Evergreen ILS Website

IRC log for #evergreen, 2018-08-21

| Channels | #evergreen index | Today | | Search | Google Search | Plain-Text | summary | Join Webchat

All times shown according to the server's local time.

Time Nick Message
00:47 jeff can you load that URL with an https scheme?
00:47 jeff as in, https://ilsserver/osrf-websocket-translator
00:49 jeff if you receive a certificate error, you may need to add an exception in firefox.
00:50 jeff better would be to resolve the error with a trusted cert and correct apache config.
00:57 jeff (not implying the current one is incorrect)
01:05 DaleZeut The address https://ilsserver/osrf-websocket-translator give me - The requested URL /osrf-websocket-translator was not found on this server
01:06 jeff but no security/cert error?
01:10 DaleZeut In Firefox - openned the console - it shows - Strict-Transport-Security: The connection to this site is untrustworthy, so the specified header was igorned.  osrf-websocket-translator
01:11 jeff if your standard apache instance and your websockets apache instance are to share the same external port, you need something like nginx in front of it. did you set that up?
01:11 jeff otherwise, a common setup is to have your apache websockets instance listen on a port other than 443.
01:12 jeff (with nginx in front, you still have the apache instances listening on a different port from each other, but the browser connects to the same port for both)
01:15 DaleZeut I used the haproxy
01:19 DaleZeut Which I just checked and it is not running
01:41 DaleZeut I must have mixed up the install manuals for the 2.8 and the 3.0.10 - I just went back to the installation instructions and neither the online or the README in the downloads mention a proxy.  Should I remove the haproxy and use the nginx from the 2.8 install instructions?
01:51 jeff Evergreen 2.8 is quite old. I'd be surprised to find that its documentation mentions nginx at all.
02:02 DaleZeut Where can I find the conf files for nginx?
02:07 jeff here's a link to the web version of the OpenSRF 3.0.1 install instructions where nginx and haproxy configs are mentioned: https://evergreen-ils.org/documentati​on/install/OpenSRF/README_3_0_1.html
02:26 JBoyer_alt joined #evergreen
02:26 remingtron_ joined #evergreen
04:43 ReimuHakurei11 joined #evergreen
06:30 pinesol News from qatests: Testing Success <http://testing.evergreen-ils.org/~live>
07:07 rjackson_isl joined #evergreen
07:10 JBoyer joined #evergreen
07:24 armyriad24 joined #evergreen
07:26 dwgreen joined #evergreen
07:29 Erynnn16 joined #evergreen
07:39 bdljohn joined #evergreen
07:42 Dyrcona joined #evergreen
07:48 agoben joined #evergreen
08:28 collum joined #evergreen
08:40 mmorgan joined #evergreen
08:43 bos20k joined #evergreen
09:04 jvwoolf joined #evergreen
09:07 dwgreen joined #evergreen
09:19 idjit joined #evergreen
09:24 lsach joined #evergreen
09:26 * dbs fired up an instance of wikidata via docker-compose a while back
09:27 dbs docker-compose is a bit complex but a nice way of separating a set of interdependent containers (e.g. separate containers for mysql, elasticsearch, sparql endpoint, etc)
09:28 dbs naturally made me think that that could be a good direction for evergreen, given all our moving pieces :)
09:30 jvwoolf1 joined #evergreen
09:31 kmlussier joined #evergreen
10:19 khuckins joined #evergreen
10:30 Dyrcona dbs: And that's gonna scale with 5+ bricks?
10:30 Dyrcona And, Bmagic is already doing it.
10:31 Bmagic http://slides.mobiusconsortium.or​g/blake/evergreengoogledocker/#/
11:23 Christineb joined #evergreen
11:30 khuckins joined #evergreen
11:41 remingtron__ joined #evergreen
11:41 mmorgan1 joined #evergreen
11:52 dbs Dyrcona: I knew Bmagic had built docker images. What I'm saying is that docker-compose is worth investigating, as a means of coordinating all of the individual containers
11:53 Dyrcona I see.
11:55 dbs It might scale to 5 or 10 or 50 bricks, I dunno. I was more looking at it as an easier way of people getting up and running with Evergreen, as it separates out PostgreSQL & ejabberd into their own containers (potentially with different OS levels where beneficial say in the case of ejabberd), etc
11:55 beanjammin joined #evergreen
11:58 Dyrcona Yes. I can see it might be useful for testing/development, maybe less so for production.
