User credentials in www_server.log when user logs on to Primo
- Article Type: General
- Product: Aleph
- Product Version: 20
Problem Symptoms:
- When patrons are logging into Primo (via PDS-authentication against Aleph) the patron verification is written in www_server_***.log. This is a security problem.
- Patrons with lot of loans are not able to login.
Example:
/X?op=BOR_INFO&TRANSLATE=N&LIBR
Cause:
PDS is configured to use bor_info instead of bor_auth.
Resolution:
1. Change setup in $aleph_dev/pds/conf_table/tab_service.xxx50 so that in [BOR_INFO]-section BOR_AUTH instead of BOR_INFO is used.
Example:
Old:
!
!!!!!!!!!!!!!!!!!!!!-!!!!!!!!!!!!!!!!!!!!!!!!!!!!!-!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[AUTHENTICATE]
program = aleph.pl
params = server,443,BOR_AUTH,XXX50,Y,WWW-X,WWW-X
[END]
[BOR_INFO]
program = aleph.pl
params = server,443,BOR_INFO,XXX50,Y,WWW-X,WWW-X
[END]
New:
!
!!!!!!!!!!!!!!!!!!!!-!!!!!!!!!!!!!!!!!!!!!!!!!!!!!-!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[AUTHENTICATE]
program = aleph.pl
params = server,443,BOR_AUTH,XXX50,Y,WWW-X,WWW-X
[END]
[BOR_INFO]
program = aleph.pl
params = server,443,BOR_AUTH,XXX50,Y,WWW-X,WWW-X
[END]
Category: X-server (500)
- Article last edited: 10/8/2013