Time Nick Message 03:11 eythian wahanui: marc 03:11 wahanui http://marc-must-die.info 03:16 eythian http://lists.ethernal.org/pipermail/dunlug/2011-November/006326.html <-- just for anyone interested, here's a description of events I wrote to a mailing list about the trademark business. 04:04 kmkale Namaskaar #koha 04:14 Oak kia ora #koha 04:32 cait morning #koha 04:34 Oak Guten Morgen Miss cait :) 04:37 Oak breakfast huh :) 04:44 cait heh :) 04:44 cait not yet 04:44 cait how is your CV coming along? 04:45 cait morning AmitG 04:46 AmitG heya cait 04:49 Oak cait it's done. want to see it? 05:00 cait Oak: sure :) 05:00 cait sorry, was making tea in the kitchen 05:01 Oak okay will email. 05:01 Oak no problem at all cait. don't worry about it. 05:01 cait only if you want to 05:02 cait I am really not an expert - so can't say much about it 05:05 Oak oh no worries. i'll send so you know how it's done. hehe. 05:05 Oak sorry. just kidding. 05:06 cait might be true still :) 05:23 semarie hi, someone here for public security issue (already) published on internet ? 05:24 cait hi semarie 05:24 cait wrong time probably 05:25 cait yesterday was thanksgiving in us 05:25 cait does it affect koha too? 05:27 semarie yes 05:27 semarie it is published here: http://1337day.com/exploits/17246 05:27 semarie it just report it in bugzilla as Bug 7265 05:28 cait how hard is it to fix it? 05:28 cait hm huginn is missing 05:29 semarie the exploit relies on language selection (the cookie KohaOpacLanguage) 05:30 cait I don't know a lot about how these things work - what can someone do using this exploit? 05:30 semarie an unauthentificated atacked can read all file that apache user can. 05:30 semarie fior example the config file of koha (with credentials) 05:31 semarie and after attack the mysql server for example... 05:32 cait ouch 05:32 cait ok 05:32 cait that's really really bad then 05:33 cait can you send a patch? or will someone else have to? 05:35 semarie I can try to do mitigation, by regex the cookie 05:38 semarie I have updated bugzilla, see bug 6629 05:42 cait oh no 05:42 cait I see now you have reported that a longe rwhile ago :( 05:45 cait that's not good 05:46 cait that this didn't get any attention 05:51 rangi yep 05:51 rangi we need a patch for that 05:52 rangi well, thats my fault, i thought the priority was low because of the stripping \0 05:54 semarie a manner to add the \0 was found... 05:54 rangi yeah :( 05:55 rangi it think a regex in getlanguagecookie is the fastest fix 05:55 semarie a patch is done (see 6629): but it a raw patch. I have no time now (I come back, in 1 hour) 05:55 rangi ill look 05:55 semarie getlanguagecookie was not used... 05:55 rangi ah 05:55 semarie getlanguagecookie take only the two first characters of cookie... 05:55 rangi ahh, so thats safe 05:56 rangi right 05:56 rangi that patch looks good to me 05:56 semarie a better patch should used getlanguagecookie 05:56 rangi im going to make it into a git patch 05:56 semarie ok, i will see in 1 hour 05:56 rangi yup, a follow up can do that 05:59 rangi i suspect 6628 is the same 05:59 cait rangi: glad to see you :) 06:19 Suzzane Hallo everyone.. 06:19 cait hi Suzzane 06:19 Suzzane Cait, kindly tell me, i want to try configuring koha 06:19 cait koha manual? 06:19 cait manual? 06:19 wahanui i guess manual is at http://www.koha-community.org/documentation 06:20 cait ah there :) the manual is a good place to start 06:20 Suzzane i know how to open it 06:20 cait have you already done the installation? 06:20 rangi k it needs sign off now 06:20 rangi cait, can you please test that with the patch you can still change language 06:20 cait rangi: not sure how to test it? 06:20 cait ah 06:20 Suzzane just wanted to know if i should start from chapter 1 or i go straight to chapter 13 06:20 cait yes I certainly can 06:20 rangi thank yuo 06:21 Suzzane the programmer is installing it 06:21 cait it really depends 06:21 Suzzane Cait, kindly check my last question and advice 06:21 cait it's hard to tell Suzzane 06:21 cait people learn differently 06:22 Suzzane ok.... 06:22 cait I am more the trial and error person 06:22 cait but koha is quite intuitive 06:22 cait it will be ok :) 06:22 Suzzane ok.... 06:22 Suzzane let me try 06:22 cait I think I would skim through the manual and when you have a first impression read about configuration parameters 06:22 Suzzane incase i get stuck will come back and ask 06:22 cait they willmake more sense once you know how koha does things 06:22 cait yes, you can always do that :) 06:23 Suzzane ok....:-) 06:23 cait rangi, semarie: applying patch now 06:23 Suzzane let me go through the whole manual first then 06:24 Suzzane thanks 06:24 cait there are also a lot of video tutorials 06:24 cait that can be helpful 06:24 cait video tutorials? 