12:12 sandbergja joined #evergreen
12:24 Redfoxmoon9 joined #evergreen
12:33 jvwoolf joined #evergreen
12:54 tomaw8 joined #evergreen
13:08 erasmus joined #evergreen
13:12 Guest60913 was kicked by jeff: Guest60913
13:16 pinesol [evergreen|Jane Sandberg] Docs: Adding release notes for 3.0.11 - <http://git.evergreen-ils.org/?p=​Evergreen.git;a=commit;h=f8d3c0a>
13:16 pinesol [evergreen|Jane Sandberg] Docs: Adding release notes for 3.1.5 - <http://git.evergreen-ils.org/?p=​Evergreen.git;a=commit;h=630a00e>
14:01 DaleZeut Hello - I have beenn working on ILS 3.0.10 - I have most things working when I go to the staff login and login - nothing happens.  In the Dev console it shows Firefiox can not establish a connection to the server at wss://localhost/osrf-websocket-translator
14:03 DaleZeut I have scanned the drive for the file osrf-websocket-translator and it is not found in/openils or in the downloads.
14:04 jeff Sounds like your browser is unable to communicate with your websockets instance of Apache. Verify that you've configured one, that it's running on the expected port, and if you're attempting to share TCP/443 between the websockets and non-websockets instances of Apache that you have a proxy in place and that the proxy is properly passing websockets traffic to the websockets instance of Apache.
14:05 jeff Also, verify that you've configured the proper websockets ports in the proper places, and that a firewall between the browser and server isn't blocking your attempts to connect.
14:06 jeff You won't find a osrf-websocket-translator file on disk anywhere.
14:09 jeff If you intend for the browser websockets wss:// connection to pass over the same TCP port as the https:// connection, you'll need something like nginx or haproxy "in front" of your apache instances.
14:09 jeff If you intend for the wss:// traffic to be on its own port, you don't strictly need haproxy or nginx at this point.
14:10 DaleZeut Thank you - nginx was not running - how ever now I am getting  an error - 502 Bad Gateway - looks like I have some thing wrong in the nginx config - checking
14:11 jeff Your nginx error log should be some help there.
14:13 csharp @band add Git Stash Pop
14:13 pinesol csharp: Band 'Git Stash Pop' added to list
14:24 DaleZeut_ joined #evergreen
14:25 jeff names
14:25 * jeff sighs and picks up an extra slash from the pile
14:27 DaleZeut_ If I shutdown nginx I can see the site - with nginx running I get the Bad Gateway error and nginx log shows - connect() failed (111: Connection refused) while connecting to upstream, client: 127.0.0.1, server: , request: "GET /eg/opac/home HTTP/1.1", upstream: "https://127.0.0.1:7443/eg/opac/home", host: "ilsserver"
14:32 jeff DaleZeut_: Your nginx error log entry implies that you have nginx set to connect to Apache (the non-websockets instance) on port 7443, listening on localhost/127.0.0.1. Is Apache configured that way?
14:39 csharp DaleZeut_: example from a test server I administer: https://pastebin.com/QqkZitMD - set in eg.conf
14:42 rashma_away joined #evergreen
14:58 DaleZeut_ I have changed the apache conf and port file and now appear to be working.  Bless you all who have helped me fumble finger my to this point.  Thank you all
15:01 jeff DaleZeut_: congratulations! you're welcome!
15:03 mmorgan1 joined #evergreen
15:04 beanjammin joined #evergreen
15:09 kmlussier @quote random
15:09 pinesol kmlussier: Quote #74: "< Dyrcona> SIP2 is not a suitable means for anything." (added by csharp at 03:35 PM, January 13, 2014)
15:17 Bmagic sandbergja++ # release notes!
15:19 Dyrcona sandbergja++
15:24 Bmagic dbs++ # docker compose is great
15:35 dluch joined #evergreen
15:35 Bmagic joined #evergreen
15:40 pastebot joined #evergreen
15:43 mmorgan joined #evergreen
16:02 sandbergja Is there a way to make sure that Missing items get routed to cataloging?  Our cataloger is in charge of missing searches, and she needs to be able to know when a book has been found so that she can call off the search.
16:03 sandbergja Alternately, a way that she could get some notification when this happens?  Currently, she's manually putting alerts into every single missing item by hand, and we'd like to save her some time (esp. with the new alert functionality in 3.1)
16:09 mmorgan sandbergja: Where is she getting her list of missing items to search for?
