Time  Nick            Message
23:42 rangi           heh
23:42 eythian         http://spendyourleapsecondhere.com/
23:28 rangi           http://en.lodlive.it/
23:27 wizzyrea        [off] eythian saved me from having to do the needful.
23:21 drojf           good night #koha
23:15 mtj             agreed :)
23:11 eythian         mtj: it's better than invalid data getting in which causes strange explosions in 6 months time.
23:08 mtj             eythian: i think the utf 'feature' might drive some users crazy... but hey
23:07 mtj             thanks for the brainslap, btw :0)
23:05 eythian         mtj: I think input validation everywhere possible is always a good thing, all the time, ever.
23:05 rangi           excellent
23:05 eythian         sweet
23:05 mtj             rangi, eythian. im hoping to start adding Koha::Cache to the holidays code, later this week
23:01 drojf           as a cosy complement to beer. lol. germans
23:01 wizzyrea        that seems on-topic to me.
23:00 mtj             ..off topic, how about this for a poss. Koha feature...  checking for valid UTF when saving stuff?
22:59 drojf           not very much information ;)
22:59 drojf           [off] http://www.behn.de/en/brands/kuestennebel/
22:58 drojf           http://www.behn.de/en/brands/anis/
22:57 mtj             i too am interested ^
22:57 mtj             hey #koha
22:54 drojf           i have not even thought about that in ages
22:53 drojf           küstennebel is star anise liquor
22:53 eythian         like Germany makes something other than beer.
22:53 drojf           probably küstennebel
22:52 drojf           kaloyiannis-koutsikos distilleries, 1st industrial zone of volos, 68e. that's a fantastic address
22:52 wizzyrea        ^ this question is relevant to my interests.
22:52 rangi           whats the closest german drink to ouzo?
22:52 rangi           :)
22:51 drojf           no, i'm choosing their booze over german booze, to weaken our economy in solidarity :P
22:49 eythian         so you're taking their booze from them? That's pretty terrible! ;)
22:46 * drojf         drinks an ouzo… to the people in greece
22:45 drojf           i could use that from time to time ;)
22:42 eythian         yeah, teaching is pretty good. Makes you get all your thoughts in order, to start with.
22:42 drojf           [off] would be fun. and scary. heh. we'll see what happens
22:40 rangi           cya later pianohacker
22:40 pianohacker     and on that note, I have to leave to do just that
22:40 pianohacker     teaching intro computer science is a lot of fun :)
22:39 rangi           [off] ohhh that would be excellent
22:38 drojf           [off] they consider letting me teach there *giggles madly*
22:37 rangi           nice!
22:37 eythian         sounds like you've got yourself a project then :)
22:35 drojf           [off] i was told there is a high demand for koha at a new 'library computer science' master programme in my area :)
22:35 rangi           quite a nice day
22:35 rangi           yeah blue skies
22:32 drojf           11° sounds alright, i'd like that too right now
22:23 cdickinson      it's actually pretty nice today here
22:23 huginn`         cdickinson: The current temperature in Wellington, New Zealand is 11.0°C (10:00 AM NZST on June 30, 2015). Conditions: Clear. Humidity: 76%. Dew Point: 7.0°C. Pressure: 29.98 in 1015 hPa (Steady).
22:23 cdickinson      @wunder nzwn
22:20 drojf           i should have bought more of that buckwheat beer
22:19 rangi           yuck
22:19 drojf           and no wind at all
22:19 drojf           we'll see. probably humid and sticky
22:18 rangi           any wind with it?
22:17 drojf           10 more will be horrible
22:17 drojf           i found 26°C today to be pretty warm
22:17 drojf           lol exactly
22:17 rangi           thats pretty warm
22:17 drojf           36°C on saturday. meh
22:15 drojf           oh too slow
22:15 pianohacker     kk, will do, thanks guys
22:14 drojf           [off] it's bgkriegel@gmail.com on koha-translate
22:14 rangi           [off] i use bgkriegel@unc.edu.ar or bgkriegel@gmail.com but that one should work too
22:13 pianohacker     [off] rangi: gonzalez@famaf.unc.edu ?
22:13 rangi           do you have his email?
22:13 pianohacker     okay, thanks.
22:12 rangi           the person i would ask is bernardo
22:12 huginn`         04Bug http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=4503 enhancement, P5 - low, ---, frederic, NEW , Javascript files in js directory are not translated
22:12 pianohacker     rangi: ot, but do you know of any documentation on how to use xgettext.pl (or something else, if I'm barking up the wrong tree) to generate a starting .po file? I'm working on bug 4503
22:10 drojf           hehe
22:10 rangi           :)
22:10 rangi           kick any bankers you see
22:10 rangi           take money, spend it with local businesses
22:10 rangi           exactly
22:09 drojf           yeah i can imagine. i'd be happy to help rebuild the country with a visit to kohacon ;)
22:08 rangi           probably a bit distracted at the moment though
22:08 rangi           they are working on a full website to go with the wiki bit
22:07 drojf           *the
22:06 drojf           has there been any info on the thessaloniki bid for kohacon 2016 or did they just sneak it into thew wiki?