06:24 cait tutorials? 06:24 cait hm. 06:24 Suzzane ok... 06:24 cait wahanui hasn't the link, let me search for it 06:24 wahanui cait: sorry... 06:24 Suzzane where do i get them? 06:24 cait http://koha-community.org/documentation/other-docs/ 06:24 Suzzane thanks for that 06:25 cait wahanui: video tutorials are http://bywatersolutions.com/section/tutorial-videos/ 06:25 wahanui OK, cait. 06:27 cait rangi: installing languages... 06:27 rangi ta 06:28 cait no worries :) 06:28 Suzzane thanks cait. got it 06:29 cait rangi: it should remember the language I selected, when closing and reopening the browser? 06:29 cait rangi: ok, that doesn't work on master too 06:29 cait perhaps something in my settings 06:32 cait weird!! 06:32 cait my git bz apply didn't work but didn't complain 06:33 rangi hmmm 06:33 cait rangi: nope 06:33 cait perl errros 06:33 rangi k 06:33 rangi whats the error 06:33 cait sec 06:34 pastebot "cait" at 78.50.194.128 pasted "Software error: Bareword "getl" (7 lines) at http://paste.koha-community.org/130 06:34 rangi ah 06:34 rangi 2 secs 06:35 cait np, waiting for a new patch 06:36 rangi new patch 06:36 rangi there now 06:36 cait ok checking 06:37 cait litte whitespace error 06:37 cait /home/katrin/kohaclone/.git/rebase-apply/patch:15: trailing whitespace. 06:37 cait $lang = getlanguagecookie; 06:37 cait hm still get the perl error 06:37 cait wonder if git bz picked up the new patch 06:39 rangi mm no 06:39 rangi because the new one is differeent to that 06:39 rangi hmm 06:40 * rangi tries again 06:40 cait also checked, was the right patch 06:40 cait attachement 6400 06:41 rangi hmm new one again 06:41 rangi try that 06:41 rangi 6401 06:41 cait on it 06:42 cait Can't call method "cookie" on an undefined value at /home/katrin/kohaclone/C4/Templates.pm line 323. 06:43 rangi gah 06:43 rangi im a dumbarse 06:43 rangi 2 secs again! 06:43 cait no you are not 06:43 * cait resets her branch to master 06:44 rangi and now 06:44 cait sec 06:44 cait yep 06:45 cait switching languages works 06:45 rangi yay 06:46 rangi can you paste the url for switching langauge just the bit from /cgi-bin/ on 06:46 cait and seems the cookie remembers my selection too 06:46 rangi cool 06:46 cait /koha/opac-changelanguage.pl?language=de-DE 06:46 rangi ta 06:47 cait checking for admin too 06:55 cait hi kmkale 06:55 cait :) 06:56 kmkale hi cait 07:20 cait morning magnuse bbiab 07:23 alex_a hello 07:30 magnuse bonjour alex_a 07:37 alex_a morning magnuse 07:41 kf back 07:45 magnuse kia ora kf 07:46 kf hi again magnuse 07:46 rangi semarie: are you around? 07:46 semarie yes 07:46 rangi all three patches now sanitize both of the variables 07:47 rangi ive made one for master, 3.4.x and for 3.2.x 07:47 julian_m hi all 07:48 rangi so when paul_p is about i think we should get them pushed 07:48 semarie the version for 3.4.x don't work (vul still present) 07:48 rangi hmmm 07:49 rangi works here 07:49 rangi i wonder if i sent the wrong patch 07:49 semarie you have patched the themelanguage_lite function 07:49 semarie but the vulnerable code don't call it 07:49 rangi ahhh theres 2 themelanuages in 3.4 07:49 rangi how annoying 07:50 semarie search in C4/Templates.pl for 'KohaOpacLanguage' 07:50 rangi right modified patch coming soon 07:52 rangi semarie: can you try that now please? 07:53 semarie ok 07:53 semarie ok (i try) 07:55 semarie patch ok for 3.4.x 07:57 rangi yay 07:57 rangi thank you 07:59 reiveune hello 08:00 rangi reiveune: is paul_p at work today? 08:01 reiveune hi rangi, he is not here for the moment 08:02 AmitG heya julian_m, rangi 08:02 julian_m hi AmitG 08:04 reiveune rangi: Paul will not work today I think 08:05 AmitG heya reiveune 08:05 wahanui rumour has it reiveune is connected through the VPN 08:05 rangi crap 08:05 rangi have a look at bug 6629 08:06 rangi it has a published exploit in the wild now 08:06 reiveune hi AmitG 08:06 rangi @later tell paul_p please look at bug 6629 and push the patch 08:06 rangi oh no 08:06 rangi no huginn 08:07 rangi :( 08:07 kf yep, he died yesterday and nobody has brought him back yet 08:07 rangi gmcharlt is the one who can 08:08 reiveune rangi: Paul has just arrived 08:08 rangi yay! 08:08 rangi :) 08:08 alex_a paul is here \o/ 08:09 alex_a :) 08:09 rangi semarie: bug 6628 if you craft the regex i can do patches for that one too 08:09 * rangi has had a long long long week and his brain isnt working good enough to do a working regex 08:12 kf rangi++ 08:12 kf semarie++ 08:13 kf thx for fixing this so fast! 08:16 semarie rangi: for help files we should only keep [a-zA-Z0-9._/-] 08:17 rangi right 08:17 paul_p good morning Europe ! 