Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 718 of 796  Not logged in ELOG logo
IDdown Date Icon Author Author Email Category OS ELOG Version Subject
  666   Thu Aug 12 22:18:56 2004 Agree Steve Jonessteve.jones@freescale.comQuestionOther2.5.4Re: Q: On Solaris 8, eLog not honoring USR= and GRP= cfg file directives?
> > I'm not sure if this is a configuration problem or a bug, but running
> > v2.5.4subver1.413, elogd runs as user ROOT (UID0) even though the following
> > is in the elogd.cfd file:
> > 
> > Usr = nobody
> > Grp = essadm
> > 
> > All other directives added to the cfg file work, so I know eLog is reading
> > the cfg file.  
> > 
> > The elogd binary *is not* setuid 0.
> 
> I could not reproduce your problem with the current version (Revision 1.460)
> under Linux. I guess you made sure that user "nobody" and group "essadm" exist.
> Try to run elogd interactively, if you see any error message (without "-D"
> flag). In the most recent version (1.460), I added some more debugging code
> which tells you if elogd successfully fell back to another user, if you use the
> "-v" (verbose) flag.
> 
> If all that does not help, I guess it's some peculiarity of Solaris. Maybe
> someone else using Solaris has some idea. All elogd does is a call to 
> 
> setuser("<user>");
> 
> I see no reason why this should not work on Solaris.

Ok, just checking.  I will fiddle around with running it interactively and see what
I get, plus I'll have a look at the setuser function under Solaris.

Just for grins, what version of compiler are you using under Linux?

Thanks again!
  665   Thu Aug 12 22:17:01 2004 Agree Steve Jonessteve.jones@freescale.comQuestionAll2.5.4Re: Q: on 'FIND MENU commands =' <menu list>
> > The help text on the website says the following:
> > 
> > "The command Select can be used to select multiple messages for deletion of
> > moving to other logbooks."
> > 
> > This is not clear but was the intent to indicate that SELECT can be used to
> > either select multiple log entries for deletion OR for moving to another
> > logbook?  If the latter, then this does not work if one adds the MOVE TO
> > menu item to the list.  If the former then the helptext is a little misleading.
> 
> SELECT can be used for deletion OR moving OR copying. To enable the copy and move
> commands, they have to be present in the "Menu commands" list, like
> 
> Menu commands = Back, New, Edit, Delete, Reply, Find, Config, Logout, Move to, Copy
> to, Help
> 
> I added an appropriate note to the documentation, sorry for the misleading descriptoin.

Thank you.  I had added the "Move To" and this works at the log entry level (i.e., "Move
To <name>) but in the threaded view one does not get the enumerated list of logbooks.

I'll play around with it a little more before re-posting.  When it didn't work as I
expected I read the docs and ran across the confusing text - so I stopped and asked!

Thanks again.
  664   Thu Aug 12 21:37:29 2004 Question Stefan Rittstefan.ritt@psi.chQuestionOther2.5.4Re: Q: On Solaris 8, eLog not honoring USR= and GRP= cfg file directives?
> I'm not sure if this is a configuration problem or a bug, but running
> v2.5.4subver1.413, elogd runs as user ROOT (UID0) even though the following
> is in the elogd.cfd file:
> 
> Usr = nobody
> Grp = essadm
> 
> All other directives added to the cfg file work, so I know eLog is reading
> the cfg file.  
> 
> The elogd binary *is not* setuid 0.

I could not reproduce your problem with the current version (Revision 1.460)
under Linux. I guess you made sure that user "nobody" and group "essadm" exist.
Try to run elogd interactively, if you see any error message (without "-D"
flag). In the most recent version (1.460), I added some more debugging code
which tells you if elogd successfully fell back to another user, if you use the
"-v" (verbose) flag.

If all that does not help, I guess it's some peculiarity of Solaris. Maybe
someone else using Solaris has some idea. All elogd does is a call to 

setuser("<user>");

I see no reason why this should not work on Solaris.
  663   Thu Aug 12 21:10:29 2004 Reply Stefan Rittstefan.ritt@psi.chQuestionAll2.5.4Re: Q: on 'FIND MENU commands =' <menu list>
> The help text on the website says the following:
> 
> "The command Select can be used to select multiple messages for deletion of
> moving to other logbooks."
> 
> This is not clear but was the intent to indicate that SELECT can be used to
> either select multiple log entries for deletion OR for moving to another
> logbook?  If the latter, then this does not work if one adds the MOVE TO
> menu item to the list.  If the former then the helptext is a little misleading.