22:06 pianohacker     hi eythian
22:05 drojf           hi eythian
22:04 wahanui         what's up, eythian
22:04 eythian         hi
21:58 drojf           did not help that yaz-client works out of the box for loc and gbv (german library network) but not for them. i should have read more on ZOOM before having funny ideas :P
21:55 wahanui         rumour has it interesting is sometimes good and sometimes bad
21:55 rangi           interesting
21:55 drojf           but i learned a lot ;)
21:55 drojf           so i bothered the national library about their SRU server config and in the end the problem was that koha eats the tilde you have to use to provide an access token in the base url. it has to be encoded as %7e and apparently it worked without that in earlier versions
21:47 drojf           too fast for me
21:47 rangi           cya cait
21:47 cait            night :)
21:47 rangi           heh
21:46 drojf           first koha on a raspberry bush would be awesome
21:46 cait            be careful, they can be mean :)
21:45 rangi           heh
21:45 drojf           balcony even
21:45 drojf           i did not pay attention to my balkony for a few days and now i have 2m long raspberry shoots growing all over the place :)
20:41 huginn`         drojf: The current temperature in Berlin Tegel, Germany is 22.0°C (10:20 PM CEST on June 29, 2015). Conditions: Clear. Humidity: 53%. Dew Point: 12.0°C. Pressure: 30.12 in 1020 hPa (Rising).
20:41 drojf           @wunder berlin, germany
20:30 * cait          grumps about keeping things simple ;)
20:25 rangi           http://blog.bigballofwax.co.nz/2012/07/31/yes-you-should-rewrite-it-no-not-like-that/
20:25 rangi           ill just leave this here
20:24 rangi           i saw a lot of rewrite discussion last night
20:03 indradg         kia ora #koha
17:36 * magnuse       gives the evening wave
16:36 gaetan_B        bye
16:30 huginn`         AmitG: 04Bug http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14472 enhancement, P5 - low, ---, amitddng135, Needs Signoff , Wrong ISSN search index in record matching rules
16:30 AmitG           @bug 14472
16:13 huginn`         04Bug http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7174 enhancement, P5 - low, ---, paul.poulain, NEW , Authentication rewriting
16:13 kivilahtio      pianohacker: ashimema: matts_away: magnuse: care to take a new look at Bug 7174? Is it pfft again? This time I remembered to include all new files.. I hope.
16:06 reiveune        bye
15:13 huginn`         khall: The operation succeeded.
15:13 khall           @later tell joubu can I get your feedback on bug 9011?
15:11 kivilahtio      hi tehre!
15:09 cait            hi pianohacker
15:08 pianohacker     hallo
14:02 druthb          Muggy now, soupy later.
14:01 huginn`         druthb: The current temperature in Montrose (Mandell Place), Houston, Texas is 27.8°C (9:01 AM CDT on June 29, 2015). Conditions: Clear. Humidity: 85%. Dew Point: 25.0°C. Pressure: 30.02 in 1016 hPa (Falling).
14:01 druthb          @wunder 77098
13:52 huginn`         tcohen: The operation succeeded.
13:52 tcohen          @later tell marcelr would you agree the feature should be renamed "Attach files to biblio records"?
13:36 * magnuse       wanders off to barbeque som whale
13:29 drojf           huh. i should leave the house from time to time
13:29 huginn`         drojf: The current temperature in Berlin Tegel, Germany is 26.0°C (3:20 PM CEST on June 29, 2015). Conditions: Clear. Humidity: 34%. Dew Point: 9.0°C. Pressure: 30.09 in 1019 hPa (Steady).
13:29 drojf           @wunder berlin, germany
13:24 nengard         ditto for me
13:24 * magnuse       has only been there in early spring, thanks goodness
13:24 magnuse         marseille can get real hot, apparently
13:24 nengard         that's surprising
13:24 nengard         wow!! warmer than here
13:24 huginn`         magnuse: The current temperature in Marseille / Marignane, France is 30.0°C (3:00 PM CEST on June 29, 2015). Conditions: Clear. Humidity: 32%. Dew Point: 16.0°C. Pressure: 30.08 in 1018 hPa (Falling).
13:24 magnuse         @wunder marseille
13:24 nengard         LOL
13:24 magnuse         whi knew such a thing was possible...
13:23 huginn`         nengard: The current temperature in University Hills, Austin, Texas is 24.4°C (8:23 AM CDT on June 29, 2015). Conditions: Scattered Clouds. Humidity: 99%. Dew Point: 24.0°C. Pressure: 30.04 in 1017 hPa (Steady).
13:23 nengard         @wunder 78754
13:23 magnuse         ooh, double digits!
13:23 huginn`         magnuse: The current temperature in Bodo, Norway is 11.0°C (2:50 PM CEST on June 29, 2015). Conditions: Partly Cloudy. Humidity: 62%. Dew Point: 4.0°C. Pressure: 29.98 in 1015 hPa (Steady).
13:23 magnuse         @wunder boo
13:23 nengard         :)
13:20 magnuse         nengard: ah, kewl anyways!
13:04 * tcohen        was excited to add his recently moved to 3.20 libraries
13:04 paul_p          (if only days had 40 or 45 hours...)
13:04 paul_p          tcohen yep, that can/will be a future improvement.
13:04 tcohen          hi :-D
13:04 paul_p          hi tcohen.
13:03 tcohen          paul_p: hea misses to show library type and country distribution
13:03 nengard         you mean my hair? actually that's a pic from a couple months ago - but I do have new colors now :) hehe
13:02 tcohen          well, picture-upload should be a REST webservice
13:02 wahanui         magnuse is a Norwegian giant.
