Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 697 of 806  Not logged in ELOG logo
New entries since:Thu Jan 1 01:00:00 1970
ID Date Icon Author Author Email Category OS ELOG Version Subject
  949   Wed Feb 16 08:58:47 2005 Angy Emiliano GabrielliAlberT@SuperAlberT.itRequestLinux2.5.6Re: images attached shown as inline
> > the following should do the job: 
> >  
> > <div style="width: 200px"> 
> > <img src="IMG_3133.jpg" style="width: 100%" /> 
> > </div> 
> >  
> > the configurable parameter should be with obviously :-) 
>  
> Unfortunately not. Please find attached the screen dump from such a try, together with the HTML code. 
> As you can see, the little elog icon is stretched to the same width as the upper (large) picture. 
 
you are right ;-( I used a different code in my test and sent you and old test code, *but* also the last 
one does not works on every browser ... the following code would do the job, but it seems to work only 
in gecko-based browsers such as mozilla, firefox and safari ... 
 
<div style="width: 200px"> 
 <img src="IMG_3133.jpg" style="max-width: 200" /> 
</div> 
 
other browsers do not scale the vertical dimention :-( 
  948   Wed Feb 16 08:48:52 2005 Smile Emiliano GabrielliAlberT@SuperAlberT.itBug fixAll2.5.6 cvsRe: [patch]: fixed wrong extention check
> > current version uses strstr() to check if the file has the expected ascii 
> > text extension ... this is buggy becouse this way a file named 
> > ".txt_hidden_file" or "foo.config.dat" are both seen as .txt files. 
>  
> I added your routine chkext() to the code, but actually use it differently. I 
> display now ASCII files not by their extension, but the code checks for each file 
> to contain non-printable characters. If it contains all printable letters, and does 
> not have the extension PDF, PS or EPS, it's shown inline. 
 
I totally agree with you choice :-) 
  947   Wed Feb 16 08:45:54 2005 Agree Emiliano GabrielliAlberT@SuperAlberT.itBug reportLinux2.5.6Re: preselected values and conditional options
> > ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; 
> > Attributes = Author, Type, Category, Subject 
> > Required Attributes = Author, Type, Subject 
> > Options Type = Deposition{1}, Arc Studies{1}, Conditioning{1}, Vacuum{2}, 
> > Other{3} 
> > Preset Type = Deposition 
>  
> The "Preset xxx" option actually never was ment to be used with conditional 
> attributes. I added that functionality in rev. 1.553. Please give it a try. 
 
it works fine !!! thank you so much (btw, using Preset xxx{1} it doesn't 
works.. but it should be the correct beaviour) 
  946   Mon Feb 14 20:43:48 2005 Reply Stefan Rittstefan.ritt@psi.chQuestionOther2.5.7-1Re: Configuration problems
> No luck.  I have the proxy definition in my httpd.conf file.  I have the URL parameter
> in my elogd.cfg file.

Can you show me the proxy definition? I hope you don't treat elogd as a CGI script...
  945   Mon Feb 14 20:39:30 2005 Reply Erich Beyrenterich.beyrent@beyrent.netQuestionOther2.5.7-1Re: Configuration problems
> > I am trying to run eLog under Apache 2 on my FreeBSD 5.3 server.  I started
> > the daemon with "elogd -n <my hostname> -p 8080" and when I connect to my
> > server on that port, I get a 500 server configuration error.  The Apache log
> > contains this:
> > 
> > malformed header from script. Bad header=Please specify hostname.: elog
> 
> - make sure your proxy definition in httpd.conf is correct and it uses port 8080
> - start elogd with the "-v" flag to see the communication between Apache and elogd
> - maybe you might need an "URL = http://<my hostname>/<elog dir>/" in the config
> file

No luck.  I have the proxy definition in my httpd.conf file.  I have the URL parameter
in my elogd.cfg file.

Here is the command line I am using to start the daemon:

elogd -v -D -n <myhost> -p 8080 -l <myhost>/cgi-bin/elog/logbooks -c
/usr/local/server/apache/cgi-bin/elog/elogd.cfg

