Chris R. Wieman
2014-10-21 18:37:55 UTC
I'd like to also thank Robert Altman for his stanza for this journal.
Shortly after the publisher updated their site I tweaked our stanza, tested it, and found that our access to the title was fine, but ...it was also obvious that the journal's update was an ongoing process (they announced a start date by email, and it was clear that the "look" had changed, but as far as I know they never announced the end of the update process). Anyway, yesterday I found that off-campus users could not access the title. Robert's stanza solved the problem.
Thanks!
-Chris
From: Richmond,Ian [mailto:***@drexel.edu]
Sent: Saturday, September 27, 2014 2:53 PM
To: EZProxy discussion list
Subject: RE:[ezproxy] Journal of Clinical Psychiatry
Robert - It worked! With this base configuration. So all I need to do is find out what is interfering in the other 5,000 lines.
Thank you very much!
--Ian
From: Altman, Robert [mailto:***@wusm.wustl.edu]
Sent: Saturday, September 27, 2014 11:51 AM
To: EZProxy discussion list
Subject: RE:[ezproxy] Journal of Clinical Psychiatry
Hi Ian,
I don't know if you have a second instance of EZProxy where you can test, but here is a stripped down config file that works consistently for me. Just replace the Name and Interface values and see what happens. If you continue to have issues, feel free to contact me off the list; I'm happy to help you troubleshoot.
#######################################
# BASE CONFIGURATION
#######################################
Name yourproxy.address.edu
Interface XXX.XXX.XXX.XXX
LoginPort 80
LoginPortSSL 443
Option ForceHTTPSLogin
MaxVirtualHosts 1000
Option ProxyByHostname
Option LogUser
Option StatusUser
LogFile -strftime D:\ezproxy-test_logfiles\ezp_%Y%m.log
LogFormat %h %{ezproxy-session}i %u %t %s %b %r %{ezproxy-groups}i
ProxyHostnameEdit www.psychiatrist.com<http://www.psychiatrist.com> www-psychiatrist-com
Title Journal of Clinical Psychiatry
URL http://www.psychiatrist.com
HJ www.psychiatrist.com<http://www.psychiatrist.com>
HJ psychiatrist.com
HJ https://sts.psychiatrist.com
HJ sts.psychiatrist.com
DJ psychiatrist.com
Find RequestSecurityTokenResponse Context="http://
Replace RequestSecurityTokenResponse Context="http://^A
Find EndpointReference xmlns="http://www.w3.org/2005/08/addressing"><Address>http://
Replace EndpointReference xmlns="http://www.w3.org/2005/08/addressing"><Address>http://^A<http://%5eA>
Find saml:Audience>http://
Replace saml:Audience>http://^A<http://%5eA>
Find saml:Attribute AttributeName="userId" AttributeNamespace="http://
Replace saml:Attribute AttributeName="userId" AttributeNamespace="http://^A
Find subscriptionexpiration" AttributeNamespace="http://
Replace subscriptionexpiration" AttributeNamespace="http://^A
Find name="wctx" value="http://
Replace name="wctx" value="http://^A
Regards,
- Robert
From: Richmond,Ian [mailto:***@drexel.edu]
Sent: Saturday, September 27, 2014 8:30 AM
To: EZProxy discussion list
Subject: RE:[ezproxy] Journal of Clinical Psychiatry
I stuck this stanza up near the top on a test ezproxy just to make sure something else wasn't interfering, but get the same result below.
Is this working for others? We just changed much of our environment in the last month, and now I'm wondering if I have the ezproxy part right, but the issue is somewhere else.
TIA,
--Ian
From: Altman, Robert [mailto:***@wusm.wustl.edu]
Sent: Friday, September 26, 2014 5:27 PM
To: EZProxy discussion list
Subject: RE:[ezproxy] Journal of Clinical Psychiatry
Yes, it does. Did you make sure to restart the EZProxy service and clear your browser's cache?
Robert Altman
Library Systems Manager
Bernard Becker Medical Library
Washington University School of Medicine
660 S. Euclid Ave. Box 8132
St. Louis MO 63110
***@wustl.edu<mailto:***@wustl.edu>
Phone: (314) 362-2778
From: Richmond,Ian [mailto:***@drexel.edu]
Sent: Friday, September 26, 2014 4:22 PM
To: EZProxy discussion list
Subject: RE:[ezproxy] Journal of Clinical Psychiatry
I am still not quite getting all the way through. It hangs with this page:
Server Error in '/' Application.
________________________________
Runtime Error
Description: An application error occurred on the server. The current custom error settings for this application prevent the details of the application error from being viewed remotely (for security reasons). It could, however, be viewed by browsers running on the local server machine.