13:02 nengard         magnuse?
13:01 marcelr         we really should have one uploader
13:01 marcelr         i found a third upload mechanism too in picture-upload
13:00 tcohen          it is next on my list
13:00 tcohen          ah, yes
13:00 huginn`         04Bug http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6874 enhancement, P3, ---, julian.maurice, Passed QA , Attach a file to a MARC record (Was: File upload in MARC)
13:00 marcelr         bug 6874 probably
13:00 tcohen          what was that supposed to be about?
13:00 tcohen          heh
13:00 marcelr         lol
13:00 wahanui         marcelr is, like, talking with tcohen about it
13:00 tcohen          hey marcelr
12:59 marcelr         hi tcohen
12:59 magnuse         nengard: new colours?
12:59 tcohen          hi magnuse nengard
12:58 nengard         morning magnuse
12:58 magnuse         hiya nengard and tcohen
12:44 tcohen          hi cait!
12:43 cait            tcohen: morning!
12:41 kivilahtio      thanks
12:41 matts           kivilahtio, http://wiki.koha-community.org/wiki/IRC_Regulars :)
12:41 kivilahtio      ok, I wonder who M.Tompsett is
12:40 matts           kivilahtio, nope, I'm not. I'm Matthias Meusburger
12:40 kivilahtio      matts: Are you M.Tompsett?
12:35 tcohen          morning!
12:35 AuroraSkywalker I'm going to troublshoot this more later.  Thanks for your help so far.
12:29 AuroraSkywalker No I go to the page and it says something like err_name_not_resolved.  May be the DNS settings I will look into that. Thanks
12:24 * magnuse       gotta go afk for a bit
12:24 magnuse         is dns set up correctly?
12:23 magnuse         AuroraSkywalker: do you get the "it works" page or just nothing?
12:19 AuroraSkywalker no I thought that's what it needed for a mysql config.  I removed it so its back to default.  No more errors but it's still not there.
12:19 magnuse         looks like the database is empty
12:18 magnuse         do you have a file called "mysql"?
12:18 magnuse         AuroraSkywalker: DEFAULTSQL="mysql"
12:11 AuroraSkywalker ok
12:07 drojf           the comment for the serials table is "patron's opac search history"? that does not seem right :)
12:07 pastebot        "AuroraSkywalker" at 127.0.0.1 pasted "cron messages" (162 lines) at http://paste.koha-community.org/164
12:06 AuroraSkywalker I'm getting a bunch of mails from cron about the mysql database, guess it probably wants one set up before the program will even load the page.  I'll try that and see if I can make any progress.
11:59 AuroraSkywalker when I look at the system status it says something like thearchives-koha-zebra: fatal: failed to become a deamon: Resource temporarily unavaliable
11:55 AuroraSkywalker the only things I changed were the domain and the defaultsql
11:54 pastebot        "AuroraSkywalker" at 127.0.0.1 pasted "koha config" (61 lines) at http://paste.koha-community.org/163
11:50 magnuse         (or the default one)
11:49 magnuse         (not koha-conf.xml, but the one you gave to --configfile)
11:49 AuroraSkywalker sure one sec
11:48 wahanui         I eat paste! It's tasty! http://paste.koha-community.org
11:48 magnuse         paste?
11:48 magnuse         can you paste the config file?
11:48 magnuse         http://wiki.koha-community.org/wiki/Debian#Create_a_Koha_instance
11:48 AuroraSkywalker Thanks for replying
11:48 AuroraSkywalker I think maybe I got something wrong in the config file.  I don't know I'm trying to look at my logs to see if it says anything
11:47 AuroraSkywalker Yes, though I haven't configured mysql yet I usually do that when the page shows up
11:46 magnuse         AuroraSkywalker: did you create an instance?
11:43 AuroraSkywalker Now it has some fatal issue when I restarted the process, at least it is showing an error now.
11:40 AuroraSkywalker Active: active (exited) since Mon 2015-06-29 06:09:27 CDT; 17min ago
11:40 AuroraSkywalker Hi I'm trying to install koha, on Debian.  Followed the instructions but nothing is showing up at the domain it is suppose to.  Can't really find any troubleshooting links.  Tried to install stable, using local mysql.  When I check to see if service koha-common status it returns  Loaded: loaded (/etc/init.d/koha-common)
11:32 vfernandes      <listen id="publicserver">tcp:localhost:9999</listen> it works, <listen id="publicserver">tcp:@:9999</listen> not
11:18 drojf           man yaz-client (aka i don't know :) )
11:16 vfernandes      how to pass username/password?
11:16 drojf           oh but you tried localhost so that should not be it :)
11:16 drojf           it may not be reachable at all from the outside due to firewall or something
11:14 vfernandes      I think this is a server configuration problem
11:14 vfernandes      with 9999 I've the same problem
11:12 vfernandes      let me try
11:12 drojf           vfernandes: does your network/ server actually allow to use such a low port? have you tried 9998 or something?
11:03 vfernandes      Connecting...error = System (lower-layer) error: Connection refused
11:03 vfernandes      when trying to access the Z39.50 with yaz-client (yaz-client -c /KEEPS/koha/etc/zebradb/ccl.properties localhost:210/biblios) I get the following error:
11:00 vfernandes      <listen id="publicserver">tcp:@:210</listen>
11:00 vfernandes      i've uncommented the lines refered in that wiki and i've restarted zebra server
10:59 vfernandes      http://wiki.koha-community.org/wiki/Troubleshooting_Koha_as_a_Z39.50_server
10:59 vfernandes      can anyone help me configuring koha public Z39.50 server?
