- Koha - lists.katipo.co.nz

Friendly reminder , Dear respected Librarians(great hope you consider my survey and help me)
by abdoulrahman aljounaidi 28 Oct '16

28 Oct '16

*Dear respected Librarians* I hope you receive my email with a good health. *This is my first Email and would like to introduce myself to KOHA community, *My name is Abdoulrahman PHD student supervised by, Prof. Dr. Humam Mohamed in Al-Madinah International University as I am also head of department (cataloging) in the library affairs ,i am working with KOHA system for more than 4 years , i am very happy to join you and working as a team together … *As for now i really want a help from KOHA community* ,I am doing a survey on “The Moderating Role of Interpersonal Skill in the Performance of Librarians” *My sampling size is quit big and need your very important help to *fill in my survey and hopefully won’t take from you more than 5 minutes to answer. *Here is the link for my survey* https://goo.gl/forms/OATDQ40rM5ISJ5uC2 *Great Hope from you that you can consider my survey and help me* Please don’t hesitate to contact me anytime .. Hope we cooperate together in the future I will be glad to hear from you soon.. *Thank you very much* *Best regards* *……………………………………..* *ABDOUL RAHMAN AL JOUNAIDI* *HOD, Cataloging Department,library affairs * *مدير قسم الفهرسة,عمادة المكتبات**,** أ/عبدالرحمن الجنيدي* *Tel : +603 55 11 3939 Ext: 783*

2 1

Add me to lists
by Librarian at the Library of the Society of Jesus in South Africa 28 Oct '16

28 Oct '16

Hi, Kindly add me to your koha lists. Regards, -- [image: Inline image] *Mr Francis Zvigo* *Librarian* Library of the Society of Jesus in South Africa Mobile: +27 (74) 029-8901 | E-mail: SA-RegLibrary(a)sj.org.za Post: St Ignatius House, 15 Molesey Avenue, Auckland Park, Johannesburg, 2092, South Africa Web: http://library.sj.org.za/

2 1

Release Team for 17.05
by Katrin 27 Oct '16

27 Oct '16

Hi, we are currently looking for people to fill the various release team roles for the 17.05 release. If you want to contribute as part of the release team, please sign yourself up on the wiki: https://wiki.koha-community.org/wiki/Roles_for_17.05 Elections will be held at the next General IRC meeting on 2 November: https://wiki.koha-community.org/wiki/General_IRC_meeting_2_November_2016 If you have any questions about the roles, please ask away! Katrin

1 0

Dear respected Librarians(great hope you consider my survey and help me) help from KOHA community
by abdoulrahman aljounaidi 27 Oct '16

27 Oct '16

*Dear respected Librarians* I hope you receive my email with a good health. *This is my first Email and would like to introduce myself to KOHA community, *My name is Abdoulrahman PHD student supervised by, Prof. Dr. Humam Mohamed in Al-Madinah International University as I am also head of department (cataloging) in the library affairs ,i am working with KOHA system for more than 4 years , i am very happy to join you and working as a team together … *As for now i really want a help from KOHA community* ,I am doing a survey on “The Moderating Role of Interpersonal Skill in the Performance of Librarians” *My sampling size is quit big and need your very important help to *fill in my survey and hopefully won’t take from you more than 5 minutes to answer. *Here is the link for my survey* https://goo.gl/forms/OATDQ40rM5ISJ5uC2 *Great Hope from you that you can consider my survey and help me* Please don’t hesitate to contact me anytime .. Hope we cooperate together in the future I will be glad to hear from you soon.. *Thank you very much* *Best regards* *……………………………………..* *ABDOUL RAHMAN AL JOUNAIDI* *HOD, Cataloging Department,library affairs * *مدير قسم الفهرسة,عمادة المكتبات**,** أ/عبدالرحمن الجنيدي* *Tel : +603 55 11 3939 Ext: 783*

