Re: [OPEN-ILS-DEV] Staff Client Port
On 10/4/07, Karen Collier [EMAIL PROTECTED] wrote: This raises another question though. What kind of security is there to keep hackers out of the staff client if you can't just firewall it off, since it uses the same ports as the OPAC which the public is supposed to get to? Hi Karen, Anything dangerous such as retrieving or changing patron data requires both authentication and authorization (you have to login with sufficient permissions). You'll need to protect your client workstations the same way you would need to for any application, from such things as keystroke loggers. However, you should be relatively immune from network attacks like packet sniffing and man-in-the-middle intercepts, since the client and server encrypts anything sensitive with industry-standard SSL. You'll just need a SSL certificate from an authority that the client recognizes (and you could self-sign and add yourself as an authority to your deployed clients). The OPAC and the staff client are both applications that speak the same Evergreen language, and use the same permission and authentication systems. However, you could conceivably segregate the traffic by a number of means, and filter certain types of requests from going through the OPAC gateway and layering additional authentication upon the client gateway (for example, you could require access through a VPN). Let me know if this answers your question! -- Jason Etheridge | VP, Community Support and Advocacy | Equinox Software, Inc. / The Evergreen Experts | phone: 1-877-OPEN-ILS (673-6457) | email: [EMAIL PROTECTED] | web: http://www.esilibrary.com
Re: [OPEN-ILS-DEV] problem logging in as admin
Okay, stopped, cleared logs, restarted with loglevel 5 in opensrf_core.xml. This is *probably* the problem; if it isn't, let me know and I'll send on the full logs. Probably something I messed up in the install... from osrfsys.log: [2007-10-4 6:41:22] open-ils.storage [DEBG:12469:Storage.pm:31:] Attempting to load OpenILS::Appli cation::Storage::Driver::pgsql ...[2007-10-4 6:41:22] open-ils.storage [ERR :12469:Storage.pm:35:] Can't load OpenILS::Application::Storage::Driver::pgsql! : Can't locate OpenILS/Application/Storage/Driver/pgsql.pm in @INC (@INC contains: /openils/lib/perl5 /etc/perl /usr/local/lib/perl/5.8.8 /usr/local/share/perl/5.8.8 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8 /usr/local/lib/site_perl .) at /openils/lib/perl5/OpenILS/Application/Storage.pm line 33.[2007-10-4 6:41:22] open-ils.storage [ERR :12469:Storage.pm:36:] Can't load OpenILS::Application:: Storage::Driver::pgsql! : Can't locate OpenILS/Application/Storage/Driver/pgsql.pm in @INC (@INC contains: /openils/lib/perl5 /etc/perl /usr/local/lib/perl/5.8.8 /usr/local/share/perl/5.8.8 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8 /usr/local/lib/site_perl .) at /openils/lib/perl5/OpenILS/Application/Storage.pm line 33. [2007-10-4 6:41:22] open-ils.storage [ERR :12469:EX.pm:66:] * ! EXCEPTION ! * TYPE: OpenSRF::EX::PANICMess: System PANIC Mess: Can't load OpenILS::Application::Storage::Driver::pgsql! : Can't locate OpenILS/Application/Storage/Driver/pgsql.pm in @INC (@INC contains: /openils/lib/perl5 /etc/perl /usr/local/lib/perl/5.8.8 /usr/local/share/perl/5.8.8 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8 /usr/local/lib/site_perl .) at /openils/lib/perl5/OpenILS/Application/Storage.pm line 33. jf On 10/3/07, Bill Erickson [EMAIL PROTECTED] wrote: On 10/2/07, Mike Rylander [EMAIL PROTECTED] wrote: On 10/2/07, John Fink [EMAIL PROTECTED] wrote: Here's something tasty from gateway.log. Let me know if you want a look at any of the others. snip the exception That just means that storage is not starting properly. The most likely reason is mis-configured database settings for the storage app. One thing to check is that for c-store the driver is called pgsql, but for storage it's called Pg. UPDATE: as Dan suggests, sending the entire log will help diagnose the exact reason for this. /me steps outta Dan's way. For Perl processes, you'll sometimes get good information out of the Net::Server logs as well. The default location for the storage log is /openils/var/log/openils.storage_unix.log -bill -- Bill Erickson | VP, Software Development Integration | Equinox Software, Inc. / The Evergreen Experts | phone: 877-OPEN-ILS (673-6457) | email: [EMAIL PROTECTED] | web: http://esilibrary.com -- http://libgrunt.blogspot.com -- library culture and technology.