10:42 drojf           it's ok so far ;)
10:42 drojf           hi marcelr :)
10:41 marcelr         hi drojf: hope your monday is better :)
10:39 drojf           "after 5.6, the server default will include STRICT_TRANS_TABLES." that should be fixed properly :)
10:37 vfernandes      yes
10:36 drojf           vfernandes: where do you set it? in my.cnf?
10:35 vfernandes      drojf : I didn't tried to change the code, because disable that option worked for me
10:35 cait            bbiab
10:34 drojf           ?
10:34 drojf           vfernandes: does it work when you use $input->param("enrolmentperioddate") = 'NULL' if enrolmentperioddate is not filled
10:33 vfernandes      cait: the control of the data inserted could be done by the software code or by the database... Usually it's done by the software code, but in some MySQL installations the option STRICT_TRANS_TABLES comes as default
10:31 cait            vfernandes: sounds like soething we still should fix properly :)
10:30 vfernandes      then I've remembered that MySQL has mecanisms to block inserts with incorrect values...  the option STRICT_TRANS_TABLES is responsible to that block ('' (empty string) is not a valid date, '' is not a valid number...)
10:28 vfernandes      kivilahtio: if the code was working for rangi and for drojf, the problem only could be software related (perl, MySQL, etc...)
10:24 kivilahtio      sounds like a very hard to debug thing
10:23 kivilahtio      vfernandes: I am happy you found your solution
10:21 vfernandes      thanks magnuse, cait, rangi and drojf
10:18 vfernandes      removing that option it works :D
10:18 vfernandes      MySQL documentation : "If a value could not be inserted as given into a transactional table, abort the statement. For a nontransactional table, abort the statement if the value occurs in a single-row statement or the first row of a multiple-row statement. More details are given later in this section."
10:16 vfernandes      STRICT_TRANS_TABLES
10:15 drojf           do you mean it has to be NULL, not ''?
10:13 vfernandes      MySQL doesn't have an option to controll empty values?
10:12 vfernandes      I think I know what it is...
10:11 vfernandes      $input->param("enrolmentperioddate") = '' if enrolmentperioddate is not filled
10:10 vfernandes      looking at the code I don't see where the problem is
10:10 pastebot        "vfernandes" at 127.0.0.1 pasted "Code of categories.pl" (33 lines) at http://paste.koha-community.org/162
10:07 drojf           i have the same. it is an upgraded installation (from 3.18) though
10:06 vfernandes      debian 7, perl 5.14.2
10:05 vfernandes      could be something related to SO version or Perl version?
10:05 drojf           can't reproduce
10:04 vfernandes      i've tried on Firefox and Chrome
10:04 vfernandes      "An error occurred when inserting this patron category. The patron category might already exist." this is the error on the interface
10:03 vfernandes      english version
10:03 drojf           oh you said english templates, sorry
10:02 drojf           vfernandes: do you try it in the english version or translated?
09:57 cait            heya rangi
09:56 rangi           and on one upgraded from 3.20.0
09:56 rangi           on a fresh install
09:56 rangi           i cant reproduce either
09:54 cait            worht noting it's a fresh installation
09:54 cait            vfernandes: maybe best to file a bug report
09:49 vfernandes      I don't know... this is the first time I've installed a version up than 3.16
09:48 cait            wonder if it could be a difference between updated/new installation
09:46 cait            hm
09:45 vfernandes      fresh install
09:45 vfernandes      english templates
09:45 cait            translated templates or english templates?
09:45 cait            did you just update?
09:44 vfernandes      but I get the following error in the logs : DBD::mysql::st execute failed: Incorrect date value: '' for column 'enrolmentperioddate' at row 1 at /KEEPS/koha/intranet/cgi-bin/admin/categorie.pl
09:44 cait            magnuse: but works for you?
09:44 cait            hm yeah that shoudl work
09:44 vfernandes      i'm adding a categorie with a defined period time of 12 months (for example)
09:43 cait            .... when adding categories
09:43 cait            ah sorry, missed that
09:43 cait            vfernandes: what are you doing to trigger the errror?
09:39 vfernandes      the enrolmentperiod and enrolmentperioddate can be NULL in the database
09:38 vfernandes      if I fill the enrolmentperioddate : DBD::mysql::st execute failed: Incorrect integer value: '' for column 'enrolmentperiod' at row 1 at /KEEPS/koha/intranet/cgi-bin/admin/categorie.pl
09:38 magnuse         vfernandes: i can't reproduce...