SELECT can be used for deletion OR moving OR copying. To enable the copy and move
commands, they have to be present in the "Menu commands" list, like

Menu commands = Back, New, Edit, Delete, Reply, Find, Config, Logout, Move to, Copy
to, Help

I added an appropriate note to the documentation, sorry for the misleading descriptoin.
  662   Wed Aug 11 18:12:35 2004 Question Steve Jonessteve.jones@freescale.comQuestionOther2.5.4Q: On Solaris 8, eLog not honoring USR= and GRP= cfg file directives?
I'm not sure if this is a configuration problem or a bug, but running
v2.5.4subver1.413, elogd runs as user ROOT (UID0) even though the following
is in the elogd.cfd file:

Usr = nobody
Grp = essadm

All other directives added to the cfg file work, so I know eLog is reading
the cfg file.  

The elogd binary *is not* setuid 0.

Thanks
  661   Wed Aug 11 18:02:22 2004 Question Steve Jonessteve.jones@freescale.comQuestionAll2.5.4Q: on 'FIND MENU commands =' <menu list>
The help text on the website says the following:

"The command Select can be used to select multiple messages for deletion of
moving to other logbooks."

This is not clear but was the intent to indicate that SELECT can be used to
either select multiple log entries for deletion OR for moving to another
logbook?  If the latter, then this does not work if one adds the MOVE TO
menu item to the list.  If the former then the helptext is a little misleading.

Thanks!
  660   Wed Aug 11 16:02:52 2004 Reply Stefan Rittstefan.ritt@psi.chQuestionWindows Re: Restricting viewing messages
> First - Some of the logbook entries should not be viewed by certain users.  
> What would be the easiest way to restrict viewing some entries?  

The easiest way is to define two logbooks, with two different password files.
The more restricted logbook contains only those users who are allowed to see the
restricted entries. Use the commands "Move to" to move entries between the two
logbooks (see documentation).

> Second - I have a welcome page for the ELOG that lists some info about the 
> ELOG.  When I start the ELOG, the user sees the login page.  After the user 
> logs in, the welcome page appears listing the restrictions.  Right now, I 
> have a hyperlink that takes the user to new, find, etc.  But I would like 
> to take the user right to the logbook and not have to come back to the 
> welcome page everytime.  How can I do this?

Right now you need an exteral page on a public webserver. This page contains
then links to your elog server. I the next version I will implement the
possibility to server *.html files directly through elog. You can then put your
welcome page under themes/default/Welcome.html, and access it through the
starting link:

http://your.elog.server/logbook/Welcome.html

You will only see the Welcome page once, since all links in elog will point back
to .../logbook/ and not to .../logbook/Welcome.html. The config option "Welcome
page = Welcome.html" you have to remove then of course. 
  659   Wed Aug 11 15:38:07 2004 Question Jen Manzjennifer.manz@lmco.comQuestionWindows Restricting viewing messages
I am working on a logbook for a lab.  I have two questions...
First - Some of the logbook entries should not be viewed by certain users.  
What would be the easiest way to restrict viewing some entries?  

Second - I have a welcome page for the ELOG that lists some info about the 
ELOG.  When I start the ELOG, the user sees the login page.  After the user 
logs in, the welcome page appears listing the restrictions.  Right now, I 
have a hyperlink that takes the user to new, find, etc.  But I would like 
to take the user right to the logbook and not have to come back to the 
welcome page everytime.  How can I do this?

I have attached the code I have so far.  They are in .txt format for easier 
viewing.

Thanks!
Attachment 1: Welcome_Login.txt
<h1>Welcome to the PEBL Logbook</h1>
<u1>
<li><a href="?cmd=new">Enter</a> new entry in the logbook

<P ALIGN=CENTER>Information included herein is controlled.</P>
</ul>
Attachment 2: elogd.txt
[global]
logbook tabs = 0
port = 8080
Admin user = jmanz
Logfile = c:\Program Files\ELOG\logbooks\PEBL_Log
Logging level = 2



[PEBL]
Welcome page = Welcome_Login.html
Theme = default
Comment = PEBL Logbook
Attributes = Author, Material Group, Type, Category, Subject
Find Menu commands = New, Reply, Find, Logout, Help
Options Material Group = Computers, Consoles, Other
ROptions Category = Hardware, Software, Both, Neither
Preset Category = Hardware
Required Attributes = Author, Material Group, Type, Category
Preset Text = Restricted Info
Page Title = ELOG - $subject
Attachment comment=Use "Browse" to select the attachment and "Upload" to save the attachment.  Repeat for multiple attachments.
Message comment = Restricted Info 
Reverse sort = 1
Quick filter = Date
Entries per page = 100
password file = c:\Program Files\ELOG\elog.pwd
Self Register = 1
Login expiration = 0
Protect Selection page = 1
Suppress Email to users = 1
Suppress default = 2
Restrict Edit = 1

Locked Attributes = Author
Preset Author = $short_name
Subst on reply Subject = Re: $subject


ELOG V3.1.5-2eba886