date:20161028

Re: [Koha-devel] Development environment ,

2016-10-28 Thread Tomas Cohen Arazi

Ok, kohadevbox:master now runs on Windows. [1]

Enjoy your weekend fellows!

[1] Given the fact that the Debian image we are using doesn't ship the
Virtualbox Guest Additions, it is not possible to use the SYNC_REPO
feature. I'll hard-disable it until we figure.

El vie., 28 oct. 2016 a las 17:27, Tomas Cohen Arazi ()
escribió:

> Please try the 'inabox' branch to check my work on this :-D
>
> El vie., 28 oct. 2016 a las 15:43, Mark Tompsett ()
> escribió:
>
> Greetings,
>
> Tomas wrote:
> > Regarding MS operating systems,
> > I will try to make it possible to run the (ansible)
> > provisioning scripts inside kohadevbox itself
> > so there's no need for home-baked scripts besides just prefering them.
> > I will fill an issue in the kohadevbox repo for that.
>
> +maximusmillion
>
> GPML,
> Mark Tompsett
> ___
> Koha-devel mailing list
> Koha-devel@lists.koha-community.org
> http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel
> website : http://www.koha-community.org/
> git : http://git.koha-community.org/
> bugs : http://bugs.koha-community.org/
>
> --
> Tomás Cohen Arazi
> Theke Solutions (https://theke.io )
> ✆ +54 9351 3513384 <0351%2015-351-3384>
> GPG: B2F3C15F
>
-- 
Tomás Cohen Arazi
Theke Solutions (https://theke.io )
✆ +54 9351 3513384
GPG: B2F3C15F
___
Koha-devel mailing list
Koha-devel@lists.koha-community.org
http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Re: [Koha-devel] Development environment ,

2016-10-28 Thread Tomas Cohen Arazi

Please try the 'inabox' branch to check my work on this :-D

El vie., 28 oct. 2016 a las 15:43, Mark Tompsett ()
escribió:

> Greetings,
>
> Tomas wrote:
> > Regarding MS operating systems,
> > I will try to make it possible to run the (ansible)
> > provisioning scripts inside kohadevbox itself
> > so there's no need for home-baked scripts besides just prefering them.
> > I will fill an issue in the kohadevbox repo for that.
>
> +maximusmillion
>
> GPML,
> Mark Tompsett
> ___
> Koha-devel mailing list
> Koha-devel@lists.koha-community.org
> http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel
> website : http://www.koha-community.org/
> git : http://git.koha-community.org/
> bugs : http://bugs.koha-community.org/
>
-- 
Tomás Cohen Arazi
Theke Solutions (https://theke.io )
✆ +54 9351 3513384
GPG: B2F3C15F
___
Koha-devel mailing list
Koha-devel@lists.koha-community.org
http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Re: [Koha-devel] Development environment ,

2016-10-28 Thread Mark Tompsett

Greetings,

Tomas wrote:
> Regarding MS operating systems,
> I will try to make it possible to run the (ansible)
> provisioning scripts inside kohadevbox itself
> so there's no need for home-baked scripts besides just prefering them.
> I will fill an issue in the kohadevbox repo for that.

+maximusmillion

GPML,
Mark Tompsett
___
Koha-devel mailing list
Koha-devel@lists.koha-community.org
http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Re: [Koha-devel] Development environment ,

2016-10-28 Thread Tomas Cohen Arazi

Guys, any way you manage to run Koha for development is ok, and go ahead.
BUT some of us belive that the more similar to real-life deployment the
setup is, the better results we will have regarding the quality we provide.
That's why this kohadevbox was envisioned, and we suggest everyone to test
stuff on it. But it is not mandatory, just a cool development tool, that
aids our daily duties.

Regarding MS operating systems, I will try to make it possible to run the
(ansible) provisioning scripts inside kohadevbox itself so there's no need
for home-baked scripts besides just prefering them.

I will fill an issue in the kohadevbox repo for that.


