[Koha] Public library with student accounts

2018-08-28 Thread Chad Roseburg
Are there any public libraries working with schools to create accounts for use with various digital services, checkout ...etc.? Just wondering what your process is and what rights the accounts have. Currently, we upload the accounts without checkout privileges so they can just be purged each

Re: [Koha] Requesting feedback on changing the default behavior for loading the OPAC cart popup

2018-08-28 Thread Alex Buckley
Hi all Just a quick note to say thanks to everyone who gave their thoughts on the proposed change to the OPAC cart popup (bug 21174). Cheers, Alex ___ Koha mailing list http://koha-community.org Koha@lists.katipo.co.nz

Re: [Koha] Why are there two SIP2 ports in Koha?

2018-08-28 Thread Michael Kuhn
Hi Galen and Chris Many thanks for your quick answers! So we will however deactivate the unneeded SIP2 server on port 8023. > Of course SIP2 is hideously insecure so those ports should never be > exposed except on localhost and run through stunnel or a VPN. > > If you expose unencrypted SIP2

Re: [Koha] Why are there two SIP2 ports in Koha?

2018-08-28 Thread Chris Cormack
Some self check machines operate SIP2 over telnet instead of raw. It's no more secure but some older machines work that way. Of course SIP2 is hideously insecure so those ports should never be exposed except on localhost and run through stunnel or a VPN. If you expose unencrypted SIP2 traffic

Re: [Koha] Why are there two SIP2 ports in Koha?

2018-08-28 Thread Galen Charlton
Hi, On Tue, Aug 28, 2018 at 3:21 PM Michael Kuhn wrote: > Can someone please explain why there are two ports? Are these just > offering the same functionality in two different ways (telnet, RAW), or > is it maybe recommended to use telnet for some unknown security reasons? They offer the same

[Koha] Why are there two SIP2 ports in Koha?

2018-08-28 Thread Michael Kuhn
Hi When using the standard configuration in file "SIPconfig.xml" after enabling and starting the SIP2 servers there are two ports: We have just reconfigured the following line port="10.0.0.1:6001/tcp" and our 3M SelfCheck System Model 8420 can successfully connect and

Re: [Koha] Plack plus shibboleth

2018-08-28 Thread Tomas Cohen Arazi
I'm not familiar with the protocol workflow, but can't we just run some bits in CGI mode to avoid this? (I imagine this is about the callback PL). We already do this for other stuffs. El mar., 28 de ago. de 2018 07:39, Dave Sherohman escribió: > Plack::Auth::SSO::Shibboleth appears to fall into

Re: [Koha] Plack plus shibboleth

2018-08-28 Thread Dave Sherohman
Plack::Auth::SSO::Shibboleth appears to fall into the "just pushes the issue back a level... without actually solving the core issue" from my original post. Quoting the P::A::S::S docs, --- The real authenticating module lives inside the Apache web server, and is called "mod_shib". There are

Re: [Koha] Plack plus shibboleth

2018-08-28 Thread Matthias Meusburger
Hi, Using something like Plack::Auth::SSO::Shibboleth might provide a solution to this problem. https://metacpan.org/pod/Plack::Auth::SSO::Shibboleth Le 27/08/2018 à 20:12, Katrin Fischer a écrit : Hi Dave, I am not aware of a way to run Shibboleth with Plack in a safe way at the moment,