1 0

Kohacon2020!
by Kathryn Tyree 27 Oct '16

27 Oct '16

Kia ora koutou, I'm Kathryn, if you don't know me, I work on the Koha team at Catalyst IT from the Wellington NZ office. Kohacon2020 you ask? Well, I don't know what I'm doing in 2020 either, but it turns out some people are already making plans :) I attended a meeting recently because New Zealand is bidding for two international library conferences in 2020, and Kohacon could make it three. The other two conferences that will have bids in from NZ are: * http://ifla.org/ The International Federation of Library Associations and Institutions, which some of you may have attended in Ohio USA this year * and http://www.iamslic.org/ The International Association of Aquatic and Marine Science Libraries and Information Centers, that recently held their annual conference in Mexico. Koha will be 20 years old in 2020, and some guy who's been working on Koha for a long while started a rumor that we should bring it back here for the big celebration. So, I will follow how the bids for IFLA and IAMSLIC go over the next year, as it's possible we could try and bring the conference dates together. Not that we can do much about it from a Koha perspective until 2019! I would be curious to hear from any Koha libraries out there who regularly or sometimes attend either of the other two conferences. Best wishes, Kathryn Kathryn Tyree // Project and Account Manager DDI // +64 4 803 2414 kathryn(a)catalyst.net.nz Level 6, Catalyst House 150 Willis Street, Wellington 6011 PO Box 11 053, Manners St Wellington 6142, New Zealand

5 6

[arthur.suzuki@univ-lyon3.fr: Re: [Koha-devel] F5 Attacks]
by Chris Cormack 26 Oct '16