Re: [OPEN-ILS-DEV] problem logging in as admin
On 04/10/2007, John Fink [EMAIL PROTECTED] wrote: Okay, stopped, cleared logs, restarted with loglevel 5 in opensrf_core.xml. This is *probably* the problem; if it isn't, let me know and I'll send on the full logs. Probably something I messed up in the install... from osrfsys.log: [2007-10-4 6:41:22] open-ils.storage [DEBG:12469:Storage.pm:31:] Attempting to load OpenILS::Appli cation::Storage::Driver::pgsql ...[2007-10-4 6:41:22] open-ils.storage [ERR :12469:Storage.pm:35:] Can't load OpenILS::Application::Storage::Driver::pgsql! : Can't locate OpenILS/Application/Storage/Driver/pgsql.pm in @INC (@INC contains: /openils/lib/perl5 /etc/perl /usr/local/lib/perl/5.8.8 /usr/local/share/perl/5.8.8 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8 /usr/local/lib/site_perl .) at /openils/lib/perl5/OpenILS/Application/Storage.pm line 33.[2007-10-4 6:41:22] open-ils.storage [ERR :12469:Storage.pm:36:] Can't load OpenILS::Application:: Storage::Driver::pgsql! : Can't locate OpenILS/Application/Storage/Driver/pgsql.pm in @INC (@INC contains: /openils/lib/perl5 /etc/perl /usr/local/lib/perl/5.8.8 /usr/local/share/perl/5.8.8 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8 /usr/local/lib/site_perl .) at /openils/lib/perl5/OpenILS/Application/Storage.pm line 33. [2007-10-4 6:41:22] open-ils.storage [ERR :12469:EX.pm:66:] * ! EXCEPTION ! * TYPE: OpenSRF::EX::PANICMess: System PANIC Mess: Can't load OpenILS::Application::Storage::Driver::pgsql! : Can't locate OpenILS/Application/Storage/Driver/pgsql.pm in @INC (@INC contains: /openils/lib/perl5 /etc/perl /usr/local/lib/perl/5.8.8 /usr/local/share/perl/5.8.8 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8 /usr/local/lib/site_perl .) at /openils/lib/perl5/OpenILS/Application/Storage.pm line 33. jf On 10/3/07, Bill Erickson [EMAIL PROTECTED] wrote: On 10/2/07, Mike Rylander [EMAIL PROTECTED] wrote: On 10/2/07, John Fink [EMAIL PROTECTED] wrote: Here's something tasty from gateway.log . Let me know if you want a look at any of the others. snip the exception That just means that storage is not starting properly. The most likely reason is mis-configured database settings for the storage app. One thing to check is that for c-store the driver is called pgsql, but for storage it's called Pg. UPDATE: as Dan suggests, sending the entire log will help diagnose the exact reason for this. /me steps outta Dan's way. For Perl processes, you'll sometimes get good information out of the Net::Server logs as well. The default location for the storage log is /openils/var/log/openils.storage_unix.log -bill Yeah! I think you've got it. Two possibilities come to mind: 1) You ran make install as root and forgot to chown -R opensrf:opensrf /openils after running the install. In this scenario, /openils/lib/perl5/OpenILS/Application/Storage/Driver/pgsql.pm exists, but does not have the permissions or ownership that allow the opensrf user to actually see the file. 2) /openils/lib/perl5/OpenILS/Application/Storage/Driver/pgsql.pm doesn't exist at all, which would be a more puzzling problem. Repeating the make install chown steps for Evergreen would be my first stab at resolving the problem. Let's see / hope it's simply problem #1 instead. -- Dan Scott Laurentian University
Re: [OPEN-ILS-DEV] problem logging in as admin
On 04/10/2007, Dan Scott [EMAIL PROTECTED] wrote: On 04/10/2007, John Fink [EMAIL PROTECTED] wrote: Okay, stopped, cleared logs, restarted with loglevel 5 in opensrf_core.xml. This is *probably* the problem; if it isn't, let me know and I'll send on the full logs. Probably something I messed up in the install... from osrfsys.log: [2007-10-4 6:41:22] open-ils.storage [DEBG:12469:Storage.pm:31:] Attempting to load OpenILS::Appli cation::Storage::Driver::pgsql ...[2007-10-4 6:41:22] open-ils.storage [ERR :12469:Storage.pm:35:] Can't load OpenILS::Application::Storage::Driver::pgsql! : Can't locate OpenILS/Application/Storage/Driver/pgsql.pm in @INC (@INC contains: /openils/lib/perl5 /etc/perl /usr/local/lib/perl/5.8.8 /usr/local/share/perl/5.8.8 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8 /usr/local/lib/site_perl .) at /openils/lib/perl5/OpenILS/Application/Storage.pm line 33.[2007-10-4 6:41:22] open-ils.storage [ERR :12469:Storage.pm:36:] Can't load OpenILS::Application:: Storage::Driver::pgsql! : Can't locate OpenILS/Application/Storage/Driver/pgsql.pm in @INC (@INC contains: /openils/lib/perl5 /etc/perl /usr/local/lib/perl/5.8.8 /usr/local/share/perl/5.8.8 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8 /usr/local/lib/site_perl .) at /openils/lib/perl5/OpenILS/Application/Storage.pm line 33. [2007-10-4 6:41:22] open-ils.storage [ERR :12469:EX.pm:66:] * ! EXCEPTION ! * TYPE: OpenSRF::EX::PANICMess: System PANIC Mess: Can't load OpenILS::Application::Storage::Driver::pgsql! : Can't locate OpenILS/Application/Storage/Driver/pgsql.pm in @INC (@INC contains: /openils/lib/perl5 /etc/perl /usr/local/lib/perl/5.8.8 /usr/local/share/perl/5.8.8 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8 /usr/local/lib/site_perl .) at /openils/lib/perl5/OpenILS/Application/Storage.pm line 33. jf On 10/3/07, Bill Erickson [EMAIL PROTECTED] wrote: On 10/2/07, Mike Rylander [EMAIL PROTECTED] wrote: On 10/2/07, John Fink [EMAIL PROTECTED] wrote: Here's something tasty from gateway.log . Let me know if you want a look at any of the others. snip the exception That just means that storage is not starting properly. The most likely reason is mis-configured database settings for the storage app. One thing to check is that for c-store the driver is called pgsql, but for storage it's called Pg. UPDATE: as Dan suggests, sending the entire log will help diagnose the exact reason for this. /me steps outta Dan's way. For Perl processes, you'll sometimes get good