- Koha-devel - lists.koha-community.org

Koha Security best practises
by Mahesh T Pai 20 Jun '11

20 Jun '11

Is a best practises document available for securing a System running Koha? I mean beyond whatever documentation is available for OSes in general, is there anything Koha specific to look into? I cannot think of anything beyond filtering out incoming traffic to ports other than 80 and 8080, and long complicated passwords. -- Mahesh T. Pai || Sent from my Computer. Running Debian GNU/Linux

3 5

Wrong Links on Staff Client. (v. 3.4.1)
by Mahesh T Pai 20 Jun '11

20 Jun '11

I know this ought be reported as a bug, but I am still just finding my way around the project and the community, so will first report it here. Situation:- Default install; of koha 3.4.1 on Debian. the database created by 3.000.1XX is restored, upgraded, the web installer has only asked the kohaadmin user the password and username. After doing the nitty and gritty of updating the database from 3.<whatever> version to 3.4.1, the web installer has forced the kohaadmin user to relogin, and I am now looking at the staff client page. On Left hand side, I am looking at the column starting with "News". Here is the entire html source as rendered in the browser. (beginquote) <div class="yui-b"> <div id="koha-news"> <h3>News</h3> <div class="newsitem" id="news2"><h4>What's Next?</h4> <p>Now that you've installed Koha, what's next? Here are some suggestions: <ul> <li><a href="http://kohadocs.org">Read Koha Documentation</a></li> <li><a href="http://wiki.koha.org">Read/Write to the Koha Wiki</a></li> <li><a href="http://koha.org/community/mailing-lists.html">Read and Contribute to Discussions</a></li> <li><a href="http://bugs.koha.org">Report Koha Bugs</a></li> <li><a href="http://wiki.koha.org/doku.php?id=en:development:git_usage">Submit Patches to Koha using Git (Version Control System)</a></li> <li><a href="http://koha.org/community/irc.html">Chat with Koha users and developers</a></li> </ul> </p> <p class="newsfooter"> Posted on 29/10/2007 <a href="/cgi-bin/koha/tools/koha-news.pl?op=add_form&id=2">Edit</a> | <a href="/cgi-bin/koha/tools/koha-news.pl?op=del&ids=2">Delete</a> | <a href="/cgi-bin/koha/tools/koha-news.pl?op=add_form">New</a></p></div> </div> </div> </div> (endquote) I am not sure if the links in <li> items at top of the HTML snippet is a relic from the older backup; but surely, the installer / updater scripts should take care to fix them, right? Except the link to kohadocs.org, and koha.org (the LibLime one) site, all other links give me an error message - and I believe that this has nothing to do with dns resolution. (I use google's DNS). I suspect this snippet occurs the way it does because I have restored a backup (made using mysqldump) from 3.000.107 (will confirm later). -- A: Because it fouls the order in which people normally read text. Q: Why is top-posting such a bad thing? A: Top-posting. Q: What is the most annoying thing on usenet and in e-mail?