08:17 paul_p hello rangi 08:18 rangi hiya paul_p 08:18 rangi would you be able to look at bug 6629 and push the patch for master 08:25 francharb morning 08:26 semarie rangi: this regexp was a bad suggestion... as it include '.' and '/' (could be used to compose "../") 08:28 semarie rangi: use [a-zA-Z0-9_/-] instead of 08:29 rangi right 08:29 rangi ill try that, but im just patching the last of my servers first 08:30 kmkale rangi: I have a git install of version 3.06.00.000 on my laptop. I tried the culr thing. It returned only the opac-main.pl. Not the passwd file. 08:30 rangi yeah, its the path 08:30 rangi it will be different 08:30 hdl hi semarie and rangi 08:30 rangi 3.6.0 is def vulnerable 08:31 rangi but it depends wher eyou installed koha, waht the path is 08:31 kmkale so I need to play around with the number of ../../ ? 08:31 * rangi gets back to patching 08:31 rangi yep 08:31 * kmkale is trying 08:31 rangi ill take more when ive secured the last 3 of my koha servers 08:33 kf kmkale: the relative path to passwd from your directory with opac-main.pl 08:33 kf 3.2.x is vulnerable too 08:34 * kmkale is still trying 08:35 rangi kf: i think its the template 08:35 rangi not the .pl 08:35 rangi actually 3.6 might not be vuln 08:35 rangi because of this 08:36 rangi $lang = undef unless first { $_ eq $lang } @languages; 08:36 rangi yep, that will do it 08:36 rangi so 3.6 is ok 08:36 kmkale :) 08:37 rangi unless you have ../../../etc/ in your syspref that is :) 08:37 * rangi rechecks master 08:38 rangi master is vuln 08:38 rangi 3.6 is ok 08:38 rangi 3.2 an 3.4 are vuln 08:39 rangi actually 3.6.0 is ok 08:39 kmkale yep. The exploit works for a 3.2 standard install 08:39 rangi lemme check 3.6.x 08:39 kmkale just got my p* file :( 08:39 kmkale yikes!! 08:39 semarie kmkale: the pl file in raw (uninterpreted) ? 08:40 rangi hmm no master is ok too 08:40 rangi 3.4 an 3.2 are vuln 08:40 kmkale nope semarie the file I asked for in the cookie 08:40 rangi so we need a 3.4.7 08:40 rangi asap 08:40 rangi phew, not as bad as i thought 08:40 semarie ok, so you successfully exploit the vul... 08:41 rangi the patch from master should be applied too 08:41 kmkale semarie: yep on 3.2 but not on 3.6 08:41 kf rangi: not sure what it is - but I could see the file on 3.2.2 08:41 rangi because it doesnt hurt to have that regexp 08:41 rangi yes, all 3.2.x and all 3.4.x are vuln 08:41 kf we reproduced what you showed me and tested again after applying the patch 08:42 rangi maybe make the change manually, find any place KohaOpac 08:42 rangi and change them 08:42 wahanui rangi: that doesn't look right 08:42 rangi 3.2.x is not going to get another release anyway, i just put that patch up in case it helps 08:45 rangi oh, so that patch does work 08:45 kf I mean, after applying the patch, the urls no longer work. the patch for 3.2 is ok. 08:46 rangi so ppl running any 3.2.x releases should patch them 08:46 kf I can't tell for later 3.2.x versions, but I guess that's right 08:46 rangi one more production server to patch 08:47 rangi i dont think im going to be able to patch 6628 tonight, too tired will make mistakes 08:47 semarie ok all, as the problem is in near resolution, I go back to me usual work... bye 08:48 kmkale I just tried the vul with 3.01.00.145 & I could exploit it. So did the patch change manually and I could no longger exploit the vuln 08:48 rangi yay 08:48 rangi im glad 3.6.0 isnt vuln 08:48 rangi means we jsut have to do 3.4.7 08:49 rangi which is due anyway 08:51 rangi http://www.itwire.com/business-it-news/open-source/51365-koha-dev-sad-angry-at-american-trademark-grab 08:58 kmkale I cant exploit it on a server with dev install of 3.05.00.015 08:59 rangi yep 08:59 rangi master and 3.6.x arent vulnerable 09:00 paul_p is it because of dev install or because of the version ? 09:00 rangi version 09:00 rangi this line 09:01 rangi $lang = undef unless first { $_ eq $lang } @languages; 09:01 rangi is in 3.6.x and master 09:02 rangi so unless someone has a language of ../../.../../ in their sysprefs .. it wont match :) 09:03 rangi oh have ppl seen 09:03 rangi http://library-matters.blogspot.com/2011/11/update-on-nz-koha-trademark.html 09:05 magnus_bbl yup. yay! 09:05 magnus_bbl the patch for 3.4.x works! 09:05 paul_p 12k ! wow !!! 