July 2013 - Koha-devel - lists.koha-community.org

How to get CAS based Single Sign On working?
by Koustubha Kale 25 May '15

25 May '15

Hi All, I have a situation where we have a main website based on Joomla. This Joomla site uses CAS to authenticate users. We would like users ( who have already logged in to the Joomla site via CAS) to be able to follow a link to Koha site and be logged in automatically ( e.g. Single Sign On ). I have got simple CAS ( not proxy CAS ) working with Koha ( version 3.2.6 ) using the same CAS server as used by Joomla site. Still when I login to Joomla site with CAS, and then go to Koha and click on login and follow the CAS login link, I am asked to fill up CAS login information again. How can this be avoided by using CAS SSO? I have read through http://wiki.koha-community.org/wiki/SSO_CAS_improvements and am confused by the statement "Note: simple sso cas support (no proxy) has been done already by biblibre, is in testing and should be released in Koha 3.2" in there. Does this statement mean that SSO is possible with simple CAS? If yes how to set it up? If not, I have also read through bugs 6012, 5630 and the CAS Proxy examples. Frankly I haven't been able to figure out how I can achieve the above required functionality based on all the reading. Any help is much appreciated.. Another related query is, Is it possible to automatically create users in Koha once they have authenticated with CAS? Regards, Koustubha Kale Anant Corporation Contact Details : Address : 103, Armaan Residency, R. W Sawant Road, Nr. Golden Dyes Naka, Thane (w), Maharashtra, India, Pin : 400601. TeleFax : +91-22-21720108, +91-22-21720109 Mobile : +919820715876 Website : http://www.anantcorp.com Blog : http://www.anantcorp.com/blog/?author=2

3 3

koha-3.00.00 make fails
by Rick Welykochy 28 Dec '13

28 Dec '13

Hi all, I have downloaded http://download.koha.org/koha-3.00.00.tar.gz and began installing it on Debian/etch (in a Linux vserver environment). 0. FINE: cd koha-3.00.00 1. FINE: perl Makefile.PL 2. FAIL: make : : : Manifying blib/man3/C4::UploadedFile.3pm Manifying blib/man3/C4::BackgroundJob.3pm Manifying blib/man3/opac::opac-dictionary.3pm Manifying blib/man3/serials::member-search.3pm /usr/bin/perl "-Iblib/arch" "-Iblib/lib" fix-perl-path.PL blib /usr/bin/perl "-Iblib/arch" "-Iblib/lib" rewrite-config.PL blib/KOHA_CONF_DIR/koha-conf.xml Bad arg length for Socket::inet_ntoa, length is 0, should be 4 at rewrite-config.PL line 67. make: *** [blib/KOHA_CONF_DIR/koha-conf.xml] Error 255 Any ideas what went wrong and how to fix? Aside: there were a couple of other problems with this "out of the box" debian based install of Koha 3.0 which had to be fixed along the way, e.g. seven missing perl modules and libgd not found. I'll report on the entire process from unpacking to a running Koha/3.00.00 once I get to the end. cheers rickw -- ________________________________________________________________ Rick Welykochy || Praxis Services || Internet Driving Instructor The manual said Windows XP/SP2 or better so I installed Linux.

4 5

Koha-index-daemon
by Partha Mukhopadhyay 01 Aug '13

01 Aug '13

3 4

Permission vs System preference
by Heather Braum (NEKLS) 31 Jul '13

31 Jul '13

We are interested at some point in a development that would hide the "Edit items in batch"; "Delete items in batch"; and "Delete all items" options in the Edit menu of the detail.pl page through either a user permission or a system preference. It was suggested I contact the developers list to see what community developers think about this as a permission vs system preference. In our consortial environment, these are not good features to have available to anyone. Right now we have these options hidden through some hardcoding, but of course this has to be added manually after every upgrade by our support vendor. Any thoughts/input would be greatly appreciated. Thanks, Heather Braum Digital and Technical Services Librarian Northeast Kansas Library System hbraum(a)nekls.org "The illiterate of the 21st century will not be those cannot read and write, but those who cannot learn, unlearn, and relearn." ~Alvin Toffler, *Rethinking the Future*