El vie., 28 oct. 2016 a las 12:04, Jonathan Druart (<
jonathan.dru...@bugs.koha-community.org>) escribió:

> This is not the way to go, you should use kohadevbox instead
> https://github.com/digibib/kohadevbox/blob/master/README.md
>
>
> On Fri, 28 Oct 2016 at 14:50 Rodrigo Santellan 
> wrote:
>
> Karam,
>
> Put the content where you did the git clone and follow this steps:
>
>
>1. vagrant up (retrieve ubuntu 16.04)
>2. vagrant ssh
>3. sh /vagrant/provisioning/fullProvisioning.sh
>4. sh /vagrant/provisioning/makeKoha.sh
>5. sudo sh /vagrant/provisioning/apacheEnviroment.sh
>
>
> I separated on various files because I'm behind a proxy and have to do a
> lot of configuration manually. Perhaps there is some commands in that line
> of thought.
>
> Hope it helps!
>
> Regards
>
>
> On Fri, Oct 28, 2016 at 12:16 AM, Karam Qubsi 
> wrote:
>
> Hi Mark ,
> Thanks for the information
> it might be better just to install another operating system on my PC ,
> at the beginning I didn't know that there is a vagrant box for koha , so I
> just tried to install from vagrant library .I cloned debian and work on it
> by installing koha , but I don't know what happen maybe shared folder which
> looks it  has a very public permissions is not suitable for koha
> installation , I didn't try a lot maybe I will try first if it fail then I
> must have another operating system with my windows .
>
> By the way I also gave some tries to install koha on windows 10 ubuntu (*Bash
> on Ubuntu on Windows *) but it looks something went wrong not very clear
> what was the problem I didn't try a lot as well it was a month ago I forgot
> what was the problem but something with apache2 . I might also try again
> with it later .
>
> Thanks again .
>
>
>
> On Tue, Oct 25, 2016 at 9:00 PM, Mark Tompsett 
> wrote:
>
> Greetings,
>
> [SNIP]
> > Check out https://github.com/digibib/kohadevbox
> > Its a vagrant-based development-environment which are used by many Koha
> > developers.
>
> Owen replied:
> > As far as I know it is not possible to install kohadevbox on Windows.
>
> Only because the ansible provisioning script does not run on Windows.
> If your machine is booting some Linux based OS that runs ansible, then you
> should be able to get it to work.
>
> I still work based on stuff from this:
> https://wiki.koha-community.org/wiki/Koha_on_ubuntu_-_git
> It should be noted that Ubuntu instructions should run on Debian, with only
> the extra steps of having to:
> $ su -
> 
> # apt-get install sudo
> # adduser  sudo
> # exit
> $ exit
> Then log back in -- or something close.
>
> Granted, someone else may recommend gitify which may be faster, but I have
> never done it yet.
> https://github.com/mkfifo/koha-gitify/blob/master/README.md
>
> GPML,
> Mark Tompsett
>
> ___
> Koha-devel mailing list
> Koha-devel@lists.koha-community.org
> http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel
> website : http://www.koha-community.org/
> git : http://git.koha-community.org/
> bugs : http://bugs.koha-community.org/
>
>
>
>
> --
> *Karam Qubsi*
>
>
> ___
> Koha-devel mailing list
> Koha-devel@lists.koha-community.org
> http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel
> website : http://www.koha-community.org/
> git : http://git.koha-community.org/
> bugs : http://bugs.koha-community.org/
>
>
> ___
> Koha-devel mailing list
> Koha-devel@lists.koha-community.org
> http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel
> website : http://www.koha-community.org/
> git : http://git.koha-community.org/
> bugs : http://bugs.koha-community.org/
>
> ___
> Koha-devel mailing list
> Koha-devel@lists.koha-community.org
> http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel
> website : http://www.koha-community.org/
> git : http://git.koha-community.org/
> bugs : http://bugs.koha-community.org/

-- 
Tomás Cohen Arazi
Theke Solutions (https://theke.io )
✆ +54 9351 3513384
GPG: B2F3C15F
___
Koha-devel mailing list
Koha-devel@lists.koha-community.org

Re: [Koha-devel] Development environment ,

2016-10-28 Thread Jonathan Druart

This is not the way to go, you should use kohadevbox instead
https://github.com/digibib/kohadevbox/blob/master/README.md

