Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 742 of 801  Not logged in ELOG logo
ID Datedown Icon Author Author Email Category OS ELOG Version Subject
  525   Thu Apr 8 15:42:52 2004 Question Bertram Metzbmetz@sbs.comQuestionWindows2.5.2Re: Global password file together with guest account
> > Hello,
> > 
> > is it possible to have an guest account together with a global password file?
> > 
> > I tried to put the password file statement into the global section of
> > elogd.cfg. But in this case every user must login and it is not possible to
> > have a read only guest account. 
> > But if I put the password file statemnet into the logbook sections, it is
> > possible to access the logbooks in read-only mode without logging in. The
> > drawback of this solution is, that you have to login into every logbook
> > seperately.
> > 
> > Bertram
> 
> Right, guest access is not possible with a global password file. This comes from
> the fact that people wish to protect their logbook selection page. What I can do
> is add another flag "protect selection page = 0 | 1". If "0", the logbook
> selection page can be seen without logging in. Is that what yo want?
> 
> - Stefan
Yes, that is what I want.
Bertram
  524   Thu Apr 8 15:24:02 2004 Question Stefan Rittstefan.ritt@psi.chQuestionWindows2.5.2Re: Global password file together with guest account
> Hello,
> 
> is it possible to have an guest account together with a global password file?
> 
> I tried to put the password file statement into the global section of
> elogd.cfg. But in this case every user must login and it is not possible to
> have a read only guest account. 
> But if I put the password file statemnet into the logbook sections, it is
> possible to access the logbooks in read-only mode without logging in. The
> drawback of this solution is, that you have to login into every logbook
> seperately.
> 
> Bertram

Right, guest access is not possible with a global password file. This comes from
the fact that people wish to protect their logbook selection page. What I can do
is add another flag "protect selection page = 0 | 1". If "0", the logbook
selection page can be seen without logging in. Is that what yo want?

- Stefan
  523   Thu Apr 8 15:05:43 2004 Question Bertram Metzbmetz@sbs.comQuestionWindows2.5.2Global password file together with guest account
Hello,

is it possible to have an guest account together with a global password file?

I tried to put the password file statement into the global section of
elogd.cfg. But in this case every user must login and it is not possible to
have a read only guest account. 
But if I put the password file statemnet into the logbook sections, it is
possible to access the logbooks in read-only mode without logging in. The
drawback of this solution is, that you have to login into every logbook
seperately.

Bertram
Attachment 1: elogd.cfg
[global]
Port = 8080
Logfile = elogd.log
Logging level = 3
Self register = 1

Logout to main = 1
Logbook tabs = 1

Password file = ./passwd
Admin user = BMetz
Guest menu commands = Back, Find, Login, Help
Guest find menu commands = Find, Select, Login, Help

[CP9]
;Password file = ./passwd
Theme = default

[CR9]
;Password file = ./passwd
Theme = default
  522   Mon Apr 5 09:28:19 2004 Reply Stefan Rittstefan.ritt@psi.chInfoWindows2.5.2Re: Using Javascript files
> I develop multiple client server apps and web apps deployed on intranets. I
> need my users to send me bugs with screenshots attached.

Nice idea. I was looking myself for a way to automatically attach screenshots,
but I haven't found a clever way yet. One problem with attachments I found is
that it is not possible to preset the attachment text box with a file name
because this would open up a big security hole. So a malicious web page would
preset the attachment box with a file name pointing to some local password file,
then hide the box somwhere by using a tiny font etc. So if someone presses
"submit", the secret file would automatically transferred to the remote site.
Now I don't know if this can be bypassed with JavaScript.
 
> Now apparently that wasn't fully working or at least you couldn't bring up
> multiple alerts. Has that been fixed, or is it just a problem with alerts?

The JavaScript you supply simply gets copied to the web page and executed. There
are no limitations of any kind from the elog system there. So if you have
problems, it's most likely a JavaScript problem. I found it very useful to use
the Venkman debugger (http://www.mozilla.org/projects/venkman/) which can run
inside Mozilla based browsers.

> Can I write a url that has my attributes, plus a short js script that just
> adds an attachment?

It should be in principle possible, limited maybe only with the security note I
wrote above. If you get anything working, I would appreciate if you could add
this to the "contributions" section, so that other people can benefit from this.
  521   Fri Apr 2 02:41:36 2004 Question PJ Meyerpjm@pjmeyer.orgQuestionWindows1.35 to 2.51Re: "Upgrading" from 1.35 to 2.52 fails
tuens out that the first log file was causing the problem. Elconv would just hang 
on trying to convert it. renamed it, reran elconv, reload service and 2.51 elogd 
and all was working as it should.


> Have a working copy of 1.35 running on NT4 server.
> Went to upgrade to latest version.
> Stopped service, installed the 2.52 version, restarted service and when 
> trying to connect get nothing but server not found, dns errors, etc.
> Copy back the 1.35 elogd.exe and everything is fine - I can connect and add 
> entries to log.
> Copy 2.52 elogd.exe and nothing.
> 
> So being the bright boy, I unistalled E-log, went through the registry and 
> yanked everything out that referenced ELOGD, rebooted, installed 2.52, made 
> the necessary registry changes, started service and nothing. 
> 
> Stopped service and copied 1.35 Elogd.exe back into folder, started service, 
> and everything works.
> 
> Any ideas on why 1.35 works like a charm but 2.52 won't? I've tried stepping 
> back to 2.10 version before giving up.
> 
> This is a server that is patched to latest and runs quite well with 1.35.
  520   Thu Apr 1 20:21:26 2004 Question PJ Meyerpjm@pjmeyer.orgQuestionWindows1.35 to 2.51"Upgrading" from 1.35 to 2.52 fails
Have a working copy of 1.35 running on NT4 server.
Went to upgrade to latest version.
Stopped service, installed the 2.52 version, restarted service and when 
trying to connect get nothing but server not found, dns errors, etc.
Copy back the 1.35 elogd.exe and everything is fine - I can connect and add 
entries to log.
Copy 2.52 elogd.exe and nothing.

So being the bright boy, I unistalled E-log, went through the registry and 
yanked everything out that referenced ELOGD, rebooted, installed 2.52, made 
the necessary registry changes, started service and nothing. 

Stopped service and copied 1.35 Elogd.exe back into folder, started service, 
and everything works.

Any ideas on why 1.35 works like a charm but 2.52 won't? I've tried stepping 
back to 2.10 version before giving up.

This is a server that is patched to latest and runs quite well with 1.35.
  519   Thu Apr 1 19:38:56 2004 Entry damon nettlesnettles@phgrav.phys.lsu.edu Linux2.5.2safari browser issue
we've experienced a problem when using the safari browser to do a search in
our elog. whenever you do a search, the logbook returns an error and the
elog deamon crashes. when we first experienced this problem we were running
version 2.3.9. however, an upgrade to version 2.5.2 doesn't seem to fix the
problem. searches with other browsers (mozilla, internet explorer, ...) go
off without a hitch.
has anyone else observed a similar problem or have any ideas on how to
resolve this issue.
thanks for the help.

elog running on a redhat 9 box
safari running on panther
  518   Thu Apr 1 18:22:37 2004 Question Robert Keeneybrassrlk@yahoo.comQuestionOtherAnyIs any one using elog on Solaris 9?
I searched and found some problems people were having compiling it on Solaris.
However I didn't see anything else.

If your using it, was it hard to get it installed and working?
ELOG V3.1.5-3fb85fa6