information out of the Net::Server logs as well. The default location for the storage log is /openils/var/log/openils.storage_unix.log -bill Yeah! I think you've got it. Two possibilities come to mind: 1) You ran make install as root and forgot to chown -R opensrf:opensrf /openils after running the install. In this scenario, /openils/lib/perl5/OpenILS/Application/Storage/Driver/pgsql.pm exists, but does not have the permissions or ownership that allow the opensrf user to actually see the file. 2) /openils/lib/perl5/OpenILS/Application/Storage/Driver/pgsql.pm doesn't exist at all, which would be a more puzzling problem. Repeating the make install chown steps for Evergreen would be my first stab at resolving the problem. Let's see / hope it's simply problem #1 instead. Oh, actually it's problem #3! opensrf.xml has an entry for open-ils.storage, with a databases section. The driver for any application that has languageperl/language should be driverPg/driver. You probably have driverpgsql/driver, which would cause Evergreen to try and load pgsql.pm rather than Pg.pm. If you look in /openils/lib/perl5/OpenILS/Application/Storage/Driver/ you'll see it contains Pg.pm. This should get you rolling! -- Dan Scott Laurentian University
Re: [OPEN-ILS-DEV] Client Issues
Hi Dan, I am unable to see the problem. Unless it truly is an authentication issue. Perhaps a typo in one on the config files. Here's a link to the .log that was created at level 5 http://people.upei.ca/mmmag/log/osrfsys.log Thanks Loads. F. Grant Johnson Systems Coordinator Robertson Library University of Prince Edward Island
Re: [OPEN-ILS-DEV] problem logging in as admin
Heh. Okay, I did this (changing every instance of languageperl/language, and now really *nothing* works. No cstore or storage in ps wax. Starting Evergreen takes a lot longer, and on shutdown we get the following: Stopping OpenSRF C : opensrf-c: no process killed ugh. Dan, are you super extra sure that every perl needs to be Pg? :) jf On 10/4/07, Dan Scott [EMAIL PROTECTED] wrote: On 04/10/2007, Dan Scott [EMAIL PROTECTED] wrote: On 04/10/2007, John Fink [EMAIL PROTECTED] wrote: Okay, stopped, cleared logs, restarted with loglevel 5 in opensrf_core.xml. This is *probably* the problem; if it isn't, let me know and I'll send on the full logs. Probably something I messed up in the install... from osrfsys.log: [2007-10-4 6:41:22] open-ils.storage [DEBG:12469:Storage.pm:31:] Attempting to load OpenILS::Appli cation::Storage::Driver::pgsql ...[2007-10-4 6:41:22] open-ils.storage[ERR :12469:Storage.pm:35:] Can't load OpenILS::Application::Storage::Driver::pgsql! : Can't locate OpenILS/Application/Storage/Driver/pgsql.pm in @INC (@INC contains: /openils/lib/perl5 /etc/perl /usr/local/lib/perl/5.8.8 /usr/local/share/perl/5.8.8 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8 /usr/local/lib/site_perl .) at /openils/lib/perl5/OpenILS/Application/Storage.pm line 33.[2007-10-4 6:41:22] open-ils.storage [ERR :12469:Storage.pm:36:] Can't load OpenILS::Application:: Storage::Driver::pgsql! : Can't locate OpenILS/Application/Storage/Driver/pgsql.pm in @INC (@INC contains: /openils/lib/perl5 /etc/perl /usr/local/lib/perl/5.8.8 /usr/local/share/perl/5.8.8 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8 /usr/local/lib/site_perl .) at /openils/lib/perl5/OpenILS/Application/Storage.pm line 33. [2007-10-4 6:41:22] open-ils.storage [ERR :12469:EX.pm:66:] * ! EXCEPTION ! * TYPE: OpenSRF::EX::PANICMess: System PANIC Mess: Can't load OpenILS::Application::Storage::Driver::pgsql! : Can't locate OpenILS/Application/Storage/Driver/pgsql.pm in @INC (@INC contains: /openils/lib/perl5 /etc/perl /usr/local/lib/perl/5.8.8 /usr/local/share/perl/5.8.8 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8 /usr/local/lib/site_perl .) at /openils/lib/perl5/OpenILS/Application/Storage.pm line 33. jf On 10/3/07, Bill Erickson [EMAIL PROTECTED] wrote: On 10/2/07, Mike Rylander [EMAIL PROTECTED] wrote: On 10/2/07, John Fink [EMAIL PROTECTED] wrote: Here's something tasty from gateway.log . Let me know if you want a look at any of the others. snip the exception That just means that storage is not starting properly. The most likely reason is mis-configured database settings for the storage app. One thing to check is that for c-store the driver is called pgsql, but for storage it's called Pg. UPDATE: as Dan suggests, sending the entire log will help diagnose the exact reason for this. /me steps outta Dan's way. For Perl processes, you'll sometimes get good information out of the Net::Server logs as well. The default location for the storage log is /openils/var/log/openils.storage_unix.log -bill Yeah! I think you've got it. Two possibilities come to mind: 1) You ran make install as root and forgot to chown -R opensrf:opensrf /openils after running the install. In this scenario, /openils/lib/perl5/OpenILS/Application/Storage/Driver/pgsql.pm exists, but does not have the permissions or ownership that allow the opensrf user to actually see the file. 2) /openils/lib/perl5/OpenILS/Application/Storage/Driver/pgsql.pm doesn't exist at all, which would be a more puzzling problem. Repeating the make install chown steps for Evergreen would be my first stab at resolving the problem. Let's see / hope it's simply problem #1 instead. Oh, actually it's problem #3! opensrf.xml has an entry for open-ils.storage, with a databases section. The driver for any application that has languageperl/language should be driverPg/driver. You probably have driverpgsql/driver, which would cause Evergreen to try and load pgsql.pm rather than Pg.pm. If you look in /openils/lib/perl5/OpenILS/Application/Storage/Driver/ you'll see it contains Pg.pm. This should get you rolling! -- Dan Scott Laurentian University -- http://libgrunt.blogspot.com -- library culture and technology.