3 2

Catalogue Statistics report - limiting by dewey number
by Nicholas van Oudtshoorn 31 Jul '13

31 Jul '13

Greetings all! Got a bit of a question here. As part of our academic (re)accreditation process, we need to provide a list of books aquired in a specific subject area over the past year. Fantastic - the Catalogue Report should do all that. (Well, it should do it when the patches in bug report 10608 are applied!) My problem: how to restrict the report according to the dewey number of the items. (This is, I think, the easiest way for us to show which books relevant to a specific subject area). However, looking at the code, it appears in catalogue_stats.pl that $has_dewey is disabled (in fact, the comment says it doesn't work - not sure why it and its remnants remain in both the perl and the templates???) So, unable to filter on dewey number, I've taken to filtering on the koha full call number. The problem is that I want to filter on the dewey part of the call number - not the full string. And this causes problems. Let me demonstrate. Using the current code path, if I'm searching for items between 227.0 and 227.15, I get 299 records (see APPENDIX A). Changing the code to cast the call number to a float as below (which gives me just the dewey localtion) if (@$filters[4]){ @$filters[4]=~ s/\*/%/g ; $strcalc .= " AND items.itemcallnumber >= (0+" . $dbh->quote(@$filters[4]) .")"; } if (@$filters[5]){ @$filters[5]=~ s/\*/%/g; $strcalc .= " AND items.itemcallnumber <= (0+" . $dbh->quote(@$filters[5]) .")"; } now gives me 308 records (see APPENDIX B) - including ones like 227 BRU where the decimal component (227.0) is implied. My question (at last!): is changing the code as above the right way to go about fixing this problem? (I realise that ideally one would want to make it an option in the report....). This same issue applies to other report modules - such as the circulation stats.... Any suggestions? How do other libraries deal with this? God bless, Nicholas van Oudtshoorn IT - Perth Bible College http://library.pbc.wa.edu.au/ APPENDIX A: THE ORIGINAL CODE PATH'S OUTPUT ---------------------------------------------------------------------------------------- items.itemcallnumber / items.homebranch TOTAL 227.02 BAR 1 227.02 BIR 1 227.02 DAV 1 227.02 DOD 1 227.02 DUN 1 227.02 ELL 1 227.02 ENG 1 227.02 GOM 1 227.02 GOO 1 227.02 GOR 1 227.02 GRI 1 227.02 KRU 1 227.02 LOA 1 227.02 MCR 1 227.02 MEY 1 227.02 NEY 1 227.02 OBR 1 227.02 RAM 1 227.02 REY 2 227.02 RID 1 227.02 ROB 1 227.02 SCH 3 227.02 SEI 1 227.02 SOB 1 227.02 STE 1 227.02 STR 2 227.02 TOI 2 227.02 WIL 1 227.02 WRI 3 227.02 YOU 1 227.02 ZIE 1 227.03 HAW 1 227.05 GAS 2 227.06 CAM 1 227.06 ELL 1 227.06 FOW 1 227.06 GRO 1 227.06 HAF 1 227.06 HAN 2 227.06 KEC 1 227.06 KRE 1 227.06 MAR 1 227.06 REA 1 227.06 SCR 1 227.06 STE 1 227.06 THI 1 227.06 WHI 1 227.066 BAN 2 227.066 DOT 1 227.066 HAN 1 227.066 REI 1 227.07 WES 1 227.08 WIL 1 227.08251 MUR 1 227.09 ARM 1 227.09 CON 2 227.09 GRO 1 227.09 HOW 1 227.09 MEI 1 227.09 OAK 1 227.09 PIN 1 227.09 RIC 1 227.09 SCH 1 227.091 RAM 1 227.092 DUN 2 227.092 OBR 1 227.092 WHI 1 227.1 ACH 1 227.1 BAR 10 227.1 BAR v.1 1 227.1 BAR v.2 1 227.1 BAR v.3 1 227.1 BAR v.4 1 227.1 BES 3 227.1 BLA 3 227.1 BOI 1 227.1 BOI v.3c.1 1 227.1 BOW 1 227.1 BRA 1 227.1 BRA v.6c.2 1 227.1 BRI 1 227.1 BRU 3 227.1 BUR 1 227.1 BYR 1 227.1 CHA 1 227.1 COA 1 227.1 COF 1 227.1 COS 1 227.1 CRA 3 227.1 DAV 1 227.1 DAW 1 227.1 DEH 1 227.1 DEW 1 227.1 DOD 4 227.1 DON 1 227.1 DUN v.1 1 227.1 DUN v.2 1 227.1 DYK 1 227.1 EDW 2 227.1 ELL 2 227.1 EPP 2 227.1 EPP V.1 1 227.1 EPP V.2 1 227.1 FIT 1 227.1 FOR 1 227.1 GOD v.1c.1 1 227.1 GOD v.2c.1 1 227.1 GRA 1 227.1 GRI 1 227.1 HAL 2 227.1 HAR 2 227.1 HEN 2 227.1 HOD 2 227.1 HOY 1 227.1 HUN 4 227.1 IRO 2 227.1 JOH 2 227.1 JOH v.1 1 227.1 JOH v.2 1 227.1 KAS 2 227.1 KEE 1 227.1 KEL 1 227.1 KIR 1 227.1 KRO 1 227.1 KRU 1 227.1 KUN 1 227.1 LEN 1 227.1 LLO v.11 1 227.1 LLO v.12 1 227.1 LLO v.1c.1 1 227.1 LLO v.2c.1 1 227.1 LLO v.3 1 227.1 LLO v.3c.2 1 227.1 LLO v.4 1 227.1 LLO v.4c.2 1 227.1 LLO v.5c.1 1 227.1 LLO v.5c.2 1 227.1 LLO v.6 1 227.1 LLO v.6c.2 1 227.1 LLO v.7 1 227.1 LLO v.7c.2 1 227.1 LLO v.8 1 227.1 LLO v.9c.1 1 227.1 LOA 1 227.1 LUT 2 227.1 MAC 1 227.1 MAC v.1c.1 1 227.1 MAC v.2c.1 1 227.1 MAL 