Time |
Nick |
Message |
00:47 |
jeff |
can you load that URL with an https scheme? |
00:47 |
jeff |
as in, https://ilsserver/osrf-websocket-translator |
00:49 |
jeff |
if you receive a certificate error, you may need to add an exception in firefox. |
00:50 |
jeff |
better would be to resolve the error with a trusted cert and correct apache config. |
00:57 |
jeff |
(not implying the current one is incorrect) |
01:05 |
DaleZeut |
The address https://ilsserver/osrf-websocket-translator give me - The requested URL /osrf-websocket-translator was not found on this server |
01:06 |
jeff |
but no security/cert error? |
01:10 |
DaleZeut |
In Firefox - openned the console - it shows - Strict-Transport-Security: The connection to this site is untrustworthy, so the specified header was igorned. osrf-websocket-translator |
01:11 |
jeff |
if your standard apache instance and your websockets apache instance are to share the same external port, you need something like nginx in front of it. did you set that up? |
01:11 |
jeff |
otherwise, a common setup is to have your apache websockets instance listen on a port other than 443. |
01:12 |
jeff |
(with nginx in front, you still have the apache instances listening on a different port from each other, but the browser connects to the same port for both) |
01:15 |
DaleZeut |
I used the haproxy |
01:19 |
DaleZeut |
Which I just checked and it is not running |
01:41 |
DaleZeut |
I must have mixed up the install manuals for the 2.8 and the 3.0.10 - I just went back to the installation instructions and neither the online or the README in the downloads mention a proxy. Should I remove the haproxy and use the nginx from the 2.8 install instructions? |
01:51 |
jeff |
Evergreen 2.8 is quite old. I'd be surprised to find that its documentation mentions nginx at all. |
02:02 |
DaleZeut |
Where can I find the conf files for nginx? |
02:07 |
jeff |
here's a link to the web version of the OpenSRF 3.0.1 install instructions where nginx and haproxy configs are mentioned: https://evergreen-ils.org/documentation/install/OpenSRF/README_3_0_1.html |
02:26 |
|
JBoyer_alt joined #evergreen |
02:26 |
|
remingtron_ joined #evergreen |
04:43 |
|
ReimuHakurei11 joined #evergreen |
06:30 |
pinesol |
News from qatests: Testing Success <http://testing.evergreen-ils.org/~live> |
07:07 |
|
rjackson_isl joined #evergreen |
07:10 |
|
JBoyer joined #evergreen |
07:24 |
|
armyriad24 joined #evergreen |
07:26 |
|
dwgreen joined #evergreen |
07:29 |
|
Erynnn16 joined #evergreen |
07:39 |
|
bdljohn joined #evergreen |
07:42 |
|
Dyrcona joined #evergreen |
07:48 |
|
agoben joined #evergreen |
08:28 |
|
collum joined #evergreen |
08:40 |
|
mmorgan joined #evergreen |
08:43 |
|
bos20k joined #evergreen |
09:04 |
|
jvwoolf joined #evergreen |
09:07 |
|
dwgreen joined #evergreen |
09:19 |
|
idjit joined #evergreen |
09:24 |
|
lsach joined #evergreen |
09:26 |
* dbs |
fired up an instance of wikidata via docker-compose a while back |
09:27 |
dbs |
docker-compose is a bit complex but a nice way of separating a set of interdependent containers (e.g. separate containers for mysql, elasticsearch, sparql endpoint, etc) |
09:28 |
dbs |
naturally made me think that that could be a good direction for evergreen, given all our moving pieces :) |
09:30 |
|
jvwoolf1 joined #evergreen |
09:31 |
|
kmlussier joined #evergreen |
10:19 |
|
khuckins joined #evergreen |
10:30 |
Dyrcona |
dbs: And that's gonna scale with 5+ bricks? |
10:30 |
Dyrcona |
And, Bmagic is already doing it. |
10:31 |
Bmagic |
http://slides.mobiusconsortium.org/blake/evergreengoogledocker/#/ |
11:23 |
|
Christineb joined #evergreen |
11:30 |
|
khuckins joined #evergreen |
11:41 |
|
remingtron__ joined #evergreen |
11:41 |
|
mmorgan1 joined #evergreen |
11:52 |
dbs |
Dyrcona: I knew Bmagic had built docker images. What I'm saying is that docker-compose is worth investigating, as a means of coordinating all of the individual containers |