2 2

Koha 3.2.10 is now available
by Chris Nighswonger 20 Jun '11

20 Jun '11

It is with pleasure that I announce the release of Koha 3.2.10. Note: This is potentially the final release of the 3.2.x branch. Please act accordingly with new implementations and upgrades. The package can be retrieved from: http://download.koha-community.org/koha-3.02.10.tar.gz You can use the following checksum and signature files to verify the download: http://download.koha-community.org/koha-3.02.10.tar.gz.MD5 http://download.koha-community.org/koha-3.02.10.tar.gz.MD5.asc http://download.koha-community.org/koha-3.02.10.tar.gz.sig Release notes for 3.2.10 are below. Come and get it! RELEASE NOTES FOR KOHA 3.2.10 - 19 June 2011 ======================================================================== Koha is the first free and open source software library automation package (ILS). Development is sponsored by libraries of varying types and sizes, volunteers, and support companies from around the world. The website for the Koha project is http://koha-community.org/ Koha 3.2.10 can be downloaded from: http://download.koha-community.org/koha-3.02.09.tar.gz Installation instructions can be found at: http://wiki.koha-community.org/wiki/Installation_Documentation IMPORTANT ANNOUNCEMENT CONCERNING 3.2.x EOL ======================================================================== With the release of 3.4.1, the 3.2.x branch is nearing its EOL. A motion will be made at the August 2011 general IRC meeting to officially announce EOL for the 3.2.x branch. Unless someone or some entity steps forward to take over 3.2.x maintenance, this date will mark the official EOL for the 3.2.x branch. Please keep this in mind when planning new deployments and upgrades to existing systems. Highlights of 3.2.10 ====================== This release marks over 700 commits since the release of 3.2.0. That represents nearly 90 commits per month since 3.2.0! Congratulations are due to the entire community for all of the hard work which has gone into improving Koha during this release cycle! Some of the higher profile bugs addressed in this release are: 2246 Label printing doesn't work with Unicode characters (Improved work-around rather than a fix.) 3072 'Heading-Main' authority-index breaks authority searching in STABLE 4993 ldap search always anonymous when using auth_by_bind 5860 Adding duplicate stocknumber will fail silently 5094 auth_by_bind authentication can fail even if given a correct password and userid Bugs fixed in 3.2.10 ====================== 3013 Value builder for 006 and 008 need choices for all format types 5653 default new label layout and sample data have broken call number placeholder 5684 Z3950 search on OCLC pulls in items (tag 952) 6061 C4::Context clearing up system preference on update 6131 (unimarc only) improper index name for personal-name 6091 Remove undeclared syspref OPACAdvSearchInputCount 6152 Authority-zebra-indexdefs.xsl should indicate it's automatically generated 6218 patron login gets an initial dot added when no first name 6315 depreciation warnings in C4::Serials in new perls 6350 Bug for tracking updates to the history file 6401 Give Ian Walls credit in the history file. 5760 Add the jquery table sorter to borrowers reading record System Requirements ====================== Changes since 3.0: * The minimum version of Perl required is now 5.8.8. * There are a number of new Perl module dependencies. Run ./koha_perl_deps.pl -u -m to get a list of any new modules to install during upgrade. Upgrades ====================== The structure of the acquisitions tables have changed significantly from 3.0.x. In particular, the budget hierarchy is quite different. During an upgrade, a new database table is created called fundmapping that contains a record of how budgets were mapped. It is strongly recommended that users of Koha 3.0.x acquisitions carefully review the results of the upgrade before resuming ordering in Koha 3.2.x. Documentation ====================== As of Koha 3.2, the Koha manual is now maintained in DocBook. The home page for Koha documentation is http://koha-community.org/documentation/ As of the date of these release notes, several translations of the Koha manual are available: English: http://koha-community.org/documentation/3-2-manual/ Spanish: http://koha-community.org/documentation/3-2-manual-es/ French: http://koha-community.org/documentation/3-2-manual-fr/ The Git repository for the Koha manual can be found at http://git.koha-community.org/gitweb/?p=kohadocs.git;a=summary Translations ====================== Complete or near-complete translations of the OPAC and staff interface are available in this release for the following languages: * Chinese * Danish * English (New Zealand) * English (USA) * French (France) * French (Canada) * German * Greek * Hindi * Italian * Norwegian * Portuguese * Spanish * Turkish Partial translations are available for various other languages. The Koha team welcomes additional translations; please see http://www.kohadocs.org/usersguide/apb.html for information about translating Koha, and join the koha-translate list to volunteer: http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-translate The most up-to-date translations can be found at: http://translate.koha-community.org/ Release Team ====================== The release team for Koha 3.2 is Release Manager: Galen Charlton <gmcharlt(a)gmail.com> Documentation Manager: Nicole Engard <nengard(a)gmail.com> Translation Manager: Chris Cormack <chris(a)bigallofwax.co.nz> Release Maintainer (3.0.x): Henri-Damien Laurent <henridamien.laurent(a)biblibre.com> Release Maintainer (3.2.x): Chris Nighswonger <cnighswonger(a)foundations.edu> Credits ====================== We thank the following individuals who contributed patches to Koha 3.2.10: Alex Arnaud Jared Camins-Esakov Colin Campbell Fernando Canizo FrÃ©dÃ©rick Capovilla Galen Charlton Tomas Cohen Arazi Chris Cormack Jeremy Crabtree FrÃ©dÃ©ric Demians Jonathan Druart Katrin Fischer Owen Leonard Chris Nighswonger Dobrica Pavlinusic Marcel de Rooy Salvador Zaragoza Rubio ruth(a)bywatersolutions.com Fridolyn Somers We regret any omissions. If a contributor has been inadvertantly missed, please send patch against these release notes to koha-patches(a)lists.koha-community.org. The 3.2.x Release Maintainer especially thanks the 3.6 Release Team and all who participated in QA for their diligent labors in testing and pushing well over 700 patches since the 3.2.0 relese. Their continued work very much makes possible the release of 3.2.10 on its announced schedule. Revision control notes ====================== The Koha project uses Git for version control. The current development version of Koha can be retrieved by checking out the master branch of git://git.koha-community.org/koha.git The branch for Koha 3.2.x (i.e., this version of Koha and future bugfix releases) is 3.2.x. The next major feature release of Koha will be Koha 3.4.0. Bugs and feature requests ====================== Bug reports and feature requests can be filed at the Koha bug tracker at http://bugs.koha-community.org/ Naku te rourou, nau te rourou, ka ora ai te iwi.

