https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41011

Lari Taskula <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[email protected]
             Status|NEW                         |CLOSED
         Resolution|---                         |INVALID

--- Comment #1 from Lari Taskula <[email protected]> ---
Thanks for the report Olli!

We eventually figured out that as per RFC3875 [1], REMOTE_ADDR only accepts
IPv4 or IPv6 addresses, but not hostnames. So we don't need to expect a string
"localhost" in $ENV{REMOTE_ADDR} in C4::Auth::in_iprange().

The problem can be resolved by simply removing "localhost" from the system
preference SelfCheckAllowByIPRanges.

Moreover SelfCheckAllowByIPRanges already documents the expected usage:
"Use ranges or simple IP addresses"

To fix:
0. Enable SCO from sysprefs
1. SelfCheckAllowByIPRanges = ::1 127.0.0.1
2. From within the Koha-server, do curl
http://localhost:80/cgi-bin/koha/sco/sco-main.pl
3. Observe SCO-module is not loaded, but the OPAC login screen.

For these reasons I am closing this Bug.

[1] https://www.rfc-editor.org/rfc/rfc3875#section-4.1.8

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to