16:09 sandbergja mmorgan: usually folks report them to her, then she changes the status to Missing in Evergreen
16:10 sandbergja And then she keeps a folder of the original reports, which she uses to actually go to the stacks and search
16:11 sandbergja (we report missing books to her using a small paper form)
16:13 mmorgan Could some reporting help? Like a recurring report of items with status Missing that she receives weekly, or even daily? She could search based on the Evergreen report rather than the folder contents.
16:16 sandbergja That's an idea.  She also uses the paper form to track where in the searching process we are (we have 2 searches by her team, then it gets elevated to her, and then to a librarian if it's still not found).  I don't know how we would track that in a report
16:16 sandbergja Maybe a stat cat or some other field we don't generally use?
16:18 khuckins joined #evergreen
16:20 mmorgan If there are detailed notes, that would be hard to track in a report. Stat cats would be a possibility, they're reportable.
16:20 mmorgan Or could your searches be time based? Looking at the status changed time?
16:21 mmorgan If searching is happening regularly, and an item is still missing beyond a certain time period based on status changed time, it could be elevated.
16:21 sandbergja That's a good idea!  So the searches would happen at specific amounts of time after the status is changed to Missing.
16:22 jeff We do that. Doesn't include a component where you get any notice that a missing item is now found, though.
16:23 jeff Placing a force/cataloging hold on an item might help, though it could involve the item needing to physically head somewhere where it isn't actually needed (to be physically present).
16:23 mmorgan No, it wouldn't provide any notification, it would just drop off the report.
16:23 jeff Another option would be to place missing copies in a bucket and report on the status of items in that bucket to see "hey, these aren't missing anymore"
16:23 sandbergja That seems reasonable.  Really, we only need the notification so that we stop looking for it.
16:24 sandbergja The bucket idea seems interesting.  It seems relatively easy to write a small script that automatically puts items with the Missing status into a bucket.
16:24 sandbergja So that we don't have to do anything manually
16:25 jeff If you assume that the "level 1" and "level 2" seekers do look, and don't require that they annotate the copy in the system or on paper saying "looked!", you could have two reports: items in missing status between now and 7 days ago", and "items in missing status greater than 7 days ago".
16:25 jeff People using the first report look for the items, if found then they're checked in and no longer missing.
16:26 jeff People using the second report look for the items, and (same process if found), and if still not found they are eventually changed to a more fatal status, reordered, deleted, whatnot.
16:26 kmlussier sandbergja: What release are you on?
16:26 sandbergja kmlussier: 3.1.2
16:27 jeff There are other options, but trying to limit to those you can probably do with stock tools.
16:28 kmlussier sandbergja: With the new Copy Alerts, there should be one for checkin of missing copy. If you update that copy alert type to have a Next Status of cataloging, staff should get an alert when a missing item is checked in that also indicates that the copy is now in a status of cataloging.
16:28 kmlussier sandbergja: As long as you aren't suppressing that alert.
16:29 sandbergja kmlussier: Interesting!
16:29 sandbergja That's definitely something we should experiment with.
16:30 sandbergja Thanks everybody for helping me think through all the options!
16:31 sandbergja One more thing: I'm not very familiar with action/trigger stuff, but it looks like there's a hook called missing.found (the description is "Missing Item checked in")
16:31 * mmorgan was just about to look at triggers.
16:31 sandbergja Is that something that could somehow send an email to our cataloger?
16:31 jeff likely, yes.
16:31 mmorgan I've never used that particular hook.
16:31 jeff assuming something fires it, and it isn't just "present but not wired up"
16:32 sandbergja jeff: is there a way I could tell other than trial and error if it's not wired up? :-)
16:32 jeff ...doesn't look like anything in Evergreen currently fires that hook, though my search was pretty rudimentary.
16:33 sandbergja So that would probably require some development?
16:33 khuckins_ joined #evergreen
16:34 jeff sandbergja: some.
16:35 sandbergja jeff: thanks for looking
16:36 sandbergja I think I have some good options to look into -- thanks, all!
16:36 sandbergja mmorgan++
16:36 sandbergja jeff++
16:36 sandbergja kmlussier++
16:39 jeff wiring up some of those hooks should probably have a launchpad bug if there isn't one already.
16:40 sandbergja jeff: I didn't see one off the bat.  I'm happy to start one if you'd be able to add some more information to it.
