June 2011 - Koha-devel - lists.koha-community.org

How to get CAS based Single Sign On working?
by Koustubha Kale 25 May '15

25 May '15

Hi All, I have a situation where we have a main website based on Joomla. This Joomla site uses CAS to authenticate users. We would like users ( who have already logged in to the Joomla site via CAS) to be able to follow a link to Koha site and be logged in automatically ( e.g. Single Sign On ). I have got simple CAS ( not proxy CAS ) working with Koha ( version 3.2.6 ) using the same CAS server as used by Joomla site. Still when I login to Joomla site with CAS, and then go to Koha and click on login and follow the CAS login link, I am asked to fill up CAS login information again. How can this be avoided by using CAS SSO? I have read through http://wiki.koha-community.org/wiki/SSO_CAS_improvements and am confused by the statement "Note: simple sso cas support (no proxy) has been done already by biblibre, is in testing and should be released in Koha 3.2" in there. Does this statement mean that SSO is possible with simple CAS? If yes how to set it up? If not, I have also read through bugs 6012, 5630 and the CAS Proxy examples. Frankly I haven't been able to figure out how I can achieve the above required functionality based on all the reading. Any help is much appreciated.. Another related query is, Is it possible to automatically create users in Koha once they have authenticated with CAS? Regards, Koustubha Kale Anant Corporation Contact Details : Address : 103, Armaan Residency, R. W Sawant Road, Nr. Golden Dyes Naka, Thane (w), Maharashtra, India, Pin : 400601. TeleFax : +91-22-21720108, +91-22-21720109 Mobile : +919820715876 Website : http://www.anantcorp.com Blog : http://www.anantcorp.com/blog/?author=2

3 3

koha-3.00.00 make fails
by Rick Welykochy 28 Dec '13

28 Dec '13

Hi all, I have downloaded http://download.koha.org/koha-3.00.00.tar.gz and began installing it on Debian/etch (in a Linux vserver environment). 0. FINE: cd koha-3.00.00 1. FINE: perl Makefile.PL 2. FAIL: make : : : Manifying blib/man3/C4::UploadedFile.3pm Manifying blib/man3/C4::BackgroundJob.3pm Manifying blib/man3/opac::opac-dictionary.3pm Manifying blib/man3/serials::member-search.3pm /usr/bin/perl "-Iblib/arch" "-Iblib/lib" fix-perl-path.PL blib /usr/bin/perl "-Iblib/arch" "-Iblib/lib" rewrite-config.PL blib/KOHA_CONF_DIR/koha-conf.xml Bad arg length for Socket::inet_ntoa, length is 0, should be 4 at rewrite-config.PL line 67. make: *** [blib/KOHA_CONF_DIR/koha-conf.xml] Error 255 Any ideas what went wrong and how to fix? Aside: there were a couple of other problems with this "out of the box" debian based install of Koha 3.0 which had to be fixed along the way, e.g. seven missing perl modules and libgd not found. I'll report on the entire process from unpacking to a running Koha/3.00.00 once I get to the end. cheers rickw -- ________________________________________________________________ Rick Welykochy || Praxis Services || Internet Driving Instructor The manual said Windows XP/SP2 or better so I installed Linux.