On Fri, 28 Oct 2016 at 14:50 Rodrigo Santellan  wrote:

Karam,

Put the content where you did the git clone and follow this steps:

   1. vagrant up (retrieve ubuntu 16.04)
   2. vagrant ssh
   3. sh /vagrant/provisioning/fullProvisioning.sh
   4. sh /vagrant/provisioning/makeKoha.sh
   5. sudo sh /vagrant/provisioning/apacheEnviroment.sh

I separated on various files because I'm behind a proxy and have to do a
lot of configuration manually. Perhaps there is some commands in that line
of thought.

Hope it helps!

Regards

On Fri, Oct 28, 2016 at 12:16 AM, Karam Qubsi  wrote:

Hi Mark ,
Thanks for the information
it might be better just to install another operating system on my PC ,
at the beginning I didn't know that there is a vagrant box for koha , so I
just tried to install from vagrant library .I cloned debian and work on it
by installing koha , but I don't know what happen maybe shared folder which
looks it  has a very public permissions is not suitable for koha
installation , I didn't try a lot maybe I will try first if it fail then I
must have another operating system with my windows .

By the way I also gave some tries to install koha on windows 10 ubuntu (*Bash
on Ubuntu on Windows *) but it looks something went wrong not very clear
what was the problem I didn't try a lot as well it was a month ago I forgot
what was the problem but something with apache2 . I might also try again
with it later .

Thanks again .

On Tue, Oct 25, 2016 at 9:00 PM, Mark Tompsett  wrote:

Greetings,

[SNIP]
> Check out https://github.com/digibib/kohadevbox
> Its a vagrant-based development-environment which are used by many Koha
> developers.

Owen replied:
> As far as I know it is not possible to install kohadevbox on Windows.

Only because the ansible provisioning script does not run on Windows.
If your machine is booting some Linux based OS that runs ansible, then you
should be able to get it to work.

I still work based on stuff from this:
https://wiki.koha-community.org/wiki/Koha_on_ubuntu_-_git
It should be noted that Ubuntu instructions should run on Debian, with only
the extra steps of having to:
$ su -

# apt-get install sudo
# adduser  sudo
# exit
$ exit
Then log back in -- or something close.

Granted, someone else may recommend gitify which may be faster, but I have
never done it yet.
https://github.com/mkfifo/koha-gitify/blob/master/README.md

GPML,
Mark Tompsett

___
Koha-devel mailing list
Koha-devel@lists.koha-community.org
http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

-- 
*Karam Qubsi*

___
Koha-devel mailing list
Koha-devel@lists.koha-community.org
http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

___
Koha-devel mailing list
Koha-devel@lists.koha-community.org
http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/
___
Koha-devel mailing list
Koha-devel@lists.koha-community.org
http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Re: [Koha-devel] Development environment ,

2016-10-28 Thread Rodrigo Santellan

Karam,

Put the content where you did the git clone and follow this steps:


   1. vagrant up (retrieve ubuntu 16.04)
   2. vagrant ssh
   3. sh /vagrant/provisioning/fullProvisioning.sh
   4. sh /vagrant/provisioning/makeKoha.sh
   5. sudo sh /vagrant/provisioning/apacheEnviroment.sh


I separated on various files because I'm behind a proxy and have to do a
lot of configuration manually. Perhaps there is some commands in that line
of thought.

Hope it helps!

Regards


On Fri, Oct 28, 2016 at 12:16 AM, Karam Qubsi  wrote:

> Hi Mark ,
> Thanks for the information
> it might be better just to install another operating system on my PC ,
> at the beginning I didn't know that there is a vagrant box for koha , so I
> just tried to install from vagrant library .I cloned debian and work on it
> by installing koha , but I don't know what happen maybe shared folder which
> looks it  has a very public permissions is not suitable for koha
> installation , I didn't try a lot maybe I will try first if it fail then I
> must have another operating system with my windows .
>
> By the way I also gave some tries to install koha on windows 10 ubuntu (*Bash
> on Ubuntu on Windows *) but it looks something went wrong not very clear
> what was the problem I didn't try a lot as well it was a month ago I forgot
> what was the problem but something with apache2 . I might also try again
> with it later .
>
> Thanks again .
>
>
>
> On Tue, Oct 25, 2016 at 9:00 PM, Mark Tompsett 
> wrote:
>
>> Greetings,
>>
>> [SNIP]
>> > Check out https://github.com/digibib/kohadevbox
>> > Its a vagrant-based development-environment which are used by many Koha
>> > developers.
>>
>> Owen replied:
>> > As far as I know it is not possible to install kohadevbox on Windows.
>>
>> Only because the ansible provisioning script does not run on Windows.
>> If your machine is booting some Linux based OS that runs ansible, then you
>> should be able to get it to work.
>>
>> I still work based on stuff from this:
>> https://wiki.koha-community.org/wiki/Koha_on_ubuntu_-_git
>> It should be noted that Ubuntu instructions should run on Debian, with
>> only
>> the extra steps of having to:
>> $ su -
>> 
>> # apt-get install sudo
>> # adduser  sudo
>> # exit
>> $ exit
>> Then log back in -- or something close.
>>
>> Granted, someone else may recommend gitify which may be faster, but I have
>> never done it yet.
>> https://github.com/mkfifo/koha-gitify/blob/master/README.md
>>
>> GPML,
>> Mark Tompsett
>>
>> ___
>> Koha-devel mailing list
>> Koha-devel@lists.koha-community.org
>> http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel
>> website : http://www.koha-community.org/
>> git : http://git.koha-community.org/
>> bugs : http://bugs.koha-community.org/
>>
>
>
>
> --
> *Karam Qubsi*
>
>
> ___
> Koha-devel mailing list
> Koha-devel@lists.koha-community.org
> http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel
> website : http://www.koha-community.org/
> git : http://git.koha-community.org/
> bugs : http://bugs.koha-community.org/
>


easy_vagrant.tar.gz
Description: GNU Zip compressed data
___
Koha-devel mailing list
Koha-devel@lists.koha-community.org
http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Re: [Koha-devel] Development environment ,

2016-10-28 Thread Mark Tompsett

Greetings,

There is no point in losing a legal Windows license in order to play with Koha
in development.
Install virtualbox. (www.virtualbox.org)
Download the latest Debian ISO.
- I typically recommend using torrents for this, because internet connections
are lousy sometimes.
http://www.utorrent.com/intl/en/downloads/win
http://cdimage.debian.org/debian-cd/8.6.0/amd64/bt-cd/debian-8.6.0-amd64-netinst.iso.torrent
(64-bit)
http://cdimage.debian.org/debian-cd/8.6.0/i386/bt-cd/debian-8.6.0-i386-netinst.iso.torrent
(32-bit)
- I typically stick with the 64-bit version.

I then create a VM based on the ISO in virtualbox.
And then once that VM is up and running, I treat it as my machine to install
Koha.

I like to use Putty
(https://the.earth.li/~sgtatham/putty/latest/x86/putty-0.67-installer.msi) to
connect with the VM, because it makes cutting and pasting easier.
I also install sudo on the VM
$ su -
{root password}
# apt-get install sudo
...
# adduser {user name} sudo
# exit
$ exit
-- log back in.
That way, I can follow the installation instructions more easily.

I too have tried various native installations of Koha to Windows, but given the
technical issues, running a VM or losing your Windows is the only way currently.
My issue has always been a lack of Perl libraries. I suspect there exists a
refactoring which would run natively, but that would be a huge undertaking for
such a small gain.

GPML,
Mark Tompsett
___
Koha-devel mailing list
Koha-devel@lists.koha-community.org
http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

[Koha-devel] Uploading circulation related Data to Koha. Help required.

2016-10-28 Thread G.K.MANJUNATH



dear All,


We are experimenting with data migration from our existing library 
software to Koha.


We could successfully transfer the bibliographic data ( .mrc) after 
appropriate conversion and also the patrons' records with photos.


However, one important job remains unfinished.  We have downloaded 
circulation data in Excel format and trying to upload this to Koha. We do 
not know how to go about it .