11:53 |
Dyrcona |
I see. |
11:55 |
dbs |
It might scale to 5 or 10 or 50 bricks, I dunno. I was more looking at it as an easier way of people getting up and running with Evergreen, as it separates out PostgreSQL & ejabberd into their own containers (potentially with different OS levels where beneficial say in the case of ejabberd), etc |
11:55 |
|
beanjammin joined #evergreen |
11:58 |
Dyrcona |
Yes. I can see it might be useful for testing/development, maybe less so for production. |
12:12 |
|
sandbergja joined #evergreen |
12:24 |
|
Redfoxmoon9 joined #evergreen |
12:33 |
|
jvwoolf joined #evergreen |
12:54 |
|
tomaw8 joined #evergreen |
13:08 |
|
erasmus joined #evergreen |
13:12 |
|
Guest60913 was kicked by jeff: Guest60913 |
13:16 |
pinesol |
[evergreen|Jane Sandberg] Docs: Adding release notes for 3.0.11 - <http://git.evergreen-ils.org/?p=Evergreen.git;a=commit;h=f8d3c0a> |
13:16 |
pinesol |
[evergreen|Jane Sandberg] Docs: Adding release notes for 3.1.5 - <http://git.evergreen-ils.org/?p=Evergreen.git;a=commit;h=630a00e> |
14:01 |
DaleZeut |
Hello - I have beenn working on ILS 3.0.10 - I have most things working when I go to the staff login and login - nothing happens. In the Dev console it shows Firefiox can not establish a connection to the server at wss://localhost/osrf-websocket-translator |
14:03 |
DaleZeut |
I have scanned the drive for the file osrf-websocket-translator and it is not found in/openils or in the downloads. |
14:04 |
jeff |
Sounds like your browser is unable to communicate with your websockets instance of Apache. Verify that you've configured one, that it's running on the expected port, and if you're attempting to share TCP/443 between the websockets and non-websockets instances of Apache that you have a proxy in place and that the proxy is properly passing websockets traffic to the websockets instance of Apache. |
14:05 |
jeff |
Also, verify that you've configured the proper websockets ports in the proper places, and that a firewall between the browser and server isn't blocking your attempts to connect. |
14:06 |
jeff |
You won't find a osrf-websocket-translator file on disk anywhere. |
14:09 |
jeff |
If you intend for the browser websockets wss:// connection to pass over the same TCP port as the https:// connection, you'll need something like nginx or haproxy "in front" of your apache instances. |
14:09 |
jeff |
If you intend for the wss:// traffic to be on its own port, you don't strictly need haproxy or nginx at this point. |
14:10 |
DaleZeut |
Thank you - nginx was not running - how ever now I am getting an error - 502 Bad Gateway - looks like I have some thing wrong in the nginx config - checking |
14:11 |
jeff |
Your nginx error log should be some help there. |
14:13 |
csharp |
@band add Git Stash Pop |
14:13 |
pinesol |
csharp: Band 'Git Stash Pop' added to list |
14:24 |
|
DaleZeut_ joined #evergreen |
14:25 |
jeff |
names |
14:25 |
* jeff |
sighs and picks up an extra slash from the pile |
14:27 |
DaleZeut_ |
If I shutdown nginx I can see the site - with nginx running I get the Bad Gateway error and nginx log shows - connect() failed (111: Connection refused) while connecting to upstream, client: 127.0.0.1, server: , request: "GET /eg/opac/home HTTP/1.1", upstream: "https://127.0.0.1:7443/eg/opac/home", host: "ilsserver" |
14:32 |
jeff |
DaleZeut_: Your nginx error log entry implies that you have nginx set to connect to Apache (the non-websockets instance) on port 7443, listening on localhost/127.0.0.1. Is Apache configured that way? |
14:39 |
csharp |
DaleZeut_: example from a test server I administer: https://pastebin.com/QqkZitMD - set in eg.conf |
14:42 |
|
rashma_away joined #evergreen |
14:58 |
DaleZeut_ |
I have changed the apache conf and port file and now appear to be working. Bless you all who have helped me fumble finger my to this point. Thank you all |
