User credentials in www_server.log when user logs on to Primo

• Article Type: General
• Product: Aleph
• Product Version: 20

Problem Symptoms:
- When patrons are logging into Primo (via PDS-authentication against Aleph) the patron verification is written in www_server_***.log. This is a security problem.
- Patrons with lot of loans are not able to login.

Example:
/X?op=BOR_INFO&TRANSLATE=N&LIBR

Cause:
PDS is configured to use bor_info instead of bor_auth.

Resolution:
1. Change setup in $aleph_dev/pds/conf_table/tab_service.xxx50 so that in [BOR_INFO]-section BOR_AUTH instead of BOR_INFO is used.

Example:

Old:
!
!!!!!!!!!!!!!!!!!!!!-!!!!!!!!!!!!!!!!!!!!!!!!!!!!!-!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[AUTHENTICATE]
program = aleph.pl
params = server,443,BOR_AUTH,XXX50,Y,WWW-X,WWW-X
[END]

[BOR_INFO]
program = aleph.pl
params = server,443,BOR_INFO,XXX50,Y,WWW-X,WWW-X
[END]

New:
!
!!!!!!!!!!!!!!!!!!!!-!!!!!!!!!!!!!!!!!!!!!!!!!!!!!-!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[AUTHENTICATE]
program = aleph.pl
params = server,443,BOR_AUTH,XXX50,Y,WWW-X,WWW-X
[END]

[BOR_INFO]
program = aleph.pl
params = server,443,BOR_AUTH,XXX50,Y,WWW-X,WWW-X
[END]

Category: X-server (500)

• Article last edited: 10/8/2013