- Koha-devel - lists.koha-community.org

authentication
by Tonnesen Steve 07 Jul '02

07 Jul '02

Here's my proposal for authentication. I hope this will help with the anti-cookie people in the crowd. Note, after writing all this out, I found a module called mod_auth_tkt which apparently does most of the cookie part of this. Might be better to implement it ourselves, as it makes one less apache configuration problem on installation. 1. Every script calls a checkauth($query) routine before doing anything else. 2. checkauth() checks for a $ENV{'REMOTE_USERNAME'} environment variable. a. If one is set, assume that basic authentication of some sort is being used b. check that this user is allowed to be running this script. If not, print a warning page and exit (possibly redirect to library home page or somesuch?). c. return a zero value and the userid logged in and the script carries on. 3. checkauth() looks for the value of a sessionID cookie in the $query hash. a. If it doesn't find one: * present a log in screen where the user can enter a username and password. * The name of the original script and any query parameters are stored as hidden query params. * authentication script checks the entered username and password against a configurable authentication source (eg local mysql table, passwd file, ldap, pop server, you name it) and stores the sessionID, userid, remote ip address and lastcontact (current time) in the sessions database table. b. If it finds one: * look up the userid, ip address and lastcontact values from a database table (sessions) for this sessionID. If ip address is the same, and lastcontact is recent enough for this category of user (eg librarians might time out after 30 minutes, patrons after 5 minutes) then return a zero value, the userid logged in, and a cookie to be added to the HTML header and the script carries on. * If ip address is different, display a warning page and exit. (Note that this doesn't prevent the same user from logging in from two different ips simultaneously, as they would normally have different sessionIDs. It just protects (somewhat) against somebody hijacking the cookie and the session. * If lastcontact time has expired, remove the session from the sessions table and display a login screen (as in 3a above). Modifications to existing scripts consist of calling: my ($userid,$cookie)=checkauth() at the top of every script and changing: print $input->header; to if ($config->{'usecookieauth'}) { print $input->header(-cookie->$cookie); } else { print $input->header; } Steve.

2 2

Translation Efforts
by Nicholas Rosasco 07 Jul '02

07 Jul '02

http://www.saas.nsw.edu.au/wiki/index.php?page=TranslationTeams In an effort to keep track of translation interested people, I've started a list above... please add as needed -- with all the volunteers we've had recently, I wouldn't be surprised if I missed one. Nick

1 0

CPAN and re-inventing the wheel
by Alan Millar 07 Jul '02

07 Jul '02

Hi- I noticed Steve found and fixed a bug in checkvalidisbn(). That's great, but it got me thinking about re-inventing the wheel. There are a number of CPAN modules that Koha could be making use of, such as in this case Business::ISBN, which seemingly would bypass the whole issue of us needing to find and fix such bugs. I've seen comments in the past, somewhere in the list archives I believe, that some Koha folks would rather write new routines in order to have fewer installation dependencies. I don't think installation dependencies are the real problem. I think installation simplicity is the real problem. If there was an easier way to ensure dependencies are met, wouldn't that be better than writing more code and introducing more bugs? Perhaps we could have a step in the install process that checks for required modules, and runs (or at least creates) some sort of CPAN download script to install any missing modules. What do you think? - Alan ---- Alan Millar --==> am12(a)bolis.com <==--

5 5

Re: [Koha-devel] CPAN and re-inventing the wheel
by COURYHOUSE＠aol.com 06 Jul '02

06 Jul '02

The easiest way is to have a LINUX disto that ships with koha throw it all on a blank box and whammo! instant automation system! > Subj:[Koha-devel] CPAN and re-inventing the wheel > Date:7/6/2002 5:59:30 AM US Mountain Standard Time > From:<A HREF="mailto:am12@bolis.com">am12(a)bolis.com</A> > To:<A HREF="mailto:koha-devel@lists.sourceforge.net">koha-devel(a)lists.sourceforge.net</A> > Sent from the Internet > > > > Hi- I noticed Steve found and fixed a bug in checkvalidisbn(). That's > great, but it got me thinking about re-inventing the wheel. > > There are a number of CPAN modules that Koha could be making use of, > such as in this case Business::ISBN, which seemingly would bypass > the whole issue of us needing to find and fix such bugs. > > I've seen comments in the past, somewhere in the list archives I > believe, that some Koha folks would rather write new routines in > order to have fewer installation dependencies. > > I don't think installation dependencies are the real problem. I > think installation simplicity is the real problem. If there was > an easier way to ensure dependencies are met, wouldn't that be > better than writing more code and introducing more bugs? > > Perhaps we could have a step in the install process that checks > for required modules, and runs (or at least creates) some sort of CPAN > download script to install any missing modules. > > What do you think? > > - Alan > > ---- > Alan Millar --==> am12(a)bolis.com <==-- >

1 0

[Bug 63] Error in marcimport.pl
by bugzilla-daemon＠wilbur.katipo.co.nz 06 Jul '02

06 Jul '02

http://bugs.koha.org/cgi-bin/bugzilla/show_bug.cgi?id=63 tonnesen(a)cmsd.bc.ca changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED ------- Additional Comments From tonnesen(a)cmsd.bc.ca 2002-07-06 04:07 ------- Fixed in CVS. There was a few bugs fixed. In addition to the one mentioned there were two or three spots where requireDBI was checking for the wrong tables (uploadmarc and AcceptMarcData instead of uploadedmarc). ------- You are receiving this mail because: ------- You are the QA contact for the bug, or are watching the QA contact.

