Time  Nick            Message
01:43 dcook           Hmm any koha-security folk around?
01:49 dcook           I don't really have a security bug to report... rather just to mark an existing bug as a security bug...
02:07 rangi           you can just edit it
02:07 rangi           and switch it to koha-security from koha
03:07 circ-user-YesEm hello
03:07 circ-user-YesEm anyone there ?
03:08 circ-user-YesEm [d]
03:13 wizzyrea        hi
03:26 circ-user-YesEm hello
03:26 circ-user-YesEm where can i find the document that prose Koha is secure ?
03:27 rangi           heh
03:27 rangi           short answer is you can't
03:27 rangi           you can't prove something is secure
03:30 circ-user-YesEm ok
03:33 wizzyrea        You should run your own tests and tools against it.
03:36 circ-user-YesEm i dont think i am expert testing and finding issue on koha but i wish to see if anyone can tell koha is secure
03:39 ibeardslee      probably worth doing something explaining some of the stats around fixing known security bugs
03:40 ibeardslee      there was a known issue a while back that had a patch and a new release with a hour or so wasn't there?
03:41 ibeardslee      that's not quite a "Koha is secure" but more Koha has processes for dealing with notified security issues.
03:45 rangi           yeah, there are no currently known exploitable issues that havent been patched
03:45 rangi           https://www.cvedetails.com/product/21648/Koha-Koha.html?vendor_id=11706
03:46 rangi           we have strong qa processes, and we fix any issues as fast as possible as soon as they are found
03:47 wizzyrea        moreover it's on you as the user (or your support company) to make sure you are running the latest patched version
03:47 wizzyrea        all software has vulnerabilities.
06:11 reza            Hi, I am getting an error after searching in opac side.
06:11 reza            Error:
06:11 reza            Can't call method "raw" on an undefined value at /usr/share/koha/lib/C4/Search.pm line 798.
06:43 reiveune        hello
06:49 reza            Hi, I am getting an error after searching in opac side
06:49 reza            Error:
06:49 reza            Can't call method "raw" on an undefined value at /usr/share/koha/lib/C4/Search.pm line 798.Hi, I am getting an error after searching in opac side.
06:49 reza            <reza>  Error:
06:49 reza            <reza> Can't call method "raw" on an undefined value at /usr/share/koha/lib/C4/Search.pm line 798.Hi, I am getting an error after searching in opac side.
06:49 reza            <reza>  Error:
06:49 reza            <reza> Can't call method "raw" on an undefined value at /usr/share/koha/lib/C4/Search.pm line 798.Hi, I am getting an error after searching in opac side.
06:49 reza            <reza>  Error:
06:49 reza            <reza> Can't call method "raw" on an undefined value at /usr/share/koha/lib/C4/Search.pm line 798.Hi, I am getting an error after searching in opac side.
06:49 reza            Error:
06:49 reza            Can't call method "raw" on an undefined value at /usr/share/koha/lib/C4/Search.pm line 798.
06:58 alex_a          bonjour
07:20 * dcook         waves goodnight
07:32 paul_p          Joubu dans le coin ?
07:50 marcelr         hi #koha
08:34 * magnuse       waves
08:44 marcelr         hi magnuse
08:45 marcelr         @later tell tcohen: About "You do not have upload_path in koha-conf.xml at t/db_dependent/Upload.t line 44": would you rather remove these two warns there?
08:45 huginn          marcelr: The operation succeeded.
08:51 magnuse         @wunder boo
08:51 huginn          magnuse: The current temperature in Bodo, Norway is 6.0°C (10:20 AM CEST on May 09, 2016). Conditions: Mostly Cloudy. Humidity: 87%. Dew Point: 4.0°C. Windchill: 3.0°C. Pressure: 30.39 in 1029 hPa (Steady).
09:00 Joubu           paul_p: yep
09:30 reza            I'm getting an error from search
09:31 reza            Can't call method "raw" on an undefined value at /usr/share/koha/lib/C4/Search.pm line 798.