16:43 sandbergja jeff: Here it is https://bugs.launchpad.net/evergreen/+bug/1788283
16:43 pinesol Launchpad bug 1788283 in Evergreen "The missing.found A/T hook is not wired up" [Undecided,New]
16:48 khuckins joined #evergreen
16:51 jeff sandbergja++
16:51 * jeff grabs the bug, will do some more looking and at least add comments or a branch
16:52 jeff I don't think this particular hook makes sense to have a default/stock event defined... who would you email, etc. But it should at least be available for use (if it isn't already).
17:03 mmorgan left #evergreen
17:04 DaleZeut joined #evergreen
17:33 sandbergja jeff: I agree that a stock event wouldn't really make much sense.
17:34 sandbergja Thanks for grabbing the bug!
17:52 sandbergja One more question: is there any way to create a copy alert type that shows for *all* states?  It's pretty frustrating to have to forecast every single state an item will ever be in and add an alert for each of them
18:30 pinesol News from qatests: Testing Success <http://testing.evergreen-ils.org/~live>
18:43 DaleZeut joined #evergreen
18:50 adam_montgomery joined #evergreen
18:54 DaleZeut Back again - Thanks in advance - When I goto Admin → Local Administration → Library Settings Editor - I am getting Source map error: request failed with status 404 Resource URL: https://ilsserver.school.ffcs.org/upup.min.js Source Map URL: upup.min.js.map
18:54 DaleZeut I can access the https://ilsserver.school.ffcs.org/upup.min.js and see the script
19:31 jeff "source map error" in the console is not an error that should cause actual impact. it is just an error related to the developer tools' attempt to load a file useful for debugging.
19:34 DaleZeut the next error in the console is - Use of Mutation Events is deprecated. Use MutationObserver instead - which also, from my search is not important
19:36 DaleZeut the third error is - Load denied by X-Frame-Options: https://ilsserver.school.ffcs.org/xul​/server/admin/org_unit_settings.xhtml​?ses=6816554059ca9faa8a4da2edf8c82768 does not permit framing.
19:36 jeff ah.
19:37 jeff something is setting X-Frame-Options in HTTP responses. Perhaps an nginx or Apache directive? I don't think we set that in Evergreen anywhere.
19:39 DaleZeut I found a discussion about Firefox and x-frame-options and they fixed using the following patch - https://addons.mozilla.org/en-US/fi​refox/addon/ignore-x-frame-options/
19:39 DaleZeut Is that a good idea?
19:52 jeff I wouldn't recommend that. It would likely only mask the problem.
19:53 jeff Do you find matching lines (that aren't commented out) using the following command on your apache/nginx box? rgrep -i frame-options /etc/apache2 /etc/nginx
20:04 DaleZeut joined #evergreen
20:05 DaleZeut I have two - /etc/apache2/conf-available/security.conf:#Header set X-Frame-Options: "sameorigin"
20:05 DaleZeut and - /etc/apache2/conf-available/ssl-params.conf:Header always set X-Frame-Options DENY
20:06 jeff you need to investigate /etc/apache2/conf-available/ssl-params.conf and at a minimum comment out that line.
20:06 jeff did something like certbot create that file?
20:09 jeff alternately you could consider changing it from DENY to SAMEORIGIN, but you'd want to then be on the lookout for further trouble.
20:10 jeff for now I'd recommend commenting out the "Header always set X-Frame-Options DENY" line.
20:13 DaleZeut Just did that and now I have - Forbidden  You don't have permission to access /XUL/server/admin/org_unit_settings.xthml on this server
20:15 jeff Do you know where that file came from, or the X-Frame-Options header definition?
20:16 jeff ("that file" being the /etc/apache2/conf-available/ssl-params.conf file)
20:16 jeff the URL containing XUL in upper case is unusual. I'd expect that to generate a 404.
20:17 DaleZeut Yes - sorry should have specified.
20:20 DaleZeut When I refress the page, the last two lines in the console are - egEmbedFrameLoader(): https://ilsserver/xul/server/admin/org_unit_sett​ings.xhtml?ses=c72f60de627dda702ab51af6e38b88a5 eframe.js:112:17
20:20 DaleZeut and - eframe applying xulG handlers: reload eframe.js:279:25
20:20 jeff that sounds normal.
20:21 jeff do you have what appears to be a list of Organization Unit Settings?
20:21 jeff (not in the console, but in the browser tab where you loaded the library settings editor)
20:23 DaleZeut No - At the top I have the header (Search - Circulation - ......) below that is Open in new Window and the Forbidden message
20:23 jeff okay. might be time to check your Apache error logs to see why the request was forbidden.