26 Oct '16

Here we go Chris ----- Forwarded message from SUZUKI Arthur <arthur.suzuki(a)univ-lyon3.fr> ----- Date: Wed, 26 Oct 2016 17:29:12 +0200 From: SUZUKI Arthur <arthur.suzuki(a)univ-lyon3.fr> To: koha-devel(a)lists.koha-community.org, CROUZET Olivier <olivier.crouzet(a)univ-lyon3.fr> Subject: Re: [Koha-devel] [Koha] F5 Attacks User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.3.0 Hi, Please forward to koha-general since I didn't subscribed to that one yet. We had the same issue at Lyon 3, we dealt with them by adding some code in the OpacuserJS syspref to disable page reloading until search result completes. More documentation here : https://bugs.koha-community.org/bugzilla3/ show_bug.cgi?id=15855 My colleague Olivier Crouzet have improved the code since : // multi soumission Bouton Valider $("#searchsubmit").click(function(){ $(this).text('en cours...').prop('disabled',true); $("#searchform").submit(); }); // multi soumission Enter var submitted; $('#translControl1').bind('keyup',function() { submitted = false; }); $('#translControl1').bind('keydown',function(event) { code = event.keyCode||event.which||event.charCode||event.char||0; if(code == 13) { if (submitted == false) { submitted = true; $('#searchform').submit(); $("#searchsubmit").text('en cours...'); } else { event.preventDefault(); event.returnValue = false; return false; } } }); Maybe this could be integrated into core koha. All the best, Arthur Le 26/10/2016 à 16:28, Paul A a écrit : At 01:29 PM 10/26/2016 +0000, Marcel de Rooy wrote: Content-Language: nl-NL Content-Type: multipart/alternative; boundary= "_000_VI1PR0501MB2591816F386E0F9B467A10E1CEAB0VI1PR0501MB2591_" More something for the developers list? What Philippe here says, makes some sense to me. We could at least try to do something; what and how is another thing ;) F5 DDoS can/should be mitigated at firewall -- see e.g. <https:// debian-administration.org/article/187/ Using_iptables_to_rate-limit_incoming_connections> -- and while I somewhat agree that it would be "nice" for Koha to consider it, I see this more as a "server admin/setup" that has existed for many years now. Best -- Paul ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ Van: Koha <koha-bounces(a)lists.katipo.co.nz> namens Philippe Blouin <philippe.blouin(a)inlibro.com> Verzonden: woensdag 26 oktober 2016 14:52 Aan: Koha list Onderwerp: Re: [Koha] F5 Attacks I disagree. If Koha is offered out of the box, and we take time to fix security issues, then it's normal for users to expect "basic" attacks to be taken care of. More so, blocking IP is not a possibility if genuine users are involved using a station from within the library. I'm not saying you're wrong that it's mostly sysadmin work and not Koha, but it doesn't mean nothing can be done. From the apache's threads, I found nothing useful (mostly derisive comments). But we could at least talk about it. What about having a javascript preventing refresh on the page withing 5 sec of each other? Needs to be done in a way that the refresh doesn't restart the timer. What about having the OPAC search be code where the refresh will basically send nothing ? The checkbox are filled, the request is sent to the backend, but the frontend keeps nothing... I'm just smoking here, but I'm trying to induce some brainstorming in this interesting topic. Philippe Blouin, Responsable du développement informatique Tél. : (888) 604-2627 philippe.blouin(a)inLibro.com <mailto:philippe.blouin@inLibro.com> inLibro | pour esprit libre | www.inLibro.com <http://www.inLibro.com> On 10/26/2016 07:13 AM, Jonathan Druart wrote: > Hi, > I don't think this can/must be fixed on Koha side. > It's a sysadmin duty to take care of that. > I would take a look at fail2ban to parse the web server access logs. But > make sure not to block your X librarians using the same ip ;) > > On Wed, 26 Oct 2016 at 12:28 Pedro Amorim <pjamorim91(a)gmail.com> wrote: > >> I have tested this and the stress caused on the server is very severe. It >> seems that for every request, a new zebra process is created and the server >> will only respond when the last one is finished. This ofc will result in >> time outs and eventually a crash in the server. >> >> This is a major critical issue IMO, anyone who knows about this has the >> power to deny the service of any Koha online without using any additional >> hacking/attacking software. >> >> The Koha I'm working on right now - still in development - is accessed >> behind a proxy server, and I will attempt to solve the problem through >> that, by limiting the requests from the same origin with very little time >> between them. Still, even if I'm successful with this, the problem will >> still lie in Koha. >> >> Anyone with some sort of insight is very welcome. >> >> Pedro Amorim >> >> 2016-10-26 8:24 GMT+00:00 clint.deckard <clint.deckard(a)frontiers.co.nz>: >> >>> I have had this issue appear today. I have attempted to set up >> mod_evasive >>> for apache but it doesn't seem to have solved the problem. >>> I would really appreciate some advice. >>> Clint. >>> >>> >>> rfblanchard wrote: >>> >>>> Assume a basic opac search: >>>> http://..../cgi-bin/koha/opac-search.pl?q=dog&branch_group_l >>>> imit=branch%3A349 >>>> >>>> This would take about 10 seconds to return the first time. >>>> >>>> Assume the user refreshes the results using f5 and keep there finger >>>> there a >>>> moment to long (3s): >>>> This would kill my server for about 1 minute. >>>> >>>> Any attacker could easily make the server unresponsive indefinitely by >>>> simply holding f5 on an opac search. >>>> >>>> Any recommendations on how to deal with this problem? >>>> >>>> here is a sample from top: >>>> >>>> Tasks: 313 total, 3 running, 309 sleeping, 0 stopped, 1 zombie >>>> %Cpu(s): 93.7 us, 5.2 sy, 0.0 ni, 1.0 id, 0.2 wa, 0.0 hi, 0.0 si, >>>> 0.0 >>>> st >>>> KiB Mem: 16465036 total, 1532492 used, 14932544 free, 63180 buffers >>>> KiB Swap: 8526844 total, 0 used, 8526844 free. 505124 cached >>>> Mem >>>> >>>> PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ >>>> COMMAND >>>> 7027 peischo+ 20 0 416164 162924 12756 S 58.8 1.0 0:26.43 >>>> /usr/share/koha >>>> 7009 peischo+ 20 0 416800 163524 12756 S 56.5 1.0 0:33.77 >>>> /usr/share/koha >>>> 7444 peischo+ 20 0 129832 15216 5900 R 37.2 0.1 0:01.12 >>>> zebrasrv >>>> 7445 peischo+ 20 0 129832 15216 5900 R 35.6 0.1 0:01.07 >>>> zebrasrv >>>> 1151 mysql 20 0 886564 181096 10808 S 8.6 1.1 1:27.57 >> mysqld >>>> 7435 koha 20 0 25892 3272 2528 R 0.3 0.0 0:00.03 top >>>> 1 root 20 0 176144 5044 3096 S 0.0 0.0 0:01.43 >>>> systemd >>>> 2 root 20 0 0 0 0 S 0.0 0.0 0:00.00 >>>> kthreadd >>>> >>>> >>>> >>>> -- >>>> View this message in context: http://koha.1045719.n5.nabble. >>>> com/F5-Attacks-tp5906098.html >>>> Sent from the Koha-general mailing list archive at Nabble.com. >>>> _______________________________________________ >>>> Koha mailing list http://koha-community.org >>>> Koha(a)lists.katipo.co.nz >>>> https://lists.katipo.co.nz/mailman/listinfo/koha >>>> >>> _______________________________________________ >>> Koha mailing list http://koha-community.org >>> Koha(a)lists.katipo.co.nz >>> https://lists.katipo.co.nz/mailman/listinfo/koha >>> >> _______________________________________________ >> Koha mailing list http://koha-community.org >> Koha(a)lists.katipo.co.nz >> https://lists.katipo.co.nz/mailman/listinfo/koha >> > _______________________________________________ > Koha mailing list http://koha-community.org > Koha(a)lists.katipo.co.nz > https://lists.katipo.co.nz/mailman/listinfo/koha _______________________________________________ Koha mailing list http://koha-community.org Koha(a)lists.katipo.co.nz https://lists.katipo.co.nz/mailman/listinfo/koha _______________________________________________ Koha-devel mailing list Koha-devel(a)lists.koha-community.org http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/ --- Maritime heritage and history, preservation and conservation, research and education through the written word and the arts. <http://NavalMarineArchive.com> and <http://UltraMarine.ca> _______________________________________________ Koha-devel mailing list Koha-devel(a)lists.koha-community.org http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/ -- Arthur SUZUKI Service informatique des bibliothèques BIBLIOTHÈQUES UNIVERSITAIRES Université Jean Moulin Lyon 3 6 Cours Albert Thomas - B.P. 8242 – 69355 Lyon Cedex 08 ligne directe : +33 (0)4 78 78 79 16 | http://bu.univ-lyon3.fr L'Université Jean Moulin est membre fondateur de l'Université de Lyon _______________________________________________ Koha-devel mailing list Koha-devel(a)lists.koha-community.org http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-devel website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/ ----- End forwarded message ----- -- Chris Cormack Catalyst IT Ltd. +64 4 803 2238 PO Box 11-053, Manners St, Wellington 6142, New Zealand