09:31 Joubu           reza: which Koha version do you use?
09:33 reza            latest
09:33 reza            I have updated about a week ago
09:34 Joubu           3.22.06?
09:34 reza            the funny part is when i search some specific words it shows error in opac page. the other error I have mentioned is in the log
09:34 reza            yes . 3.22
09:34 Joubu           .06? :)
09:34 reza            I have 180 MB of logs
09:34 reza            0_o
09:35 Joubu           Did you fully reindex Zebra?
09:35 reza            yes, i did
09:35 reza            http : // opac . apiit .edu  .  my
09:35 reza            check this
09:35 reza            just search "php 7"
09:36 Joubu           you should use plack :)
09:37 cait            hi all
09:38 reza            Do you know why am I getting this error? :-?
09:38 marcelr         hi cait
09:39 Joubu           reza: it seems that zebra returns an invalid record
09:39 Joubu           did you upgrade via the debian packages?
09:40 reza            yes,
09:40 reza            Do you think I should fully rebuild zebra?
09:41 Joubu           you told me you did it :)
09:41 reza            after I have upgraded. but if you think reindexing will help I will do that
09:41 Joubu           I would fully reindex zebra and make sure there is no error
09:41 Joubu           It may be caused by the version of Zebra you use
09:42 Joubu           but if you are using the debian packages I imagine the version should be ok
09:43 reza            so I'm gonna index again
09:43 reza            I had 1.5 GB error file :-D
09:44 Joubu           from the reindex?
09:44 reza            from opac-error.log
09:46 reza            [Sun May 08 06:51:11.511223 2016] [cgi:error] [pid 17097] [client] AH01215: [Sun May  8 06:5$
09:46 reza            [Sun May 08 06:54:16.616281 2016] [cgi:error] [pid 17119] [client] AH01215: [Sun May  8 06$
09:46 reza            [Sun May 08 06:54:16.616453 2016] [cgi:error] [pid 17119] [client] AH01215: [Sun May  8 06$
09:46 reza            [Sun May 08 06:54:16.616574 2016] [cgi:error] [pid 17119] [client] AH01215: [Sun May  8 06$
09:46 reza            [
09:47 reza            opac-export.pl: Wide character in print at /usr/share/koha/opac/cgi-bin/opac/opac-export.pl line 116.
09:48 * cait          waves
09:48 cait            super busy today
09:49 Joubu           hi cait
09:58 cait            hi Joubu
09:59 cait            I tried to clean up the bugs in the pqa list - but from the remaining 5 i can't do 3 because I wrote/tested them
09:59 cait            marcelr, Joubu - could you take a look at those?
10:01 marcelr         cait: hopefully later this week..
11:02 cait            tcohen: ping?
11:08 tcohen          heading to the office
11:09 cait            ah
11:09 cait            ping me later? i just have a quck question
11:11 tcohen          ok
11:48 oleonard        Hi #koha
13:07 tcohen_         guten morgen
13:09 marcelr         hello tcohen
13:09 tcohen          hi marcelr
13:09 tcohen          cait: what's up?
14:54 kidclamp        mtj around?
15:00 kidclamp        @later tell mtj can you look at bug 13871
15:00 huginn          kidclamp: The operation succeeded.
15:02 mveron-away     Hi #koha
15:05 tcohen          magnuse: i merged the anisble into master
15:06 * mveron        waves to cait
15:08 mveron          cait: I see a problem with the reading history in OPAC (German). In English, I have results in tab "Checkouts", but no results in German in tab "Ausleihen".
15:08 tcohen          Joubu: why do u say 30 secs?
15:09 Joubu           tcohen: hum?
15:32 drab            morning #koha
15:32 drab            tcohen: do you have an ansible role to deplo koha that's officially supported?
15:32 tcohen          hi drab}
15:32 tcohen          nope
15:33 tcohen          we have a role used to deploy the dev environment
15:34 tcohen          it is not a bad idea, though
15:35 tcohen          drab: are you interested?