15:01 |
jeff |
DaleZeut_: congratulations! you're welcome! |
15:03 |
|
mmorgan1 joined #evergreen |
15:04 |
|
beanjammin joined #evergreen |
15:09 |
kmlussier |
@quote random |
15:09 |
pinesol |
kmlussier: Quote #74: "< Dyrcona> SIP2 is not a suitable means for anything." (added by csharp at 03:35 PM, January 13, 2014) |
15:17 |
Bmagic |
sandbergja++ # release notes! |
15:19 |
Dyrcona |
sandbergja++ |
15:24 |
Bmagic |
dbs++ # docker compose is great |
15:35 |
|
dluch joined #evergreen |
15:35 |
|
Bmagic joined #evergreen |
15:40 |
|
pastebot joined #evergreen |
15:43 |
|
mmorgan joined #evergreen |
16:02 |
sandbergja |
Is there a way to make sure that Missing items get routed to cataloging? Our cataloger is in charge of missing searches, and she needs to be able to know when a book has been found so that she can call off the search. |
16:03 |
sandbergja |
Alternately, a way that she could get some notification when this happens? Currently, she's manually putting alerts into every single missing item by hand, and we'd like to save her some time (esp. with the new alert functionality in 3.1) |
16:09 |
mmorgan |
sandbergja: Where is she getting her list of missing items to search for? |
16:09 |
sandbergja |
mmorgan: usually folks report them to her, then she changes the status to Missing in Evergreen |
16:10 |
sandbergja |
And then she keeps a folder of the original reports, which she uses to actually go to the stacks and search |
16:11 |
sandbergja |
(we report missing books to her using a small paper form) |
16:13 |
mmorgan |
Could some reporting help? Like a recurring report of items with status Missing that she receives weekly, or even daily? She could search based on the Evergreen report rather than the folder contents. |
16:16 |
sandbergja |
That's an idea. She also uses the paper form to track where in the searching process we are (we have 2 searches by her team, then it gets elevated to her, and then to a librarian if it's still not found). I don't know how we would track that in a report |
16:16 |
sandbergja |
Maybe a stat cat or some other field we don't generally use? |
16:18 |
|
khuckins joined #evergreen |
16:20 |
mmorgan |
If there are detailed notes, that would be hard to track in a report. Stat cats would be a possibility, they're reportable. |
16:20 |
mmorgan |
Or could your searches be time based? Looking at the status changed time? |
16:21 |
mmorgan |
If searching is happening regularly, and an item is still missing beyond a certain time period based on status changed time, it could be elevated. |
16:21 |
sandbergja |
That's a good idea! So the searches would happen at specific amounts of time after the status is changed to Missing. |
16:22 |
jeff |
We do that. Doesn't include a component where you get any notice that a missing item is now found, though. |
16:23 |
jeff |
Placing a force/cataloging hold on an item might help, though it could involve the item needing to physically head somewhere where it isn't actually needed (to be physically present). |
16:23 |
mmorgan |
No, it wouldn't provide any notification, it would just drop off the report. |
16:23 |
jeff |
Another option would be to place missing copies in a bucket and report on the status of items in that bucket to see "hey, these aren't missing anymore" |
16:23 |
sandbergja |
That seems reasonable. Really, we only need the notification so that we stop looking for it. |
16:24 |
sandbergja |
The bucket idea seems interesting. It seems relatively easy to write a small script that automatically puts items with the Missing status into a bucket. |
16:24 |
sandbergja |
So that we don't have to do anything manually |
16:25 |
jeff |
If you assume that the "level 1" and "level 2" seekers do look, and don't require that they annotate the copy in the system or on paper saying "looked!", you could have two reports: items in missing status between now and 7 days ago", and "items in missing status greater than 7 days ago". |