09:06 rangi yeah, in 2 days 09:06 rangi amazing 09:07 rangi and most came in 20$ amounts 09:07 magnus_bbl almost 9k USD, right? 09:08 rangi yup 09:08 rangi those lawyers too ... those are some serious lawyers 09:09 kmkale :) 09:10 rangi and pro bono 09:10 rangi awesome! 09:11 magnus_bbl yay! 09:12 kmkale Koha-community++ 09:14 rangi now we just need the bot back, so i can leave messages fro chris_n 09:16 Suzzane HI 09:17 Suzzane i need to ask a question 09:18 kf koha-community++ 09:19 kmkale Suzzane: Are you from Kenya? 09:20 Suzzane yes i am 09:21 Suzzane Kale, hiii 09:21 Suzzane can i ask a question? 09:21 kmkale Hi Suzzane how was your travel back? 09:21 kmkale shoot Suzzane dont ask to ask just ask ;) 09:21 Suzzane am having a library meeting 09:22 Suzzane and am trying to explain..... 09:23 Suzzane the difference between 3.4 liblime and 3.6 koha 09:23 Suzzane am having a headache explaining 09:23 Suzzane pls help 09:23 kmkale Suzzane: ouch!! 09:24 rangi one is developeed by a worldwide community of developers, the other by liblime 09:24 rangi and there was never a 3.4 liblime 09:24 rangi they forket before 3.2 09:24 rangi in one branch 09:25 kmkale also the liblime fork is based on older version and hasen't seen nearly as much development as community Koha 09:25 rangi and the other one forked before 3.4 09:25 kmkale Please point out the fact that with liblime koha you will be again stuck with a single vendor 09:25 kmkale so where's the advantage of using an open source project? 09:25 kf they are very different software by now - features and architectural differences 09:28 paul_p (even the logo are different ;-) ) 09:28 kmkale Suzzane: Don't get into feature comparison 09:29 Suzzane paul, they are becoming difficult 09:29 Suzzane and rigid 09:29 kmkale just focus on advantages of open source and community 09:30 kf Suzzane: they want to use the liblime version? 09:30 Suzzane before i went for the conference, we had downloaded the liblime version 09:31 kf Suzzane: I think another problem is, no releases 09:31 rangi if someone wants to use the liblime version, even after the last few weeks ... then ... well 09:31 kf there was a security problem found today, and koha will have a release for that, but you never know when they will update their versions 09:32 kf completely dependent on liblime and what they do with it and no way to go back to Koha later, or there are ways but would be a migration 09:35 Suzzane they are just being rigid 09:37 rangi not sure what else we can do, if they want use liblime ils, they should 09:37 Suzzane i want to configure 3.6 version 09:38 kmkale rangi: Suzzane is kinda lone warrier out there in her organization 09:39 rangi yep not sure what we can do about that though 09:39 kmkale Suzzane: just make it into an open source vs psudo proprietary software issue and you will win :) 09:40 kmkale Suzzane: installing 3.6 via deb packages is a snap 09:53 stuartyeates it seems like http://www.oss-watch.ac.uk/resources/sustainableopensource.xml might apply here. not that i used to work for them or anything 10:05 Suzzane kmkale, they say that liblime has 4.8version 10:05 kf it's only a number 10:05 rangi they do 10:05 kf not a real meaning 10:06 kf the just skipped all in between 10:06 rangi i have 3928301.29043 version if you want 10:06 Suzzane i dont want 10:06 kf what rangi said 10:06 Suzzane am trying to convince them. this is the problem of attending the conference alone 10:06 Suzzane we are not on the same page 10:07 kf hm there are a lot of articles out there 10:07 kf perhaps one of those could help? 10:07 kmkale hey Suzzane i can give you koha version 11.3 ;) 10:07 kf for now you can tell them that they changed the numbering scheme, so you can't compare those 10:07 kmkale how does the number matter? 10:07 magnus_bbl Suzzane: one argument for real koha is the infrastructure: we have all the roles described here: http://wiki.koha-community.org/wiki/Release_Teams liblime does not 10:08 magnus_bbl they say they have something called 4.8, but the source code that you can download is called 4.2, last time i checked 10:08 magnus_bbl and yes, that is just some ransom number 10:08 magnus_bbl random, not ransom! 10:10 Suzzane thanks guys for the support 10:11 Suzzane and the answers 10:11 kf Suzzane: pls come back and ask, whenever you have a question 10:13 Suzzane thanks 10:13 jenkins_koha Starting build 536 for job Koha_master (previous build: STILL UNSTABLE -- last SUCCESS #491 1 mo. 7 j ago) 10:14 magnus_bbl btw: http://koha.no/ ;-) 10:14 francharb good luck Suzzane and if it turns really difficult, just think "what would ra one do?" ;) 10:14 rangi yay! 10:16 kf magnus_bbl: nice! 10:18 magnus_bbl i would donate it to hlt, but only norwegian companies/orgs are allowed to hold .no domains... 