XP access problem

Hi all,

I have a user who is experiencing the following problem:

they click on a proxied resource via our library web site and are 
prompted for their username/password; once they are authenticated they 
received the IE message 'You are now being redirected to an insecure 
site....' (we use SSL login) - once the user clicks 'ok' to this message 
they receive the 'http 400 error' page rather than being directed to the 
selected resource.

We are using EXProxy 3.2b GA  (2005-04-03) and are proxying by port.
We have disabled the users XP firewall, checked the IE security settings 
and are still having a problem. I even disabled secure login on the 
EZProxy server, but no-go. The one program the user is running which I 
didn't check was Microsoft AntiSpyware.

I'm stumped on this one...has anyone experienced this type of behaviour 
before?

Thanks for any assistance.
Gord.

**************************************************************
Gordon Bertrand
Systems Librarian
Angus L. Macdonald Library
St. Francis Xavier University
P.O. Box 5000
Antigonish, Nova Scotia

Re: XP access problem

Hi Chris,
 
Thanks for the tip.
 
I don't think the user has NetZero installed, but there's a good chance they're using some sort of
accelerator software, as they're on a dial-up connection. The user indicated that things were working
fine until an automatic XP update was installed a couple of days ago...
 
I'll check the system for 'NetZero-like' software and report back.
 
Cheers,
Gord.
 
 
----Original Message----- 
From: Chris Zagar [mailto:zagar <at> usefulutilities.com] 
Sent: Tue 5/31/2005 7:34 PM 
To: EZProxy discussion list 
Cc: 
Subject: [ezproxy] Re: XP access problem



	> for their username/password; once they are authenticated they received the IE
	> message 'You are now being redirected to an insecure site....' (we use SSL
	> login) - once the user clicks 'ok' to this message they receive the 'http 400
	> error' page rather than being directed to the selected resource.
	
	This behavior is most frequently caused by the combination of EZproxy in
	proxy by port and the user using a web accelerator such as NetZero

Ezproxy Config Question

Hi All,

We have an existing Ezproxy setup here at our library which has been
running a number of years.

We are looking at opening up the access to the the config file so that
admins can modify the database definitions. What we would like to do is
make these available for editing while restricting access to the other
config options in the config file.

Are file includes supported in the config file or does anyone know of
any other simple solutions?

Thanks
Michael

Michael Wiebrands
IT Client Facilitator
Library and Information Service
Curtin University of Technology
m.wiebrands <at> curtin.edu.au
+61 8 9266 4351

---
You are currently subscribed to ezproxy as: gee-ezproxy <at> gmane.org
To unsubscribe send a blank email to leave-ezproxy-58098R <at> ls.suny.edu

Re: Ezproxy Config Question

Michael,
You can keep the bulk of the config options in the ezproxy.cfg file  
and reference other files likes this.

IncludeFile /usr/local/ezproxy/groupresources-law.cfg
IncludeFile /usr/local/ezproxy/groupresources-med.cfg
IncludeFile /usr/local/ezproxy/groupresources-nwu.cfg
IncludeFile /usr/local/ezproxy/groupresources-nul.cfg

We do this for group database configuration files. If you were  
allowing folks to edit files you could set ACLs on those files only.

(Timeout for enhancement Request)
It would be really *nice* if the EZproxy cfg files were in an XML  
schema format vs unstructured text. This would make things much  
easier to manage. Right now our files are getting so large we are  
thinking of pulling them back into a database to manage and generate.  
Having it in XML would make more sense

#!/Stu/Baker
<mailto:stubaker <at> stubaker.com>
<http://www.stubaker.com/>
"Doveryai no Proveryai"

On Jun 1, 2005, at 2:08 AM, Michael Wiebrands wrote:

>
> Hi All,
>
> We have an existing Ezproxy setup here at our library which has been

Re: Ezproxy Config Question

Thanks for information Stu. 
This will be very helpful.

-----Original Message-----
From: Stu Baker [mailto:stubaker <at> northwestern.edu] 
Sent: Wednesday, 1 June 2005 3:21 PM
To: EZProxy discussion list
Subject: [ezproxy] Re: Ezproxy Config Question

Michael,
You can keep the bulk of the config options in the ezproxy.cfg file and
reference other files likes this.

IncludeFile /usr/local/ezproxy/groupresources-law.cfg
IncludeFile /usr/local/ezproxy/groupresources-med.cfg
IncludeFile /usr/local/ezproxy/groupresources-nwu.cfg
IncludeFile /usr/local/ezproxy/groupresources-nul.cfg

We do this for group database configuration files. If you were allowing
folks to edit files you could set ACLs on those files only.