Re: [OPEN-ILS-DEV] Client Issues
Here's Environment specifics - I'm lazy too... Ubuntu 7.04 workstation OpenSRF Release 0.9 Fourth release candidate for Evergreen 1.2.0 IP address only - no fqdn -- F. Grant Johnson 566-0630 / [EMAIL PROTECTED] Skype ID = jetsongeorge Systems/Web Coordinator Robertson Library University of Prince Edward Island *** Attitude is IT! BEGIN:VCARD VERSION:2.1 X-GWTYPE:USER FN:Grant Johnson EMAIL;WORK;PREF:[EMAIL PROTECTED] N:Johnson;Grant END:VCARD
Re: [OPEN-ILS-DEV] problem logging in as admin
On 04/10/2007, John Fink [EMAIL PROTECTED] wrote: Heh. Okay, I did this (changing every instance of languageperl/language, and now really *nothing* works. No cstore or storage in ps wax. Starting Evergreen takes a lot longer, and on shutdown we get the following: Stopping OpenSRF C : opensrf-c: no process killed ugh. Dan, are you super extra sure that every perl needs to be Pg? :) jf On 10/4/07, Dan Scott [EMAIL PROTECTED] wrote: On 04/10/2007, Dan Scott [EMAIL PROTECTED] wrote: On 04/10/2007, John Fink [EMAIL PROTECTED] wrote: Okay, stopped, cleared logs, restarted with loglevel 5 in opensrf_core.xml. This is *probably* the problem; if it isn't, let me know and I'll send on the full logs. Probably something I messed up in the install... from osrfsys.log: [2007-10-4 6:41:22] open-ils.storage [DEBG:12469:Storage.pm:31:] Attempting to load OpenILS::Appli cation::Storage::Driver::pgsql ...[2007-10-4 6:41:22] open-ils.storage [ERR :12469:Storage.pm:35:] Can't load OpenILS::Application::Storage::Driver::pgsql! : Can't locate OpenILS/Application/Storage/Driver/pgsql.pm in @INC (@INC contains: /openils/lib/perl5 /etc/perl /usr/local/lib/perl/5.8.8 /usr/local/share/perl/5.8.8 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8 /usr/local/lib/site_perl .) at /openils/lib/perl5/OpenILS/Application/Storage.pm line 33.[2007-10-4 6:41:22] open-ils.storage [ERR :12469:Storage.pm:36:] Can't load OpenILS::Application:: Storage::Driver::pgsql! : Can't locate OpenILS/Application/Storage/Driver/pgsql.pm in @INC (@INC contains: /openils/lib/perl5 /etc/perl /usr/local/lib/perl/5.8.8 /usr/local/share/perl/5.8.8 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8 /usr/local/lib/site_perl .) at /openils/lib/perl5/OpenILS/Application/Storage.pm line 33. [2007-10-4 6:41:22] open-ils.storage [ERR :12469:EX.pm :66:] * ! EXCEPTION ! * TYPE: OpenSRF::EX::PANICMess: System PANIC Mess: Can't load OpenILS::Application::Storage::Driver::pgsql! : Can't locate OpenILS/Application/Storage/Driver/pgsql.pm in @INC (@INC contains: /openils/lib/perl5 /etc/perl /usr/local/lib/perl/5.8.8 /usr/local/share/perl/5.8.8 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8 /usr/local/lib/site_perl .) at /openils/lib/perl5/OpenILS/Application/Storage.pm line 33. jf On 10/3/07, Bill Erickson [EMAIL PROTECTED] wrote: On 10/2/07, Mike Rylander [EMAIL PROTECTED] wrote: On 10/2/07, John Fink [EMAIL PROTECTED] wrote: Here's something tasty from gateway.log . Let me know if you want a look at any of the others. snip the exception That just means that storage is not starting properly. The most likely reason is mis-configured database settings for the storage app. One thing to check is that for c-store the driver is called pgsql, but for storage it's called Pg. UPDATE: as Dan suggests, sending the entire log will help diagnose the exact reason for this. /me steps outta Dan's way. For Perl processes, you'll sometimes get good information out of the Net::Server logs as well. The default location for the storage log is /openils/var/log/openils.storage_unix.log -bill Yeah! I think you've got it. Two possibilities come to mind: 1) You ran make install as root and forgot to chown -R opensrf:opensrf /openils after running the install. In this scenario, /openils/lib/perl5/OpenILS/Application/Storage/Driver/pgsql.pm exists, but does not have the permissions or ownership that allow the opensrf user to actually see the file. 2) /openils/lib/perl5/OpenILS/Application/Storage/Driver/pgsql.pm doesn't exist at all, which would be a more puzzling problem. Repeating the make install chown steps for Evergreen would be my first stab at resolving the problem. Let's see / hope it's simply problem #1 instead. Oh, actually it's problem #3! opensrf.xml has an entry for open-ils.storage, with a databases section. The driver for any application that has languageperl/language should be driverPg/driver. You probably have driverpgsql/driver, which would cause Evergreen to try and load pgsql.pm rather than Pg.pm. If you look in /openils/lib/perl5/OpenILS/Application/Storage/Driver/ you'll see it contains Pg.pm. This should get you rolling! -- Dan Scott Laurentian University Oh, John. Yes, I'm sure that every app with language perl that has a databases section needs to use the driverPg - that being said, there is only one perl application in my opensrf.xml that contains a databases section, that one app being open-ils.storage - so I'm not sure how you could have changed any others. Doesn't
RE: [OPEN-ILS-DEV] Staff Client Port
