| 00:03.11 | *** part/#utah Nemus (~Nemus@unaffiliated/nemus) |
| 00:54.25 | *** join/#utah Nemus (~Nemus@unaffiliated/nemus) |
| 01:44.15 | *** join/#utah jajaladodo (~textual@104.200.154.24) |
| 02:18.52 | eightyeight | https://pthree.org/2016/05/24/cpu-jitter-entropy-for-the-linux-kernel/ |
| 02:32.10 | *** join/#utah magmu (~Magical_M@66-7-124-45.static.ip.veracitynetworks.com) |
| 02:37.34 | *** join/#utah magmu (~Magical_M@66-7-124-45.static.ip.veracitynetworks.com) |
| 02:45.30 | *** join/#utah siel (~siel@unaffiliated/motley) |
| 05:55.27 | *** join/#utah AimerPaddle (~AimerPadd@c-98-202-183-214.hsd1.ut.comcast.net) |
| 06:00.11 | *** join/#utah Enemby (~Enemby@unaffiliated/enemby) |
| 08:39.00 | *** join/#utah neanderslob (~quassel@c-50-168-247-73.hsd1.ut.comcast.net) |
| 10:39.57 | *** join/#utah jajaladodo (~textual@104.200.154.24) |
| 11:31.32 | *** join/#utah RuShan (~RuShan@2600:100e:b146:434b:d590:6021:a4c3:3a4) |
| 12:54.17 | *** join/#utah jajaladodo (~textual@104.200.154.24) |
| 14:21.43 | *** join/#utah josephscott (~josephsco@192.0.80.201) |
| 14:25.55 | *** join/#utah knine (cc3af404@gateway/web/freenode/ip.204.58.244.4) |
| 14:32.49 | shalkie | Good Morning! |
| 14:33.05 | *** join/#utah knine (cc3af404@gateway/web/freenode/ip.204.58.244.4) |
| 14:46.32 | TodPunk | http://swanh.net/ |
| 14:57.40 | *** join/#utah davido_ (~doswald@216.50.142.194) |
| 15:10.48 | TodPunk | LDUG tonight! |
| 15:11.03 | shalkie | OALUG tonight! |
| 15:11.05 | shalkie | :) |
| 15:11.18 | TodPunk | Ogden needs to feel like they've got something, I know |
| 15:13.56 | shalkie | Well there is at least three different coffee shop chains (Starbucks, Grounds for Coffee and Beans and Brews), a Tech Incubator and soon Waffle Luv. :) |
| 15:14.04 | shalkie | So yeah. :) |
| 15:14.24 | TodPunk | Waffle Love, the indicator of success |
| 15:15.09 | TodPunk | You still don't have anything, sorry. We have actual jobs in the rest of Utah, for instance. Hell, even Logan has Juniper or whatever and Westhost |
| 15:15.18 | TodPunk | or is that Vernal |
| 15:15.21 | TodPunk | they're like the same |
| 15:16.21 | *** join/#utah YoLoGrimm (~yologrimm@2601:680:c300:22fe:bc37:2f48:5255:9773) |
| 15:21.40 | TodPunk | You know who else has a tech incubator? St. George. Who the hell starts a tech company in St. George? |
| 15:22.39 | Yorokobi | Not that it is entirely relevant, but Cafe Rio started in St. George |
| 15:22.45 | Yorokobi | And Pizza Factory |
| 15:23.11 | Yorokobi | (As one who was born and raised (razed?) there, I have to agree.) |
| 15:24.04 | shalkie | TodPunk: I will think of you as I enjoy pizza from The Pie at the meeting tonight. :-P |
| 15:24.34 | Yorokobi | only misses MacCool's |
| 15:24.56 | TodPunk | Yorokobi: restaurants have the advantage of being able to start anywhere people live with some excess cash |
| 15:25.06 | TodPunk | I like vacationing in St. George |
| 15:25.33 | Yorokobi | I like leaving St. George |
| 15:25.56 | shalkie | Yorokobi: There is a MacCool's in Ogden. |
| 15:25.58 | TodPunk | I enjoy that part as well |
| 15:26.01 | shalkie | Is that the one your thinking of? |
| 15:26.30 | Yorokobi | shalkie, I used to work in UofU's Research Park and ate at the one off Foothill |
| 15:28.41 | Yorokobi | It'd only take me 10h 17m to drive there if I left right now ... |
| 15:28.55 | shalkie | D'oh. |
| 15:30.31 | TodPunk | Yorokobi: you'd be in time for LDUG! |
| 15:31.21 | Yorokobi | What's the LD for? |
| 15:31.45 | unum | Lehi Developers |
| 15:32.11 | unum | I'm going to start a DDUG and we can tag up bluffdale |
| 15:32.27 | Yorokobi | UT county is full of crazies. ;) |
| 15:34.03 | RyanE | where is LDUG, anyway? |
| 15:34.07 | RyanE | is it still at Adobe? |
| 15:34.34 | TodPunk | yeah |