1 0

F5 Attacks
by rfblanchard 26 Oct '16

26 Oct '16

Assume a basic opac search: http://..../cgi-bin/koha/opac-search.pl?q=dog&branch_group_limit=branch%3A349 This would take about 10 seconds to return the first time. Assume the user refreshes the results using f5 and keep there finger there a moment to long (3s): This would kill my server for about 1 minute. Any attacker could easily make the server unresponsive indefinitely by simply holding f5 on an opac search. Any recommendations on how to deal with this problem? here is a sample from top: Tasks: 313 total, 3 running, 309 sleeping, 0 stopped, 1 zombie %Cpu(s): 93.7 us, 5.2 sy, 0.0 ni, 1.0 id, 0.2 wa, 0.0 hi, 0.0 si, 0.0 st KiB Mem: 16465036 total, 1532492 used, 14932544 free, 63180 buffers KiB Swap: 8526844 total, 0 used, 8526844 free. 505124 cached Mem PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 7027 peischo+ 20 0 416164 162924 12756 S 58.8 1.0 0:26.43 /usr/share/koha 7009 peischo+ 20 0 416800 163524 12756 S 56.5 1.0 0:33.77 /usr/share/koha 7444 peischo+ 20 0 129832 15216 5900 R 37.2 0.1 0:01.12 zebrasrv 7445 peischo+ 20 0 129832 15216 5900 R 35.6 0.1 0:01.07 zebrasrv 1151 mysql 20 0 886564 181096 10808 S 8.6 1.1 1:27.57 mysqld 7435 koha 20 0 25892 3272 2528 R 0.3 0.0 0:00.03 top 1 root 20 0 176144 5044 3096 S 0.0 0.0 0:01.43 systemd 2 root 20 0 0 0 0 S 0.0 0.0 0:00.00 kthreadd -- View this message in context: http://koha.1045719.n5.nabble.com/F5-Attacks-tp5906098.html Sent from the Koha-general mailing list archive at Nabble.com.