10:19 kf I think if you donate, they have to pay for it too? 10:19 magnuse well, i caould have donated and sponsored, maybe 10:24 kf hm yes 10:37 Suzzane kmkale, what link do i go to to download 3.6? 10:37 Suzzane i want to see if our programmers used the same 10:38 kf download.koha-community.org 10:38 Suzzane oh... anyone else can answer 10:38 kmkale Suzzane: have you visited koha-community.org? 10:38 Suzzane yes, enough times 10:38 Suzzane i go to downloads? 10:38 francharb http://koha-community.org/download-koha/ 10:39 francharb Suzzane, the debian package is for a 3.4 10:39 francharb i never tested the installation with it 10:39 Suzzane it doesnt show 3.6 10:39 francharb but i'm sure it will be easier this way 10:39 francharb that's right suzanne 10:40 francharb Suzzane, 10:40 francharb http://koha-community.org/koha-3-6-0-released/ 10:40 Suzzane so we download 3.4? 10:40 Suzzane oh 10:40 Suzzane let me see 10:40 francharb Suzzane, check this link 10:41 francharb Suzzane, apparently the debian package is not released yet 10:41 francharb but you have the 'tar.gz' link 10:42 francharb so you can install the latest version with it 10:42 francharb ;) 10:45 kmkale Suzzane: why don't you show them Koha using one of the demo's available on koha-community.org site? 10:45 francharb hey Suzzane, i was thinking about what you say to promote koha-community version VS liblime koha. you should explain what a fork is in an open source project and that following the "biggest community" is always a way to be sure to find answers to your questions.. in the case of liblime koha, apart fom liblime, there is no community like us i think. 10:45 francharb + the more the community is 10:45 francharb the more your project is strong 10:45 francharb sounds cheasy 10:45 kmkale francharb: Its more like the entire community vs one vendor ;) 10:46 francharb right 10:48 fabio_t 'morning :) 10:52 Suzzane i am in the same page with you all... 10:56 kf hi fabio_t 11:03 jenkins_koha Project Koha_master build #536: STILL UNSTABLE in 49 mn: http://jenkins.koha-community.org/job/Koha_master/536/ 11:03 jenkins_koha Chris Cormack: Bug 6629 : Sanitizing input from language cookie 11:03 jenkins_koha Starting build 537 for job Koha_master (previous build: STILL UNSTABLE -- last SUCCESS #491 1 mo. 7 j ago) 11:51 jenkins_koha Project Koha_master build #537: STILL UNSTABLE in 48 mn: http://jenkins.koha-community.org/job/Koha_master/537/ 11:51 jenkins_koha Katrin.Fischer.83: Bug 3388: Restore account number on vendor page 12:17 magnuse @wunder boo 12:19 magnuse come back huginn! 12:20 kf we can not even leave gmcharlt a later 12:20 magnuse too true... 12:20 kf gmcharlt gmcharlt gmcharlt? 12:21 magnuse hehe 13:08 kf hm 13:08 kf is it only me or are the local sysprefs a bit broken? 13:08 kf cannot edit them :( 13:13 jenkins_koha Starting build 538 for job Koha_master (previous build: STILL UNSTABLE -- last SUCCESS #491 1 mo. 7 j ago) 13:18 Suzzane Hi, am back 13:18 Suzzane i have managed to extract koha 3.6 using linux 13:18 Suzzane so is the next step opening it using ubuntu? 13:23 kf you have to install it 13:24 kf there are INSTALL files in your extracted directory 13:28 fabio_t Suzzane: are you going with tarball or packages? 13:29 Suzzane yes there are files 13:30 Suzzane kindly let me check then get back to you 13:30 Suzzane thanks 13:32 fabio_t ok, so you are using the .tar.gz I guess 13:33 paul_p kf : i've pushed your patches, no more patches tu push (3 waiting for some questions to be solved) 13:33 Suzzane yes tar.gz 13:37 kf paul_p: seen it :) 13:37 wahanui I haven't seen 'it', kf 13:37 kf paul_p: I think 6880 is waiting for a decision about updatedatabase? 13:37 paul_p kf, yep 13:37 kf there are lots of open bugs for suggestions management :( 13:37 kf hope to find some time to test those 13:38 paul_p i've a working new updatedatabase version i'll submit today I think. I think it handle all the cases. And it will be a big improvement for everybody 13:38 paul_p (non linear upgrades is much more important than many ppl think) 13:39 kf I am still worreid about it 13:39 kf the only gain I can see is for people having local customizations 13:39 kf and I am not sure we want to encourage that 13:39 kf but often things build upon each other 13:39 kf like when you add a column after another column 13:40 kf what if the column is not there? what if there are 2 patches like this and they get applied in the wrong orderß 13:40 kf perhaps I have to see how it works to understand 13:41 kf paul_p: bug 6740 13:41 kf ah, no huginn today 13:42 kf only wanted to ask if you might have time to look at that again :) 13:42 kf you said it worked for you - was hoping there might be a patch somewhere 13:43 paul_p kf, I fear I'll miss time to look at it... we have a customer in 3.6. I'll ask someone here to test if he has the problem. 