| Time |
Nick |
Message |
| 00:39 |
|
book` joined #evergreen |
| 05:01 |
pinesol_green |
News from qatests: Test Success <http://testing.evergreen-ils.org/~live> |
| 05:36 |
|
remingtron joined #evergreen |
| 05:36 |
|
dbwells joined #evergreen |
| 07:07 |
|
rjackson_isl joined #evergreen |
| 07:35 |
rhamby |
morning universe |
| 07:44 |
|
Dyrcona joined #evergreen |
| 07:55 |
|
Dyrcona joined #evergreen |
| 08:18 |
Dyrcona |
@blame 9 We don't have nice things |
| 08:18 |
pinesol_green |
Dyrcona: We don't have nice things is why we can never have nice things! |
| 08:39 |
|
mmorgan joined #evergreen |
| 08:49 |
|
agoben joined #evergreen |
| 09:11 |
|
rlefaive_ joined #evergreen |
| 09:15 |
|
yboston joined #evergreen |
| 09:20 |
|
kmlussier joined #evergreen |
| 09:24 |
|
maryj joined #evergreen |
| 09:26 |
* mmorgan |
is appreciating seeing the placeholders for aged circs in circulation history. |
| 09:26 |
mmorgan |
berick++ |
| 09:37 |
|
jvwoolf joined #evergreen |
| 10:00 |
berick |
mmorgan: say what now? |
| 10:03 |
JBoyer |
berick, I think she's referring to the changes you made to the Recent Circulations window. |
| 10:05 |
mmorgan |
Yes indeed! |
| 10:05 |
berick |
oh, good |
| 10:06 |
berick |
glad that's useful |
| 10:07 |
Dyrcona |
rhamby++ # bshum said he had a similar thought: easier to implement proper TLS than to disable it. |
| 10:08 |
Dyrcona |
On a related note, I got an email from tspindler asking if we could force encryption in the OPAC this morning. |
| 10:10 |
berick |
we should do that by default |
| 10:10 |
berick |
(and bake a VPN into EG *sigh*) |
| 10:12 |
kmlussier |
:( |
| 10:13 |
Dyrcona |
Another related note, most CC processors only check the Apache version when determining if you're vulnerable to certain attacks. |
| 10:14 |
Dyrcona |
So, if you're using packages from Debian, for instance, they'll apply the patches from newer versions to prevent the attacks, but they won't increment the version number. |
| 10:14 |
Dyrcona |
So, the CC processor says you're vulnerable, buy the insurance, when actually, you're not. |
| 10:14 |
Dyrcona |
So, might as well install Apache from source if you're going that route. |
| 10:15 |
Dyrcona |
berick: I assume you mean that by encrypting everything we'd be baking a VPN into Evergreen. You're not proposing adding an actual VPN. |
| 10:15 |
berick |
Dyrcona: IIRC, setting the apache banner to it's most terse setting also works |
| 10:16 |
berick |
Dyrcona: the VPN bit was a sad joke |
| 10:16 |
Dyrcona |
berick: Well, I could also have it lie about the version for that matter. :) |
| 10:16 |
Dyrcona |
Well, I got that it was a joke.... :) |
| 10:17 |
Dyrcona |
My Armor of Obtuseness +3 deflected the point. :) |
| 10:17 |
berick |
heh |
| 10:24 |
|
Christineb joined #evergreen |
| 10:28 |
* Dyrcona |
deletes an email draft about the holes in trust with the current model of server certificates, and how you should really not trust certificates signed by others. |
| 10:30 |
Dyrcona |
StomproJ++ |
| 10:37 |
* Dyrcona |
waits on a db restore that has gone for 24 hours so far. |
| 10:37 |
Dyrcona |
It's the reason for the blame I did c. 8:18 am. |
| 10:42 |
bshum |
Haha, miker++ # letsencrypt ftw :) |
| 10:42 |
Dyrcona |
Meh. |
| 10:43 |
Dyrcona |
I thought of suggesting a URL that tells how to create your own CA. |
| 10:44 |
Dyrcona |
But, I'm living in my own, private Idaho. |
| 10:47 |
miker |
https://tinyca.alioth.debian.org/ (but then getting your CA into all the browsers... unless you're using a windows domain controller, then it's not too bad) |
| 10:49 |
Dyrcona |
miker: I've done it for my personal servers and experimented with limiting access via user certificates. I actually such certs for my email and web at sigio.com. |
| 10:50 |
Dyrcona |
It's funny, but in some ways, self-signed certs are safer than 3rd-party signed certs. |
| 10:51 |
miker |
doh! https://sigio.com locked my chrome :( |
| 10:51 |
Dyrcona |
Did it? |
| 10:51 |
miker |
aye |
| 10:52 |
berick |
doesn't get any more secure than that |
| 10:52 |
Dyrcona |
Nope. :) |
| 10:52 |
miker |