4 5

Restructuring C4
by Ian Walls 21 Sep '11

21 Sep '11

Fellow Developers, Last night, I stayed up late running circ/circulation.pl through NYTProf, to get an idea where we may be able to optimize circulation for speed. After much frustration (darn session IDs...), I was able to get a report. The results were... not exactly what I expected. It seems that much of the time spent running circ/circulation.pl is spent BEGINing the various C4 modules, multiple times. C4::Items, for example, is BEGuN 14 times in the execution of circ/circulation.pl. More stats: C4::Accounts - 8 BEGINs C4::Acquisition - 14 BEGINs C4::Auth - 14 BEGINs C4::Biblio - 14 BEGINs C4::Branch - 5 BEGINs C4::Circulation - 22 BEGINs C4::Context - 18 BEGINs C4::Dates - 12 BEGINs ... and so on. Even modules like C4::XSLT, C4::SMS, C4::Suggestions, and C4::Search::PazPar2 are BEGuN several times, without any calls to any of their subroutines. Some modules, it seems, don't have an END at the end... I was also able to get a Graphviz file out, showing all the package calls (folks may remember my keen interest in such things from KohaCon). Running it through sccmap to detect cycles, I found a very long one between several of the modules. About 8 packages long. All this indicate to me that we REALLY need to start thinking about imposing some kind of structure on C4. I'm thinking something with two-levels: Level 1 : Calls to the database, other direct interaction with stored data Level 2: Calls to Level 1 functions to manipulate data all our scripts would then be modified to call only Level 2, which would take care of talking to Level 1. At the worst, a particular Level 1 package would be BEGuN as many times as there were Level 2 packages BEGuN in the script (and we could certainly do better). It would eliminate all the cycles, as well. I can provide access to my report for anyone who needs it, or more details about how I obtained it. Whatever any of you need to keep this conversation going. This is a big deal, in my opinion, and we need to start detangling our code before too much long, or we're going to get seriously bogged down. Cheers, -Ian -- Ian Walls Lead Development Specialist ByWater Solutions Phone # (888) 900-8944 http://bywatersolutions.com ian.walls(a)bywatersolutions.com Twitter: @sekjal

11 25

Access URL from opac-results.tt
by Zachary Spalding 12 Aug '11

12 Aug '11

In koha 3.2 I used to be able to access the 856$u filed with the  variable in the opac-results.tmpl file. Can someone give me a hint on how I can access it in 3.4, in the opac-results.tt file? Thanks -- Zachary Spalding Systems Manager Southeastern NY Library Resources Council 21 S. Elting Corners Rd Highland, NY 12528 Phone: 845-883-9065x11 Fax: 845-883-9483 Email: spalding(a)senylrc.org

2 1

To update about
by Zeno Tajoli 26 Jul '11

26 Jul '11

Hi to all, I need to update the list of Italian translators in 3.4 and 3.6 From: <li><strong>Italiano (Italian)</strong> Zeno Tajoli, Pietro Gozzetti and Paolo Pozzan</li> to: <li><strong>Italiano (Italian)</strong> Stefano Bargioni, Paolo Bizzarri and Zeno Tajoli for 3.2 and 3.4. For 3.0 Federica Benetello and Zeno Tajoli</li> Is it enough or do I need to send a patch to koha-patches ? Bye Zeno Tajoli -- Dott. Zeno Tajoli tajoliAT_SPAM_no_prendiATcilea.it fax +39 02 2135520 CILEA - Consorzio Interuniversitario http://www.cilea.it/disclaimer

2 2

3.4.x String Freeze and Roadmap Update
by Chris Nighswonger 15 Jul '11

15 Jul '11

Hi all, The monthly 3.4.x release is a few days behind schedule. As of 0000 UTC 20 June 2011, 3.4.x is in a string freeze. 27 June 2011 will be the date of the 3.4.2 release. At this point the only patches that touch strings which will be accepted are blocker and security fixes. Non-string patches will still be applied up to the date of the release. Kind Regards, Chris Nighswonger Release Maintainer Koha 3.2.x/3.4.x

2 3

POLL : Kohacon11 volunteers followup meeting dates
by Koustubha Kale 09 Jul '11

09 Jul '11

In the last Kohacon11 volunteers meeting on 29th June 2011, we asked people to drive participation, paper submission and review of papers during the next Koha general IRC meeting on 6th July. We decided to hold a followup meeting of Kohacon11 volunteers one week thereafter to review what was discussed during the general meeting. So I am proposing a few dates and times here please make your choice. http://www.doodle.com/bqg2wkifrkvu6gk2 Regards, Koustubha Kale Anant Corporation Contact Details : Address : 103, Armaan Residency, R. W Sawant Road, Nr. Golden Dyes Naka, Thane (w), Maharashtra, India, Pin : 400601. TeleFax : +91-22-21720108, +91-22-21720109 Mobile : +919820715876 Website : http://www.anantcorp.com Blog : http://www.anantcorp.com/blog/?author=2