15:39 drab            tcohen: I made one for our own deployment, but it's pretty much sticks & duct tape
15:39 drab            not really even a role, just a playbook
15:43 drab            on a different note, gonna try my luck again about import_records
15:43 drab            does anybody know exactly what the table import_records is about and more importantly if it's safe to empty it? I'm chasing a corruption and tracked it down there
15:44 drab            I can't quite repair it without dropping the table and dumping it isn't possible as it crashes mysql
15:44 reiveune        bye
16:03 Joubu           drab: what do you mean by "safe"?
16:03 drab            Joubu: cant the data be "regenerated" somehow? does it break any functionality?
16:04 Joubu           drab: it contains the data you have imported via the Koha import tool
16:05 Joubu           but when a record is imported, a "Koha record" (biblio/auth) is created
16:06 Joubu           so it should not break any other ft than the history of your staged MARC records
16:06 Joubu           and you won't be allowed to revert the import
16:06 Joubu           it would make sense to truncate import_batches as well
16:07 Joubu           and so no, you won't manage to regenerate the data
16:13 drab            Joubu: that's great news, thank you, and thank you for bringing up import_batches, I'll clear that one too
16:13 Joubu           drab: I have never done that before, so please test :)
16:14 drab            lol, ok, I have backups of the broken db...
16:44 mveron          cait: Bug 16478
16:44 huginn          04Bug http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=16478 normal, P5 - low, ---, veron, Needs Signoff , Translation breaks display of Checkout history in tab Checkouts / On-site-checkouts
16:47 Joubu           mveron: that way, 'onsite' and 'checkout' won't be translated
16:48 Joubu           sorry, forget that
16:48 mveron          :-)
16:48 mveron          Joubu: Thanks for checking. I'm not sure if there would be a better solution.
16:52 Joubu           mveron: same issue at the intranet actually
16:53 mveron          Joubu: Is my solution OK? - I will fix the intranet then
16:54 Joubu           mveron: looks ok yes
16:54 Joubu           mveron: I can fix it if you prefer
16:55 mveron          Yes please, I'm a little bit short of time...
17:02 Joubu           mveron: follow-up added, please add your signoff (or wait for someone else to do it) and switch to signoff
17:04 Joubu           bye #koha
17:24 cait            mveron++
17:24 cait            Joubu++
17:57 tcohen          does anyone understand how we implement relevance ranking in Koha?
18:28 cbrannon        tcohen: The last I heard on relevance ranking is that it is a black box function.  No one, to my knowledge, knows how it works.
18:28 tcohen          cbrannon: i've just read in the zebra docs, that there is static ranking (which uses record id to sort results) and there's dynamic ranking
18:29 tcohen          http://www.indexdata.com/zebra/doc/administration-ranking.html
18:29 tcohen          the latter is done at query time and gives really better results
18:30 tcohen          i'm intrigued why we seem not to be using it, probably jcamins or dcook know the answer
18:30 tcohen          if you choose relevance, it falls back to static id-based ranking
18:32 cbrannon        It would be nice to have some input on the ranking functionality.
18:35 tcohen          i think it's just a matter to build the query prepending the @attr 2=102 attribute
18:38 tcohen          i'm probably missing something, but that's how it looked to me
18:44 UserNao         Hola
18:44 UserNao         hello
18:44 tcohen          hola UserNao
18:44 UserNao         hey tcohen... :)
18:58 oleonard        Bye #koha
19:05 tcohen          bye #koha
19:14 kiljab          this probable should not be asked here but i couldnt find else where. Is there a place where i can download old releases?
19:20 tubaclarinet    Good bye :-)
19:24 kchris          i am ready to sign off on a bug,  9543, but I am a little confused about how to use git to sign off on a bug with more than one patch. I have a read the wiki entry.
19:42 cait            kchris: are you working with git?
19:43 cait            or a sandbox?
19:43 kchris          cait: I am working on git.
19:43 cait            ok
19:43 cait            how many patches do you need to sign?