got the "your connection is not private" page, proceeded through "advanced" button to "proceed to sigio.com (unsafe)" link, and now 4 windows and ~50 tabs are locked up solid |
| 10:53 |
Dyrcona |
Works for me in Chromium Version 56.0.2924.76 Built on Ubuntu , running on Ubuntu 16.10 (64-bit) |
| 10:53 |
Dyrcona |
And, I haven't added my CA here, either. |
| 10:53 |
Dyrcona |
https://sigio.com/ssl.html |
| 10:53 |
miker |
chromium 53-ish here |
| 10:54 |
Dyrcona |
Maybe add www. |
| 10:54 |
Dyrcona |
https://www.sigio.com |
| 10:54 |
Dyrcona |
I should check the expiration date on my CA cert. |
| 10:54 |
Dyrcona |
I think it expires next year, but it may have expired already. |
| 10:55 |
Dyrcona |
I know my current ssl certs for mail and web expire in November this year. |
| 10:56 |
Dyrcona |
But, it's not a bad idea for an institution to have their own CA and issue certs to their users. It's a good way to actually control access to sensitive data. |
| 10:56 |
Dyrcona |
Better than just passwords alone. |
| 10:56 |
_bott_ |
Mine always seem to expire when I'm out of the office |
| 10:57 |
miker |
all true ... until it kills users' browsers ;) |
| 10:57 |
Dyrcona |
:) |
| 10:57 |
miker |
I'm sure it's just my old chromium |
| 10:58 |
Dyrcona |
I have considered getting a 3rd-party signed cert, but there's nothing on my site that requires SSL. |
| 10:58 |
miker |
in other news: https://opensource.google.com/projects/lovefield ! |
| 10:58 |
Dyrcona |
I mainly use it for SMTPS and IMAPS. |
| 10:59 |
miker |
promise-based sql-ish interface to indexeddb! |
| 10:59 |
Dyrcona |
JavaScript and safe don't belong in the same sentence without the word not somewhere in between. :P |
| 11:00 |
Dyrcona |
But that looks interesting. |
| 11:00 |
Dyrcona |
So, you thinking of using that for offline circ? |
| 11:00 |
miker |
hello simpler offline code |
| 11:00 |
miker |
aye |
| 11:01 |
Dyrcona |
heh. |
| 11:01 |
Dyrcona |
Make sense. |
| 11:01 |
Dyrcona |
Makes sense, even.... |
| 11:01 |
berick |
miker: nice! |
| 11:01 |
miker |
I figure if they use it in gmail and the play store, it's probably not going away soon :) |
| 11:02 |
Dyrcona |
:) |
| 11:02 |
Dyrcona |
So, don't use Google tech unless Google uses it themselves. |
| 11:02 |
gmcharlt |
... and watch like a hawk when they change what they use! ;) |
| 11:02 |
* gmcharlt |
sings the Google Gears dirge |
| 11:04 |
* miker |
performs slam poetry in remembrance of Wave |
| 11:07 |
Dyrcona |
"..makes SQL injection nearly impossible...." Challenge Accepted! :) |
| 11:09 |
kmlussier |
Ah, Wave. |
| 11:10 |
* kmlussier |
remembers impatiently waiting for the Wave invitation to arrive. |
| 11:39 |
|
khuckins joined #evergreen |
| 11:40 |
Dyrcona |
Wave is still available from the Apache Foundation. |
| 11:41 |
frank_guel |
Hi again, Is there any kind of bug or how can I fix it? When I create a new marc record into the 2.12v using a marc template used in 2.8.4, it created it but looks like it is encoded with other format, I mean If for example I have an © in the template, when I load it in staff client it looks well, but when I save it ir shows weird symbols, and if I open and replace the record with a © manually, save it, and it looks well |
| 12:33 |
|
jihpringle joined #evergreen |
| 12:41 |
|
maryj joined #evergreen |
| 12:43 |
miker |
kmlussier: webstaff collab branch finally sync'd and new stuff pushed |
| 12:55 |
jihpringle |
frank_guel: one my techs add a © to one of our MARC templates on our 2.12 test server and I'm not seeing any weirdness |
| 12:56 |
jihpringle |
maybe there something between 2.8 and 2.12 causing the character issue |
| 12:58 |
frank_guel |
I will try putting a new database without nothing and test |
| 13:04 |
|
ppound joined #evergreen |
| 13:07 |
mmorgan |
Is it possible to use copy criteria in an action trigger filter? |
| 13:08 |
mmorgan |
For example, I want to add "-and" : [ { "target_copy.circ_modifier" :["reserve"] } ] |
| 13:08 |
mmorgan |
But I'm getting this error: Attempt to reference non-existent column "target_copy.circ_modifier" on action.circulation (circ) |
| 13:09 |
* kmlussier |
grumbles once again about the airline that decided to change her Saturday departure time for her. |
