Re: [Catalyst] Sigh. How do we get on this list?

2006-08-10 Thread Daniel McBrearty
FWIW ... I looked at ROR about a year back for engoi. I thought it was kind of shiny, but not particularly flexible, and the unclear status of unicode support in Ruby made it all a no-no as far as I could tell. Cat is still in fairly early days, and teh learning curve is tough. But it looks well

Re: [Catalyst] quick windows catinabox question

2006-08-10 Thread Jonathan Rockway
I have Catalyst installed under Cygwin on my work machine. It works fine. $ cpan Task::Catalyst should set you up. There are bunch of modules that my blog software depends on that were broken, but they only affect my software, and I submitted patches so they'll be fixed Real Soon. Regards,

[Catalyst] Multilanguage application

2006-08-10 Thread Renaud Drousies
Hello, I am trying to figure out what would be the best way to have a multilanguage support in a catalyst application. I thought using a url-based method might be better since this site could be visited by people that do not accept cookies, or do not visit it from their home computer (and then

[Catalyst] storing session in win32 machine - redux

2006-08-10 Thread leonard . a . jaffe
--- Nagarajan M [EMAIL PROTECTED] wrote: Thanks Daniel, It works! MyApp.pm loaded plugins === use Catalyst qw/ -Debug ConfigLoader Static::Simple Authentication Authentication::Store::DBIC Authentication::Credential::Password Session

Re: [Catalyst] Multilanguage application

2006-08-10 Thread Brian Cassidy
Hi Renaud, Renaud Drousies wrote: Hello, I am trying to figure out what would be the best way to have a multilanguage support in a catalyst application. I thought using a url-based method might be better since this site could be visited by people that do not accept cookies, or do not visit

[Catalyst] Storing a password hash with DBIC

2006-08-10 Thread Jonas
Hi, I'm trying to store an hashed password in a database using DBIC. What is the best way to create the digest of the password? I tried with deflate, but deflate only runs when the argument is a reference. Then i tried with an HTML::Widget Filter but the filter runs before the constraints, so the

Re: [Catalyst] Storing a password hash with DBIC

2006-08-10 Thread Nilson Santos Figueiredo Junior
On 8/10/06, Jonas [EMAIL PROTECTED] wrote: I'm trying to store an hashed password in a database using DBIC. What is the best way to create the digest of the password? When checking the password (e.g. during login) Catalyst::Plugin::Authentication should handle this task for you. When storing

Re: [Catalyst] Storing a password hash with DBIC

2006-08-10 Thread Brandon Black
On 8/10/06, Christopher H. Laco [EMAIL PROTECTED] wrote: Jonas wrote: Hi, I'm trying to store an hashed password in a database using DBIC. What is the best way to create the digest of the password? I tried with deflate, but deflate only runs when the argument is a reference. Then i tried with an

Re: [Catalyst] Storing a password hash with DBIC

2006-08-10 Thread Jonas
On 10/08/06, Brandon Black [EMAIL PROTECTED] wrote: On 8/10/06, Christopher H. Laco [EMAIL PROTECTED] wrote: Jonas wrote: Hi, I'm trying to store an hashed password in a database using DBIC. What is the best way to create the digest of the password? I tried with deflate, but

Re: [Catalyst] Storing a password hash with DBIC

2006-08-10 Thread Chisel Wright
On Thu, Aug 10, 2006 at 04:19:14PM +0100, Jonas wrote: Thanks, that's exactly what i need. :) http://search.cpan.org/dist/DBIx-Class-DigestColumns/ Sounds good for something I want too .. shame the deps are being a bitch to install. -- Chisel Wright e: [EMAIL PROTECTED] w:

Re: [Catalyst] Storing a password hash with DBIC

2006-08-10 Thread Mark Blythe
I must be missing something here. If you do the hashing on the client side, presumably that means your form is posting the hashed password to the backend rather than the plain text one. That probably also means that the backend is taking that hashed password and doing a simple check similar to:

Re: [Catalyst] Multilanguage application

2006-08-10 Thread Renaud Drousies
On Thu, August 10, 2006 4:39 pm, Matt S Trout said: sub lang :Chained('/') :CaptureArgs(1) :PathPart('') { my ($self, $c, $lang) = @_; set lang appropriately } sub foo :Chained('/lang') :Args(0) { # /en/foo etc. Chained was designed to support this sort of stuff without the need for

Re: [Catalyst] Storing a password hash with DBIC

2006-08-10 Thread Renaud Drousies
That's why the password should be mixed with a challenge string before being hashed and sent over the network. http://search.cpan.org/~rdrousies/Catalyst-Plugin-Authentication-Credential-CHAP-0.02/ On Thu, August 10, 2006 5:37 pm, Mark Blythe said: I must be missing something here. If you

Re: [Catalyst] Storing a password hash with DBIC

2006-08-10 Thread Brandon Black
On 8/10/06, Mark Blythe [EMAIL PROTECTED] wrote: I must be missing something here.You're not missing something. The main gain of the simple version of client-side hashing is that you don't know the original password. This is a useful security feature for the user, because most users re-use