2 1

From the Kaitiaki
by Pat Eyler 05 Jul '02

05 Jul '02

5 July, 2002 To the Koha community; hello, This week, we've got something to celebrate! Yesterday was the day we celebrate our Independence in the United States. I think that we're well on our way to declaring our independence from proprietary library systems. Koha is moving along nicely, and it seems that other porjects that dovetail nicely with ours are doing well to. 1.2 1.2.1 hit the streets yesterday. It included improvements to the installer, the inclusion of sample data (for testing), improvements in the Z39.50 system, and a number of bugfixes. Chris has plans for more improvements in the 1.2 series, but we'd encourage you to install 1.2.1 instead of waiting. The newer 1.2 releases will be a very simple upgrade from your existing systems, which means less pain for you. Getting involved in 1.2 now means that you'll have the opportunity to help steer the project through your input, which means more gain for you. Less pain and more gain is a win all the way around. Translations This is the first note that will be translated (as far as I know). I'm looking forward to seeing a whole new group becoming involved in Koha as each set of translations starts up. If you're interested in translating this or other Koha documents, please get in touch with me (<kaitiaki(a)koha.org>) to find out if anyone else is working in your language already. Community We've had another Koha support vendor start up this week, this time in Nigeria. Beyond this, we're starting to talk in more detail with librarians about helping to steer the project. Two big developments outside the Koha project are worth noting: * the MARC::Record project has released version 1.00 of their software. This is a big step for them, and represents a major win for the larger free software for libraries community. * a new project is starting up to develop a SIP and NCIP module for Perl. This project is already talking to some Koha developers as well as the people in the MyLibrary project. We're already using MARC::Record in our 1.4 development, and are looking forward to having SIP/NCIP tools that we can merge into Koha as well. Projects like this are a great boon to us and to other library projects. I'd encourage anyone with the skills and interest to support worthy projects like this in any way you can. A project is underway to start developing a larger organization to help coordinate work within free software for library projects. As more information develops, I'll share it here. Koha is continuing to build momentum and the community is growing as well. This really is your chance to get in on the ground floor of an exciting new endeavor. Whether you choose to get involved in Koha, MyLibrary, MARC::Record, the new SIP/NCIP project, or some other Free Software project doesn't matter, what matters is that you get involved. You can write code if you're able, write documentation if you're up to it, or test new software releases if you have the hardware. There are a lot of ways that you can get involved, the important thing is that you do. happy hacking, -pate Pat Eyler Kaitiaki of the Koha Project

1 0

Re: using data in a variable with MARC::Record
by Pat Eyler 05 Jul '02

05 Jul '02

Steve, thanks for submitting this back to them. It may be worth announcing here, but the MARC::Record folks just released version 1.000. I don't know what (if any) differences there are in the API. -pate

1 0

[Bug 63] Error in marcimport.pl
by bugzilla-daemon＠wilbur.katipo.co.nz 05 Jul '02

05 Jul '02

http://bugs.koha.org/cgi-bin/bugzilla/show_bug.cgi?id=63 ------- Additional Comments From tonnesen(a)cmsd.bc.ca 2002-07-06 04:08 ------- Created an attachment (id=3) marcimport.pl with bugs removed ------- You are receiving this mail because: ------- You are the QA contact for the bug, or are watching the QA contact.

1 0

[Bug 63] New: Error in marcimport.pl
by bugzilla-daemon＠wilbur.katipo.co.nz 05 Jul '02

05 Jul '02

http://bugs.koha.org/cgi-bin/bugzilla/show_bug.cgi?id=63 Summary: Error in marcimport.pl Product: Koha Version: 1.2.1 Platform: PC OS/Version: All Status: NEW Severity: major Priority: P2 Component: Acquisitions AssignedTo: chris(a)katipo.co.nz ReportedBy: paul.poulain(a)free.fr QAContact: koha-devel(a)lists.sourceforge.net When i try to do a marcimport, i get : ERROR: Subroutine uploadmarc called without proper DBI handle. Please contact system administrator. I think it's due to line 86 of marcimport that is if ($menu eq 'uploadmarc') { uploadmarc(); last SWITCH; } and should be : if ($menu eq 'uploadmarc') { uploadmarc($dbh); last SWITCH; } I correct it in main branch if my diagnostic is confirmed ------- You are receiving this mail because: ------- You are the QA contact for the bug, or are watching the QA contact.

1 0

[Bug 62] checkvalidisbn() routine is broken
by bugzilla-daemon＠wilbur.katipo.co.nz 04 Jul '02

04 Jul '02

http://bugs.koha.org/cgi-bin/bugzilla/show_bug.cgi?id=62 tonnesen(a)cmsd.bc.ca changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED OS/Version| |All ------- You are receiving this mail because: ------- You are the QA contact for the bug, or are watching the QA contact.

1 0