Re: [Koha] Request for Listing a Paid Service Provider, Texas, USA based.

[Owen Leonard]

> Website: https://LightwaveLibrary.com 

Hi Rudy,

On the Koha web site it says "Companies must show their support of the
Koha Community by adding a visible link to the Koha community website
at https://www.koha-community.org to their Koha offering web page."

https://koha-community.org/support/paid-support/how-to-get-listed/

I don't see any link back to Koha on your page, unless you have a
Koha-specific page I'm not seeing?

 -- Owen

-- 
Web Developer
Athens County Public Libraries
(740) 737-6006
https://www.myacpl.org
___

Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
Unsubscribe: https://lists.katipo.co.nz/mailman/listinfo/koha

Re: [Koha] Minimum permissions needed for patron search

[Сычев Игорь Алексеевич]

Hi Joel!
Earlier I wrote about a similar problem. 
https://lists.katipo.co.nz/public/koha/2023-April/059340.html
I have tried different options, the search ends with an error if 
"edit_borrowers" is not allowed.
Now version 23.05.03 the problem remains.

Good Luck!

Igor A. Sychev
Tomsk Polytechnic University
https://lib.tpu.ru


-Original Message-
From: Koha  On Behalf Of Coehoorn, Joel
Sent: Friday, September 8, 2023 9:00 PM
To: koha 
Subject: [Koha] Minimum permissions needed for patron search

We're a small college using Koha for our library circulation. Our library uses 
workstudy students to man the desk and do *basic *circulation tasks.
Anything advanced, like adding or receiving holds, fines, etc, and the student 
will get an actual librarian.

These workstudy students are also regular patrons, so the workstudy job is 
accomplished with a dedicated login, with the password saved on the circulation 
PC so the students don't actually know how to login as a staff person 
otherwise. FERPA and related laws require us to treat this as an extremely 
low-trust position. Historically, this login has only had the "View Patron 
Infos from any Libraries (view_borrower_infos_from_any_libraries)" permission 
in the "Add Modify Patron Information (borrowers)" section. We also use SAML 
for authentication.

Recently, this account is no longer able to search for patrons by name. If a 
student comes to the desk to checkout a book and forgets their card, our 
workstudy account used to be able to search them by name and proceed with the 
checkout process. Now, this enters a SAML redirect loop trying to validate 
permissions for the login, which is detected and broken with an error by the 
identity provider. I can't find where in Koha, if anywhere, this is being 
logged to help resolve it. They are otherwise able to circulate material if 
they can lookup the patron by barcode.

I discovered the problem goes away if we add the "Add, modify and view patron 
information (edit_borrowers)" to the login. Then they are able to continue 
circulation as normal. However, we don't want this account to be able to add or 
modify borrows, especially as this information all syncs from our student 
information system. We don't want manual edits... ever.

How can I fix this? Why do we need to give edit permissions just to do a search?

*Joel Coehoorn*
Director of Information Technology
*York University*
Office: 402-363-5603 | jcoeho...@york.edu | york.edu

*Please contact helpd...@york.edu  for technical
assistance.*


The mission of York University is to transform lives through Christ-centered 
education and to equip students for lifelong service to God, family, and 
society ___

Koha mailing list  http://koha-community.org Koha@lists.katipo.co.nz
Unsubscribe: https://lists.katipo.co.nz/mailman/listinfo/koha
___

Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
Unsubscribe: https://lists.katipo.co.nz/mailman/listinfo/koha

Re: [Koha] [EXTERNAL] Re: Suggestion for a Debian Managed VPS

[David Liddle]

Alessandro, I'll just add to what Fred wrote and report that our
consortium uses DigitalOcean as well. The service has been good, and
it provides secure, fairly easy shell access. Moreover, we use it to
manage DNS, which has been helpful when creating additional instances
for testing. Whatever you choose, make sure the service offers
multi-factor authentication (MFA) so that your server has that extra
layer of protection.