1 0

Newsletter Call for Articles
by Nicole Engard 17 Jun '11

17 Jun '11

It's that time again and shockingly I already have three articles (without asking). If you have an article you want in the newsletter please get it to me before the 21st of June so that I can finish up the newsletter before I go out of town for ALA. Thanks Nicole

1 0

Koha Library Software
by Yury Marishev 16 Jun '11

16 Jun '11

Dear sirs, We have detected a vulnerabilities in Koha Library Software. Please contact us to obtain the details. Our disclosure policy is available here: http://en.securitylab.ru/lab/disclosure-policy.php Kind regards, Yuriy Marishev Security Engineer Positive Technologies Tel: +007 (495) 744-0144 Fax: +007 (495) 744-0187 ymarishev(a)ptsecurity.ru<mailto:ymarishev@ptsecurity.ru> www.ptsecurity.com<http://www.ptsecurity.ru/> en.securitylab.ru<http://www.securitylab.ru/>

11 16

Z3950 searching on MARC as well as UNIMARC targets
by Marcel de Rooy 15 Jun '11

15 Jun '11

Fridolyn [AND others as well]: Thanks for responding. I tried connecting to BNF, but it failed me again. Could this be related to the userid and password? (I also tried without user and pw.) Please note that the other target mentioned earlier functions well. But could you answer the following question please? Or someone else from the list? Would it be interesting for you to Z3950-search MARC21 targets too from your UNIMARC Koha? I made some changes in the script and am able to search both "worlds". MARC and Card view work fine. Only obstacle remains the Import, because it assumes that all records are in the system MARC flavour. It would not be so hard to convert most (important) fields vice versa when copying them to the framework in the addbiblio script. Regards, Marcel ________________________________ Van: Fridolyn SOMERS [fridolyn.somers(a)gmail.com] Verzonden: maandag 6 juni 2011 17:30 Aan: Marcel de Rooy CC: koha-devel(a)lists.koha-community.org Onderwerp: Re: [Koha-devel] Z3950 search/UNIMARC Hie, Z3950 search in Koha works well with the BFN server. See french default installation : http://git.koha-community.org/gitweb/?p=koha.git;a=blob;f=installer/data/my… Regards, 2011/6/6 Marcel de Rooy <M.de.Rooy(a)rijksmuseum.nl<mailto:M.de.Rooy@rijksmuseum.nl>> Hi all, I am testing some changes in z3950_search.pl<http://z3950_search.pl> and I am wondering if the default Koha z3950 script correctly functions for unimarc targets (with marcflavor to unimarc as well of course). Could anyone of you using z3950 with unimarc reply on that? Is the MARC and Card view on the results screen correct too? Did you encounter problems with encodings? MARC-8, UTF-8, etc.? I tested with carmin.sudoc.abes.fr<http://carmin.sudoc.abes.fr> z3950 target? Could you recommend another one? Thanks for some feedback, Marcel _______________________________________________ Koha-devel mailing list Koha-devel(a)lists.koha-community.org<mailto:Koha-devel@lists.koha-community.org> http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/ -- Fridolyn SOMERS ICT engineer PROGILONE - Lyon - France fridolyn.somers(a)gmail.com<mailto:fridolyn.somers@gmail.com>