Details: To enable the details of this specific error message to be viewable on remote machines, please create a <customErrors> tag within a "web.config" configuration file located in the root directory of the current web application. This <customErrors> tag should then have its "mode" attribute set to "Off".
<!-- Web.Config Configuration File -->
<configuration>
<system.web>
<customErrors mode="Off"/>
</system.web>
</configuration>
Notes: The current error page you are seeing can be replaced by a custom error page by modifying the "defaultRedirect" attribute of the application's <customErrors> configuration tag to point to a custom error page URL.
<!-- Web.Config Configuration File -->
<configuration>
<system.web>
<customErrors mode="RemoteOnly" defaultRedirect="mycustompage.htm"/>
</system.web>
</configuration>
Does that look familiar?
TIA,
--Ian
From: Altman, Robert [mailto:***@wusm.wustl.edu]
Sent: Friday, September 26, 2014 3:41 PM
To: EZProxy discussion list
Subject: [ezproxy] Journal of Clinical Psychiatry
I spent a fair amount of time yesterday troubleshooting access to the Journal of Clinical Psychiatry through our proxy server and thought I would share the stanza that seems to be reliably working in our case. This was probably as difficult of an issue as any I've encountered with EZProxy and a resource.
ProxyHostnameEdit www.psychiatrist.com<http://www.psychiatrist.com> www-psychiatrist-com
Title Journal of Clinical Psychiatry
URL http://www.psychiatrist.com
HJ www.psychiatrist.com<http://www.psychiatrist.com>
HJ psychiatrist.com
HJ https://sts.psychiatrist.com
HJ sts.psychiatrist.com
DJ psychiatrist.com
Find RequestSecurityTokenResponse Context="http://
Replace RequestSecurityTokenResponse Context="http://^A
Find EndpointReference xmlns="http://www.w3.org/2005/08/addressing"><Address>http://
Replace EndpointReference xmlns="http://www.w3.org/2005/08/addressing"><Address>http://^A<http://%5eA>
Find saml:Audience>http://
Replace saml:Audience>http://^A<http://%5eA>
Find saml:Attribute AttributeName="userId" AttributeNamespace="http://
Replace saml:Attribute AttributeName="userId" AttributeNamespace="http://^A
Find subscriptionexpiration" AttributeNamespace="http://
Replace subscriptionexpiration" AttributeNamespace="http://^A
Find name="wctx" value="http://
Replace name="wctx" value="http://^A
For those who are interested, here's how I came to the above stanza:
To me it looked as though the journal site would not load due to site's inability to set a cookie named 'FedAuth.' When pulling the value set for 'FedAuth' in a non-proxied session and setting this value manually in the EZProxy config using the Cookie directive, everything seemed to work, supporting the cookie hypothesis. I went digging to look for when/how the 'FedAuth' cookie was set since setting the cookie manually isn't a viable solution to the problem.
Using the Firefox add-on "Tamper Data," what I found was that upon hitting http://www.psychiatry.com.yourproxy.address.edu, the site would send the browser on a series of redirects (about eight, I believe) and would hang at https://www-psychiatrist-com.yourproxy.address.edu/_trust where some POST data was being sent. The POST data contained the following names: wa, wresult, and wctx. The values of wresult and wctx contained domains that were rewritten by EZProxy. When I used Tamper Data to remove the proxy domain information from the urls in both POST values, the 'FedAuth' cookie was set and all seemed to work (by the way, the value of wresult is a fairly sizable chunk of XML data). Backtracking from the page where the loading would hang, I found a hidden form on https://sts-psychiatrist-com.yourproxy.address.edu/default.aspx; this is where the POST values are being set. All the "Find" and "Replace" directives in the stanza are to tell EZProxy not to rewrite the domain names that appear in the various sections of the values on the hidden form. There are certainly other ways of writing the top five find and replace directives; I just went after including enough text so that other sections of the site were not rewritten unintentionally.
The ProxyHostnameEdit directive is still needed because the domains that are rewritten flip back and forth between http and https, the latter of which EZProxy rewrites with dashes. If this directive isn't set, the flipping between dotted and dashed domain names seems to cause a problem when the hidden form is submitted (I was seeing a 405 error).
Hopefully, this saves someone else a little time and trouble (until the journal changes their site anyway)!