Those sound like good options to consider. I think our tech guy was also wondering if Evergreen is or could be set up to limit staff client access to specified IP addresses. Is that an option, with the way Evergreen operates? Thanks, Karen -Original Message- From: Jason Etheridge [mailto:[EMAIL PROTECTED] Sent: Thursday, October 04, 2007 11:28 AM To: [EMAIL PROTECTED]; open-ils-dev@list.georgialibraries.org Subject: Re: [OPEN-ILS-DEV] Staff Client Port On 10/4/07, Karen Collier [EMAIL PROTECTED] wrote: This raises another question though. What kind of security is there to keep hackers out of the staff client if you can't just firewall it off, since it uses the same ports as the OPAC which the public is supposed to get to? Hi Karen, Anything dangerous such as retrieving or changing patron data requires both authentication and authorization (you have to login with sufficient permissions). You'll need to protect your client workstations the same way you would need to for any application, from such things as keystroke loggers. However, you should be relatively immune from network attacks like packet sniffing and man-in-the-middle intercepts, since the client and server encrypts anything sensitive with industry-standard SSL. You'll just need a SSL certificate from an authority that the client recognizes (and you could self-sign and add yourself as an authority to your deployed clients). The OPAC and the staff client are both applications that speak the same Evergreen language, and use the same permission and authentication systems. However, you could conceivably segregate the traffic by a number of means, and filter certain types of requests from going through the OPAC gateway and layering additional authentication upon the client gateway (for example, you could require access through a VPN). Let me know if this answers your question! -- Jason Etheridge | VP, Community Support and Advocacy | Equinox Software, Inc. / The Evergreen Experts | phone: 1-877-OPEN-ILS (673-6457) | email: [EMAIL PROTECTED] | web: http://www.esilibrary.com
Re: [OPEN-ILS-DEV] problem logging in as admin
I did what is probably a Very Dumb Thing and just wholesale changed every instance of languageperl/language to Pg without checking the context in which those language tags were nested. Worse yet, I did so brazenly and without regard to keeping a backup file. So I'll go in and undo tomorrow morning, and I'm sure it will work swimmingly. jf On 10/4/07, Dan Scott [EMAIL PROTECTED] wrote: On 04/10/2007, John Fink [EMAIL PROTECTED] wrote: Heh. Okay, I did this (changing every instance of languageperl/language, and now really *nothing* works. No cstore or storage in ps wax. Starting Evergreen takes a lot longer, and on shutdown we get the following: Stopping OpenSRF C : opensrf-c: no process killed ugh. Dan, are you super extra sure that every perl needs to be Pg? :) jf On 10/4/07, Dan Scott [EMAIL PROTECTED] wrote: On 04/10/2007, Dan Scott [EMAIL PROTECTED] wrote: On 04/10/2007, John Fink [EMAIL PROTECTED] wrote: Okay, stopped, cleared logs, restarted with loglevel 5 in opensrf_core.xml. This is *probably* the problem; if it isn't, let me know and I'll send on the full logs. Probably something I messed up in the install... from osrfsys.log: [2007-10-4 6:41:22] open-ils.storage [DEBG:12469:Storage.pm:31:] Attempting to load OpenILS::Appli cation::Storage::Driver::pgsql ...[2007-10-4 6:41:22] open-ils.storage [ERR :12469:Storage.pm:35:] Can't load OpenILS::Application::Storage::Driver::pgsql! : Can't locate OpenILS/Application/Storage/Driver/pgsql.pm in @INC (@INC contains: /openils/lib/perl5 /etc/perl /usr/local/lib/perl/5.8.8 /usr/local/share/perl/5.8.8 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8 /usr/local/lib/site_perl .) at /openils/lib/perl5/OpenILS/Application/Storage.pm line 33.[2007-10-4 6:41:22] open-ils.storage [ERR :12469:Storage.pm:36 :] Can't load OpenILS::Application:: Storage::Driver::pgsql! : Can't locate OpenILS/Application/Storage/Driver/pgsql.pm in @INC (@INC contains: /openils/lib/perl5 /etc/perl /usr/local/lib/perl/5.8.8 /usr/local/share/perl/5.8.8 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8 /usr/local/lib/site_perl .) at /openils/lib/perl5/OpenILS/Application/Storage.pm line 33. [2007-10-4 6:41:22] open-ils.storage [ERR :12469:EX.pm :66:] * ! EXCEPTION ! * TYPE: OpenSRF::EX::PANICMess: System PANIC Mess: Can't load OpenILS::Application::Storage::Driver::pgsql! : Can't locate OpenILS/Application/Storage/Driver/pgsql.pm in @INC (@INC contains: /openils/lib/perl5 /etc/perl /usr/local/lib/perl/5.8.8 /usr/local/share/perl/5.8.8 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8 /usr/local/lib/site_perl .) at /openils/lib/perl5/OpenILS/Application/Storage.pm line 33. jf On 10/3/07, Bill Erickson [EMAIL PROTECTED] wrote: On 10/2/07, Mike Rylander [EMAIL PROTECTED] wrote: On 10/2/07, John Fink [EMAIL PROTECTED] wrote: Here's something tasty from gateway.log . Let me know if you want a look at any of the others. snip the exception That just means that storage is not starting properly. The most likely reason is mis-configured database settings for the storage app. One thing to check is that for c-store the driver is called pgsql, but for storage it's called Pg. UPDATE: as Dan suggests, sending the entire log will help diagnose the exact reason for this. /me steps outta Dan's way. For Perl processes, you'll sometimes get good information out of the Net::Server logs as well. The default location for the storage log is /openils/var/log/openils.storage_unix.log -bill Yeah! I think you've got it. Two possibilities come to mind: 1) You ran make install as root and forgot to chown -R opensrf:opensrf /openils after running the install. In this scenario, /openils/lib/perl5/OpenILS/Application/Storage/Driver/pgsql.pm exists, but does not have the permissions or ownership that allow the opensrf user to actually see the file. 2) /openils/lib/perl5/OpenILS/Application/Storage/Driver/pgsql.pm doesn't exist at all, which would be a more puzzling problem. Repeating the make install chown steps for Evergreen would be my first stab at resolving the problem. Let's see / hope it's simply problem #1 instead. Oh, actually it's problem #3! opensrf.xml has an entry for open-ils.storage, with a databases section. The driver for any application that has languageperl/language should be driverPg/driver. You probably have driverpgsql/driver, which would cause Evergreen to try and
