[Firebird-devel] Accessing log file via service_mgr

2015-08-19 Thread Jiří Činčura
Hi *, When accessing log file via service_mgr and the log file is not there (as it's normal after fresh installation) Firebird returns "operating system directive fopen failed". Shouldn't it just create an new file and return empty string? -- Mgr. Jiří Činčura Independent IT Specialist --

Re: [Firebird-devel] [FB-Tracker] Created: (CORE-4840) Transactions with isc_tpb_autocommit can hang the server

2015-08-19 Thread Dimitry Sibiryakov
Hello, Mark. 14.06.2015 10:59, Mark Rotteveel (JIRA) wrote: > Transactions with isc_tpb_autocommit can hang the server > > > The firebird.log contains: > > RAMONASun Jun 14 10:56:16 2015 > Database: D:\DEVELOPMENT\PROJECT\JA

Re: [Firebird-devel] Accessing log file via service_mgr

2015-08-19 Thread Dmitry Yemanov
19.08.2015 16:09, Jiří Činčura wrote: > > When accessing log file via service_mgr and the log file is not there (as > it's normal after fresh installation) Firebird returns "operating system > directive fopen failed". Shouldn't it just create an new file and return > empty string? I may agree t

Re: [Firebird-devel] [FB-Tracker] Created: (CORE-4840) Transactions with isc_tpb_autocommit can hang the server

2015-08-19 Thread Mark Rotteveel
On Wed, 19 Aug 2015 15:15:31 +0200, Dimitry Sibiryakov wrote: > Hello, Mark. > > 14.06.2015 10:59, Mark Rotteveel (JIRA) wrote: >> Transactions with isc_tpb_autocommit can hang the server >> >> >> The firebird.log contains: >> >> RAMONA

Re: [Firebird-devel] Accessing log file via service_mgr

2015-08-19 Thread Jiří Činčura
> I may agree that the Services API could rather return an empty string, but > disagree that it should create the file. It would be kinda layering > violation. Should I put it into tracker? -- Mgr. Jiří Činčura Independent IT Specialist

Re: [Firebird-devel] Accessing log file via service_mgr

2015-08-19 Thread Alex Peshkoff
On 08/19/2015 06:10 PM, Jiří Činčura wrote: >> I may agree that the Services API could rather return an empty string, but >> disagree that it should create the file. It would be kinda layering >> violation. > Should I put it into tracker? > > As for me I prefer existing behavior - if file is missi

Re: [Firebird-devel] Accessing log file via service_mgr

2015-08-19 Thread Jiří Činčura
> As for me I prefer existing behavior - if file is missing it should better > be reported. Then I believe the installer and zip packages should contain already this file. Empty. Then when the file is really not there, we can claim it's missing. -- Mgr. Jiří Činčura Independent IT Specialist

Re: [Firebird-devel] Passwords and Security, Revisited

2015-08-19 Thread Mark Rotteveel
On 17-8-2015 23:22, Jim Starkey wrote: > The theoretical basis of computer security and mutual authentication is > the concept of shared secrets. The most common implementations use > passwords. In Firebird, there are at least two implementation of > password based authentication, SRP verifiers a

Re: [Firebird-devel] Insecure hashing and encryption in Firebird 3

2015-08-19 Thread Jim Starkey
You're excessing fussy. No one has ever found a SHA1 collision, let alone a bogus hit. It is perfectly secure. It has known weaknesses, but even with these known weaknesses, it is impossible to crack. RC4 is perfectly secure. It is vulnerable to correlated keys as used in WEP. But SRP use

Re: [Firebird-devel] Accessing log file via service_mgr

2015-08-19 Thread Dmitry Yemanov
19.08.2015 20:39, Jiří Činčura wrote: >> As for me I prefer existing behavior - if file is missing it should better >> be reported. > > Then I believe the installer and zip packages should contain already this > file. Empty. Then when the file is really not there, we can claim it's > missing. T

Re: [Firebird-devel] Accessing log file via service_mgr

2015-08-19 Thread Dmitry Yemanov
19.08.2015 19:51, Alex Peshkoff wrote: > As for me I prefer existing behavior - if file is missing it should > better be reported. Why? Missing log file is not an error from the Firebird POV. In the ideal world it may even be the expected thing (no error happened since the beginning of time).

Re: [Firebird-devel] Passwords and Security, Revisited

2015-08-19 Thread James Starkey
On Wednesday, August 19, 2015, Mark Rotteveel wrote: > > > > > In the final analysis, hardening any computing systems requires that the > > most vulnerable links be addressed first. In Firebird, that is the use > > of human chosen passwords. > > Using a client-side password vault is an interesti