Regards,
Robert Altman
Library Systems Manager
Bernard Becker Medical Library
Washington University School of Medicine
660 S. Euclid Ave. Box 8132
St. Louis MO 63110
***@wustl.edu<mailto:***@wustl.edu>
Phone: (314) 362-2778
________________________________
The materials in this message are private and may contain Protected Healthcare Information or other information of a sensitive nature. If you are not the intended recipient, be advised that any unauthorized use, disclosure, copying or the taking of any action in reliance on the contents of this information is strictly prohibited. If you have received this email in error, please immediately notify the sender via telephone or return mail.
You are currently subscribed to ezproxy as: ***@drexel.edu<mailto:***@drexel.edu>.
To unsubscribe, send request to ***@itec.suny.edu<mailto:***@itec.suny.edu>
You are currently subscribed to ezproxy as: ***@wusm.wustl.edu<mailto:***@wusm.wustl.edu>.
To unsubscribe, send request to ***@itec.suny.edu<mailto:***@itec.suny.edu>
________________________________
The materials in this message are private and may contain Protected Healthcare Information or other information of a sensitive nature. If you are not the intended recipient, be advised that any unauthorized use, disclosure, copying or the taking of any action in reliance on the contents of this information is strictly prohibited. If you have received this email in error, please immediately notify the sender via telephone or return mail.
You are currently subscribed to ezproxy as: ***@drexel.edu<mailto:***@drexel.edu>.
To unsubscribe, send request to ***@itec.suny.edu<mailto:***@itec.suny.edu>
You are currently subscribed to ezproxy as: ***@wusm.wustl.edu<mailto:***@wusm.wustl.edu>.
To unsubscribe, send request to ***@itec.suny.edu<mailto:***@itec.suny.edu>
________________________________
The materials in this message are private and may contain Protected Healthcare Information or other information of a sensitive nature. If you are not the intended recipient, be advised that any unauthorized use, disclosure, copying or the taking of any action in reliance on the contents of this information is strictly prohibited. If you have received this email in error, please immediately notify the sender via telephone or return mail.
You are currently subscribed to ezproxy as: ***@drexel.edu<mailto:***@drexel.edu>.
To unsubscribe, send request to ***@itec.suny.edu<mailto:***@itec.suny.edu>
You are currently subscribed to ezproxy as: ***@usciences.edu<mailto:***@usciences.edu>.
To unsubscribe, send request to ***@itec.suny.edu<mailto:***@itec.suny.edu>
---
You are currently subscribed to ezproxy as: gee-***@m.gmane.org.
To unsubscribe, send request to ***@itec.suny.edu
Shortly after the publisher updated their site I tweaked our stanza, tested it, and found that our access to the title was fine, but ...it was also obvious that the journal's update was an ongoing process (they announced a start date by email, and it was clear that the "look" had changed, but as far as I know they never announced the end of the update process). Anyway, yesterday I found that off-campus users could not access the title. Robert's stanza solved the problem.
Thanks!
-Chris
From: Richmond,Ian [mailto:***@drexel.edu]
Sent: Saturday, September 27, 2014 2:53 PM
To: EZProxy discussion list
Subject: RE:[ezproxy] Journal of Clinical Psychiatry
Robert - It worked! With this base configuration. So all I need to do is find out what is interfering in the other 5,000 lines.
Thank you very much!
--Ian
From: Altman, Robert [mailto:***@wusm.wustl.edu]
Sent: Saturday, September 27, 2014 11:51 AM
To: EZProxy discussion list
Subject: RE:[ezproxy] Journal of Clinical Psychiatry
Hi Ian,
I don't know if you have a second instance of EZProxy where you can test, but here is a stripped down config file that works consistently for me. Just replace the Name and Interface values and see what happens. If you continue to have issues, feel free to contact me off the list; I'm happy to help you troubleshoot.