20:25 jeff did you restart (or at least reload) apache after commenting out the "Header always set X-Frame-Options DENY" line from the /etc/apache2/conf-available/ssl-params.conf file?
20:26 ghoti joined #evergreen
20:26 ghoti was kicked by jeff: ghoti
20:28 DaleZeut I stopped and started Apach32 Apache2-WebSockets and nginx
20:28 jeff sounds good.
20:29 DaleZeut My access and error logs are empty - although I have logs from yesterday....
20:29 jeff any clue in the apache2 error log regarding the "Forbidden" error?
20:29 jeff depending on how much of the example config you copied, your error logs may be going to syslog instead of the usual /var/log/apache2/error.log file.
20:30 DaleZeut I must have disabled logging or some thing - checking
20:30 jeff so you'd look in probably /var/log/syslog or /var/log/messages
20:31 jeff looking at ErrorLog directives in your apache config would tell you where logs are being sent.
20:31 DaleZeut Your correct - they are in the syslog
20:31 DaleZeut Aug 21 17:23:55 ILSSERVER root: ::1 - - [21/Aug/2018:17:23:55 -0700] "GET /xul/server/admin/org_unit_settings.xht​ml?ses=c72f60de627dda702ab51af6e38b88a5 HTTP/1.0" 403 960
20:33 DaleZeut I think this is what we are looking for
20:33 DaleZeut Aug 21 17:23:55 ILSSERVER apache2[28709]: [core:error] [pid 28709] [client ::1:34760] AH00037: Symbolic link not allowed or link target not accessible: /openils/var/web/xul/server, referer: https://ilsserver/eg/staff/admi​n/local/asset/org_unit_settings
20:35 DaleZeut Here is the link - lrwxrwxrwx 1 opensrf opensrf 15 Aug 16 18:23 /openils/var/web/xul/server -> rel_name/server
20:42 jeff if you "cd /openils/var/web/xul/server" do you receive an error message or can you use "ls" and see some files there?
20:43 jeff the other Apache setting that controls symlinks being allowed is Options. lines line "Options FollowSymLinks" or similar.
20:43 DaleZeut #cd /openils/var/web/xul/server: No such file or directory
20:43 jeff ah.
20:44 DaleZeut # ls /openils/var/web/xul/server /openils/var/web/xul/server
20:44 jeff your symlink is broken -- i see it now.
20:44 jeff in your ls output earlier, "/openils/var/web/xul/server -> rel_name/server" means that the symbolic link is pointing at a directory named "rel_name"
20:45 jeff that looks like a placeholder that was intended to be replaced with something like rel_3_1_3 or the like.
20:45 jeff so, what does "ls /openils/var/web/xul" show in terms of real directories looking like rel_SOMETHING?
20:45 DaleZeut # ls /openils/var/web/xul rel_3_0_10  server
20:46 jeff this command should replace the symlink: "cd /openils/var/web/xul && ln -sf rel_3_0_10 server"
20:48 DaleZeut shoud the rel_3_0_10 server be rel_3_0_10/server
20:48 jeff er, yes. sorry. good catch.
20:48 DaleZeut Just checking
20:49 jeff anyway, once you've fixed the broken symlink, i think you should be able to load the library settings editor.
20:49 DaleZeut now an ls gives - ls /openils/var/web/xul/server addon  admin  auth  cat  circ  index.xhtml  locale  main  OpenILS  patron  serial  skin  util
20:51 DaleZeut Sweet - I have a page that looks just like the manual for the Local Server Settings
20:52 jeff great!
20:53 DaleZeut I need to import then books from our ols software - any suggestions on the best way to do that?
20:54 DaleZeut Sorry - my fingers are having obo error today ols = old
21:53 DaleZeut On to the next error - when I got to Administration - Server Administration -  Organizational Units, I am getting - The page isn’t redirecting properly
21:55 DaleZeut in the colsole I see - Strict-Transport-Security: The connection to the site is untrustworthy, so the specified header was ignored.[Learn More] org_unit.html
21:56 DaleZeut This repeats 21 times
22:09 jeff "isn't redirecting properly" is generally "the browser got stuck in a loop"
22:10 jeff and it sounds like something is causing the browser not to trust the connection for the request, possibly to /conify/global/actor/org_unit.html
22:10 jeff HSTS (HTTP Strict Transport Security) entering the mix is a little unusual.
23:29 steev28 joined #evergreen

| Channels | #evergreen index | Today | | Search | Google Search | Plain-Text | summary | Join Webchat