David Liddle
System Administrator
david.lid...@wycliff.de (but not for this list)

Wycliff e.V., https://wycliff.de
Seminar für Sprache und Kultur, https://spracheundkultur.org
Internationales Tagungszentrum Karimu, https://karimu.de

On Thu, Sep 7, 2023 at 5:18 PM Alessandro Tedesco
 wrote:
>
> Hi Fred,
> thank you very much for this indication and also for sharing your precious
> experience with this Hosting Provider.
> I will try to look at their VPS plans.
> Alessandro
>
>
> Il giorno gio 7 set 2023 alle ore 16:48 King, Fred 
> ha scritto:
>
> > If you're willing to give up a few of the features you want, you might
> > want to consider Digital Ocean. They don't do automatic updates and if you
> > want UFW or Time2Ban you have to install and configure those yourself. They
> > do offer automatic backups for an extra 10%. I'm running our small library
> > with 4GB RAM and something like 80GB SSD for around $30USD per month. They
> > have other options with more RAM, CPUs and SSD sizes. You can also make a
> > snapshot of your Koha instance so if you do something horrible to it you
> > can restore from the snapshot. They're also a Koha mirror so the updates
> > that you have to do yourself are pretty speedy.
> >
> > No, I don't get a referral fee. 
> >
> > Fred King, MSLS, AHIP
> > Medical Librarian, MedStar Washington Hospital Center
> > fred.k...@medstar.net
> > 202-877-6670
> > ORCID -0001-5266-0279
> > MedStar Authors Catalog: http://medstarauthors.org
> >
> > People who can't distinguish between etymology and entomology bug me in
> > ways I cannot put into words.
> > --Anon
> >
> > -Original Message-
> > From: Koha  On Behalf Of Alessandro
> > Tedesco
> > Sent: Thursday, September 7, 2023 6:52 AM
> > To: koha@lists.katipo.co.nz
> > Subject: [EXTERNAL] Re: [Koha] Suggestion for a Debian Managed VPS
> >
> >
> >
> > **ATTENTION: This email originated from outside the MedStar Health network.
> >  ** DO NOT CLICK links or attachments unless you recognize the sender and
> > know the content is safe.
> >
> >
> >
> > Hello David,
> >
> > thank you for your reply! I will take a look at the Hostin Provider that
> > you have suggested. Alessandro
> >
> > Il giorno gio 7 set 2023 alle ore 12:07 David Liddle 
> > ha
> > scritto:
> >
> > > Hello Alessandro, it might be helpful to list the VPS providers that
> > > you have rejected because of your criteria. It will make it easier for
> > > people on the list to know whether or not to suggest the providers
> > > they have in mind.
> > >
> > > Have you already looked at EuroVPS
> > > (https://urldefense.com/v3/__https://www.eurovps.com/debian-vps)?__;!!
> > > D7IIWT94AA!9oRdOaf2lFh73dmpR67YvB9SNv2M1jEQ0lcheYFTMAGX4gbic9NHqOJuhFp
> > > 68vLIUFUym6YvXZWy3U7D1BRwiVPBoL0KB8mfTMvDcg$
> > >
> > > Regards,
> > >
> > > David Liddle
> > > System Administrator
> > > david.lid...@wycliff.de (but not for this list)
> > >
> > > Wycliff e.V.,
> > > https://urldefense.com/v3/__https://wycliff.de__;!!D7IIWT94AA!9oRdOaf2
> > > lFh73dmpR67YvB9SNv2M1jEQ0lcheYFTMAGX4gbic9NHqOJuhFp68vLIUFUym6YvXZWy3U
> > > 7D1BRwiVPBoL0KB8kkufSmLA$ Seminar für Sprache und Kultur,
> > > https://urldefense.com/v3/__https://spracheundkultur.org__;!!D7IIWT94A
> > > A!9oRdOaf2lFh73dmpR67YvB9SNv2M1jEQ0lcheYFTMAGX4gbic9NHqOJuhFp68vLIUFUy
> > > m6YvXZWy3U7D1BRwiVPBoL0KB8n7ey5jaQ$
> > > Internationales Tagungszentrum Karimu,
> > > https://urldefense.com/v3/__https://karimu.de__;!!D7IIWT94AA!9oRdOaf2l
> > > Fh73dmpR67YvB9SNv2M1jEQ0lcheYFTMAGX4gbic9NHqOJuhFp68vLIUFUym6YvXZWy3U7
> > > D1BRwiVPBoL0KB8mDcB1Ovg$
> > >
> > >
> > > On Thu, Sep 7, 2023 at 11:25 AM Alessandro Tedesco
> > >  wrote:
> > > >
> > > > Hello everyone,
> > > >
> > > >
> > > > I'm going to quit my old koha installation running on a Centos VPS
> > > > and I would like to switch to a new Debian VPS (so I can install and
> > > > manage
> > > Koha
> > > > more easily).
> > > >
> > > >
> > > > However, I'm having a lot of difficulty choosing a hosting provider:
> > > > in fact, my old Centos VPS was Fully Managed (i mean that the
> > > > Hosting
> > > Provider
> > > > take care of the general security, the update and the backup of the
> > > > VPS, and that they have a ticketing system for all the technical
> > > > issues), but
> > > at
> > > > the moment I haven't found hosting provider that offer a Fully
> > > > Managed
> > > VPS
> > > > with Debian.
> > > >
> > > >
> > > > Does anyone have any suggestions related to this topic? Thanks!
> > > Alessandro
> > > > ___
> > > >
> > 