16:25 |
jeff |
People using the first report look for the items, if found then they're checked in and no longer missing. |
16:26 |
jeff |
People using the second report look for the items, and (same process if found), and if still not found they are eventually changed to a more fatal status, reordered, deleted, whatnot. |
16:26 |
kmlussier |
sandbergja: What release are you on? |
16:26 |
sandbergja |
kmlussier: 3.1.2 |
16:27 |
jeff |
There are other options, but trying to limit to those you can probably do with stock tools. |
16:28 |
kmlussier |
sandbergja: With the new Copy Alerts, there should be one for checkin of missing copy. If you update that copy alert type to have a Next Status of cataloging, staff should get an alert when a missing item is checked in that also indicates that the copy is now in a status of cataloging. |
16:28 |
kmlussier |
sandbergja: As long as you aren't suppressing that alert. |
16:29 |
sandbergja |
kmlussier: Interesting! |
16:29 |
sandbergja |
That's definitely something we should experiment with. |
16:30 |
sandbergja |
Thanks everybody for helping me think through all the options! |
16:31 |
sandbergja |
One more thing: I'm not very familiar with action/trigger stuff, but it looks like there's a hook called missing.found (the description is "Missing Item checked in") |
16:31 |
* mmorgan |
was just about to look at triggers. |
16:31 |
sandbergja |
Is that something that could somehow send an email to our cataloger? |
16:31 |
jeff |
likely, yes. |
16:31 |
mmorgan |
I've never used that particular hook. |
16:31 |
jeff |
assuming something fires it, and it isn't just "present but not wired up" |
16:32 |
sandbergja |
jeff: is there a way I could tell other than trial and error if it's not wired up? :-) |
16:32 |
jeff |
...doesn't look like anything in Evergreen currently fires that hook, though my search was pretty rudimentary. |
16:33 |
sandbergja |
So that would probably require some development? |
16:33 |
|
khuckins_ joined #evergreen |
16:34 |
jeff |
sandbergja: some. |
16:35 |
sandbergja |
jeff: thanks for looking |
16:36 |
sandbergja |
I think I have some good options to look into -- thanks, all! |
16:36 |
sandbergja |
mmorgan++ |
16:36 |
sandbergja |
jeff++ |
16:36 |
sandbergja |
kmlussier++ |
16:39 |
jeff |
wiring up some of those hooks should probably have a launchpad bug if there isn't one already. |
16:40 |
sandbergja |
jeff: I didn't see one off the bat. I'm happy to start one if you'd be able to add some more information to it. |
16:43 |
sandbergja |
jeff: Here it is https://bugs.launchpad.net/evergreen/+bug/1788283 |
16:43 |
pinesol |
Launchpad bug 1788283 in Evergreen "The missing.found A/T hook is not wired up" [Undecided,New] |
16:48 |
|
khuckins joined #evergreen |
16:51 |
jeff |
sandbergja++ |
16:51 |
* jeff |
grabs the bug, will do some more looking and at least add comments or a branch |
16:52 |
jeff |
I don't think this particular hook makes sense to have a default/stock event defined... who would you email, etc. But it should at least be available for use (if it isn't already). |
17:03 |
|
mmorgan left #evergreen |
17:04 |
|
DaleZeut joined #evergreen |
17:33 |
sandbergja |
jeff: I agree that a stock event wouldn't really make much sense. |
17:34 |
sandbergja |
Thanks for grabbing the bug! |
17:52 |
sandbergja |
One more question: is there any way to create a copy alert type that shows for *all* states? It's pretty frustrating to have to forecast every single state an item will ever be in and add an alert for each of them |
18:30 |
pinesol |
News from qatests: Testing Success <http://testing.evergreen-ils.org/~live> |
18:43 |
|
DaleZeut joined #evergreen |
18:50 |
|
adam_montgomery joined #evergreen |
18:54 |
DaleZeut |