[Catalyst] 'require' vs 'use' in Catalyst*

2006-08-10 Thread Rodney Broom
Disliking the fact that require() doesn't call my import(), I'm trying to figure out why Catalyst (and so many other things) use require() over use(). I have to think there's a good reason that just isn't occuring to me. --- Rodney Broom ___ List:

Re: [Catalyst] 'require' vs 'use' in Catalyst*

2006-08-10 Thread Joel Bernstein
On Thu, Aug 10, 2006 at 10:28:47AM -0700, Rodney Broom wrote: Disliking the fact that require() doesn't call my import(), I'm trying to figure out why Catalyst (and so many other things) use require() over use(). I have to think there's a good reason that just isn't occuring to me. require

[Catalyst] SOLUTION: Re: Authentication::Store::DBIC works undermyapp_server.pl butnot Apache/mod_perl

2006-08-10 Thread Rodney Broom
From: Rodney Broom [EMAIL PROTECTED] From: Christopher H. Laco [EMAIL PROTECTED] ...but doesn't Apache actually load happen twice at startup...once for the config parse, once for the real start? http://perl.apache.org/docs/1.0/guide/config.html#Apache_Restarts_Twice_On_Start Good

Re: [Catalyst] 'require' vs 'use' in Catalyst*

2006-08-10 Thread Yuval Kogman
On Thu, Aug 10, 2006 at 10:28:47 -0700, Rodney Broom wrote: Disliking the fact that require() doesn't call my import(), I'm trying to figure out why Catalyst (and so many other things) use require() over use(). I have to think there's a good reason that just isn't occuring to me. Joel already

Re: [Catalyst] 'require' vs 'use' in Catalyst*

2006-08-10 Thread Yuval Kogman
On Thu, Aug 10, 2006 at 10:54:32 -0700, Rodney Broom wrote: use is almost like a macro. require is a function. That said, the way plugins/components are loaded will not change for compatibility reasons. I suggest you create MyApp::Model::MySchema and 'use' it there: package

Re: [Catalyst] Storing a password hash with DBIC

2006-08-10 Thread Jonathan Rockway
Renaud Drousies wrote: That's why the password should be mixed with a challenge string before being hashed and sent over the network. This is also not a good solution. The server still needs to know some computable variant of the cleartext password in order for this to work. Feel free to

Re: [Catalyst] 'require' vs 'use' in Catalyst*

2006-08-10 Thread Matt S Trout
Rodney Broom wrote: From: Joel Bernstein [EMAIL PROTECTED] On Thu, Aug 10, 2006 at 10:28:47AM -0700, Rodney Broom wrote: Disliking the fact that require() doesn't call my import(), I'm trying to figure out why Catalyst (and so many other things) use require() over use(). I have to think

Re: [Catalyst] Storing a password hash with DBIC

2006-08-10 Thread Brandon Black
On 8/10/06, Jonathan Rockway [EMAIL PROTECTED] wrote: Renaud Drousies wrote: That's why the password should be mixed with a challenge string before being hashed and sent over the network.This is also not a good solution.The server still needs to know some computable variant of the cleartext

Re: [Catalyst] Storing a password hash with DBIC

2006-08-10 Thread Matt S Trout
Brandon Black wrote: I'd agree that SSL is the best idea for solving a whole lot of issues, and anyone authenticating over the net should be using SSL. But SSL doesn't make all of the other issues magically go away. SSL is just yet another layer of security. Ideally, one should still be

[Catalyst] session/auth/user/apache debugging advice

2006-08-10 Thread leonard . a . jaffe
My problem basics: Win Server 2003. Apache 2.0.58 AS Perl 5.8.8 Cat 5.701 Authn Session plugins are CPAN current. When using Catalyst::Plugin::Session, with any store, and Catalyst::Plugin::Authetication::Store::DBIC. I encounter errors in Storable.pm when trying the Session is persisted at

Re: [Catalyst] Storing a password hash with DBIC

2006-08-10 Thread Wade . Stuart
On 8/10/06, Jonathan Rockway [EMAIL PROTECTED] wrote: Renaud Drousies wrote: That's why the password should be mixed with a challenge string before being hashed and sent over the network. This is also not a good solution. The server still needs to know some computable variant

Re: [Catalyst] 'require' vs 'use' in Catalyst*

2006-08-10 Thread Rodney Broom
From: Yuval Kogman [EMAIL PROTECTED] Since Catalyst usually uses OO modules, which don't do imports anyway, and it usually loads them on behalf of other code, calling import is not appropriate. OK, I'll take that argument. --- Rodney Broom ___

Re: [Catalyst] 'require' vs 'use' in Catalyst*

2006-08-10 Thread Rodney Broom
From: Rodney Broom [EMAIL PROTECTED] From: Yuval Kogman [EMAIL PROTECTED] Where is it being required()'d? Catalyst::Model::DBIC::Schema::new() $schema_class-require Why not just 'use' this at the top of your model code? Initially, because that isn't how the C::M::DBIC::Schema docs