1 227.1 MAT 1 227.1 MCC 2 227.1 MCD 1 227.1 MEE 1 227.1 MIT 2 227.1 MOO 7 227.1 MOR 3 227.1 MOU 6 227.1 MUR 2 227.1 MUR v.1c.2 1 227.1 NAS 3 227.1 NEW 2 227.1 NYG 2 227.1 NYS 1 227.1 OLS 1 227.1 OSB 1 227.1 PAI 1 227.1 PAL 1 227.1 PAT 1 227.1 PBC v.10 1 227.1 PBC v.1c.1 1 227.1 PBC v.2c.1 1 227.1 PBC v.3c.1 1 227.1 PBC v.4c.1 1 227.1 PBC v.5c.1 1 227.1 PBC v.6c.1 1 227.1 PBC v.7c.1 1 227.1 PBC v.8c.1 1 227.1 PBC v.9c.1 1 227.1 PET 1 227.1 PHI 1 227.1 PHI v.1 1 227.1 PHI v.2 1 227.1 RAT 1 227.1 RHY 1 227.1 RID 3 227.1 SAN 3 227.1 SCH 5 227.1 SCO 1 227.1 SCR 1 227.1 SEC 1 227.1 SHU 1 227.1 SPR 1 227.1 STE 2 227.1 STH 1 227.1 STO 3 227.1 STO v.1c.1 1 227.1 STO v.1c.2 1 227.1 STU 1 227.1 THO v.1c.1 1 227.1 THO v.2c.1 1 227.1 THO v.3c.1 1 227.1 THR 1 227.1 TUC 1 227.1 VIN 1 227.1 WIE 2 227.1 WIL 1 227.1 WUE 3 227.1 ZIE 1 227.104 IRO 1 227.105 SWA 1 227.106 DEI 1 227.106 GAT 1 227.106 GRE 1 227.106 MOU 1 227.106 SAB 1 227.106 SOD 1 227.107 PAU 1 227.108 WAL 1 227.12 GAM 1 TOTAL 299 APPENDIX B: THE MODIFIED CODE PATH'S OUTPUT: --------------------------------------------------------------------------------- items.itemcallnumber / items.homebranch TOTAL 227 BRU 1 227 FAL 1 227 HEB 1 227 LAK 1 227 MAC 1 227 RIC 1 227 SHE 1 227 STE 1 227 WAY 1 227.02 BAR 1 227.02 BIR 1 227.02 DAV 1 227.02 DOD 1 227.02 DUN 1 227.02 ELL 1 227.02 ENG 1 227.02 GOM 1 227.02 GOO 1 227.02 GOR 1 227.02 GRI 1 227.02 KRU 1 227.02 LOA 1 227.02 MCR 1 227.02 MEY 1 227.02 NEY 1 227.02 OBR 1 227.02 RAM 1 227.02 REY 2 227.02 RID 1 227.02 ROB 1 227.02 SCH 3 227.02 SEI 1 227.02 SOB 1 227.02 STE 1 227.02 STR 2 227.02 TOI 2 227.02 WIL 1 227.02 WRI 3 227.02 YOU 1 227.02 ZIE 1 227.03 HAW 1 227.05 GAS 2 227.06 CAM 1 227.06 ELL 1 227.06 FOW 1 227.06 GRO 1 227.06 HAF 1 227.06 HAN 2 227.06 KEC 1 227.06 KRE 1 227.06 MAR 1 227.06 REA 1 227.06 SCR 1 227.06 STE 1 227.06 THI 1 227.06 WHI 1 227.066 BAN 2 227.066 DOT 1 227.066 HAN 1 227.066 REI 1 227.07 WES 1 227.08 WIL 1 227.08251 MUR 1 227.09 ARM 1 227.09 CON 2 227.09 GRO 1 227.09 HOW 1 227.09 MEI 1 227.09 OAK 1 227.09 PIN 1 227.09 RIC 1 227.09 SCH 1 227.091 RAM 1 227.092 DUN 2 227.092 OBR 1 227.092 WHI 1 227.1 