Back again - Thanks in advance - When I goto Admin → Local Administration → Library Settings Editor - I am getting Source map error: request failed with status 404 Resource URL: https://ilsserver.school.ffcs.org/upup.min.js Source Map URL: upup.min.js.map |
18:54 |
DaleZeut |
I can access the https://ilsserver.school.ffcs.org/upup.min.js and see the script |
19:31 |
jeff |
"source map error" in the console is not an error that should cause actual impact. it is just an error related to the developer tools' attempt to load a file useful for debugging. |
19:34 |
DaleZeut |
the next error in the console is - Use of Mutation Events is deprecated. Use MutationObserver instead - which also, from my search is not important |
19:36 |
DaleZeut |
the third error is - Load denied by X-Frame-Options: https://ilsserver.school.ffcs.org/xul/server/admin/org_unit_settings.xhtml?ses=6816554059ca9faa8a4da2edf8c82768 does not permit framing. |
19:36 |
jeff |
ah. |
19:37 |
jeff |
something is setting X-Frame-Options in HTTP responses. Perhaps an nginx or Apache directive? I don't think we set that in Evergreen anywhere. |
19:39 |
DaleZeut |
I found a discussion about Firefox and x-frame-options and they fixed using the following patch - https://addons.mozilla.org/en-US/firefox/addon/ignore-x-frame-options/ |
19:39 |
DaleZeut |
Is that a good idea? |
19:52 |
jeff |
I wouldn't recommend that. It would likely only mask the problem. |
19:53 |
jeff |
Do you find matching lines (that aren't commented out) using the following command on your apache/nginx box? rgrep -i frame-options /etc/apache2 /etc/nginx |
20:04 |
|
DaleZeut joined #evergreen |
20:05 |
DaleZeut |
I have two - /etc/apache2/conf-available/security.conf:#Header set X-Frame-Options: "sameorigin" |
20:05 |
DaleZeut |
and - /etc/apache2/conf-available/ssl-params.conf:Header always set X-Frame-Options DENY |
20:06 |
jeff |
you need to investigate /etc/apache2/conf-available/ssl-params.conf and at a minimum comment out that line. |
20:06 |
jeff |
did something like certbot create that file? |
20:09 |
jeff |
alternately you could consider changing it from DENY to SAMEORIGIN, but you'd want to then be on the lookout for further trouble. |
20:10 |
jeff |
for now I'd recommend commenting out the "Header always set X-Frame-Options DENY" line. |
20:13 |
DaleZeut |
Just did that and now I have - Forbidden You don't have permission to access /XUL/server/admin/org_unit_settings.xthml on this server |
20:15 |
jeff |
Do you know where that file came from, or the X-Frame-Options header definition? |
20:16 |
jeff |
("that file" being the /etc/apache2/conf-available/ssl-params.conf file) |
20:16 |
jeff |
the URL containing XUL in upper case is unusual. I'd expect that to generate a 404. |
20:17 |
DaleZeut |
Yes - sorry should have specified. |
20:20 |
DaleZeut |
When I refress the page, the last two lines in the console are - egEmbedFrameLoader(): https://ilsserver/xul/server/admin/org_unit_settings.xhtml?ses=c72f60de627dda702ab51af6e38b88a5 eframe.js:112:17 |
20:20 |
DaleZeut |
and - eframe applying xulG handlers: reload eframe.js:279:25 |
20:20 |
jeff |
that sounds normal. |
20:21 |
jeff |
do you have what appears to be a list of Organization Unit Settings? |
20:21 |
jeff |
(not in the console, but in the browser tab where you loaded the library settings editor) |
20:23 |
DaleZeut |
No - At the top I have the header (Search - Circulation - ......) below that is Open in new Window and the Forbidden message |
20:23 |
jeff |
okay. might be time to check your Apache error logs to see why the request was forbidden. |
20:25 |
jeff |
did you restart (or at least reload) apache after commenting out the "Header always set X-Frame-Options DENY" line from the /etc/apache2/conf-available/ssl-params.conf file? |
20:26 |
|
ghoti joined #evergreen |
20:26 |
|
ghoti was kicked by jeff: ghoti |
20:28 |
DaleZeut |
I stopped and started Apach32 Apache2-WebSockets and nginx |
20:28 |
jeff |
sounds good. |
20:29 |
DaleZeut |