I very appreciate  your help :

1. Is it possible to directly upload the circulation data stored either in
   a MS-Excel file or a text file?

   * We have 5 fields - date of transaction, Patron codes, barcode
 numbers, date of issue and due date. ( Will be converted to tab
 separated file if required )

2. If not, is there any way I can convert the circulation related data
stored in Excel or text file to .koc format so
that it can be uploaded to Koha using the utility developed by
'Bywater  solutions'.

3. What is the structure of .koc file ? Can any one please send
me a .koc file with few sample records in it ? From my understading
   it is a simple text file with fields separated by tab.

Any input in this regard is highly appreciated.

thanks in advance,

  G.K.Manjunath
  Chief Librarian
  Indira Gandhi Inst of Development Research
  Film City Road
  Santosh Nagar
  Goregaon(East )
  MUMBAI - 400 065
  INDIA
___
Koha-devel mailing list
Koha-devel@lists.koha-community.org
http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

[Koha-devel] Bug 16733 and related

2016-10-28 Thread Marcel de Rooy

Hi all,

This bug (and various connected ones) is about making changes in the Debian 
scripts that make life somewhat easier when you decide to use git on a package 
install.


I realize that this is a somewhat controversial area. Several people do not 
want git near the Debian installs. I understand their concerns in terms of 
safety and keeping etc in sync with Koha (to say it shortly). In terms of 
safety you should indeed protect your staff client (iptables, rewrite rule like 
bug 16922?) For a production install you should probably only use git to manage 
custom patches on top of your Koha install.


Currently, this bug is just silently ignored. Although more people than just me 
use gitified package installs (especially for testing).

The current approach on bug 16733 may not be the most optimal one.

So, I am just triggering the discussion here. How can we go further with some 
more consensus here or should I just obsolete this line of development ?


Thanks for any feedback,


Marcel

___
Koha-devel mailing list
Koha-devel@lists.koha-community.org
http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Re: [Koha-devel] [Koha] F5 Attacks

2016-10-28 Thread Chris Cormack

On 28 October 2016 at 20:52, Paul Poulain  wrote:
> comment/thought/question:
> this code will prevent any F5 by mistake, but an attacker who WANT to F5
> will just have to prevent javascript from being executed and "problem fixed"
> [for him] ?

No one doing a legitimate attack is going to be using a browser.
They'll just fire up curl-loader or siege on any of the hundreds of
tools and hit the url multiple times that way.

So trapping it for the mistake ones is a good start.

The rest really does boil down to sysadmin tasks. Even if we got Koha
to be the fastest thing in the world, you could still swamp it.
Tuning your apache server to only be able to answer to as many
requests as you can manage is the key.
Out of the box, it will do 150 concurrent, I doubt many people have
the RAM to handle 150 concurrent requests, tune that down to something
realistic.
That way an attack will still cause a DOS, but it wont OOM the
machine. So as soon as the requests stop, it will continue.

Chris
___
Koha-devel mailing list
Koha-devel@lists.koha-community.org
http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Re: [Koha-devel] [Koha] F5 Attacks

2016-10-28 Thread Paul Poulain

comment/thought/question:
this code will prevent any F5 by mistake, but an attacker who WANT to F5 
will just have to prevent javascript from being executed and "problem 
fixed" [for him] ?

Le 26/10/2016 à 17:29, SUZUKI Arthur a écrit :

Hi,

Please forward to koha-general since I didn't subscribed to that one yet.

We had the same issue at Lyon 3, we dealt with them by adding some 
code in the OpacuserJS syspref to disable page reloading until search 
result completes.