| 15:37.46 | TodPunk | unum: Draper? |
| 15:39.14 | *** join/#utah manithree (~blr@li4-76.members.linode.com) |
| 15:39.54 | unum | TodPunk: ya |
| 16:04.19 | *** join/#utah SunSparc (~jonathan@45.56.57.85) |
| 16:55.00 | *** join/#utah manithree (~blr@li4-76.members.linode.com) |
| 16:59.07 | *** join/#utah manithree (~blr@li4-76.members.linode.com) |
| 16:59.14 | *** join/#utah davido_ (~doswald@216.50.142.194) |
| 17:02.06 | *** join/#utah weedpatch2 (~weedpatch@unaffiliated/weedpatch2) |
| 17:38.20 | *** join/#utah davido_ (~doswald@216.50.142.194) |
| 18:22.53 | shalkie | Yorokobi: We settled this the other day, it is only partially full of crazy pants, it holds the majority of non-crazy pants land. |
| 18:23.26 | shalkie | So like this: https://www.diigo.com/file/image/sobqperzdboqqrscbzcdbbcsaa/Google+Maps.jpg |
| 18:32.26 | Yorokobi | Your labels are backwards |
| 18:32.48 | *** join/#utah keldwud (ce47473f@gateway/web/freenode/ip.206.71.71.63) |
| 18:34.04 | Yorokobi | Unless they're literal labels and not metaphoric. I haven't been in northern Utah for several years so I can't comment on whether the crazy status of the residents' pants. |
| 18:34.15 | keldwud | if I want to see what's going on in an html web page served by apache, I can find the url in the enabled-sites then the document root, then browse to that path on the web server and view the index.html and see how it links to the other pages |
| 18:34.16 | keldwud | however |
| 18:35.40 | keldwud | if I want to see what's going on in a php web page served by apache, I can find the url in the enbaled-sites, then see the document root and the php include_path and other php_flags and _values and the index.php but how do I see how it is generating the pages or where it links to stuff? |
| 18:36.18 | keldwud | when I view the index.php, I just see a bunch of variables being set |
| 18:36.40 | keldwud | where can I view what is happening in the php processor? |
| 18:36.55 | fungus | If you want to see the result, just browse to the URL and hit "view source" |
| 18:37.22 | keldwud | I want to know what generates that result |
| 18:37.35 | keldwud | I've viewed the result with both a web browser and curl commands |
| 18:38.18 | fungus | It depends on the application. |
| 18:38.40 | fungus | Generally start at the calling URL mapped to the source file, then follow from there. |
| 18:39.33 | keldwud | so the calling url in this case would be the index.php I think and when I view the php source, I don't see anything that really "stands" out for me that leads me to another file that I can look at |
| 18:40.05 | fungus | Learn PHP, and you'll understand. :P |
| 18:40.13 | keldwud | yeah, that's what I'm starting to think :) |
| 18:40.36 | fungus | pastebin the source and someone here can probably point you in the right direction. |
| 18:40.56 | keldwud | $dbh = new SQLfuncs($dbinfo['host'], $dbinfo['user'], $dbinfo['pass'], $dbinfo['db']); |
| 18:41.14 | keldwud | this would be where the page passes the username and password from the form, right? |
| 18:41.20 | fungus | No |
| 18:41.26 | fungus | That's likely the database connection |
| 18:41.52 | keldwud | $_mysession = new SessionHandler($dbh); |
| 18:41.56 | fungus | $dbinfo = Info about the database |
| 18:42.05 | keldwud | oh and SessionHandler is also db |
| 18:42.17 | fungus | Sessions use the database |
| 18:42.38 | fungus | and $_mysession is this particular requests session handle. |
| 18:43.06 | keldwud | I'm trying to figure out how this page authenticates and what happens after this POST event |
| 18:43.07 | keldwud | $_mysession = new SessionHandler($dbh); |
| 18:43.09 | keldwud | whoops |
| 18:43.10 | fungus | Just pastebin the whole thing and we can point you to which part is relevant. |