My access and error logs are empty - although I have logs from yesterday.... |
20:29 |
jeff |
any clue in the apache2 error log regarding the "Forbidden" error? |
20:29 |
jeff |
depending on how much of the example config you copied, your error logs may be going to syslog instead of the usual /var/log/apache2/error.log file. |
20:30 |
DaleZeut |
I must have disabled logging or some thing - checking |
20:30 |
jeff |
so you'd look in probably /var/log/syslog or /var/log/messages |
20:31 |
jeff |
looking at ErrorLog directives in your apache config would tell you where logs are being sent. |
20:31 |
DaleZeut |
Your correct - they are in the syslog |
20:31 |
DaleZeut |
Aug 21 17:23:55 ILSSERVER root: ::1 - - [21/Aug/2018:17:23:55 -0700] "GET /xul/server/admin/org_unit_settings.xhtml?ses=c72f60de627dda702ab51af6e38b88a5 HTTP/1.0" 403 960 |
20:33 |
DaleZeut |
I think this is what we are looking for |
20:33 |
DaleZeut |
Aug 21 17:23:55 ILSSERVER apache2[28709]: [core:error] [pid 28709] [client ::1:34760] AH00037: Symbolic link not allowed or link target not accessible: /openils/var/web/xul/server, referer: https://ilsserver/eg/staff/admin/local/asset/org_unit_settings |
20:35 |
DaleZeut |
Here is the link - lrwxrwxrwx 1 opensrf opensrf 15 Aug 16 18:23 /openils/var/web/xul/server -> rel_name/server |
20:42 |
jeff |
if you "cd /openils/var/web/xul/server" do you receive an error message or can you use "ls" and see some files there? |
20:43 |
jeff |
the other Apache setting that controls symlinks being allowed is Options. lines line "Options FollowSymLinks" or similar. |
20:43 |
DaleZeut |
#cd /openils/var/web/xul/server: No such file or directory |
20:43 |
jeff |
ah. |
20:44 |
DaleZeut |
# ls /openils/var/web/xul/server /openils/var/web/xul/server |
20:44 |
jeff |
your symlink is broken -- i see it now. |
20:44 |
jeff |
in your ls output earlier, "/openils/var/web/xul/server -> rel_name/server" means that the symbolic link is pointing at a directory named "rel_name" |
20:45 |
jeff |
that looks like a placeholder that was intended to be replaced with something like rel_3_1_3 or the like. |
20:45 |
jeff |
so, what does "ls /openils/var/web/xul" show in terms of real directories looking like rel_SOMETHING? |
20:45 |
DaleZeut |
# ls /openils/var/web/xul rel_3_0_10 server |
20:46 |
jeff |
this command should replace the symlink: "cd /openils/var/web/xul && ln -sf rel_3_0_10 server" |
20:48 |
DaleZeut |
shoud the rel_3_0_10 server be rel_3_0_10/server |
20:48 |
jeff |
er, yes. sorry. good catch. |
20:48 |
DaleZeut |
Just checking |
20:49 |
jeff |
anyway, once you've fixed the broken symlink, i think you should be able to load the library settings editor. |
20:49 |
DaleZeut |
now an ls gives - ls /openils/var/web/xul/server addon admin auth cat circ index.xhtml locale main OpenILS patron serial skin util |
20:51 |
DaleZeut |
Sweet - I have a page that looks just like the manual for the Local Server Settings |
20:52 |
jeff |
great! |
20:53 |
DaleZeut |
I need to import then books from our ols software - any suggestions on the best way to do that? |
20:54 |
DaleZeut |
Sorry - my fingers are having obo error today ols = old |
21:53 |
DaleZeut |
On to the next error - when I got to Administration - Server Administration - Organizational Units, I am getting - The page isn’t redirecting properly |
21:55 |
DaleZeut |
in the colsole I see - Strict-Transport-Security: The connection to the site is untrustworthy, so the specified header was ignored.[Learn More] org_unit.html |
21:56 |
DaleZeut |
This repeats 21 times |
22:09 |
jeff |
"isn't redirecting properly" is generally "the browser got stuck in a loop" |
22:10 |
jeff |
and it sounds like something is causing the browser not to trust the connection for the request, possibly to /conify/global/actor/org_unit.html |
22:10 |
jeff |
HSTS (HTTP Strict Transport Security) entering the mix is a little unusual. |
23:29 |
|
steev28 joined #evergreen |