Hi,
I'm trying to set up elogd, running on port 8080 behind an Apache server on port 80, using mod_proxy to redirect
to the elogd server, and the recommended
Redirect permanent /elogbook http://example.com/elogbook/
ProxyPass /elogbook/ http://example.com:8080/
This works well for non-password-protected logbooks, but for password protected (that I can access fine via port
8080), I keep getting shown the Login page, even with valid username / password.
Poking around the code, it appears (probably not too surprisingly) that the issue lies in check_login().
For example,
/* if invalid or no session ID, show login page */
if (!skip_sid_check && !sid_check(sid, user_name)) {
if (isparam("redir"))
strlcpy(str, getparam("redir"), sizeof(str));
else
strlcpy(str, isparam("cmdline") ? getparam("cmdline") : _cmdline, sizeof(str));
/* avoid recursive loops with ?cmd=Login */
if (stristr(str, loc("Login")))
str[0] = 0;
/* added write_logfile here...
char mstr[250];
sprintf(mstr, "show_login B %s isparam: %d, cmd: %d, skip_sid_check: %d, sid_check: %d",
user_name, isparam("redir"), isparam("cmdline"), skip_sid_check, sid_check(sid,
user_name));
write_logfile(lbs, mstr);
*/
show_login_page(lbs, str, 0);
return FALSE;
}
and the logfile shows that user_name is blank(!!) and redir, cmdline, skip_sid_check, and sid_check(sid,
user_name) all to be 0. In fact, isparam("unm") and isparam("upwd") are also 0, which explains why user_name
is blank. But the log file also shows
LOGIN user "username" (attempt)
LOGIN user "username" (success)
just prior to this!
I'd guess that the form POST methods aren't being forwarded correctly, but I haven't looked at it in any more
detail.
Is there a way to make this (password protecting logbooks while also using a proxy to Apache) work?
Thanks! |
#### Open Problems
Theme = default
Comment = HIV Client Services Requests
Subdir = hivclien
Time format = %B %d, %Y
Use Lock = 0
Reverse sort = 1
Entries per page = 999
Page Title = Work Requests
### Menu Commands
## Use this line normally
Menu Commands = Back, List, New, Edit, Find, Last Day, Last 10, Logout, Help, Move to, Config
Find Menu Commands = Back, List, New, Find, Select, Logout, Help, Move to, Config
Allow Delete = rpeterso, pmeyer, mattkimball
Allow Config = rpeterso, pmeyer, mattkimball
Move to = Completed Work Requests
Menu text = work_requests_menu.txt
Use Email Subject = $Title
Use Email Heading = The OIS Tracking system has just received a work request.
Use Email Heading Edit = A work request in the OIS Tracking system has just been changed.
Email All = $Notifications, "$Also Notify (email address)", patrick.j.meyer@state.or.us
Message comment = Please describe what you need here.
Attachment comment = Please attach screenshots or auxiliary documents here.
Display mode = summary
# Can add an edit column by putting Edit in the list, but it works a little cheesy, also, need to put edit.gif in the gif directory
List display = ID, Date, System, Title, Priority, Date Needed, Status, Work Order, Percent Complete, Expected Delivery, Estimated Hrs
Summary lines = 7
ID display = $message id
## Filter options
Quick filter = System, Priority, Status, Date, Work Order, Assigned To
##### The Good Stuff #########
### Attributes we are tracking
Attributes = Requestor, System, Subsystem, Title, Priority, Date Needed, Type, Also Notify (email address), Status, Assigned To, Percent Complete, Estimated Hrs, Actual Hrs, Date Added, Expected Delivery, Date Completed, Notifications, Requestor_Email, Completed
### System Picking
Options System = CAREAssist{sy03}, CAREWare{sy04},
Options Requestor = Sharon Arnett, Annick Benson, Ryan Deibert, Vic Fox{rac}, Lisa McAuliffe, John McDaniel, Jill Snyder, Denise Skrykar, Carolyn Underwood, Other...{rzz}
### Priority -- changed from radio to regular to permit use in e-mail rules
Options Priority = A-Emergency{p1}, B-Critical{p2}, C-Other {p3}
Preset Priority = C-Other
### When it is needed (if there is a defined date)
Type Date Needed = date
### Type
ROptions Type = Ad-hoc Query, Bug (Brk/Fix), Enhancement, Inquiry, Support, Other
### Also Notify - Just a blank field holds e-mail addresses of
Comment Also Notify (email address) = <BR><b>Below for OIS staff only.</b>
### Status -- changed from radio to regular to permit use in e-mail, prefill, reply and lock rules
Options Status = 1-Requested{s1}, 2-Need More Detail{s2}, 3-Estimated{s3}, 4-Assigned{s4}, 5-Delivered {s5}, 6-Closed (No Info/Dup/Not Approved){s6}
Preset Status = 1-Requested
### Work Order
ROptions Work Order = 1, 2, 3, 4, 5, 6+
### Actual Effort
Type Actual Effort = numeric
Comment Actual Effort = (in man-hours)