09:35 vfernandes      when adding categories :  DBD::mysql::st execute failed: Incorrect date value: '' for column 'enrolmentperioddate' at row 1 at /KEEPS/koha/intranet/cgi-bin/admin/categorie.pl
09:35 vfernandes      problem in Koha 3.20.1
09:35 vfernandes      hi guys
09:26 ashimema        basically.. they just allow one to plug on routine to do the actual authentication and authorization.. but they give a nice framework for holding it all together
09:26 kivilahtio      ashimema: lucky me I already had to go to significatn depths on how Mojolicious works to make logging work and extend pluginss
09:26 ashimema        I've used the authentication one as an inspiration for writing my own.. and I use the Authorization one out of the box ;)
09:26 kivilahtio      ashimema: thanks, I'll take a look
09:25 ashimema        I'm reasonably confident they could be used for inspiration ;)
09:25 ashimema        I really like the way https://metacpan.org/pod/Mojolicious::Plugin::Authentication and https://metacpan.org/pod/Mojolicious::Plugin::Authorization are laid out
09:21 * magnuse       cheers kivilahtio on
09:21 kivilahtio      I'll make it better today, I got some nice ideas this weekend I am eager to put into practice
09:20 ashimema        all good
09:20 kivilahtio      sorry, need to review a press release :)
09:20 kivilahtio      see the _check_version for ex.
09:20 kivilahtio      ashimema: my modifications ai to be 100% backwards compatible. So we can rewrite portions in steps
09:19 matts           yep, and be able to define an order would be nice
09:19 ashimema        etc. etc
09:19 ashimema        Try LDAP, Never fallback to Local..
09:19 ashimema        Try CAS, then LDAP, then Local..
09:19 ashimema        woudl be better to be able to make this explicit..
09:18 ashimema        so.. at the moment.. koha says.. 'if CAS enabled try CAS, if LDAP enabled, try LDAP, try Loca..
09:18 ashimema        I'd like a fallback path written into a re-write too..
09:17 ashimema        if one needs a particular permissions.. then a check_perm($permission) should be the definative call (and it may well call check_auth internally as the first step ;) )
09:16 ashimema        if one just needs auth.. then check_auth should be the one way to get it..
09:15 ashimema        i.e.
09:15 ashimema        that would actually be far better factored out.
09:15 ashimema        your last step.. Check if haspermission..
09:14 ashimema        set_userenv is non-restful.. though I actually have no issue with using such caches.. they just need to be transparent from the client.
09:11 ashimema        with a simple yes/no as the response
09:11 ashimema        kivi.. what you likely need for a central auth module is a sub 'authenticate' which accepts username:password:other_hashref
09:11 cait            ok
09:09 ashimema        is x authenticated? yes/no
09:09 ashimema        there are standard pam modules for all sorts of things.. and basically the api is as simple as..
09:09 kivilahtio      "convetion over configuration"
09:08 kivilahtio      but the Idea is to have authentication subroutines, but they wont need configuring :)
09:08 ashimema        basically cait, pam is a standardised API that apps in linux can hand off to for authentication..
09:08 kivilahtio      well I have no clue how to use it and I am not going to replicate it for Koha
09:08 ashimema        lol..
09:08 kivilahtio      I hate linux PAM
09:08 ashimema        Linux Pluggable Authentication Modules
09:08 kivilahtio      ashimema: nope
09:07 cait            PAM?
09:07 ashimema        ooh.. are you a PAM man?
09:07 kivilahtio      PAM for Koha :)
09:07 kivilahtio      its very interesting :)
09:07 kivilahtio      well I'll just keep working on it
09:06 ashimema        right.. back to auth..
09:06 kivilahtio      every request needig auth
09:06 ashimema        it sends auth details with every request.
09:06 ashimema        So.. in effect SIP is jsut RESTful in nature..
09:06 ashimema        :)
09:05 ashimema        temporary variale that are only setup for a shorter period of time.
09:05 kivilahtio      ashimema: thanks for clairification ,we agreee
09:05 ashimema        they're onyl not restfull if you store stuff like search history in them..
09:05 kivilahtio      not sure if we agree or disagree
09:05 ashimema        cookies.. get sent with every request.. thus.. they are sending all authentication detail with every request.. thus they are prefectly restful
09:04 kivilahtio      it doesn't make it any more non-REST
09:04 ashimema        and in fact.. anyone that tells you cookies means this isn't the case doesn't understand this stuff either ;)
09:04 kivilahtio      so normal Koha-users can benefit from it
09:04 kivilahtio      ashimema: yes I understand, but we need to support the CGISESSID as well
09:04 ashimema        auth with every request..
09:04 ashimema        that's exactly what REST is all about too kivi
09:04 kivilahtio      so we get the authentication information on each message that reasonably needs authentication
09:03 kivilahtio      the sip speficiation claims that each message can be a stand-alon message
09:03 ashimema        why persist it ;)
09:03 kivilahtio      atleast it doesnt persist the authentication
09:03 kivilahtio      cait: I dont think it really authenticates :)
09:02 cait            the way SIP does authenticate is nto very clean right now... i got a bug for that somewhere
09:01 cait            are the ones that come to mind
09:01 cait            native Koha, CAS, LDAP, Shibboleth - also SIP, ILS-DI, svc
09:01 cait            kivilahtio: thinking of apis....
09:00 matts           Okay, will look at it !
08:59 kivilahtio      matts: there is a gdoc link for my spec and some WIP commit for people to see where this is heading
08:59 huginn`         04Bug 7174: enhancement, P5 - low, ---, paul.poulain, NEW , Authentication rewriting
08:59 kivilahtio      http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7174
08:59 kivilahtio      matts: It is a critical part of the REST API development to get a sane authentication framework for all the various ways  of authenticating to Koha
08:58 ashimema        matts, would be really good to get your input too ;)
08:58 matts           kivilahtio, sure, where is it ?