ACH 1 227.1 BAR 10 227.1 BAR v.1 1 227.1 BAR v.2 1 227.1 BAR v.3 1 227.1 BAR v.4 1 227.1 BES 3 227.1 BLA 3 227.1 BOI 1 227.1 BOI v.3c.1 1 227.1 BOW 1 227.1 BRA 1 227.1 BRA v.6c.2 1 227.1 BRI 1 227.1 BRU 3 227.1 BUR 1 227.1 BYR 1 227.1 CHA 1 227.1 COA 1 227.1 COF 1 227.1 COS 1 227.1 CRA 3 227.1 DAV 1 227.1 DAW 1 227.1 DEH 1 227.1 DEW 1 227.1 DOD 4 227.1 DON 1 227.1 DUN v.1 1 227.1 DUN v.2 1 227.1 DYK 1 227.1 EDW 2 227.1 ELL 2 227.1 EPP 2 227.1 EPP V.1 1 227.1 EPP V.2 1 227.1 FIT 1 227.1 FOR 1 227.1 GOD v.1c.1 1 227.1 GOD v.2c.1 1 227.1 GRA 1 227.1 GRI 1 227.1 HAL 2 227.1 HAR 2 227.1 HEN 2 227.1 HOD 2 227.1 HOY 1 227.1 HUN 4 227.1 IRO 2 227.1 JOH 2 227.1 JOH v.1 1 227.1 JOH v.2 1 227.1 KAS 2 227.1 KEE 1 227.1 KEL 1 227.1 KIR 1 227.1 KRO 1 227.1 KRU 1 227.1 KUN 1 227.1 LEN 1 227.1 LLO v.11 1 227.1 LLO v.12 1 227.1 LLO v.1c.1 1 227.1 LLO v.2c.1 1 227.1 LLO v.3 1 227.1 LLO v.3c.2 1 227.1 LLO v.4 1 227.1 LLO v.4c.2 1 227.1 LLO v.5c.1 1 227.1 LLO v.5c.2 1 227.1 LLO v.6 1 227.1 LLO v.6c.2 1 227.1 LLO v.7 1 227.1 LLO v.7c.2 1 227.1 LLO v.8 1 227.1 LLO v.9c.1 1 227.1 LOA 1 227.1 LUT 2 227.1 MAC 1 227.1 MAC v.1c.1 1 227.1 MAC v.2c.1 1 227.1 MAL 1 227.1 MAT 1 227.1 MCC 2 227.1 MCD 1 227.1 MEE 1 227.1 MIT 2 227.1 MOO 7 227.1 MOR 3 227.1 MOU 6 227.1 MUR 2 227.1 MUR v.1c.2 1 227.1 NAS 3 227.1 NEW 2 227.1 NYG 2 227.1 NYS 1 227.1 OLS 1 227.1 OSB 1 227.1 PAI 1 227.1 PAL 1 227.1 PAT 1 227.1 PBC v.10 1 227.1 PBC v.1c.1 1 227.1 PBC v.2c.1 1 227.1 PBC v.3c.1 1 227.1 PBC v.4c.1 1 227.1 PBC v.5c.1 1 227.1 PBC v.6c.1 1 227.1 PBC v.7c.1 1 227.1 PBC v.8c.1 1 227.1 PBC v.9c.1 1 227.1 PET 1 227.1 PHI 1 227.1 PHI v.1 1 227.1 PHI v.2 1 227.1 RAT 1 227.1 RHY 1 227.1 RID 3 227.1 SAN 3 227.1 SCH 5 227.1 SCO 1 227.1 SCR 1 227.1 SEC 1 227.1 SHU 1 227.1 SPR 1 227.1 STE 2 227.1 STH 1 227.1 STO 3 227.1 STO v.1c.1 1 227.1 STO v.1c.2 1 227.1 STU 1 227.1 THO v.1c.1 1 227.1 THO v.2c.1 1 227.1 THO v.3c.1 1 227.1 THR 1 227.1 TUC 1 227.1 VIN 1 227.1 WIE 2 227.1 WIL 1 227.1 WUE 3 227.1 ZIE 1 227.104 IRO 1 227.105 SWA 1 227.106 DEI 1 227.106 GAT 1 227.106 GRE 1 227.106 MOU 1 227.106 SAB 1 227.106 SOD 1 227.107 PAU 1 227.108 WAL 1 227.12 GAM 1 TOTAL 308