| 18:43.13 | keldwud | POST /index.php?section=login&verify=y |
| 18:43.29 | keldwud | ok |
| 18:43.56 | fungus | In that case look for access to the variable $_REQUEST or $_POST |
| 18:43.57 | keldwud | the symptom I'm trying to investigate is that when I enter credentials, I am taken back to the login screen |
| 18:44.29 | fungus | It might have a fairly complicated framework, so you'd have to trace through several other PHP files. |
| 18:44.52 | keldwud | that's what I suspected. I just don't know how to trace php yet |
| 18:45.01 | Yorokobi | Or your browser is killing a cookie it wants |
| 18:45.03 | keldwud | I can trace python and html and css and such |
| 18:45.06 | keldwud | $section = $_POST['section']; |
| 18:45.40 | keldwud | so is there a php file called section somewhere? |
| 18:45.46 | fungus | That's reading the POST variable section and storing it in a local variable. |
| 18:46.39 | fungus | Like I said before. pastebin the whole thing and we can probably help better. |
| 18:46.44 | keldwud | k |
| 18:47.56 | keldwud | http://pastie.org/10852374 |
| 18:50.08 | keldwud | this is what I see in the log when I try to submit the form |
| 18:50.17 | keldwud | May 25 11:48:10 [host] apache_access_log: [src_ip] [dest_ip] lams.marketing.cr.local [25/May/2016:11:48:10 -0600] "POST /index.php?section=login&verify=y HTTP/1.1" 302 "[dest_url]" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.102 Safari/537.36" |
| 18:52.46 | keldwud | this is curl output http://pastie.org/10852379 |
| 18:54.01 | keldwud | so one thing I wanted to try is to submit the form using curl instead of a web browser but because I don't understand how php works, I didn't know how to generate the same kind of POST |
| 18:58.40 | fungus | Generating post varialbes in curl is not a PHP specific thing, it's the same with all web requests. |
| 18:59.03 | keldwud | like, I understand php to the point where I know if I had something like <? echo date("parameter");?> as an element inside of a page it would dynamically create the content |
| 18:59.23 | keldwud | but in cases where the whole page is generated dynamically, I don't follow it as easily |
| 18:59.30 | fungus | In you example a POST to /index.php?section=login&verify=y |
| 18:59.47 | fungus | You'd take care looking at lines 49-50 and line 54. |
| 19:00.09 | fungus | 49-50 does the authentication. |
| 19:00.30 | fungus | and 54 includes the login PHP code. |
| 19:00.43 | keldwud | oh ok I see now |
| 19:00.58 | keldwud | so next I would want to look at the .inc.php |
| 19:01.01 | fungus | well 54 includes the PHP code to follow after authentication is checked. |
| 19:01.10 | keldwud | oh ok so it might not even be getting that far |
| 19:01.31 | keldwud | so in this case am I authenticating against a db? |
| 19:01.36 | fungus | What do you want to see? the authentication code? |
| 19:02.10 | fungus | Line 49 calls the function check_valid_user which does the actual authentication. |
| 19:02.14 | keldwud | I think so, yeah, because the authentication isn't working and I'm not even getting an error, just a redirect right back to the login page |
| 19:02.49 | keldwud | so I would think that it is breaking down at this line |
| 19:02.59 | fungus | Well there are several possible causes of that problem. |
| 19:03.10 | keldwud | I'm not sure, of course, I'm just trying to think it through based on what I *do* know |
| 19:03.30 | fungus | But if you want to look at the authentication itself. You need to find the code that defines the check_valid_user function. |
| 19:03.56 | keldwud | and that would be in one of the libraries included in the apache enabled-sites conf for this site right? |
| 19:04.05 | fungus | My guess is that function is inside the files mentioned on line 13 or 20 |
| 19:04.28 | keldwud | oh like SessionHandler.inc |