With the -v argument, here are the messages I get in /var/log/messages:

elogd 2.5.7-1 built Feb 14 2005, 09:55:19 
Feb 14 14:38:28 onion elogd[34579]: revision 1.558
Feb 14 14:38:28 onion elogd[34579]: Config file  :
/usr/local/server/apache/cgi-bin/elog/elogd.cfg
Feb 14 14:38:28 onion elogd[34579]: Resource dir : /usr/local/server/apache/cgi-bin/elog/
Feb 14 14:38:28 onion elogd[34579]: Logbook dir  :
/usr/local/server/apache/cgi-bin/elog/logbooks/
Feb 14 14:38:28 onion elogd[34579]: Falling back to default group "elog"
Feb 14 14:38:28 onion elogd[34579]: Group "elog" not found
Feb 14 14:38:28 onion elogd[34579]: Falling back to default group "nogroup"
Feb 14 14:38:28 onion elogd[34579]: Falling back to default user "elog"
Feb 14 14:38:28 onion elogd[34579]: User "elog" not found
Feb 14 14:38:28 onion elogd[34579]: Falling back to default user "nobody"
Feb 14 14:38:28 onion elogd[34579]: Indexing logbook "demo" ... 
Feb 14 14:38:28 onion elogd[34579]: 
Feb 14 14:38:28 onion elogd[34579]:   ID   1, 011108a.log, ofs     0, thead, MD5=
Feb 14 14:38:28 onion elogd[34579]: E4
Feb 14 14:38:28 onion elogd[34579]: 25
Feb 14 14:38:28 onion elogd[34579]: 4C
Feb 14 14:38:28 onion elogd[34579]: B8
Feb 14 14:38:28 onion elogd[34579]: AD
Feb 14 14:38:28 onion elogd[34579]: 4E
Feb 14 14:38:28 onion elogd[34579]: 88
Feb 14 14:38:28 onion elogd[34579]: 68
Feb 14 14:38:28 onion elogd[34579]: 08
Feb 14 14:38:28 onion elogd[34579]: 91
Feb 14 14:38:28 onion elogd[34579]: C9
Feb 14 14:38:28 onion elogd[34579]: 4D
Feb 14 14:38:28 onion elogd[34579]: 1E
Feb 14 14:38:28 onion elogd[34579]: B7
Feb 14 14:38:28 onion elogd[34579]: CB
Feb 14 14:38:28 onion elogd[34579]: C3
Feb 14 14:38:28 onion elogd[34579]: 
Feb 14 14:38:28 onion elogd[34579]: After sort:
Feb 14 14:38:28 onion elogd[34579]:   ID   1, 011108a.log, ofs     0
Feb 14 14:38:28 onion elogd[34579]: ok
Feb 14 14:38:28 onion elogd[34579]: Server listening on port 8080 ...

I am still getting the exact same error in my Apache log.

Any more ideas?

-Erich-
  944   Mon Feb 14 19:03:31 2005 Reply Stefan Rittstefan.ritt@psi.chQuestionOther2.5.7-1Re: Configuration problems
> I am trying to run eLog under Apache 2 on my FreeBSD 5.3 server.  I started
> the daemon with "elogd -n <my hostname> -p 8080" and when I connect to my
> server on that port, I get a 500 server configuration error.  The Apache log
> contains this:
> 
> malformed header from script. Bad header=Please specify hostname.: elog

- make sure your proxy definition in httpd.conf is correct and it uses port 8080
- start elogd with the "-v" flag to see the communication between Apache and elogd
- maybe you might need an "URL = http://<my hostname>/<elog dir>/" in the config
file
  943   Mon Feb 14 18:49:44 2005 Warning Recai Oktasroktas@omu.edu.trInfoLinux2.5.7Re: ELOG security vulnerability fixed, IMPORTANT!!!!
Attention to Debian users;

I've prepared the fixed package and also contacted to Debian Security Team for
an urgent security upload.  Since then you may wish to update your package from
the following URL:

  http://l10n-turkish.alioth.debian.org/debian/elog_2.5.7+r1558-1_i386.deb

Or you can also make an update via apt-get by adding the below line to your
'/etc/apt/sources.list' file:

  deb http://l10n-turkish.alioth.debian.org/debian/ ./

> The second vulnerability had to do with write passwords. If you put a "write
> password = xxx" statement into your config file, it was still possible to
> download the config file with a special hand-written URL, and decode the
> write password, which is usually only base-64 encoded unless you haven't
> compiled elog with the -DHAVE_CRYPT flag.

FYI, Debian package has already been compiled with this flag.

 -- Recai Oktas, Maintainer of Debian package
  942   Mon Feb 14 17:10:00 2005 Question Erich Beyrenterich.beyrent@beyrent.netQuestionOther2.5.7-1Configuration problems
I am trying to run eLog under Apache 2 on my FreeBSD 5.3 server.  I started
the daemon with "elogd -n <my hostname> -p 8080" and when I connect to my
server on that port, I get a 500 server configuration error.  The Apache log
contains this:

malformed header from script. Bad header=Please specify hostname.: elog

I am running elogd 2.5.7-1 built Feb 14 2005, 09:55:19 revision 1.558

Any assistance would be greatly appreciated!

-Erich-
ELOG V3.1.5-3fb85fa6