon1.gif   safari browser issue, posted by damon nettles on Thu Apr 1 19:38:56 2004 
we've experienced a problem when using the safari browser to do a search in
our elog. whenever you do a search, the logbook returns an error and the
elog deamon crashes. when we first experienced this problem we were running
version 2.3.9. however, an upgrade to version 2.5.2 doesn't seem to fix the
problem. searches with other browsers (mozilla, internet explorer, ...) go
off without a hitch.
has anyone else observed a similar problem or have any ideas on how to
resolve this issue.
thanks for the help.

elog running on a redhat 9 box
safari running on panther
icon5.gif   stunnel problems with new version, posted by damon nettles on Mon Nov 15 20:50:01 2004 
i am trying to implement ssl features on our logbooks. however, it seems
that stunnel has drastically changed their program and the usual startup
procedures listed on the elog page don't work.
so, what is the new method for getting elog set up with stunnel?
    icon2.gif   Re: stunnel problems with new version, posted by damon nettles on Mon Nov 15 21:59:56 2004 
> > i am trying to implement ssl features on our logbooks. however, it seems
> > that stunnel has drastically changed their program and the usual startup
> > procedures listed on the elog page don't work.
> > so, what is the new method for getting elog set up with stunnel?
> 
> stunnel is kind of a deprecated feature. Better use the SSL proxy of Apache,
> as written in the elog admin guide. If someone else figures out how to use the
> more revent stunnel, I'm willing to update the documentation.


okay. that's good to know. i'll try using the apache method instead. but, there is
something wrong with the "secure" link to an example on the elog administrator's
guide.
icon5.gif   elog password access without users, posted by damon nettles on Tue Nov 16 17:49:54 2004 
is there a way to set up a logbook so that a password is required to get
into it, but no username?
ELOG V3.1.5-3fb85fa6