13:43 paul_p kf, nope, it works for me without any patch ! that's the problem ! 13:43 kf we hae lots of confrimations for marc21 now 13:43 kf so it's perhaps something in the item setup? 13:46 * Oak waves 13:47 kf hi Oak :) 13:47 kf making progress with your CV? 13:50 Oak yes, made changes. should I send again? :) 13:50 kf no :) 13:51 Oak okay. why? 13:51 kf but you have to tell me when I can stop crossing fingers and you got the job :) 13:52 Oak oh i may not get it. i took all this trouble because the class fellow won't leave me alone. :) 13:52 kf heh 13:53 Oak right now i am configuring DSpace ... on local system. she's said i *must* add DSpace and LIMS on cv. 13:53 Oak so... here i am 13:53 kf heh 13:53 fabio_t I have to go 13:53 kf she is good 13:54 kf how is it going? 13:54 fabio_t see you 13:54 kf bye fabio_t :) 13:54 Oak so far so good. right now adding group and users for Postgresql 13:54 Oak see ya fabio_t 13:55 Oak then will isntall Postgresql, configure it. just following the manual. 13:58 Oak user* 14:01 jenkins_koha Project Koha_master build #538: STILL UNSTABLE in 48 mn: http://jenkins.koha-community.org/job/Koha_master/538/ 14:01 jenkins_koha * paul.poulain: follow-up: trailing " that makes T::T fail 14:02 jenkins_koha * paul.poulain: Bug 6328 fine in days does not work 14:02 jenkins_koha * paul.poulain: Bug 6328 follow-up for QA comments 14:02 jenkins_koha * paul.poulain: Bug 6328 Fixes for comment 35 14:02 jenkins_koha * paul.poulain: bug 6328: updatedatabase bump 14:02 jenkins_koha Starting build 539 for job Koha_master (previous build: STILL UNSTABLE -- last SUCCESS #491 1 mo. 7 j ago) 14:03 Oak jdk, apanche-ant, commons-deamon, apache-tomcat, apache-maven2 installed. 14:50 jenkins_koha Project Koha_master build #539: STILL UNSTABLE in 47 mn: http://jenkins.koha-community.org/job/Koha_master/539/ 14:50 jenkins_koha * colin.campbell: Bug 6877 - use is executed and errors at compile time 14:50 jenkins_koha * Katrin.Fischer.83: Bug 7250: stage_biblios_file.pl is missing options for encoding 14:54 druthb o/ 14:58 magnuse \o 15:41 tcohen hi #koha 15:45 Oak magnuse 15:46 Oak hello druthb, tcohen :) 15:46 Oak Bonjour alex_a :) 15:46 tcohen hi Oak 15:46 druthb hi, Oak. :) 15:46 tcohen any news on the TM issue? 15:46 magnuse Oak 15:46 Oak a blog post by Joann today 15:47 magnuse http://koha-community.org/update-2/ 15:47 tcohen M-kay, lets see 15:48 tcohen thanks Oak magnuse 15:48 tcohen we r still waitin fr news from the PTFS front I see 15:50 jcamins tcohen: yesterday was Thanksgiving, so everyone in the United States is still dozy from the tritophan-filled turkey. :) 15:51 tcohen oh, didnt realize that 15:52 tcohen just been two days in bed with a flu and trying to get updated about the outside world :-D 15:52 jcamins tcohen: yup. You can tell by the way druthb and I are around that most people are taking the day off. 15:52 jcamins I'm sorry to hear about the flu. 15:52 * druthb has NO LIFE. 15:52 alex_a hello Oak :) 15:53 Oak hehe druthb 15:53 tcohen the flu is ok, the thing is there was no south park episode in the meantime 15:53 tcohen :-P 15:57 magnuse hehe 15:58 magnuse druthb: you said you are doing a migration? 15:59 druthb did it yesterday, in fact. 15:59 magnuse ah, cool 15:59 magnuse and it went well 15:59 magnuse ? 16:00 druthb super-clean. This was an easy one. 16:00 magnuse yay! 16:00 druthb I'm working on a bit-harder one today. Nothing too gruesome, yet, but lots and lots and lots of bibs and items, with screwy code mappings. 16:00 druthb (this one's in testing now.) 16:01 magnuse sounds like fun 16:02 Oak druthb, migrating from which version? 16:03 druthb The one yesterday was an old, old version of Koha, joining a consortium that's on current Koha. The one today is coming from SirsiDynix Symphony. 16:03 Oak wait, that upgrading 16:03 Oak ah 16:04 Oak exporting as MARC records and importing in Koha? 16:04 magnuse if the old koha is old enough you might as well call it a migration ;-) 16:04 Oak :) 16:04 Oak hmm 16:04 druthb this one is gonna be one of our "big ones"...700k+ items. Yeah, I had them export MARCs and make a CSV of item data; my scripts are splicing that, and mapping the codes data, to make Koha MARCs, which I can then import into an "empty" instance. 