### Specify the day this was added
Type Date Added = date
Preset Date Added = $date
### Specify the expected delivery date
Type Expected Delivery = date
### When was the work request completed?
Type Date Completed = date
### Percent Complete
ROptions Percent Complete = 0%, 5%, 10%, 25%, 50%, 75%, 90%, 100%
## Preset Percent Complete = 0%
Options Completed = Yes, No
Preset Completed = No
### Don't even know if this stuff works...
Format Assigned To = 0, attribname, attribvalue, 30, 30
Format Estimated = 1, attribname, attribvalue, 3, 3
Format Actual = 1, attribname, attribvalue, 3, 3
preset Requestor_Email = $user_email
###locked attributes = Requestor_Email
######################
## The Status Specific Stuff
############################
{s1} Subst Completed = No
{s1 s3 s3 s3a s4 s5 s6 s7a s7b} Subst Completed = No
{s8a s8b s8c} Subst Completed = Yes
############################
### The System Specific Stuff
#############################
## CareAssist aka ADAP
{sy03} Options Subsystem = SpendDown, Reporting, ED!, Other
{sy03} Options Assigned To = Reginald Liggins, James Soult,
{sy03 & s1} Preset Assigned To = James Soult
{sy03 & s1} Preset Notifications = reginald.liggins@state.or.us, james.soult@state.or.us, victor.j.fox@state.or.us, matthew.j.kimball@state.or.us, $user_email
{sy03 & s2} Preset Notifications = reginald.liggins@state.or.us, james.soult@state.or.us, victor.j.fox@state.or.us, matthew.j.kimball@state.or.us
{sy03 & s3} Preset Notifications = reginald.liggins@state.or.us, james.soult@state.or.us, victor.j.fox@state.or.us, matthew.j.kimball@state.or.us
{sy03 & s3a} Preset Notifications = reginald.liggins@state.or.us, james.soult@state.or.us, victor.j.fox@state.or.us, matthew.j.kimball@state.or.us
{sy03 & s4} Preset Notifications = reginald.liggins@state.or.us, james.soult@state.or.us, matthew.j.kimball@state.or.us
{sy03 & s5} Preset Notifications = reginald.liggins@state.or.us, james.soult@state.or.us, matthew.j.kimball@state.or.us
{sy03 & s6} Preset Notifications = reginald.liggins@state.or.us, james.soult@state.or.us, victor.j.fox@state.or.us, matthew.j.kimball@state.or.us
{sy03 & s7a} Preset Notifications = reginald.liggins@state.or.us, james.soult@state.or.us, victor.j.fox@state.or.us, matthew.j.kimball@state.or.us
{sy03 & s7b} Preset Notifications = reginald.liggins@state.or.us, james.soult@state.or.us, victor.j.fox@state.or.us, matthew.j.kimball@state.or.us
{sy03 & s8a} Preset Notifications = reginald.liggins@state.or.us, james.soult@state.or.us, victor.j.fox@state.or.us, matthew.j.kimball@state.or.us
{sy03 & s8b} Preset Notifications = reginald.liggins@state.or.us, james.soult@state.or.us, victor.j.fox@state.or.us, matthew.j.kimball@state.or.us
{sy03 & s8c} Preset Notifications = reginald.liggins@state.or.us, james.soult@state.or.us, victor.j.fox@state.or.us, matthew.j.kimball@state.or.us
## CAREWare
{sy04} Options Subsystem = Old, New, Other
{sy04} Options Assigned = Robin Peterson
{sy04} Preset Assigned To = Robin Peterson
Email System CareWare = robin.h.peterson@state.or.us, matthew.j.kimball@state.or.us, $user_email
## Cashfile
{sy05} Options Subsystem = Old, New, Other, Other
{sy05} Options Assigned To = Bob Winfield, Tony Sukonik, Robin Peterson
{sy05} Preset Assigned To = Robin Peterson
{sy05} Email System Cashfile = robin.h.peterson@state.or.us, john.mcadams@state.or.us, bob.e.winfield@state.or.us
#####################################################################################################
#####################################################################################################
|