Re: [Koha] Minimum permissions needed for patron search

[Alvaro Cornejo]

Hi Joel

What about your work-study students being assigned a second account as
staff where you set the permissions needed?

Don't remember the staff permissions details but I guess there might be one
that will fit your needs.

Regards,

Alvaro



||
 Stay safe / Cuídate/  Reste sécurisé
*7* Switch off as you go / Apaga lo que no usas /  Débranchez au fur et à
mesure.
 *q *Recycle always / Recicla siempre / Recyclez toujours
 P Print only if absolutely necessary / Imprime solo si es necesario /
Imprimez seulement si nécessaire


Le ven. 8 sept. 2023 à 09:01, Coehoorn, Joel  a écrit :

> We're a small college using Koha for our library circulation. Our library
> uses workstudy students to man the desk and do *basic *circulation tasks.
> Anything advanced, like adding or receiving holds, fines, etc, and the
> student will get an actual librarian.
>
> These workstudy students are also regular patrons, so the workstudy job is
> accomplished with a dedicated login, with the password saved on the
> circulation PC so the students don't actually know how to login as a staff
> person otherwise. FERPA and related laws require us to treat this as an
> extremely low-trust position. Historically, this login has only had the
> "View Patron Infos from any Libraries
> (view_borrower_infos_from_any_libraries)" permission in the "Add Modify
> Patron Information (borrowers)" section. We also use SAML for
> authentication.
>
> Recently, this account is no longer able to search for patrons by name. If
> a student comes to the desk to checkout a book and forgets their card, our
> workstudy account used to be able to search them by name and proceed with
> the checkout process. Now, this enters a SAML redirect loop trying to
> validate permissions for the login, which is detected and broken with an
> error by the identity provider. I can't find where in Koha, if anywhere,
> this is being logged to help resolve it. They are otherwise able to
> circulate material if they can lookup the patron by barcode.
>
> I discovered the problem goes away if we add the "Add, modify and view
> patron information (edit_borrowers)" to the login. Then they are able to
> continue circulation as normal. However, we don't want this account to be
> able to add or modify borrows, especially as this information all syncs
> from our student information system. We don't want manual edits... ever.
>
> How can I fix this? Why do we need to give edit permissions just to do a
> search?
>
> *Joel Coehoorn*
> Director of Information Technology
> *York University*
> Office: 402-363-5603 | jcoeho...@york.edu | york.edu
>
> *Please contact helpd...@york.edu  for technical
> assistance.*
>
>
> The mission of York University is to transform lives through
> Christ-centered education and to equip students for lifelong service to
> God, family, and society
> ___
>
> Koha mailing list  http://koha-community.org
> Koha@lists.katipo.co.nz
> Unsubscribe: https://lists.katipo.co.nz/mailman/listinfo/koha
>
___

Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
Unsubscribe: https://lists.katipo.co.nz/mailman/listinfo/koha

Re: [Koha] Documentation - Are automated screenshots the way to go?