08:58 ashimema        I'll dip in as often as I can to comment..
08:58 kivilahtio      matts: it is stil WIP but I need people to support it so we have any hope of getting it pushed
08:58 ashimema        I'd say go for it kivi..
08:58 kivilahtio      matts: want to review my work?
08:58 matts           that's nice to hear :)
08:58 kivilahtio      ashimema: I understand
08:58 kivilahtio      matts: working on it
08:58 matts           We miss a modular auth stack in koha
08:58 ashimema        I have sic months worth of back log for paying customers here at the minute :(
08:57 kivilahtio      but if we could agree on a datetime for a review, that would be aswesome
08:57 ashimema        at the minute. I can't easily judge..
08:57 ashimema        there's more persona stuff in some files in /opac/svc
08:57 kivilahtio      I will work on it more now
08:57 kivilahtio      ashimema: you still didnt tell me when you have time to take a look at the rewrite?
08:57 ashimema        yeah.. Auth is a mess ;)
08:57 kivilahtio      ok
08:57 cait            https://www.mozilla.org/en-US/persona/about/
08:57 ashimema        it's not CAS..
08:56 ashimema        nah.. that's just because the varialbe are all messed up and re-used all over the shop ;)
08:56 ashimema        it sends a 'special token' which koha then binds on
08:56 kivilahtio      in C4::Auth there is only one check for PT-parameter in context of Persona, and the PT leads to CAS
08:56 ashimema        Firefox acts as your identity keeper..
08:55 ashimema        persona is a firefox thing
08:55 cait            todally different
08:55 cait            no
08:55 cait            it probably still workds tho
08:55 kivilahtio      I thought Persona was part of CAS
08:55 ashimema        along with local auth over BASIC or Params
08:55 cait            i think persona is dead kind of
08:55 ashimema        there is also Persona and APK support in koha..
08:55 kivilahtio      CAS only want a PT-http parameter
08:55 ashimema        but matts would be able to better comment
08:55 ashimema        I 'think' CAS is also SSO..
08:54 ashimema        SLO - Single Log On (i.e sign in to each app individually, but using the same set of credentials each time)
08:54 ashimema        SSO = Single Sign On (i.e sign in once on one app, be signed into all other apps at the same time)
08:54 kivilahtio      single-sign on vs single log on
08:54 cait            so that would be the main difference i guess
08:54 kivilahtio      ?
08:54 cait            aah
08:54 kivilahtio      single log on
08:54 cait            slo?
08:54 ashimema        Shibboleth is SSO.. LDAP is SLO
08:53 ashimema        yup..
08:53 cait            also for accessing electronic ressources
08:53 magnuse         http://perldoc.koha-community.org/C4/Auth_with_ldap.html
08:53 cait            shibboleth is very common here - to build single sign on solutions
08:53 ashimema        C4::Auth_with_ldap kivi
08:53 kivilahtio      ashimema: when can you take a look at the authentication rewrite?
08:53 cait            only the ldap does that so far -ashimema has patches for it to happen with shib too
08:53 cait            yep
08:53 cait            i think in the ldap module
08:52 kivilahtio      mm, mybe it is on C4::Auth_LDAP
08:52 cait            maybe because it happens elsewher? :)
08:52 kivilahtio      really? I haven't seen that in C4::Auth?
08:52 cait            also updating the user everytime they authenticate
08:52 cait            it's just an optional feature
08:52 cait            already
08:52 cait            kivilahtio: we do
08:51 kivilahtio      cait: I think in Koha we could easily add a borrower from the information LDAP returns
08:51 ashimema        I think it sort of sits in the middle of those two methods
08:51 cait            with shib you can authenticate at the... campus portal and then you are automatically logged into koha as well - can you do that kind of thing with ldap?
08:51 ashimema        CAS i'm not 100% sure how it works..
08:51 cait            ashimema: hm differences between ldap and shib...
08:50 ashimema        but if your relying upon ldap to populate your users, then that will only happen at first login
08:50 magnuse         gotcha
08:50 cait            if you do the 'create users via ldap' thing
08:49 cait            then they can chek out
08:49 ashimema        if those user account are already in the koha end they can...
08:49 cait            magnuse: you'd tell them to go log into the opac once
08:49 ashimema        sorry..
08:49 magnuse         cait, ashimema: oh
08:49 ashimema        but that's an enhancement I'd love to do..
08:49 ashimema        right now magnuse, no..
08:49 cait            magnuse: not yet, but i think there is apatch lingering somewhere in koha
08:49 ashimema        similarly to ldap, the shibboleth secret handshake can include lots of extra details from which you can build a koha user from/update an existing user from.
08:48 magnuse         how does ldap work if the user has never signed into koha, but comes to check out a book? can koha then get the patron data without the user's password?
08:48 ashimema        Shibboleth: Koha asks browser 'Do we have a logged in user?', Browser replies with yes or no, if no then user can ask to authenticate, koha says 'OK, go over there and authenticate, then bring me back a secret handshake'. (So, the big thing here is koha NEVER see's the users username and password).
08:47 kivilahtio      yup
08:47 ashimema        LDAP...  User inputs username & password into KOHA.. koha then sends these to ldap server and asks "Are they OK?", LDAP then replies with OK and other details if configured to give those (from which you can build new users, update existing users)
08:46 kivilahtio      ok
08:45 ashimema        it's the order in which the calls happen which is important.