More documentation here : 
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15855

My colleague Olivier Crouzet have improved the code since :

// multi soumission Bouton Valider
$("#searchsubmit").click(function(){
$(this).text('en cours...').prop('disabled',true);
$("#searchform").submit();
});
// multi soumission Enter
var submitted;
$('#translControl1').bind('keyup',function() {
submitted = false;
});
$('#translControl1').bind('keydown',function(event) {
   code = event.keyCode||event.which||event.charCode||event.char||0;
   if(code == 13) {
   if (submitted == false) {
   submitted = true;
   $('#searchform').submit();
   $("#searchsubmit").text('en cours...');
   } else {
   event.preventDefault();
   event.returnValue = false;
   return false;
   }
   }
});

Maybe this could be integrated into core koha.
All the best,
Arthur

Le 26/10/2016 à 16:28, Paul A a écrit :

At 01:29 PM 10/26/2016 +, Marcel de Rooy wrote:

Content-Language: nl-NL
Content-Type: multipart/alternative;
boundary="_000_VI1PR0501MB2591816F386E0F9B467A10E1CEAB0VI1PR0501MB2591_"

More something for the developers list?

What Philippe here says, makes some sense to me. We could at least 
try to do something; what and how is another thing ;)

F5 DDoS can/should be mitigated at firewall -- see e.g. 

-- and while I somewhat agree that it would be "nice" for Koha to 
consider it, I see this more as a "server admin/setup" that has 
existed for many years now.

Best -- Paul

*Van:* Koha  namens Philippe Blouin 

*Verzonden:* woensdag 26 oktober 2016 14:52
*Aan:* Koha list
*Onderwerp:* Re: [Koha] F5 Attacks

I disagree.  If Koha is offered out of the box, and we take time to fix
security issues, then it's normal for users to expect "basic" 
attacks to

be taken care of.

More so, blocking IP is not a possibility if genuine users are involved
using a station from within the library.

I'm not saying you're wrong that it's mostly sysadmin work and not 
Koha,

but it doesn't mean nothing can be done.  From the apache's threads, I
found nothing useful (mostly derisive comments).  But we could at least
talk about it.

What about having a javascript preventing refresh on the page withing 5
sec of each other?  Needs to be done in a way that the refresh doesn't
restart the timer.

What about having the OPAC search be code where the refresh will
basically send nothing ?  The checkbox are filled, the request is sent
to the backend, but the frontend keeps nothing...  I'm just smoking
here, but I'm trying to induce some brainstorming in this 
interesting topic.

Philippe Blouin,
Responsable du développement informatique

Tél.  : (888) 604-2627
philippe.blo...@inlibro.com 

inLibro | pour esprit libre | www.inLibro.com 
 >

On 10/26/2016 07:13 AM, Jonathan Druart wrote:
> Hi,
> I don't think this can/must be fixed on Koha side.
> It's a sysadmin duty to take care of that.
> I would take a look at fail2ban to parse the web server access 
logs. But

> make sure not to block your X librarians using the same ip ;)
>
> On Wed, 26 Oct 2016 at 12:28 Pedro Amorim  
wrote:

>
>> I have tested this and the stress caused on the server is very 
severe. It
>> seems that for every request, a new zebra process is created and 
the server
>> will only respond when the last one is finished. This ofc will 
result in

>> time outs and eventually a crash in the server.
>>
>> This is a major critical issue IMO, anyone who knows about this 
has the
>> power to deny the service of any Koha online without using any 
additional

>> hacking/attacking software.
>>
>> The Koha I'm working on right now - still in development - is 
accessed
>> behind a proxy server, and I will attempt to solve the problem 
through
>> that, by limiting the requests from the same origin with very 
little time
>> between them. Still, even if I'm successful with this, the 
problem will

>> still lie in Koha.
>>
>> Anyone with some sort of insight is very welcome.
>>
>> Pedro Amorim
>>
>> 2016-10-26 8:24 GMT+00:00 clint.deckard

Re: [Koha-devel] Development environment ,

Re: [Koha-devel] Development environment ,

Re: [Koha-devel] Development environment ,

Re: [Koha-devel] Development environment ,

Re: [Koha-devel] Development environment ,

Re: [Koha-devel] Development environment ,

Re: [Koha-devel] Development environment ,

[Koha-devel] Uploading circulation related Data to Koha. Help required.

[Koha-devel] Bug 16733 and related

Re: [Koha-devel] [Koha] F5 Attacks

Re: [Koha-devel] [Koha] F5 Attacks

11 matches

Site Navigation

Mail list logo

Footer information