| 13:13 |
miker |
mmorgan: not like that, but you might be able to use a subrequest |
| 13:14 |
miker |
mmorgan: specifically, an -exists clause |
| 13:16 |
miker |
mmorgan: see the second example here: https://wiki.evergreen-ils.org/doku.php?id=documentation:tutorials:json_query#exists_with_subqueries |
| 13:17 |
mmorgan |
Ok, thanks! I'll give that a try. |
| 13:17 |
mmorgan |
miker++ |
| 13:21 |
miker |
mmorgan: what you're working with in the filter file is one branch of an -and tree in the where clause of a json_query, FTR. so anything you can say in a where clause you can do in that file |
| 13:21 |
miker |
if that wasn't clear... |
| 13:22 |
mmorgan |
Ok, thanks. That's helpful! |
| 13:23 |
miker |
and the core table is the one behind the fieldmapper class code in the event def's hook's core_type |
| 13:23 |
miker |
and /that/, I'm sure, is clear as mud :) |
| 13:24 |
miker |
by "core table" I mean the table listed in the from clause of the json_query you're augmenting |
| 13:27 |
miker |
so, to get to the target_copy column you'd say {"id" : {"=" : {"+circ":"target_copy"} }, "circ_modifier" : "reserve" } in the correlated subquery |
| 13:27 |
* mmorgan |
has been staring at hooks and filters so long, it actually is making sense |
| 13:28 |
Dyrcona |
mmorgan: The rest of that document that miker linked to is an excellent reference on this stuff. |
| 13:29 |
Dyrcona |
I keep it bookmarked. |
| 13:34 |
Dyrcona |
frank_guel: I was going to suggest checking the encoding setting in your database and the environment that you run the staff client in. |
| 13:41 |
frank_guel |
Dyrcona: thanks for answer Codif UTF8, colation es_MX.UTF-8, Character type es_MX.UTF-8 |
| 13:42 |
frank_guel |
that is the postgresql 9.4.10 config |
| 13:42 |
frank_guel |
What Do you refer about the environment that you run the staff client in? |
| 13:43 |
Dyrcona |
OK. That looks OK, but I usually use collation C and character type C. You definitely want UTF-8 encoding in the database. |
| 13:44 |
frank_guel |
I did a test, and the problem is just with the new marc records |
| 13:45 |
Dyrcona |
Created from the template? |
| 13:45 |
frank_guel |
yes, |
| 13:46 |
Dyrcona |
Was the template originally created in a UTF-8 environment? |
| 13:46 |
frank_guel |
I don´t know, actually those templates were created in our last production server, we imported them, and there worked fines |
| 13:47 |
Dyrcona |
As for the staff client environment, I guess it mostly comes down to the locale chosen in the login window, but you should check what character set your client computer is using. |
| 13:47 |
Dyrcona |
And, they got into this server via a pg_dump and pg_restore? |
| 13:48 |
frank_guel |
the marc templates no, those were copied from /openils/var/templates/marc/ via ftp, |
| 13:48 |
frank_guel |
the database was migrated via pg_dump and pg_restore? |
| 13:49 |
gmcharlt |
berick: as an FYI, I've added the Hatch installation instructions to the website |
| 13:49 |
Dyrcona |
Ah, right... templates live in the file system.. |
| 13:50 |
berick |
gmcharlt: excellent, thanks. |
| 13:50 |
Dyrcona |
The ftp might have busted the templates if it was done in text mode. |
| 13:51 |
Dyrcona |
Other than that, I don't really know because I've not had this particular issue. |
| 13:52 |
Dyrcona |
If you can ftp the templates again, make sure to do it in binary mode. |
| 13:53 |
frank_guel |
I activated the k_book default marc template but it doesnt work neither |
| 13:57 |
|
csharp_ joined #evergreen |
| 13:57 |
|
kipd_ joined #evergreen |
| 14:01 |
|
rlefaive joined #evergreen |
| 14:14 |
|
hbrennan joined #evergreen |
| 14:28 |
|
khuckins_ joined #evergreen |
| 14:41 |
|
csharp joined #evergreen |
| 14:45 |
|
maryj joined #evergreen |
| 14:48 |
Dyrcona |
Ah. open-ils.hold-targeter needs to run where all services run, or well where you're going to run circ. |
| 14:51 |
berick |
yes indeed |
| 14:52 |
Dyrcona |
Might have been nice if the release notes mentioned that. :) |
| 14:53 |
Dyrcona |
But, anyway. I'm looking at the ebook api and it looks I don't need to run the service unless I enable the api. |