(Timeout for enhancement Request)
It would be really *nice* if the EZproxy cfg files were in an XML schema
format vs unstructured text. This would make things much easier to
manage. Right now our files are getting so large we are thinking of
pulling them back into a database to manage and generate.  
Having it in XML would make more sense

#!/Stu/Baker
<mailto:stubaker <at> stubaker.com>

Clio (ILL software) and EZProxy

We are investigating using the Clio ILL management software. Has anyone 
used this software with EZProxy?

TIA.
-- 

Catherine Buck Morgan
Director, Information Technology Services
South Carolina State Library
EMAIL: catherine <at> leo.scsl.state.sc.us
Phone: 803.734.8651 Fax: 803.734.4757
Home page: http://www.statelibrary.sc.gov
Web catalog: http://www.statelibrary.sc.gov/scslweb/welcome.html
E-Rate info: http://www.statelibrary.sc.gov/erate.html

Systems librarianship is the art and science of combining the principles 
of librarianship with the abilities of computing technology. --Eric 
Lease Morgan

---
You are currently subscribed to ezproxy as: gee-ezproxy <at> gmane.org
To unsubscribe send a blank email to leave-ezproxy-58098R <at> ls.suny.edu

Re: [EZproxy] Clio (ILL software) and EZPROXY

Re: Ezproxy Config Question

> (Timeout for enhancement Request)
> It would be really *nice* if the EZproxy cfg files were in an XML schema 
> format vs unstructured text. This would make things much easier to manage. 
> Right now our files are getting so large we are thinking of pulling them back 
> into a database to manage and generate. Having it in XML would make more 
> sense

I have considered this, but I have to admit it's low priority as it would 
make it easier for those who understand XML, but dramatically increase the 
learning curve for those who do not.

Chris

--

-- 
Chris Zagar <zagar <at> usefulutilities.com>
Useful Utilities <http://www.usefulutilities.com>

---
You are currently subscribed to ezproxy as: gee-ezproxy <at> gmane.org
To unsubscribe send a blank email to leave-ezproxy-58098R <at> ls.suny.edu

Re: Ezproxy Config Question

On Wed, Jun 01, 2005 at 10:11:10AM -0700, Chris Zagar wrote:
> >(Timeout for enhancement Request)
> >It would be really *nice* if the EZproxy cfg files were in an XML schema 
> >format vs unstructured text. This would make things much easier to manage. 
> >Right now our files are getting so large we are thinking of pulling them 
> >back into a database to manage and generate. Having it in XML would make 
> >more sense
> 
> I have considered this, but I have to admit it's low priority as it would 
> make it easier for those who understand XML, but dramatically increase the 
> learning curve for those who do not.
> 
> Chris

Thank you, Chris!

Having a flat file ("unstructured text") is the most flexible format
for the configuration at this time -- it's simple and the human can
read/modify it as needed.  

* A Flat file can be manually edited.
* If the configuration is large and/or complex, then the configuration
  data can be stored and managed any way the user desires (database,
  XML, whatever) and a simple utility can generage an ezproxy
  configuration from the data store.
* Use of XML will mandate some XML utility to modify and/or update the
  data, and further introduces the possiblity of invalid form within
  the XML when the configuration is modified manually.
  From what I've seen, when you say XML processing you will get many
  unique ideas on just exactly *how* the XML should be processed.  
  For example: the XML tools for Wintendo are not the same tools used
  for Linux/Solaris, etc.

It really would be rather trivial to store data in some form (MySQL,
XML) and have a perl script extract the data from the store and write
an ezproxy.cfg (or include) file.  

> -- 
> Chris Zagar <zagar <at> usefulutilities.com>
> Useful Utilities <http://www.usefulutilities.com>
--

-- 
 ---------------------------------------------
 Bill R. Williams               <brw <at> etsu.edu>
 ------------------------ ETSU Library Systems

---
You are currently subscribed to ezproxy as: gee-ezproxy <at> gmane.org
To unsubscribe send a blank email to leave-ezproxy-58098R <at> ls.suny.edu

EZProxy failover support for proxy server

Hi all,

My EZProxy server routes traffic through my squid proxy server.  The
proxy server had a problem (ran out of disk space) so failed.  Remote
access through EZProxy also failed.  

Users saw messages like this:
"Connection refused by www.jstor.org, please try again later." 

The ezproxy.msg file showed messages like this:
"UUconnect connect refused by proxy.smc.edu:3128 (111 Connection
refused) in DoTranslate-p"

Is there support in EZProxy for a failover feature, where if access to
the proxy server failed then EZProxy would go direct or use another
proxy server?
If not, could such a feature be considered (Chris)?

I imagine the syntax might be:

P proxy1 proxy2 direct

I guess I could write a script that would look for this problem, but it
would be better as a core feature.

Steve Hunt
Santa Monica College Library
Santa Monica, Calif.
Hunt_steve <at> smc.edu

---
You are currently subscribed to ezproxy as: gee-ezproxy <at> gmane.org
To unsubscribe send a blank email to leave-ezproxy-58098R <at> ls.suny.edu