2 1

security question about injection in Zebra
by Frère Sébastien Marie 08 Jul '11

08 Jul '11

Hi, Seeing the patch proposed by Marcel de Rooy for bug 6536, a question arrived in my mind about injection of code in Zebra. Does someone is aware about something like that ? Next an extract of patch (and after my comments): On Thu, Jun 30, 2011 at 01:01:01PM +0000, Marcel de Rooy wrote: > Z3950 Enhancements: SRU search targets, MARC conversion and additional XSLT processing > > diff --git a/C4/Breeding.pm b/C4/Breeding.pm > index 9003f9a..cb04e14 100644 > --- a/C4/Breeding.pm > +++ b/C4/Breeding.pm [...] > +sub build_query { > + my $nterms=0; > + my $title = $input->param('title')||''; > + my $author = $input->param('author')||''; > + my $isbn = $input->param('isbn')||''; > + my $lccall = $input->param('lccall')||''; > + my $subject = $input->param('subject')||''; > + my $dewey = $input->param('dewey')||''; > + my $controlnumber = $input->param('controlnumber')||''; > + my $stdid = $input->param('stdid')||''; > + my $srchany = $input->param('srchany')||''; > + > + if ($isbn) { > + $zquery = "\@or \@attr 1=8 \"$isbn\" \@attr 1=7 \"$isbn\" "; > + $squery = "([isbn]=\"$isbn\" or [issn]=\"$isbn\") and "; > + $nterms++; > + } > + if ($title) { > + utf8::decode($title); > + $zquery .= "\@attr 1=4 \"$title\" "; > + $squery .= "[title]=\"$title\" and "; > + $nterms++; > + } [...] First, some notes about code: - alls variables seems to come from userdata (input query), so are user controlled. - if one contains a double-quote escape in done (and could result invalid query) About zebra possible exploits (untested): - yaz-client (Z39.50 client) permit bang pattern for shell invocation, does the library too ? - does zebra permit anonymous index write ? (resulting index corruption, possible affection of koha for places where data are read from zebra, and use 'as-it') - or connection to another server ? (could expose local network area) - ... If someone have other ideas... If zebra library permit use of placeholders, we should use them. Else perhaps develop a small function for variable escapment before inclusion in zebra query. Thanks. -- Frère Sébastien Marie Abbaye Notre Dame de La Trappe 61380 Soligny-la-Trappe Tél: 02.33.84.17.00 Fax: 02.33.34.98.57 Web: http://www.latrappe.fr/

3 2

KohaCon11 - Programme Ideas wanted
by Joann Ransom 04 Jul '11

04 Jul '11

Hi all, We are calling for help for KohaCon11. Occurs to some of us that people might not realise that what they 'do' might be interesting to the rest of us. So, to that end, we are inviting people to submit ideas of presentatins they'd like to see at KohaCon11 in the hope that the rest of you clever people will think "I can talk about that" and step forward and submit abstracts for presentations. The full post can be found here: http://koha-community.org/kohacon11-programme-ideas-wanted/ Cheers Jo. -- Joann Ransom RLIANZA Head of Libraries, Horowhenua Library Trust.

2 1

FW: [Koha-bugs] [Bug 6536] Z3950 Enhancements: SRU targets, MARC conversion, additional XSLT processing
by Marcel de Rooy 30 Jun '11

30 Jun '11

This patch also needs some testing at the UNIMARC side. Anyone of BibLibre perhaps? With thanks for your conversion to UNIMARC again! -----Oorspronkelijk bericht----- Van: koha-bugs-bounces(a)lists.koha-community.org [mailto:koha-bugs-bounces@lists.koha-community.org] Namens bugzilla-daemon(a)bugs.koha-community.org Verzonden: donderdag 30 juni 2011 15:09 Aan: koha-bugs(a)lists.koha-community.org Onderwerp: [Koha-bugs] [Bug 6536] Z3950 Enhancements: SRU targets, MARC conversion, additional XSLT processing http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6536 M. de Rooy <m.de.rooy(a)rijksmuseum.nl> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 |PATCH-Sent Patch Status|--- |Needs Signoff --- Comment #3 from M. de Rooy <m.de.rooy(a)rijksmuseum.nl> 2011-06-30 13:09:07 UTC --- Z3950 Enhancements include SRU search targets, MARC conversion, additional XSLT processing and some code refactoring. The MARC21 to UNIMARC conversion and additional XSLT processing has actually been created by BibLibre and is incorporated into these two patches. A testplan with 12 steps is included: see http://wiki.koha-community.org/wiki/Z3950_RFC This patch needs a signoff for MARC21 and another one for UNIMARC. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug. _______________________________________________ Koha-bugs mailing list Koha-bugs(a)lists.koha-community.org http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/

1 0