| 14:55 |
jeffdavis |
Dyrcona: yes, that should be true. Nothing depends on that service except the integration layer in the OPAC (and some live tests I suppose). |
| 14:55 |
Dyrcona |
jeffdavis: Thanks for confirming. That is what I'm seeing from the code. |
| 14:56 |
Dyrcona |
I've asked the powers that be if we should enable it, yet, or wait for 3.0. |
| 14:56 |
Dyrcona |
jeffdavis++ |
| 14:56 |
Dyrcona |
berick++ |
| 14:56 |
Dyrcona |
I like the idea of the hold targeter code being in one place and reused. |
| 14:57 |
Dyrcona |
I'll see about integrating your latest updates, berick, if it hasn't gone in before I get to this. |
| 14:58 |
Dyrcona |
I plan to do this after the conference. |
| 14:58 |
berick |
Dyrcona++ |
| 14:58 |
Dyrcona |
I should make a new branch for the training server's configuration. It's different from production, obviously. |
| 15:02 |
Dyrcona |
And Magic 8-ball says, "Yes." :) |
| 15:02 |
|
mmorgan1 joined #evergreen |
| 15:03 |
Dyrcona |
The consensus is to implement the Ebook API right away. |
| 15:03 |
Dyrcona |
@8ball |
| 15:03 |
pinesol_green |
Dyrcona: http://cat.evergreen-ils.org.meowbify.com/ |
| 15:03 |
Dyrcona |
@eightball |
| 15:03 |
pinesol_green |
Dyrcona: The outlook is good. |
| 15:03 |
Dyrcona |
hah |
| 15:23 |
|
khuckins__ joined #evergreen |
| 15:31 |
kmlussier |
Funny, we were just looking at the ebook stuff. |
| 15:33 |
kmlussier |
jeffdavis: I just set up our test server with our Overdrive credentials. I noticed that if I try to use the Download link from e-items checked out tab, it brings me to https://mlnc1.noblenet.org/eg/opac/myopac/undefined |
| 15:33 |
kmlussier |
Did I miss a configuration step? |
| 15:35 |
|
mmorgan joined #evergreen |
| 15:39 |
jeffdavis |
kmlussier: no, that's a bug |
| 15:39 |
kmlussier |
OK, I'll file one then. :) |
| 15:44 |
jeffdavis |
I think the Download link actually needs to be suppressed for OverDrive until there is full checkout functionality in the OPAC. The ebook checkouts list comes from their API (so we don't have the URI from the internal MARC record available) and I don't believe the API includes a manual download link. |
| 15:48 |
kmlussier |
jeffdavis: Yes, I was wondering if that was something that came with the circulation api. We probably could just comment it out for now until it's working. |
| 15:48 |
kmlussier |
jeffdavis: Do you know if the Actions field for the Holds or for Items ready for checkout ever populate with anything. |
| 15:49 |
* kmlussier |
actually hasn't had a chance to see her account when she has an item ready for checkout. |
| 15:49 |
jeffdavis |
No, at the moment there are no actions for holds. |
| 15:55 |
|
eby joined #evergreen |
| 16:00 |
jeffdavis |
It might be possible to construct a link to the title details page on the OverDrive site using info available from the API - https://link.overdrive.com/?websiteID=<websiteid>&titleID=<crossRefID> with website ID from library settings and crossRefID from OpenILS::Application::EbookAPI::OverDrive->get_title_info(). |
| 16:00 |
jeffdavis |
Not a direct download link, but more useful than nothing. |
| 16:00 |
jeffdavis |
Anyway, I'll look into it. |
| 16:04 |
|
khuckins_ joined #evergreen |
| 16:12 |
JBoyer |
I'm out until the conference next week, see some of you then! |
| 16:32 |
|
khuckins__ joined #evergreen |
| 17:01 |
pinesol_green |
News from qatests: Test Success <http://testing.evergreen-ils.org/~live> |
| 17:13 |
|
mmorgan left #evergreen |
| 17:46 |
jeffdavis |
@later tell kmlussier OverDrive download link bug report: https://bugs.launchpad.net/evergreen/+bug/1677813 |
| 17:46 |
pinesol_green |
jeffdavis: The operation succeeded. |
| 17:46 |
pinesol_green |
Launchpad bug 1677813 in Evergreen "Ebook API: OverDrive download link non-functional in My Account" [Undecided,New] |
| 17:55 |
|
jvwoolf joined #evergreen |
| 19:51 |
|
kmlussier joined #evergreen |
| 20:58 |
|
khuckins__ joined #evergreen |
| 22:00 |
|
kmlussier joined #evergreen |
| 22:01 |
kmlussier |
Does anyone know where I can find a file for the Evergreen logo that is just the leaf without the word Evergreen? |