19:44 kchris          Well, it looks to me that there are two patches for bug 9543, the first one was signed off on already. The second one hasn't been signed off on.
19:44 huginn          04Bug http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=9543 enhancement, P5 - low, ---, veron, Signed Off , Show patrons messaging subscription on holds notification
19:44 cait            ok, but you tested both - so you can sign both too
19:44 kchris          Yes, I tested both.
19:44 cait            I will tell you one way :
19:45 cait            git rebase -i HEAD~2
19:45 cait            then you will get some page to edit
19:45 cait            if you change the pick in front of each line to r
19:45 cait            and then close the editor
19:46 cait            you can do git commit --amend -s  (first patch) - then git rebase --continue
19:46 cait            and repeat that until you are done with the patches
19:46 cait            ah sorry
19:46 cait            not r
19:46 cait            better use e
19:57 kchris          cait: that seemed to go ok. Now I still need to attach the patches?
20:05 cait            kchris: yep
20:05 cait            do you know how to do that?
20:05 cait            you can do git bz attach  bugnumber HEAD~2..
20:05 cait            and then a git bz edit
20:06 cait            that will attach all the patches at once and then you can use the edit command to obsolete and set the status
20:07 kchris          cait: ok. I am obsoleting the patches that were previously applied by Kidclamp, etc?
20:07 cait            yep both
20:07 kchris          Ok. I will give it a shot.
20:07 cait            so your newly attached remain
20:13 kchris          "git bz attach 9543 HEAD~2" returned "Commit is already in remote branches... Rewrite the commit and and the bug URL anyways?"... not sure about this
20:18 cait            add the ..
20:19 cait            HEAD~2..
20:19 rangi           morning
20:19 cait            morning
20:20 cait            hope that makes a difference
20:31 cait            kchris: does it work? we can also do it a bit differently if you want
20:32 kchris          It may have worked...I see the old patches were obsoleted. I am looking in bugzilla to see if my new one was attached.
20:35 rangi           i can never remember how to switch on caching with plack
20:37 cait            kchris: not there
20:38 cait            did it ask you to attach - yes/no?
20:47 kchris          hmm. let me see.
20:51 kchris          it did ask me to attached, and I confirmed. There there was a traceback with wtha a bad status line.
20:53 kchris          git bz edit 9543 allowed me to successfully obsolete 49939, and 49940.
20:54 kchris          I guess that attachment failed.
20:54 cait            hm
20:54 cait            sometimes that happens when you take too long
20:54 cait            maybe try attaching again?
20:55 drab            hi, I'm using the advanced editor to do a search and then trying to "save to catalogue", but I get an error
20:55 drab            Missing mandatory tag: 003
20:55 drab            which is indeed not there
20:55 drab            any clue what that may be about?
20:55 kchris          try the "git bz attach 9543 HEAD~2" again?
20:56 drab            this is from editor.pl on koha 3.22.6
20:56 drab            just got a search back from LOC and trying to save it to catalog
20:56 rangi           kchris: you have to be fast
20:56 cait            drab: you need to type it in
20:56 rangi           kchris: or it times out, so id try again
20:56 cait            it usually has your marcorgcode i think
20:57 kchris          ok. that time, no traceback error message.
20:57 cait            hm
20:57 cait            ther eis a patch
20:57 rangi           cool, id check the bug now, in your browser and see if it has the patch
20:57 cait            just wondering if it's the correct one you wanted?
20:59 kchris          oh no...it does'nt look like the one I wanted....
20:59 cait            hm
20:59 cait            if you do a git log
20:59 cait            are the 2 signed patches there?
20:59 kchris          I think I screwed it up.
20:59 cait            kchris: it's not a problem, we will figur it out
21:00 cait            let's check first if your branch looks correct
21:00 cait            what does the git log show you?
21:05 kchris          git log shows me bug 9543, which is what I want, and it shows that I signed off on it.