Re: [OPEN-ILS-DEV] Staff Client Port
On 10/4/07, Karen Collier [EMAIL PROTECTED] wrote: Those sound like good options to consider. I think our tech guy was also wondering if Evergreen is or could be set up to limit staff client access to specified IP addresses. Is that an option, with the way Evergreen operates? If you run two gateway services, one for the OPAC, and one for the client, then you can do some filtering within the OPAC gateway to keep it away from API it doesn't need (currently this is very coarse, but we could make it fine-grained), and with the client gateway, you can setup Apache to serve only to a specific set of IP's or IP ranges. But even if a hacker can get at some API, he or she will still need an Evergreen account with sufficient permissions to do whatever it is they want to do. That's where the real vigilance is needed in my opinion: keeping staff from working on unsecure machines, from sharing accounts and passwords, and making them separate their work accounts from their patron accounts, etc. Thanks Karen! -- Jason Etheridge | VP, Community Support and Advocacy | Equinox Software, Inc. / The Evergreen Experts | phone: 1-877-OPEN-ILS (673-6457) | email: [EMAIL PROTECTED] | web: http://www.esilibrary.com
Re: [OPEN-ILS-DEV] problem logging in as admin
On 04/10/2007, John Fink [EMAIL PROTECTED] wrote: I did what is probably a Very Dumb Thing and just wholesale changed every instance of languageperl/language to Pg without checking the context in which those language tags were nested. Worse yet, I did so brazenly and without regard to keeping a backup file. So I'll go in and undo tomorrow morning, and I'm sure it will work swimmingly. jf On 10/4/07, Dan Scott [EMAIL PROTECTED] wrote: On 04/10/2007, John Fink [EMAIL PROTECTED] wrote: Heh. Okay, I did this (changing every instance of languageperl/language, and now really *nothing* works. No cstore or storage in ps wax. Starting Evergreen takes a lot longer, and on shutdown we get the following: Stopping OpenSRF C : opensrf-c: no process killed ugh. Dan, are you super extra sure that every perl needs to be Pg? :) jf On 10/4/07, Dan Scott [EMAIL PROTECTED] wrote: On 04/10/2007, Dan Scott [EMAIL PROTECTED] wrote: On 04/10/2007, John Fink [EMAIL PROTECTED] wrote: Okay, stopped, cleared logs, restarted with loglevel 5 in opensrf_core.xml. This is *probably* the problem; if it isn't, let me know and I'll send on the full logs. Probably something I messed up in the install... from osrfsys.log: [2007-10-4 6:41:22] open-ils.storage [DEBG:12469:Storage.pm:31:] Attempting to load OpenILS::Appli cation::Storage::Driver::pgsql ...[2007-10-4 6:41:22] open-ils.storage [ERR :12469:Storage.pm:35 :] Can't load OpenILS::Application::Storage::Driver::pgsql! : Can't locate OpenILS/Application/Storage/Driver/pgsql.pm in @INC (@INC contains: /openils/lib/perl5 /etc/perl /usr/local/lib/perl/5.8.8 /usr/local/share/perl/5.8.8 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8 /usr/local/lib/site_perl .) at /openils/lib/perl5/OpenILS/Application/Storage.pm line 33.[2007-10-4 6:41:22] open-ils.storage [ERR :12469:Storage.pm:36:] Can't load OpenILS::Application:: Storage::Driver::pgsql! : Can't locate OpenILS/Application/Storage/Driver/pgsql.pm in @INC (@INC contains: /openils/lib/perl5 /etc/perl /usr/local/lib/perl/5.8.8 /usr/local/share/perl/5.8.8 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8 /usr/local/lib/site_perl .) at /openils/lib/perl5/OpenILS/Application/Storage.pm line 33. [2007-10-4 6:41:22] open-ils.storage [ERR :12469:EX.pm :66:] * ! EXCEPTION ! * TYPE: OpenSRF::EX::PANICMess: System PANIC Mess: Can't load OpenILS::Application::Storage::Driver::pgsql! : Can't locate OpenILS/Application/Storage/Driver/pgsql.pm in @INC (@INC contains: /openils/lib/perl5 /etc/perl /usr/local/lib/perl/5.8.8 /usr/local/share/perl/5.8.8 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8 /usr/local/lib/site_perl .) at /openils/lib/perl5/OpenILS/Application/Storage.pm line 33. jf On 10/3/07, Bill Erickson [EMAIL PROTECTED] wrote: On 10/2/07, Mike Rylander [EMAIL PROTECTED] wrote: On 10/2/07, John Fink [EMAIL PROTECTED] wrote: Here's something tasty from gateway.log . Let me know if you want a look at any of the others. snip the exception That just means that storage is not starting properly. The most likely reason is mis-configured database settings for the storage app. One thing to check is that for c-store the driver is called pgsql, but for storage it's called Pg. UPDATE: as Dan suggests, sending the entire log will help diagnose the exact reason for this. /me steps outta Dan's way. For Perl processes, you'll sometimes get good information out of the Net::Server logs as well. The default location for the storage log is /openils/var/log/openils.storage_unix.log -bill Yeah! I think you've got it. Two possibilities come to mind: 1) You ran make install as root and forgot to chown -R opensrf:opensrf /openils after running the install. In this scenario, /openils/lib/perl5/OpenILS/Application/Storage/Driver/pgsql.pm exists, but does not have the permissions or ownership that allow the opensrf user to actually see the file. 2) /openils/lib/perl5/OpenILS/Application/Storage/Driver/pgsql.pm doesn't exist at all, which would be a more puzzling problem. Repeating the make install chown steps for Evergreen would be my first stab at resolving the problem. Let's see / hope it's simply problem #1 instead. Oh, actually it's problem #3! opensrf.xml has an entry for open-ils.storage, with a
