#42 localconfig.php not taking effect

closed
nobody
5
2004-06-25
2004-06-16
No

My changes made to localconfig.php do not override
those in DiGIR_globals.php.

Discussion

  • Dave Vieglais

    Dave Vieglais - 2004-06-17

    Logged In: YES
    user_id=143873

    Which settings are you trying to change? Anything set in
    localconfig.php should override digir_globals.php

     
  • Meg Heimovics Kumin

    Logged In: YES
    user_id=807744

    I apologize. I submitted this as I was walking out the
    door and didn't think. I should have been more specific and
    not made such broad sweeping generalizations. I suppose
    the bug could be in the way that DiGIR_globals is
    running/reporting its tests...

    I ran into this problem before Renato made cvs commit on May
    14th [Digir-cvs] DiGIRprov/www DiGIR_globals.php,1.14,1.15.

    I was testing my configuration and was performing the
    DiGIR_globals Test through my browser and found the
    following warning:
    [Warning]
    DIGIR_ALLOW_CONFIG_DUMP is set to TRUE. This may pose a
    security risk. Please set this to FALSE when installation is
    complete. To do this, open localconfig.php with a text
    editor and uncomment or add the line:
    define('DIGIR_ALLOW_CONFIG_DUMP',FALSE);

    I found the following code in DiGIR_globals.php:
    if (!defined('DIGIR_ALLOWDEBUG'))
    define('DIGIR_ALLOWDEBUG',TRUE);

    I attempted to override this by adding the following line to
    localconfig.php:
    define('DIGIR_ALLOWDEBUG',FALSE);

    So I ran the DiGIR_globals Test again and it reported the
    same warning:
    [Warning]
    DIGIR_ALLOW_CONFIG_DUMP is set to TRUE. This may pose a
    security risk. Please set this to FALSE when installation is
    complete. To do this, open localconfig.php with a text
    editor and uncomment or add the line:
    define('DIGIR_ALLOW_CONFIG_DUMP',FALSE);

    When I went into DiGIR_globals.php and changed it to FALSE,
    then re-ran the test, and the warning went away.

    I have not performed any more tests of other settings.

     
  • Dave Vieglais

    Dave Vieglais - 2004-06-25

    Logged In: YES
    user_id=143873

    DIGIR_ALLOW_CONFIG_DUMP and DIGIR_ALLOWDEBUG are two
    different configuration items. With DIGIR_ALLOWDEBUG set
    TRUE, addition of a "&debug=1" to the request URL will cause
    the provider to spit out a very verbose response that is not
    a valid DiGIR response document, but can be helpful when
    debugging.

    When DIGIR_ALLOW_CONFIG_DUMP is set to TRUE, loading
    DiGIR_Globals.php from your web browser will cause all the
    local configuration settings to be displayed. Also helpful
    during debugging and configuration of the provider, but can
    provide information about your installation that should
    probably not be public.

    In either case, setting these values in localconfig.php will
    override the default settings.

     
  • Dave Vieglais

    Dave Vieglais - 2004-06-25
    • status: open --> closed
     

Log in to post a comment.

Get latest updates about Open Source Projects, Conferences and News.

Sign up for the SourceForge newsletter:

JavaScript is required for this form.





No, thanks