#######################################
# BASE CONFIGURATION
#######################################
Name yourproxy.address.edu
Interface XXX.XXX.XXX.XXX
LoginPort 80
LoginPortSSL 443
Option ForceHTTPSLogin
MaxVirtualHosts 1000
Option ProxyByHostname
Option LogUser
Option StatusUser
LogFile -strftime D:\ezproxy-test_logfiles\ezp_%Y%m.log
LogFormat %h %{ezproxy-session}i %u %t %s %b %r %{ezproxy-groups}i
ProxyHostnameEdit www.psychiatrist.com<http://www.psychiatrist.com> www-psychiatrist-com
Title Journal of Clinical Psychiatry
URL http://www.psychiatrist.com
HJ www.psychiatrist.com<http://www.psychiatrist.com>
HJ psychiatrist.com
HJ https://sts.psychiatrist.com
HJ sts.psychiatrist.com
DJ psychiatrist.com
Find RequestSecurityTokenResponse Context="http://
Replace RequestSecurityTokenResponse Context="http://^A
Find EndpointReference xmlns="http://www.w3.org/2005/08/addressing"><Address>http://
Replace EndpointReference xmlns="http://www.w3.org/2005/08/addressing"><Address>http://^A<http://%5eA>
Find saml:Audience>http://
Replace saml:Audience>http://^A<http://%5eA>
Find saml:Attribute AttributeName="userId" AttributeNamespace="http://
Replace saml:Attribute AttributeName="userId" AttributeNamespace="http://^A
Find subscriptionexpiration" AttributeNamespace="http://
Replace subscriptionexpiration" AttributeNamespace="http://^A
Find name="wctx" value="http://
Replace name="wctx" value="http://^A
Regards,
- Robert
From: Richmond,Ian [mailto:***@drexel.edu]
Sent: Saturday, September 27, 2014 8:30 AM
To: EZProxy discussion list
Subject: RE:[ezproxy] Journal of Clinical Psychiatry
I stuck this stanza up near the top on a test ezproxy just to make sure something else wasn't interfering, but get the same result below.
Is this working for others? We just changed much of our environment in the last month, and now I'm wondering if I have the ezproxy part right, but the issue is somewhere else.
TIA,
--Ian
From: Altman, Robert [mailto:***@wusm.wustl.edu]
Sent: Friday, September 26, 2014 5:27 PM
To: EZProxy discussion list
Subject: RE:[ezproxy] Journal of Clinical Psychiatry
Yes, it does. Did you make sure to restart the EZProxy service and clear your browser's cache?
Robert Altman
Library Systems Manager
Bernard Becker Medical Library
Washington University School of Medicine
660 S. Euclid Ave. Box 8132
St. Louis MO 63110
***@wustl.edu<mailto:***@wustl.edu>
Phone: (314) 362-2778
From: Richmond,Ian [mailto:***@drexel.edu]
Sent: Friday, September 26, 2014 4:22 PM
To: EZProxy discussion list
Subject: RE:[ezproxy] Journal of Clinical Psychiatry
I am still not quite getting all the way through. It hangs with this page:
Server Error in '/' Application.
________________________________
Runtime Error
Description: An application error occurred on the server. The current custom error settings for this application prevent the details of the application error from being viewed remotely (for security reasons). It could, however, be viewed by browsers running on the local server machine.
Details: To enable the details of this specific error message to be viewable on remote machines, please create a <customErrors> tag within a "web.config" configuration file located in the root directory of the current web application. This <customErrors> tag should then have its "mode" attribute set to "Off".
<!-- Web.Config Configuration File -->
<configuration>
<system.web>
<customErrors mode="Off"/>
</system.web>
</configuration>
Notes: The current error page you are seeing can be replaced by a custom error page by modifying the "defaultRedirect" attribute of the application's <customErrors> configuration tag to point to a custom error page URL.
<!-- Web.Config Configuration File -->
<configuration>
<system.web>
<customErrors mode="RemoteOnly" defaultRedirect="mycustompage.htm"/>
</system.web>
</configuration>
Does that look familiar?
TIA,
--Ian
From: Altman, Robert [mailto:***@wusm.wustl.edu]
Sent: Friday, September 26, 2014 3:41 PM
To: EZProxy discussion list
Subject: [ezproxy] Journal of Clinical Psychiatry
I spent a fair amount of time yesterday troubleshooting access to the Journal of Clinical Psychiatry through our proxy server and thought I would share the stanza that seems to be reliably working in our case. This was probably as difficult of an issue as any I've encountered with EZProxy and a resource.
ProxyHostnameEdit www.psychiatrist.com<http://www.psychiatrist.com> www-psychiatrist-com
Title Journal of Clinical Psychiatry
URL http://www.psychiatrist.com
HJ www.psychiatrist.com<http://www.psychiatrist.com>
HJ psychiatrist.com
HJ https://sts.psychiatrist.com
HJ sts.psychiatrist.com
DJ psychiatrist.com
Find RequestSecurityTokenResponse Context="http://
Replace RequestSecurityTokenResponse Context="http://^A
Find EndpointReference xmlns="http://www.w3.org/2005/08/addressing"><Address>http://
Replace EndpointReference xmlns="http://www.w3.org/2005/08/addressing"><Address>http://^A<http://%5eA>
Find saml:Audience>http://
Replace saml:Audience>http://^A<http://%5eA>
Find saml:Attribute AttributeName="userId" AttributeNamespace="http://
Replace saml:Attribute AttributeName="userId" AttributeNamespace="http://^A
Find subscriptionexpiration" AttributeNamespace="http://
Replace subscriptionexpiration" AttributeNamespace="http://^A
Find name="wctx" value="http://
Replace name="wctx" value="http://^A
For those who are interested, here's how I came to the above stanza:
To me it looked as though the journal site would not load due to site's inability to set a cookie named 'FedAuth.' When pulling the value set for 'FedAuth' in a non-proxied session and setting this value manually in the EZProxy config using the Cookie directive, everything seemed to work, supporting the cookie hypothesis. I went digging to look for when/how the 'FedAuth' cookie was set since setting the cookie manually isn't a viable solution to the problem.