[OPEN-ILS-DEV] Error adding gutenburg records
Hi again, I thought that while waiting for an epiphany on the client connection I'd try to load up some Gutenburg records following the instructions @ http://open-ils.org/dokuwiki/doku.php?id=evergreen-admin:importing:bibrecordss=marc%20records Step 2 fails with the following. Perhap's a related issue. $perl direct_ingest.pl ~/catalog.bre ~/catalog.ingest * ! EXCEPTION ! * TYPE: OpenSRF::EX::Session Mess: Session Error Mess: [EMAIL PROTECTED]/opensrf.settings IS NOT CONNECTED TO THE NETWORK!!! Loc.: 103 OpenSRF::Utils::SettingsClient Loc.: /openils/lib/perl5//OpenSRF/Utils/SettingsClient.pm Time: Thu Oct 4 15:40:22 2007 Any thoughts? -- F. Grant Johnson 566-0630 / [EMAIL PROTECTED] Skype ID = jetsongeorge Systems/Web Coordinator Robertson Library University of Prince Edward Island *** Attitude is IT! BEGIN:VCARD VERSION:2.1 X-GWTYPE:USER FN:Grant Johnson EMAIL;WORK;PREF:[EMAIL PROTECTED] N:Johnson;Grant END:VCARD
Re: [OPEN-ILS-DEV] problem logging in as admin
Actually, no, I changed every instance of string languageperl/language to languagePg/language. I wish I could blame this on lack of sleep, but I think it's just sheer boneheadedness that's the culprit. I will fix and report back. jf On 10/4/07, Jason Etheridge [EMAIL PROTECTED] wrote: I'm going to throw this one out to a lifeline - am I crazy, and just completely misleading John? I believe John misread you and changed every instance of this string languageperl/language to this string driverPg/driver, instead of looking for files that contain languageperl/language and changing any driverpgsql/driver to driverPg/driver. -- Jason Etheridge | VP, Community Support and Advocacy | Equinox Software, Inc. / The Evergreen Experts | phone: 1-877-OPEN-ILS (673-6457) | email: [EMAIL PROTECTED] | web: http://www.esilibrary.com -- http://libgrunt.blogspot.com -- library culture and technology.
[OPEN-ILS-DEV] osrf_system.c line 138 error
Hi everyone, Long time no see. I tried to install the 1.2.0 RC 4 on a 'new' FC6 machine this morning. I found the following in the osrfsys.log: opensrf 2007-10-04 12:55:57 [ERR::osrf_system.c:130:] * Running application opensrf.math opensrf 2007-10-04 12:55:57 [ERR:5556:osrf_system.c:130:] * Running application opensrf.dbmath opensrf 2007-10-04 12:55:57 [ERR:5557:osrf_system.c:130:] * Running application open-ils.auth opensrf 2007-10-04 12:55:57 [ERR:5558:osrf_system.c:130:] * Running application open-ils.cstore opensrf 2007-10-04 12:55:57 [ERR:5558:osrf_system.c:130:] * Running application open-ils.reporter-store It seems that in osrf_system.c the fork() does not work. I am wondering what could cause this kind of problem. Jason -- Jason Zou Lakehead University
Re: [OPEN-ILS-DEV] Error adding gutenburg records
Grant Johnson wrote: Hi again, I thought that while waiting for an epiphany on the client connection I'd try to load up some Gutenburg records following the instructions @ http://open-ils.org/dokuwiki/doku.php?id=evergreen-admin:importing:bibrecordss=marc%20records Step 2 fails with the following. Perhap's a related issue. $perl direct_ingest.pl ~/catalog.bre ~/catalog.ingest * ! EXCEPTION ! * TYPE: OpenSRF::EX::Session Mess: Session Error Mess: [EMAIL PROTECTED]/opensrf.settings IS NOT CONNECTED TO THE NETWORK!!! Loc.: 103 OpenSRF::Utils::SettingsClient Loc.: /openils/lib/perl5//OpenSRF/Utils/SettingsClient.pm Time: Thu Oct 4 15:40:22 2007 Any thoughts? Hi Grant, Check your ejabberd installation. It seems to me that your ejabberd service is not up. Jason -- Jason Zou Lakehead University
Re: [OPEN-ILS-DEV] Client Issues
On 04/10/2007, Grant Johnson [EMAIL PROTECTED] wrote:
Here's Environment specifics - I'm lazy too...
Ubuntu 7.04 workstation
OpenSRF Release 0.9
Fourth release candidate for Evergreen 1.2.0
IP address only - no fqdn
This last thing is probably what is killing you.
You have to use the fqdn; the output of: perl -MNet::Domain -e print
Net::Domain::hostfqdn(); is what is going to be used by the startup
scripts to determine what set of applications listed in opensrf.xml
are going to be started up. You can see one of the relevant lines in
OpenSRF::Utils::Config.pm, line 285:
my $host = $ENV{'OSRF_HOSTNAME'} || hostfqdn();
Okay, this suggests that you might be able to get away with setting an
environment variable to fake it out, but the instructions are pretty
explicit about the fqdn for a good reason. I'm pretty sure you won't
be able to get any further until you use the fqdn.
--
Dan Scott
Laurentian University
Re: [OPEN-ILS-DEV] Client Issues
OK Dan,
Thanks.
I was afraid of that. It looked like the fqdn was optional to me.
And that was fine for testing purposes.
I have the request in to set up the dns.
It's just not done yet.
Have a good weekend.
Cheers
F. Grant Johnson
Systems Coordinator
Robertson Library
University of Prince Edward Island
Dan Scott [EMAIL PROTECTED] 10/04/07 9:00 PM
On 04/10/2007, Grant Johnson [EMAIL PROTECTED] wrote:
Here's Environment specifics - I'm lazy too...
Ubuntu 7.04 workstation
OpenSRF Release 0.9
Fourth release candidate for Evergreen 1.2.0
IP address only - no fqdn
This last thing is probably what is killing you.