| 19:04.29 | fungus | You seem to be ignoring the "require" statements. |
| 19:04.41 | keldwud | yeah, I'm still adjusting to reading php |
| 19:04.52 | keldwud | haven't had much exposure to it |
| 19:05.18 | fungus | It's a slightly more janky form of a python "import" |
| 19:05.59 | keldwud | ok I can understand that analogy |
| 19:06.56 | fungus | The way PHP works with them, is that it literally inserts and runs all the code from the file mentioned in that spot. |
| 19:24.32 | *** join/#utah ^Migs^ (~migs@205.122.50.108) |
| 19:35.23 | *** join/#utah josephscott (~josephsco@192.0.80.201) |
| 19:44.12 | TodPunk | introduces keldwud to application servers, like django and javaEE |
| 19:44.30 | TodPunk | Good luck reasoning about anything, MUAHAHAHAHAHA |
| 19:50.03 | romanovic | anyone familiar with Windows licensing and using Windows as a Vagrant guest VM for dev/testing purposes? |
| 20:10.54 | d3c4f | romanovic: what kind of a monstrosity are you building? |
| 20:11.39 | d3c4f | though I have used Hyper-V with Vagrant to build guest VMs it does take some work |
| 20:12.23 | d3c4f | Windows VMs through Vagrant are also possible. MS even has some images you can use if you want |
| 20:12.41 | d3c4f | most of the licensing is on a trial type basis though |
| 20:14.23 | d3c4f | If you want windows VMs to be fully licensed and you are constantly destroying / rebuilding them, you probably want to look into a site license, which is super expensive. You'll also need to include activation on your vagrant builds |
| 20:14.25 | shalkie | TodPunk: Is that the kind of thing we should expect at an LDUG meeting? Teaching people about JavaEE? |
| 20:14.30 | shalkie | :-P |
| 20:14.49 | d3c4f | If this is just for Dev, I would expect to just use the 180 day trials and then rebuild the VMs |
| 20:15.00 | TodPunk | If you go to LDUG and want to know about JavaEE, we have experience, and will question why you would want to learn it, but will share |
| 20:15.44 | TodPunk | romanovic: I wouldn't use a full windows license for dev/test. I'd build from a base snapshot from one of their dev VMs that will give you 180 days of time. |
| 20:16.22 | shalkie | romanovic: I am in the same boat. When I have done work testing with AD I used a trial image. |
| 20:18.45 | *** join/#utah neanderslob (~quassel@c-50-168-247-73.hsd1.ut.comcast.net) |
| 20:21.12 | *** join/#utah manithree (~blr@li4-76.members.linode.com) |
| 20:38.03 | programmerq | romanovic: I seem to recall microsoft made an official windows vagrant image available a while back. It was a temporary measure, and I don't know if they ever put a permanent one in place. |
| 20:43.35 | keldwud | romanovic: I hade some issues using vagrant on windows |
| 20:43.46 | keldwud | I gave up on it and just switched back to my linux boxes |
| 20:44.35 | keldwud | TodPunk: those are two technologies *not* currently in my production environment. |
| 20:45.01 | TodPunk | "they will be. they. will be." - IT Yoda |
| 20:45.21 | keldwud | TodPunk: I doubt it. We're still using glassfish |
| 20:45.24 | keldwud | and java 6 |
| 20:45.32 | TodPunk | congrats, that's JavaEE |
| 20:45.37 | keldwud | and some obscure old version of php |
| 20:45.49 | keldwud | TodPunk: well then your prediction came true! |
| 20:46.00 | TodPunk | h4x0rz keldwud's interwebs |
| 20:46.09 | keldwud | inorite? |
| 20:46.44 | keldwud | wait, am I masked? |
| 20:46.52 | TodPunk | "Your job is to make sure our infrastructures stays up and is secure." Um... we need to upgrade all of these things for heinous crimes against security... "OK, just make sure it stays up then" |
| 20:47.08 | keldwud | TodPunk: that's like a mantra in IT isn't it |
| 20:47.22 | TodPunk | Reason 483 that I left IT |