21:05 huginn          04Bug http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=9543 enhancement, P5 - low, ---, veron, Signed Off , Show patrons messaging subscription on holds notification
21:07 kchris          But the actual attachment seems to refer to another patch: Bug 16390: Accounts.t does not need MPL
21:07 huginn          04Bug http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=16390 normal, P5 - low, ---, m.de.rooy, Pushed to Master , Accounts.t does not need MPL
21:10 kchris          when I originally did git bz attach 9543 HEAD~2...
21:10 kchris          git returned "Bug 16390: accounts t does not need MPL"
21:10 kchris          ...a different bug
21:12 kchris          attaching seems to have "moved the starting point" adding a bug reference to 16390
21:12 cait            hm
21:13 cait            so git status is ok
21:13 cait            showing the 2 patches...
21:13 cait            i am a bit of a loss here
21:13 cait            what we can try also is
21:13 cait            git bz attach bugnumber HEAD^
21:13 cait            see if that shows your correct first patch before you say y
21:14 kchris          actually it's says "rebase in progress onto 6dbceac
21:14 cait            aah
21:14 cait            try git rebase --continue
21:14 cait            see what it says
21:14 cait            maybe you didn't quite finish before
21:15 kchris          "successfully rebased and updated"
21:15 cait            cool
21:15 cait            now try again
21:17 kchris          when I go to attach, it still refers to "Accounts.t does not need MPL" which refers to another bug...
21:17 kchris          n
21:18 kchris          git status: "your branch and origin/master' have diverged
21:18 kchris          and have 3 and 1 different commit each..
21:18 kchris          use git pull to merge the remote branch into yours.
21:19 kchris          "working directory clean"
21:19 kchris          I guess I should do the git pull first... right?
21:20 cait            sorry, i got a bit lost
21:20 kchris          so, my bug branch has diverged from origin/master
21:21 cait            something has gone wrong there, but not sure whwat it is really
21:21 cait            maybe the easist woudl be to start on a new branch
21:22 cait            checout master... git pull... and then make a new branch and start there again with the patches
21:22 kchris          okay.
21:25 Francesca       good morning
21:32 kchris__        cait: I am going to have to come back to this later tonight...thanks for trying to help me out.
21:32 cait            sorry we didn't get it to work
21:32 kchris__        we got part way there.
21:33 kchris__        starting over, I go to apply the patch, but I also get the commit that I added mistakenly.
22:10 drab            so the librarian guy doesn't like the "advanced editor" for cataloging, "too complicated"
22:10 drab            and wants the old workflow back with the Z39.50/SRU search
22:11 drab            however I just can't get that to work or understand why it's not working
22:11 pianohacker     drab: what version of Koha are you on?
22:11 drab            the same book gets pulled up by the advanced search, but not by cgi-bin/koha/cataloguing/z3950_search.pl
22:11 drab            3.22.6
22:11 drab            so it's not firewall or proxy or anything like that
22:11 drab            results from LOC come back just fine
22:12 drab            it's the code that somehow, with the settings or somethings, makes the decision that "nothing was found"
22:17 rangi           it must be a settings thing, i just tested on a 3.22.06 in production, title search for test from LOC, i got 501 pages of results back
22:20 aleisha         hello all
22:21 aleisha         will be on and off today like i have been for the past week :(
22:21 rangi           hi aleisha
22:21 rangi           righto
22:21 aleisha         hoping to be able to come in on Thursday and friday
22:21 rangi           sweet
22:22 drab            rangi: I believe that, I just can't figure out which one. and also why would the advance editor ignore it?
22:23 rangi           no idea, have never used it
22:24 wizzyrea        drab: what os/installation method are you using? I'm sure you've told us before but I've slept since then...
22:24 drab            sleeping is a good thing :)
22:24 pianohacker     drab: the advanced editor uses a completely different set of code to search Z39.50, so the error is somewhere in the specific part of Koha that does the old Z39.50 search
22:24 drab            wizzyrea: I'm on ubuntu 16.04 with koha 3.22.6
22:25 drab            I've installed from deb