You have to use the fqdn; the output of: perl -MNet::Domain -e print
Net::Domain::hostfqdn(); is what is going to be used by the startup
scripts to determine what set of applications listed in opensrf.xml
are going to be started up. You can see one of the relevant lines in
OpenSRF::Utils::Config.pm, line 285:
my $host = $ENV{'OSRF_HOSTNAME'} || hostfqdn();
Okay, this suggests that you might be able to get away with setting an
environment variable to fake it out, but the instructions are pretty
explicit about the fqdn for a good reason. I'm pretty sure you won't
be able to get any further until you use the fqdn.
--
Dan Scott
Laurentian University
Re: [OPEN-ILS-DEV] Client Issues
On 04/10/2007, Grant Johnson [EMAIL PROTECTED] wrote: Hi Dan, I am unable to see the problem. Unless it truly is an authentication issue. Perhaps a typo in one on the config files. Here's a link to the .log that was created at level 5 http://people.upei.ca/mmmag/log/osrfsys.log Thanks Loads. Hi Grant: I do see very early in the log: opensrf 2007-10-04 12:09:54 [WARN:8257:osrf_stack.c:84:] !!! Received Jabber layer error message opensrf 2007-10-04 12:09:54 [WARN:8257:osrf_stack.c:94:] * Jabber Error is for top level remote id [EMAIL PROTECTED]/opensrf.settings], no one to send my message too!!! Back on Oct. 2nd, we figured out that John Fink (who was getting the same message in his logs when trying to connect via srfsh) had the wrong Jabber domain set in his .srfsh.xml. Maybe you're suffering a similar problem with the domains set in your opensrf_core.xml file? Feel free to send your opensrf_core.xml file our way. -- Dan Scott Laurentian University
Re: [OPEN-ILS-DEV] Error adding gutenburg records
It seems to me that there may be a problem loading the OpenSRF
modules. To get a list of those modules that are loaded, run srfsh
and enter the following:
request router opensrf.router.info.class.list
A complete list might look something like:
[EMAIL PROTECTED] srfsh
srfsh# request router opensrf.router.info.class.list
Received Data: [
open-ils.cstore,
open-ils.ingest,
open-ils.collections,
open-ils.reporter-store,
open-ils.storage,
open-ils.reporter,
open-ils.cat,
open-ils.actor,
open-ils.auth,
open-ils.penalty,
opensrf.dbmath,
open-ils.circ,
opensrf.math,
open-ils.search,
opensrf.settings,
open-ils.supercat
]
Request Completed Successfully
Request Time in seconds: 0.039344
srfsh#
If you only have the following:
opensrf.math
opensrf.dbmath
open-ils.cat
open-ils.search
open-ils.circ
open-ils.actor
open-ils.auth
open-ils.collections
but not:
opensrf.settings
open-ils.supercat
open-ils.storage
open-ils.penalty
open-ils.cstore
open-ils.ingest
open-ils.reporter
open-ils.reporter-store
then it's quite likely that the hosts section of opensrf.xml has an
incorrect hostname.
If you don't have any of:
open-ils.ingest,
open-ils.collections,
open-ils.storage,
open-ils.reporter,
open-ils.actor,
open-ils.penalty,
open-ils.circ,
open-ils.search,
opensrf.settings,
open-ils.supercat
then it's likely your perl workers aren't loading properly.
If you have those and nothing else, it's likely that your C services
aren't starting.
If you can't determine the exact issue, it would probably be helpful
if you turn your log levels up to 4 or 5, restart services, try your
function again, and send us the logs on failure. To restart services:
osrf_ctl.sh -d /tmp/ -c /openils/conf/opensrf_core.xml -a stop_all
osrf_ctl.sh -d /tmp/ -c /openils/conf/opensrf_core.xml -a start_all
Note that there are some rare reports of a race condition preventing
the system from starting up all at once. If you suspect your system
is having trouble starting, you can start the services individually
(pausing in between the steps):
osrf_ctl.sh -d /tmp/ -c /openils/conf/opensrf_core.xml -a start_router
osrf_ctl.sh -d /tmp/ -c /openils/conf/opensrf_core.xml -a start_perl
osrf_ctl.sh -d /tmp/ -c /openils/conf/opensrf_core.xml -a start_c
A quick way to send us the configuration and logs is to do the following:
user$ su opensrf
opensrf$ mkdir /tmp/openils
opensrf$ cp -Rv /openils/{var/log,conf} /tmp/openils
opensrf$ cd /tmp/openils/conf
/* Take this moment to go through the conf and sanitize it of any
sensitive passwords */
opensrf$ cd /tmp
opensrf$ tar -cjf openils.tar.bz2 openils/
Then you can simply send the openils.tar.bz2 file.
Hope this helps. Good Luck!
--Don
On 10/4/07, Grant Johnson [EMAIL PROTECTED] wrote:
Hi again,
I thought that while waiting for an epiphany on the client connection I'd try
to load up some Gutenburg records following the instructions @
http://open-ils.org/dokuwiki/doku.php?id=evergreen-admin:importing:bibrecordss=marc%20records
Step 2 fails with the following.
Perhap's a related issue.
$perl direct_ingest.pl ~/catalog.bre ~/catalog.ingest
* ! EXCEPTION ! *
TYPE: OpenSRF::EX::Session
Mess: Session Error
Mess: [EMAIL PROTECTED]/opensrf.settings IS NOT CONNECTED TO THE NETWORK!!!
Loc.: 103 OpenSRF::Utils::SettingsClient
Loc.: /openils/lib/perl5//OpenSRF/Utils/SettingsClient.pm
Time: Thu Oct 4 15:40:22 2007
Any thoughts?
--
F. Grant Johnson
566-0630 / [EMAIL PROTECTED]
Skype ID = jetsongeorge
Systems/Web Coordinator
Robertson Library
University of Prince Edward Island
***
Attitude is IT!