[Hernandez, Heather H]

Hi, Caroline!

First, love the kitty!  Second, this sounds really interesting!  I have 
contributed to the manual, and it was easier than I thought and a great way to 
contribute to the community.  I'm going to try to attend the documentation 
meeting as well.

And, yes, y'all are, indeed, very nice!!
--h2
~~~

Ms. Heather Hernandez (she, her, hers)
Technical Services Librarian
Library catalog:  https://keys.bywatersolutions.com/
San Francisco Maritime National Historical Park Research Center
2 Marina Blvd., Bldg. E, 3rd floor, San Francisco, CA  94123-1284
415-350-7174 (mobile)
heather_hernan...@nps.gov
___

Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
Unsubscribe: https://lists.katipo.co.nz/mailman/listinfo/koha

[Koha] Minimum permissions needed for patron search

[Coehoorn, Joel]

We're a small college using Koha for our library circulation. Our library
uses workstudy students to man the desk and do *basic *circulation tasks.
Anything advanced, like adding or receiving holds, fines, etc, and the
student will get an actual librarian.

These workstudy students are also regular patrons, so the workstudy job is
accomplished with a dedicated login, with the password saved on the
circulation PC so the students don't actually know how to login as a staff
person otherwise. FERPA and related laws require us to treat this as an
extremely low-trust position. Historically, this login has only had the
"View Patron Infos from any Libraries
(view_borrower_infos_from_any_libraries)" permission in the "Add Modify
Patron Information (borrowers)" section. We also use SAML for
authentication.

Recently, this account is no longer able to search for patrons by name. If
a student comes to the desk to checkout a book and forgets their card, our
workstudy account used to be able to search them by name and proceed with
the checkout process. Now, this enters a SAML redirect loop trying to
validate permissions for the login, which is detected and broken with an
error by the identity provider. I can't find where in Koha, if anywhere,
this is being logged to help resolve it. They are otherwise able to
circulate material if they can lookup the patron by barcode.

I discovered the problem goes away if we add the "Add, modify and view
patron information (edit_borrowers)" to the login. Then they are able to
continue circulation as normal. However, we don't want this account to be
able to add or modify borrows, especially as this information all syncs
from our student information system. We don't want manual edits... ever.

How can I fix this? Why do we need to give edit permissions just to do a
search?

*Joel Coehoorn*
Director of Information Technology
*York University*
Office: 402-363-5603 | jcoeho...@york.edu | york.edu

*Please contact helpd...@york.edu  for technical
assistance.*


The mission of York University is to transform lives through
Christ-centered education and to equip students for lifelong service to
God, family, and society
___

Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
Unsubscribe: https://lists.katipo.co.nz/mailman/listinfo/koha

Re: [Koha] Request for Listing a Paid Service Provider, Texas, USA based.

[Hernandez, Heather H]

Hi, Rudy!

I don't handle the listings, but I noticed on your website an error—the name of 
the library system software is "Koha," not "KOHA."  It's a beautiful Maori word 
(not an acronym), and there's more info here on its meaning:
The Koha Logo : Origins and Explanation - Koha Wiki 
(koha-community.org)

Cheers,
h2

~~~

Ms. Heather Hernandez (she, her, hers)
Technical Services Librarian
Library catalog:  https://keys.bywatersolutions.com/
San Francisco Maritime National Historical Park Research Center
2 Marina Blvd., Bldg. E, 3rd floor, San Francisco, CA  94123-1284
415-350-7174 (mobile)
heather_hernan...@nps.gov
___

Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
Unsubscribe: https://lists.katipo.co.nz/mailman/listinfo/koha

[Koha] Request for Listing a Paid Service Provider, Texas, USA based.

[Rudy Hinojosa]

Company Name: Lightwave Library
Contact Person: Rudy Hinojosa
Contact Email: rudy.hinoj...@lightwavelibrary.com
Website: https://LightwaveLibrary.com  
Telephone: +1 737-372-7779
___

Koha mailing list  http://koha-community.org
Koha@lists.katipo.co.nz
Unsubscribe: https://lists.katipo.co.nz/mailman/listinfo/koha