16:05 * Oak knows not much about migration or upgrading 16:05 Oak cool. 16:06 magnuse 700k - that's a good size 16:06 magnuse oh, items, fewer records then, i presume? 16:07 druthb pretty hefty, yes. We've got three or four projects that are up in that territory working right now. counting bibs now, but it's on the order of 650K. 16:07 magnuse awesome! 16:08 Oak that's the right word :) 16:09 kf yep, awesome, like druthb 16:10 druthb hmpf. 16:12 jcamins Yikes! Bug 6629 is a nasty one! 16:15 kf yep 16:23 magnuse see y'all tomorrow! (i hope) 16:28 jcamins @later tell magnuse The MARC mapping page worked fine. I just needed to shift-refresh it because the web browser's cache was interfering. 16:28 jcamins Argh! 16:28 jcamins No huginn! 16:28 kf yeah, he was missed a lot today 16:29 druthb lol 16:40 kf wb paul_p 16:40 paul_p hello (from my home) 17:04 reiveune bye 17:05 maximep wow, i'm applying the patch from bug 6629 everywhere asap. Global matching is probably better, right? 17:08 kf maximep: 3.6 seems to be ok, only better with patch, but 3.4 and 3.2 are bad 17:14 druthb :1 17:14 druthb hrmph. 17:47 kf bye and a nice weekend all :) 18:12 jcamins paul_p++ # RM newsletter 18:13 tcohen paul_p++ 18:15 jcamins tcohen: do I recall correctly that you had written the new zebradaemon that uses rebuild_zebra? 18:15 tcohen yeap 18:15 jcamins tcohen: what needs to be done to get it finished and into Koha? 18:16 tcohen i think there's nothing missing... 18:16 jcamins So, testing and a sign-off? 18:17 jcamins I hadn't seen it submitted, but someone told me that it was written and almost ready to go into 3.8. 18:17 tcohen i was asked to rewrite the updatedatabase.pl portion into an atomic update 18:18 jcamins Ah. 18:18 tcohen before that it was already tested and singed-off for a long time 18:18 jcamins So, test the update? 18:18 jcamins That's doubly easy. :) 18:19 tcohen that's what i thought 18:19 * jcamins doesn't know. 18:23 hdl jcamins: remind me the bug id 18:23 jcamins hdl: zebradaemon? Bug 5166. 18:24 jcamins tcohen just found an error which he is fixing, then he'll resend. 18:26 hdl tcohen: I think items are missing from the deamon. 18:27 hdl GetMarcBiblio { 18:27 hdl 1063 my $biblionumber = shift; 18:27 hdl 1064 my $embeditems = shift || 0; 18:27 hdl API is now such. 18:27 tcohen ok, i'll work on it and come back as soon as i solve it 18:28 hdl tcohen: we also added some feature. such add a --where to choose data you may export. and also splitting export from index would be sane. 18:29 hdl (not on your deamon though) 18:29 hdl But on the rebuild_zebra.pl 18:30 tcohen yep, rebuild_zebra.pl continued to evolve 18:30 hdl http://git.biblibre.com/?p=koha;a=blob;f=misc/migration_tools/rebuild_zebra.pl;h=ee3606df59a2b2c2a1b192a4848f99a418a1fbf4;hb=9a2db312e91d07918bc984bbe8f320b796cfbb2a 18:30 hdl and those options are really interesting. 18:31 hdl tcohen: this is the problem when patches are not pushed or QAed quite rapidly... 18:32 hdl k folks have a nice week end. 18:32 tcohen i know hdl, i rewrote this script several times! 18:32 tcohen have a nice weekend! 18:39 hdl tcohen: you are an angel. (I rewrote 5 times some enhancement on smart-rules, lost contribution will) 18:39 hdl see ya foilks 18:44 jcamins Real chronological subdivision: Period of military anarchy, 235-284. 18:44 rangi bug 6628 18:45 jcamins rangi: huginn's down. 18:46 rangi yep 18:46 rangi i just patched that 18:46 rangi needs a sign off 18:48 * jcamins is at a client's, but if I have time, I'll take a look. 18:49 rangi its a lower risk security bug, can only read .tt files .. but does allow to move outside the dir you are supposed to be in 18:49 rangi but not anymore 19:08 rhcl @seen rangi 19:08 rangi no huggin 19:09 rhcl oh, ok 19:09 rangi hmm wanna sign off a patch rhcl 19:09 rangi 6628 :) 19:09 jcamins rhcl: rangi was last seen in #koha 19 minutes ago: <@rangi> but not anymore 19:09 jcamins :) 19:09 rhcl me? 19:09 wahanui you are, like, gonna beat up on an ibot, if it's not careful 19:09 jcamins rhcl? 19:09 wahanui rhcl is gonna beat up on an ibot, if it's not careful. 19:09 rhcl bug 6628 19:10 rhcl oh, that's right, no huggin 19:11 rangi were you after anything? 19:11 * rangi has to head out in a bit to vote, and then go to his kids school fair 19:11 jcamins voting++ 19:14 rangi trea!!! 19:14 trea rangi!!!! 