Hi Peter, Sorry for my delayed response — have had a bit of a crazy couple of weeks. That's absolutely amazing you've rolled that functionality into a release, I am over the moon and it looks like precisely what we need. I am going to be implementing and testing it in a production environment in the next week or so, and I'll report back if I have any problems or questions :)
Thank you also for fixing it to be able to work behind authentication… again, this is perfect for us and means we should be able to use it without any proxy involvement at all. I will certainly post back with whatever script (however simple it is) we end up using on the mirrors to validate the signatures, so anyone wanting to use it in future should find it relatively straightforward. Again, I can't thank you enough, I think it's absolutely unbelievable that I was able to ask for a new feature and have it implemented in a full release by the end of the week! —Oliver On 7 November 2010 20:35, Peter Pöml <pe...@poeml.de> wrote: > On Wed, Nov 03, 2010 at 02:27:49PM +0100, Peter Pöml wrote: > > > > http://download/path/to/file http://mirrorbrain/path/to/file > > ^ \ ^ | > > | \ | | > > download \ | | > > request basic | | > > | auth --------> v > > ====== ============= =========== > > client frontend mirrorbrain > > ====== ============= =========== > > ^ | ^ script adding | > > | | | timestamp | > > | | | | ^ | > > | | | v \ | > > | | http://mirror1/path/to/file?stamp=abc \ | > > | | \ v > > | | > http://mirror1/path/to/file > > | | (or entire mirror list) > > file | > > | v > > | check stamp > > ======= > > mirror1 > > ======= > > > With MirrorBrain 2.14.0, the above setup can be simplified as such: > > > http://download/path/to/file > ^ \ > | \ > download \ > request basic > | auth > ====== ===================== > Client Apache w/ MirrorBrain > ====== ===================== > ^ | ^ | > | | \ | > | | \ | > | | \ v > | | http://mirror1/path/to/file?stamp=abc > | | > | | > | | > file | > | v > | check stamp > ======= > mirror1 > ======= > > > And for the record: > > > You'd probably want to restrict access to the "backend" to localhost. > > That could mean that MirrorBrain refuses to do its job, due to the fact > > I mentioned before, regarding requests that require authentication > > (where there is a simple but too stupid check). That I would need to fix > > first, in order to allow MB to run behind authentication. (Which should > > be quickly done.) > > That has been fixed with 2.14.0. > > Peter >