2 1

Koha security release -- July 2013
by Galen Charlton 30 Jul '13

30 Jul '13

[Apologies for multi-posting] The Koha community is releasing a security update for all supported and recent unsupported versions of Koha. The security update is available for the following new releases: 3.12.3 3.10.9 3.8.16 3.6.12 Patches are also available for 3.2.x and 3.4.x. The security update fixes a situation where manipulation of the cookie used for retaining OPAC search history for anonymous sessions could theoretically result in the execution of arbitrary code on a Koha webserver. We are aware of no active exploits at this time. The security issue can be mitigated by turning off the EnableOpacSearchHistory system preference We recommend that all Koha users upgrade as soon as possible. If you cannot upgrade immediately, we strongly encourage you to turn off the EnableOpacSearchHistory system preference until such time as you can upgrade. Users of the Debian packages for 3.10.x and 3.12.x can get the latest release by running apt-get update followed by apt-get upgrade. Because a new dependency was added recently, it may be necessary to run apt-get dist-upgrade instead or to run apt-get install koha-common. For users of the Debian packages for 3.8.x and 3.6.x, since the Koha APT repository no longer contains those versions, .deb files are available for download and installation using dpkg -i: .deb for 3.8.16: http://download.koha-community.org/koha-common_3.08.16.1-1_all.deb .deb for 3.6.12: http://download.koha-community.org/koha-common_3.06.12.1-1_all.deb Tarballs are also available: 3.12.3: http://download.koha-community.org/koha-3.12.03.tar.gz 3.10.9: http://download.koha-community.org/koha-3.10.09.tar.gz 3.8.16: http://download.koha-community.org/koha-3.08.16.tar.gz 3.6.12: http://download.koha-community.org/old_releases/koha-3.06.12.tar.gz The patches for 3.4.x and 3.2.x can be found as the top three commits in the 3.4.x and 3.2.x branches in Koha’s Git repository. As a general note, if you are not running a version of Koha that has has a release maintainer (current 3.8.x, 3.10.x, and 3.12.x), we strongly urge you to upgrade to a supported version. Regards, Galen -- Galen Charlton Manager of Implementation Equinox Software, Inc. / The Open Source Experts email: gmc(a)esilibrary.com direct: +1 770-709-5581 cell: +1 404-984-4366 skype: gmcharlt web: http://www.esilibrary.com/ Supporting Koha and Evergreen: http://koha-community.org & http://evergreen-ils.org

1 0

Kohacon 2014 proposals: deadline 15 September
by Mirko 27 Jul '13

27 Jul '13

Dear lists, during the last IRC meeting it has been decided that 1. proposals for Kohacon 2014 have to be submitted until 15 September 2. we will vote in the first week of October So far there is one proposal (Córdoba, Argentina). In case there won't be more submissions, Córdoba wins by default. If you would like to host Kohacon 2014, now is the time to enter a sumbission here http://wiki.koha-community.org/wiki/KohaCon2014_Proposals Have a nice weekend, Mirko

1 0

Fedora packages // including PLACK support
by Nicholas van Rheede van Oudtshoorn 24 Jul '13

24 Jul '13

Hello all! For those that are interested, I've made a repository (the RPM version of a PPA :-) ) to install all of the requirements for koha 3.10 - including those needed to get plack up and running. The repo can be added by running: sudo wget " http://download.opensuse.org/repositories/home:/vanoudt/Fedora_17/home:vano…" -O /etc/yum.repos.d/koha.repo A Fedora 18 repo should also be available soon. (I'm running f18, the repo just isn't live yet). Also attached are some systemd service files. Simply copy them into /lib/sytemd/system, copy koha.env into /etc/koha and then enable them using systemctl enable kohazebra.service systemctl enable kohaopac.service systemctl enable kohaopac.service As for plack - WOW! This stuff is amazing. I've made some modifications to the psgi files so that they run using a normal installation from source, and also so that they redirect from an empty URL to the main opac/intranet page. I've attached the psgi files here (install them in /usr/share/koha/psgi ) if anyone is interested! A great new release! Hope these ramblings of mine are of some use to someone! Nicholas van Oudtshoorn Perth Bible College library.pbc.wa.edu.au

3 2

Possible OPAC security pb
by Fridolyn SOMERS 15 Jul '13

15 Jul '13

Hie, I've just opened http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=10590. I've set it to critical because I think it is a security problem existing at OPAC : In opac-topissues the parameter limit is directly added at the end of the SQL query, without testing its value. A user can edit this parameter to add SQL code to query : for example : limit=10;DROP+TABLE+borrowers;. Please have a look and test. Best regards, -- Fridolyn SOMERS Biblibre - Pôle support fridolyn.somers(a)biblibre.com

3 3

July 15th: it's String Freeze
by Tomas Cohen Arazi 15 Jul '13

15 Jul '13

Hi everyone, We are a week out from new releases of the 3.8.x, 3.10.x and 3.12.x stable branches. If you know of some QA-ed patch that deserves to be applied soon to the stable branches just let us know about it in the next 12 hours. Tomorrow morning (UTC-3 time) we are extracting the new strings to let translators have fun. Thanks The Release Maintenance Team (chall, bgkriegel and tcohen)

1 0