08:45 ashimema        OK.. they're all authentication systems (which can double up as authorization handlers)
08:44 kivilahtio      ashimema: And If I was to implement a single sign on system for our Issue tracker and Koha librarians, which method would you recommend?
08:44 ashimema        it will all ask what their password is.. then compare it to what they gave you
08:44 ashimema        it'll then perform an ldap search to find the user that's trying to login.. (i.e samaccountname)..
08:44 kivilahtio      apparently LDAP and Shibboleth are pretty muc hthe same?
08:43 kivilahtio      ashimema: speaking of LDAP, can you tell me in two sentences what is the difference between LDAP and CAS and Shibboleth?
08:43 ashimema        koha will attempt to login to the ldap server with your 'service user', (as per the username and password contained within the <user></user><pass></pass> block
08:43 cait            fred_pt ^^
08:42 ashimema        So.. in your current flow..
08:42 ashimema        or at least that's my understanding
08:41 ashimema        with auth_by_bind turned off, instead koha asks for the password and then does the comparision our side
08:41 ashimema        not many ldap directories will allow the password to leak out.. so bind mean you send them username + password to the ldap and letting it 'bind' for you..
08:39 ashimema        ooh.. you probably want auth_by_bind.. I've hardly ever seen that set to '0'
08:38 ashimema        sorry.. I missed the paste there... just reading it now
08:38 ashimema        oops..
08:04 huginn`         kivilahtio: The operation succeeded.
08:04 kivilahtio      @later tell pianohacker. I think I made a translation mistake in my head. When I said my work, I meant my job ... :)
08:04 * magnuse       will have to set up ldap soon, so is all ears
07:53 cait            i am just guessing around - you better listen to ashimema :)
07:52 fred_pt         i'm kind of new to this ldap thing so i may give stupid awsers :) and i just need to have the users from windows domain to authenticate to koha interface
07:52 cait            hm wondering, do you need to match password?
07:51 pastebot        "fred_pt" at 127.0.0.1 pasted "LDAP config" (24 lines) at http://paste.koha-community.org/161
07:48 ashimema        obviosly *** out anything personal ;)
07:48 ashimema        http://paste.koha-community.org/
07:48 ashimema        whats your config look lke?
07:44 cait            might be worth trying the mailing list
07:44 cait            i have never set up ldap myself - so not much help here
07:43 cait            hm i think the second looks more promising - maybe then it finds the user name but just the passwords are not matching?
07:42 fred_pt         I have koha working wonderful just miss this step to "sell" it to my company for our new library...
07:42 fred_pt         also i get this second line in the log: The request referenced an attribute that does not exist
07:40 fred_pt         in ldap the "name" is "Frederico Almeida" but sAMAccountName is "falmeida"
07:39 fred_pt         but looking at this awser it seems it can't find the password to match against or i see this wrong?
07:38 fred_pt         if i try falmeida i get: opac-user.pl: LDAP Auth rejected : invalid password for user 'falmeida'. LDAP error #16: LDAP_NO_SUCH_ATTRIBUTE
07:38 fred_pt         i tried several ways but the proper one should be "falmeida" as this is the pc login username
07:36 cait            um maybe somethin in your mapping? is  the name with the space the user login?
07:33 fred_pt         does this means that i was able to log into windows ldap and it didn't find the user i tried to login with?
07:32 fred_pt         LDAP Auth rejected : (sAMAccountName=frederico almeida) gets 0 hits, referer: http://trvlib.library.trivago.trv/cgi-bin/koha/opac-user.pl
07:31 fred_pt         so i think i am missing something between the query i make and the fields in ldap server?
07:30 cait            morning ashimema :)
07:30 ashimema        well done fred_pt
07:29 fred_pt         after having a better look into it i found the log i was looking for:  opac-user.pl: LDAP Auth rejected : invalid password for user 'falmeida'. LDAP error #16: LDAP_NO_SUCH_ATTRIBUTE
07:29 fred_pt         ok
07:26 gaetan_B        hello
07:25 cait            do you know wher your koha logs are?
07:25 cait            error messages might show up in the usual logs
07:23 fred_pt         i need to find out why my ldap connection is not working between koha and windows server
07:23 cait            fred_pt: what kind of information are you looking for?
07:22 fred_pt         Does the ldap in koha writes to any log file?
07:22 cait            hi marcelr :)
07:19 marcelr         hi #koha
07:15 cait            morning #koha
07:12 * dcook         waves and peaces out for the night
07:11 fred_pt         now you got me - just found i have a shell.... let's try to use it...
07:09 drojf           have you tried doing it in koha-shell? (if you are on a package installation)
07:09 fred_pt         i am trying to put the ldap connection between koha and windows domain controller - it works with serachldap but not with koha
07:08 drojf           fred_pt: don't know what yoiu are doing, but that looks like missing environment variables
07:08 huginn`         AmitG: 04Bug http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6810 enhancement, P4, ---, amitddng135, Needs Signoff , Send membership expiry reminder notices
07:08 AmitG           @bug 6810
07:08 AmitG           can you please check
07:07 alex_a          AmitG: yep
07:07 AmitG           alex_a around?
07:05 fred_pt         opac-user.pl userid=***** password=******  it returns Can't locate C4/Auth.pm in @INC (you may need to install the C4::Auth module) anyone knows what is this error?