9 11

Browser Index not working - Search results not been displayed
by Admire Mutsikiwa 26 Oct '16

26 Oct '16

Hi I am running Koha 3.22.06.000 on Ubuntu 14.04. I am failing to search books from the OPAC. When I run the command sudo koha-rebuild-zebra -v --full mutareply , where mutareply is the koha instance, I am getting the following: root@libsys:~# sudo koha-rebuild-zebra -v --full mutareply Zebra configuration information ================================ Zebra biblio directory = /var/lib/koha/mutareply/biblios Zebra authorities directory = /var/lib/koha/mutareply/authorities Koha directory = /usr/share/koha/intranet/cgi-bin Lockfile = /var/lock/koha/mutareply/rebuild/rebuild..LCK BIBLIONUMBER in : 999$c BIBLIOITEMNUMBER in : 999$d ================================ skipping authorities ==================== exporting biblio ==================== 4401........................................................................ ............................ Records exported: 4438 ==================== REINDEXING zebra ==================== ==================== CLEANING ==================== Zebra configuration information ================================ Zebra biblio directory = /var/lib/koha/mutareply/biblios Zebra authorities directory = /var/lib/koha/mutareply/authorities Koha directory = /usr/share/koha/intranet/cgi-bin Lockfile = /var/lock/koha/mutareply/rebuild/rebuild..LCK BIBLIONUMBER in : 999$c BIBLIOITEMNUMBER in : 999$d ================================ ==================== exporting authority ==================== 8201........................................................................ ............................ Records exported: 8252 ==================== REINDEXING zebra ==================== skipping biblios ==================== CLEANING This indicates everything is okay. But I cannot search books. I have try to follow the troubleshooting guide on https://wiki.koha-community.org/wiki/Troubleshooting_Zebra but it appears zebra is not running. Kind Regards, Admire Mutsikiwa (Mr) ICT Manager Libraries University of Zimbabwe Tel:+263-4-303276 Mob:+263771117777 "It is easy to dodge our responsibilities, but we cannot dodge the consequences of dodging our responsibilities." Josiah Charles Stamp <http://www.goodreads.com/author/show/4867406.Josiah_Charles_Stamp>

4 3

Koha 16.05.02: need to refresh after 1)adding an item to a list, 2)deleting an authority, 3)uploading a cover
by Andreas Roussos 25 Oct '16

25 Oct '16

Dear All, It used to be the case (in Koha 3.02.02 at least) that when adding a biblio to a list in the Staff client, the item page would automatically refresh after that action. That way you immediately got to see which list you've just added the item to. After upgrading to Koha 16.05.02, this is no longer working as it used to, i.e. after adding an item to a list the item page remains static and one needs to do a manual refresh (tested with Firefox and Chrome). Another case where this is happening is when deleting an authority (that is not used in any records) via the 'Actions' drop-down menu. As soon as you click on the 'Delete' option, the page reloads but the deleted authority is still listed. You have to do a manual refresh for it to completely disappear. Finally, when uploading an image for a biblio, once an image has been uploaded and you click on the 'View final record' link the resulting page does not show the uploaded image and you have to manually refresh it for the cover image to show. Can anyone suggest any guidance? Should we file a bug/enhancement request for this? Kind regards, Andreas Roussos Systems Administrator Holy Monastery of the Paraclete

1 0

Koha 3.22.12 security release
by Julian Maurice 24 Oct '16

24 Oct '16

The Koha community is proud to announce the release of Koha 3.22.12. This is a security release and contains several bugfixes. If you are running 3.22.x it is strongly recommended to upgrade. The full release notes are available at https://koha-community.org/koha-3-22-12-security-release/

1 0