19:14 wahanui I LIKE ALMONDS! HAVE SOME NUTS! 19:14 rangi the gift for atarau arrived yesterday 19:14 trea :D 19:14 rangi thank you guys, he slept with his new teddy bear last night, and now is making it eat toast 19:14 trea love it! 19:14 rangi hungry bear?? 19:15 rangi cept it sounds like ungry bear 19:15 trea i don't recall it coming with an advisory about feeding it toast, but I think he will be happy all the same. 19:15 trea ;) 19:16 rangi hehe 19:16 jcamins rangi: the question is, will it make Atarau eat his vegetables? ;0 19:16 jcamins ;) 19:17 rangi oh thats easy, kahu eats his, so atarau eats his 19:17 rangi he'd eat concrete if kahu did 19:18 jcamins :) 19:20 trea hehe 19:21 * rangi wonders if rhcl wanted something? 19:22 francharb bye all 19:44 trea okay, back to family time. Talk to everyone later. o/ 20:15 druthb o/ 20:16 jcamins \o 20:17 druthb :) 20:37 tcohen paul_p r u there? 20:37 paul_p tcohen, yep 20:38 paul_p (no thanksgivig here ;-) ) 20:38 tcohen he he 20:38 tcohen i was running perlcritic 20:38 tcohen on zebraqueue-daemon.pl 20:38 tcohen and got a warning/error 20:38 tcohen on this line 20:38 tcohen eval { require "$FindBin::Bin/kohalib.pl" }; 20:39 tcohen "require" statement with library name as string at line 28, column 12. Use a bareword instead. (Severity: 5) 20:39 tcohen is it important? 20:40 tcohen I think this error arises everywhere 20:45 jcamins Grr. Gottingen is nowhere near Kontanz. I guess probably cait doesn't work with their librarians. 20:46 maximep tcohen: I don't think it's important, but I remember someone fixing one 20:47 tcohen lets see.. grep FindLib 20:48 maximep ah yes, saw that in http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7138 20:49 maximep oh 20:49 maximep wait a min 20:49 maximep I think I misread your error 20:51 tcohen maximep, using import instead of require cleans the error 20:52 maximep don't u have to require before an import to load at run-time ? 20:53 maximep can't say I understand the import/require of perl hehe 20:53 jcamins According to the documentation, there is no builtin import. 20:55 * jcamins draws no conclusions from that. 20:56 tcohen require will check the library isn't already loaded 21:03 tcohen i'm not even sure this kohalib.pl thing is being used correctly anyway 21:05 tcohen i'd assume the relative path for scripts in the same dir would be, the same, which is not true in many cases 21:06 paul_p tcohen, I have no idea, sorry. Maybe ask koha-devel ? 21:07 tcohen yes, i was just asking 21:07 tcohen i'm working on a rebase for bug 5166, updating it to the actual rebuild_zebra.pl script 21:08 tcohen and had just read that perlcritic should be run against all .pl files... 21:13 jcamins What does kohalib.pl do? 21:19 tcohen kohalib.pl tests the actual directory the script is running in 21:19 tcohen and checks if the path matches PERL5LIB 21:19 tcohen (that's just what i understand it does... ) 21:20 maximep it's doc says "# This script is used by command-line utilities to set 21:20 maximep # @INC properly -- specifically, to point to the directory 21:20 maximep # containing the installed version of the C4 modules." 21:20 maximep i guess it's to be able to include C4 modules without having to use full paths ? 21:21 tcohen i think it has to do with running the right version of the libs 21:21 maximep anyway, if all scripts do it and don't care about perl critic, you should probably ignore the warning 21:22 tcohen die if $module_dir =~ /^[_]{2}PERL_MODULE_DIR[_]{2}$/; 21:22 maximep less than 10 pages are tested in perl critic 21:22 tcohen ok 21:24 tcohen perlcritic just prefers that one uses a library name instead of a 'string' in require s 21:24 tcohen I think is not important at all, but as it was proposed to run perlcritic... 21:25 maximep i guess it expects you to only require .pm 21:53 Brooke 0/ 21:53 jcamins 'Tis Brooke! 21:53 jcamins Greetings, Brooke! 21:53 Brooke Ahoy 21:53 jcamins Be ye be-turkified? :) 22:08 jcamins Good night, #koha. 22:14 Brooke I gotta say that I dig wading through all of these trade mark posts and finding responses from a different corner of the world each time. Ray of light in dark times. 22:20 rhcl [off] I hope the solicitors in NZ are sharp. 22:22 rhcl I volunteer wizzy to teach a class on bug fixing and signing off and git. Charge $25 a head. I'll bring two. 22:41 paul_p time to head to bed. Just submitted 7167 for signoff, with documentation. bye & good week-end everybody ! 22:47 Brooke thomas_krichel++ 22:47 Brooke night Paul 22:48 Brooke time to start getting ready to go to Le Yaca with the olde man 22:48 Brooke #roughlife 23:03 tcohen bye #koha 23:37 cait hi #koha 23:38 cait @wunder Konstanz