4 6

Reminder: Global sign off day 2011-06-15 (in your time zone of choice)
by Magnus Enger 14 Jun '11

14 Jun '11

Dear Koha friends! Just a gentle reminder that Global sign off day is just 2,5 hours away in Kiribati, and fast approaching for other time zones too... Se the message below for details. Best regards, Magnus Enger ---------- Forwarded message ---------- From: Magnus Enger <magnus(a)enger.priv.no> Date: 7 June 2011 16:16 Subject: Global sign off day, 2011-06-15 To: Koha list <koha(a)lists.katipo.co.nz>, koha-devel(a)lists.koha-community.org Dear all! (And sorry for cross posting... At least a little bit ;-) We had such great fun in Marseilles earlier this year, signing off patches, that I have been wondering if it would be possible to re-create some of that experience without incurring the costs of travel. I broached the subject on IRC earlier today and after the briefest and least democratic of processes, "we" decided to declare 15th June 2011 as a Global Sign Off Day: http://wiki.koha-community.org/wiki/Global_sign_off_day,_2011-06-15 The hope is that as many people as possible will be able to set aside as much other work as possible on this day, and concentrate on signing off patches, to reduce the queue of bugs that are currently waiting for sign-off (66 at this moment: http://bugs.koha-community.org/bugzilla3/buglist.cgi?bug_status=NEW&bug_sta…) We will try to visualise and document the progress that is made, to make it more fun and maybe even tickle the competitive instincts a little bit... ;-) And who knows, if this day is a success, maybe we could turn it into a regular tradition? * If you have not signed off on a patch before, now is the perfect time to do it! The more the merrier! The process is outlined here: http://wiki.koha-community.org/wiki/Sign_off_on_patches And there will be people on IRC that you can ask for help and guidance! Best regards, Magnus Enger * On the other hand, let's hope we can keep the queue as short as possible...

1 0

KUDOS looking for nominations for officers
by David Schuster 14 Jun '11

14 Jun '11

KUDOS - North American Koha users group is looking for nominations for the following positions: President Vice president Secretary Treasurer If you are interested in running for an office please contact me so we can put together a slate of officers. By-laws require that you have an instance of Koha running and that you work in a library. We hesitate to change the bylaws currently as they have been submitted as part of our 501c3 application to the US Government. Once we receive notification of the 501c3 application then bylaws could be adjusted to better match the will of the North American community of Koha users in allowing any individual to be a KUDOS member and run for office. Please let me know if you are interested. We are going to try and have a meeting or at least a virtual meeting in the next 2 weeks. -- David Schuster Plano ISD Library Technology Coordinator

1 0

Converting .tmpl to .tt
by savitra sirohi 13 Jun '11

13 Jun '11

Hi Chris, We are looking to rebase some of our code (e.g. analytical records feature) on 3.4.x. Do you have any scripts to convert .tmpl files to .tt files? Thanks, Savitra

2 3

Date and time of next Kohacon11 volunteers meeting
by Koustubha Kale 10 Jun '11

10 Jun '11

Hi All, I had to miss the last scheduled volunteers meeting and since there were only two attendees they decided to postpone the meeting. Attendance at Kohacon11 volunteers meeting in the #koha irc channel has been poor. So here I am requesting the community to discuss & decide over email exchange, the date and timing of the next meeting so that as many as possible people may attend. Regards, Koustubha Kale Anant Corporation Contact Details : Address : 103, Armaan Residency, R. W Sawant Road, Nr. Golden Dyes Naka, Thane (w), Maharashtra, India, Pin : 400601. TeleFax : +91-22-21720108, +91-22-21720109 Mobile : +919820715876 Website : http://www.anantcorp.com Blog : http://www.anantcorp.com/blog/?author=2

1 0