Using the Firefox add-on "Tamper Data," what I found was that upon hitting http://www.psychiatry.com.yourproxy.address.edu, the site would send the browser on a series of redirects (about eight, I believe) and would hang at https://www-psychiatrist-com.yourproxy.address.edu/_trust where some POST data was being sent. The POST data contained the following names: wa, wresult, and wctx. The values of wresult and wctx contained domains that were rewritten by EZProxy. When I used Tamper Data to remove the proxy domain information from the urls in both POST values, the 'FedAuth' cookie was set and all seemed to work (by the way, the value of wresult is a fairly sizable chunk of XML data). Backtracking from the page where the loading would hang, I found a hidden form on https://sts-psychiatrist-com.yourproxy.address.edu/default.aspx; this is where the POST values are being set. All the "Find" and "Replace" directives in the stanza are to tell EZProxy not to rewrite the domain names that appear in the various sections of the values on the hidden form. There are certainly other ways of writing the top five find and replace directives; I just went after including enough text so that other sections of the site were not rewritten unintentionally.
The ProxyHostnameEdit directive is still needed because the domains that are rewritten flip back and forth between http and https, the latter of which EZProxy rewrites with dashes. If this directive isn't set, the flipping between dotted and dashed domain names seems to cause a problem when the hidden form is submitted (I was seeing a 405 error).
Hopefully, this saves someone else a little time and trouble (until the journal changes their site anyway)!
Regards,
Robert Altman
Library Systems Manager
Bernard Becker Medical Library
Washington University School of Medicine
660 S. Euclid Ave. Box 8132
St. Louis MO 63110
***@wustl.edu<mailto:***@wustl.edu>
Phone: (314) 362-2778
________________________________
The materials in this message are private and may contain Protected Healthcare Information or other information of a sensitive nature. If you are not the intended recipient, be advised that any unauthorized use, disclosure, copying or the taking of any action in reliance on the contents of this information is strictly prohibited. If you have received this email in error, please immediately notify the sender via telephone or return mail.
You are currently subscribed to ezproxy as: ***@drexel.edu<mailto:***@drexel.edu>.
To unsubscribe, send request to ***@itec.suny.edu<mailto:***@itec.suny.edu>
You are currently subscribed to ezproxy as: ***@wusm.wustl.edu<mailto:***@wusm.wustl.edu>.
To unsubscribe, send request to ***@itec.suny.edu<mailto:***@itec.suny.edu>
________________________________
The materials in this message are private and may contain Protected Healthcare Information or other information of a sensitive nature. If you are not the intended recipient, be advised that any unauthorized use, disclosure, copying or the taking of any action in reliance on the contents of this information is strictly prohibited. If you have received this email in error, please immediately notify the sender via telephone or return mail.
You are currently subscribed to ezproxy as: ***@drexel.edu<mailto:***@drexel.edu>.
To unsubscribe, send request to ***@itec.suny.edu<mailto:***@itec.suny.edu>
You are currently subscribed to ezproxy as: ***@wusm.wustl.edu<mailto:***@wusm.wustl.edu>.
To unsubscribe, send request to ***@itec.suny.edu<mailto:***@itec.suny.edu>
________________________________
The materials in this message are private and may contain Protected Healthcare Information or other information of a sensitive nature. If you are not the intended recipient, be advised that any unauthorized use, disclosure, copying or the taking of any action in reliance on the contents of this information is strictly prohibited. If you have received this email in error, please immediately notify the sender via telephone or return mail.
You are currently subscribed to ezproxy as: ***@drexel.edu<mailto:***@drexel.edu>.
To unsubscribe, send request to ***@itec.suny.edu<mailto:***@itec.suny.edu>
You are currently subscribed to ezproxy as: ***@usciences.edu<mailto:***@usciences.edu>.
To unsubscribe, send request to ***@itec.suny.edu<mailto:***@itec.suny.edu>
---
You are currently subscribed to ezproxy as: gee-***@m.gmane.org.
To unsubscribe, send request to ***@itec.suny.edu