07:04 drojf           morning
07:02 fred_pt         This ldap thing is killing my last 2 mornings... :(
07:01 wahanui         the only good morning is a dead one
07:01 fred_pt         Good morning
06:59 wahanui         niihau, alex_a
06:59 alex_a          bonjour
06:56 fred_pt         Oh and the windows server doesn't accept anonymous bind.
06:54 fred_pt         *post
06:54 fred_pt         Can i poaste here the config i have in koha-conf.xml?
06:53 fred_pt         Ok now responding to your questions: koha version 3.14.16 - the documentation was the official one on koha site and ldap with bind.
06:51 fred_pt         If  i try to use opac-user.pl to test like: opac-user.pl userid=***** password=******  it returns Can't locate C4/Auth.pm in @INC (you may need to install the C4::Auth module)
06:51 ashimema        are you doing auth by bind?
06:50 ashimema        and what documentation have you followed thus far..
06:50 ashimema        What Koha version are you using..
06:49 fred_pt         Thanks!
06:49 fred_pt         Is anyone able to give me a help on this please?
06:49 fred_pt         I have searched for documentation, tried several ways and if i use a tool like ldapsearch i can connect and read the user data, within koha it always fails either by saying no results returned or by saying logon error.
06:47 fred_pt         I need to be able to read the domain accounts as we have +800 users and growing fast.
06:47 wahanui         bonjour, reiveune
06:47 reiveune        hello
06:47 fred_pt         My problem is really the ldap link to my domain controller. I have spent a few hours trying to solve this but no luck,
06:46 fred_pt         Thanks for the kind reply
06:45 ashimema        (though it's breakfast time for me.. so I'm about to head offline for a bit for that ;) )
06:45 ashimema        ask away.. someone is likely to try and answer
06:44 fridolin        hie
06:44 fred_pt         Good morning everyone! Can someone please spare some minutes helping me resolve a problem with my current Koha server?
06:43 huginn`         ashimema: The current temperature in Monkswood, Stevenage, United Kingdom is 15.2°C (7:43 AM BST on June 29, 2015). Conditions: Clear. Humidity: 85%. Dew Point: 13.0°C. Pressure: 30.15 in 1021 hPa (Steady).
06:43 ashimema        @wunder stevenage, uk
06:43 huginn`         ashimema: The current temperature in Monkswood, Stevenage, United Kingdom is 15.2°C (7:42 AM BST on June 29, 2015). Conditions: Clear. Humidity: 85%. Dew Point: 13.0°C. Pressure: 30.15 in 1021 hPa (Steady).
06:43 ashimema        @wunder stevenage, il
06:03 dcook           :(
06:02 magnuse         nope, something failed this year, so far...
06:01 * dcook         isn't sure that Bodo has figured out it's summer yet though
06:01 dcook           I think we only have 2 more months of winter here...
06:01 dcook           I wonder that too
06:01 huginn`         dcook: The current temperature in Sydney, New South Wales is 18.0°C (3:30 PM AEST on June 29, 2015). Conditions: Scattered Clouds. Humidity: 56%. Dew Point: 9.0°C. Pressure: 30.39 in 1029 hPa (Steady).
06:01 dcook           @wunder syd
06:01 huginn`         magnuse: The current temperature in Bodo, Norway is 9.0°C (7:50 AM CEST on June 29, 2015). Conditions: Scattered Clouds. Humidity: 76%. Dew Point: 5.0°C. Pressure: 29.92 in 1013 hPa (Steady).
06:01 magnuse         @wunder boo
06:01 * magnuse       wonders how we already got to the 29th
05:55 dcook           Feels like a long day :p
05:54 dcook           Oh, I don't mind
05:53 * magnuse       hates to be the bringer of bad news
05:52 magnuse         guess it is
05:52 * magnuse       waves back
05:51 * dac           waves to magnuse
05:51 dac             Is it already that time of day?
05:51 * magnuse       waves
05:00 * dcook         looks forward to the day when Koha ships with Plack by default
03:28 AmitG           hi all
01:12 wizzyrea        (though I'll probably have something that kind of maybe says what to do in the next day or so.)
01:11 * dcook         thumbs up
01:11 huginn`         wizzyrea: The operation succeeded.
01:11 wizzyrea        @later tell nengard documentation suggestion: write down what to do if you make a mistake receiving serials. :)
00:42 wizzyrea        valid point
00:38 dcook           Hmm, could be. Might need to do something with the items too if it was made automatically?
00:38 wizzyrea        I feel like you just change the status back to "expected"
00:38 wizzyrea        ...I just realised that I don't know how one "un-receives" a serial.
00:34 dcook           ^_^
00:34 wizzyrea        lulz.
00:34 wizzyrea        many lulx.
00:33 huginn`         dcook: The operation succeeded.
00:33 dcook           @later tell eythian But it was the same sentiment!
00:32 huginn`         eythian: The operation succeeded.
00:32 eythian         @later tell dcook it did
00:32 dcook           Hmm that looked generic...
00:32 huginn`         dcook: The operation succeeded.
00:32 dcook           @later tell pianohacker thanks :)
00:32 huginn`         dcook: The operation succeeded.
00:32 dcook           @later tell tcohen thanks :)
00:31 dcook           O_O
00:30 eythian         https://twitter.com/rpy/status/615044896123031552
00:25 wizzyrea        hi