| 20:47.27 | keldwud | especially if devs were leading the charge |
| 20:50.39 | romanovic | this is all valuable information |
| 20:52.21 | romanovic | d3c4f: we have a .NET product, but engineering teams are deadlocked because we can't explore new tooling or improve the build process, or provide our QA analysts with testable software in a timely manner |
| 20:53.42 | romanovic | this was all done on a dedicated development server, but we no longer have access to it, so I am exploring putting together some sort of base VM that will run through automated build and testing, and allow for some testing |
| 20:53.56 | keldwud | hooray CI |
| 20:54.02 | keldwud | *hooray *for* CI |
| 20:56.17 | romanovic | this would all be temporary, so TodPunk's suggestion of starting with a base dev VM from Microsoft seems to make a lot of sense. any instance would only be used by one individual on their own local machine, and tear down would happen the same day |
| 20:57.05 | d3c4f | yeah, I would use a dev VM from MS as a starting point, if it were me |
| 20:57.18 | d3c4f | they are usually good for at least 180 days before it will start having any issues |
| 21:15.04 | romanovic | keldwud: CI is awesome. except our devops team's idea of CI is 1. not triggered by check-in, so not really "continuous" 2. custom script attempts to merge from different "team" branches into a main integration branch, but only once every 24 hrs. 3. automatic dev build runs once every 24 hours. some testing is automated, but disabled for the dev build. testing (>50% manual) is done later, just prior to promoting to a stage environment |
| 21:16.34 | romanovic | so, it's not CI, and very troubling to the engineering teams that they consider it CI, or even "good enough" |
| 21:17.18 | keldwud | yeah, we're also still working on getting ours triggered by checkins. some of our new projects are triggered by check-ins but not the legacy stuff |
| 21:18.48 | romanovic | we've gained some breathing room by migrating the codebase to git internally for our team, and have it bridged back to TFS |
| 21:19.57 | romanovic | everything is done with feature branches, so parallel development can continue, and no code gets mixed into the mainline branch until it is ready to roll out |
| 21:22.17 | romanovic | (but we still merge/rebase the mainline into active feature branches as often as needed, to avoid surprises) |
| 22:06.34 | unum | I'm just glad we finally replaced netware :) |
| 22:14.29 | shalkie | unum: Your not one of those shops that built the netware server into the wall? |
| 22:23.30 | unum | no we exactly where it was |
| 22:23.41 | unum | s/we/we knew |
| 22:31.22 | *** join/#utah RuShan (~RuShan@68.69.169.116) |
| 22:33.14 | keldwud | Yorokobi: I think your suspicion about cookies was correct |
| 22:33.52 | keldwud | looks like the authentication completes successfully but the session id isn't stored because a cookie isn't provided |
| 22:34.05 | Yorokobi | Load balancer? Web proxy? plugin? All can be the culprit |
| 22:34.31 | keldwud | yeah there's a load balancer and a vip |
| 22:36.36 | keldwud | oh wait no |
| 22:36.36 | keldwud | there's a LB and VIP on the one that's working, not the one that's broken.... :( |
| 22:36.36 | keldwud | I checked the code and none of the apache configuration files nor the php files have changed in years |
| 22:36.43 | keldwud | and it's not using ssl so I don't think it's an expired cert |
| 22:55.57 | *** join/#utah dkelson (~dkelson@40.141.117.2) |
| 23:24.40 | *** join/#utah RyanE (rberick@shell.xmission.com) |
| 23:26.39 | *** join/#utah eightyeight (~eightyeig@oalug/member/eightyeight) |
| 23:26.39 | *** mode/#utah [+v eightyeight] by ChanServ |
| 23:27.23 | *** part/#utah smcquay (~smcquay@173-164-185-125-SFBA.hfc.comcastbusiness.net) |
