Re: AW: Apache::DBI and password security

2002-11-15 Thread Matthew Byng-Maddick
Blowfish_PP would cut my danglies off > for that one. Which is why you copied him in the first place? :-) In general, though, there isn't a good way to get any security from any system that has to be able to access sensitive data in an automatic way. MBM -- Matthew Byng-Maddick

Re: Using mod_ssl and client certificates

2002-11-09 Thread Matthew Byng-Maddick
an do a FakeBasicAuth type trick (I know that this is available in Apache-SSL, I think it's available in mod_ssl too), and access the certificate DN as if it were a userid. MBM -- Matthew Byng-Maddick <[EMAIL PROTECTED]> http://colondot.net/

Re: XML::RPC

2002-04-21 Thread Matthew Byng-Maddick
On Sun, Apr 21, 2002 at 01:06:28PM +0200, F. Xavier Noria wrote: > On Sun, 21 Apr 2002 10:50:53 +0100 > Matthew Byng-Maddick <[EMAIL PROTECTED]> wrote: > : On Sun, Apr 21, 2002 at 03:16:53AM -0400, Sam Tregar wrote: > : > SOAP::Lite module to be of excelent quality and the

Re: XML::RPC

2002-04-21 Thread Matthew Byng-Maddick
If you are going to use SOAP, be *very* *very* aware of the security issues with any RPC-like mechanism, review any code you're going to use, thoroughly. And only then, decide whether it is actually the best solution. MBM -- Matthew Byng-Maddick <[EMAIL PROTECTED]> http://colondot.net/

Re: [OT] log analyzing programs

2001-12-02 Thread Matthew Byng-Maddick
meets. I've looked at webalizer too, but webalizer is appallingly written, keeps everything in globals (though I believe analog also currently does this and Stephen said he'd like to change it), and uses scary amounts of memory. It also doesn't have particularly good integ

Re: Advanced daemon allocation

2001-06-18 Thread Matthew Byng-Maddick
st was: http://perl.apache.org/guide/performance.html#KeepAlive Sorry. Although: Stas: "Since keepalive connections will not incur the additional three-way TCP handshake, turning it off will be kinder to the network." erm Surely if you turn it *on* you'll be kinder to th

Re: Advanced daemon allocation

2001-06-18 Thread Matthew Byng-Maddick
'd be even more context-switching, (which is slow). The clean solution, in this case, would be to have the one apache that actually accepts, does a bit of work on the URL, and then delegates to children (probably by passing the fd), but then you still have to do rather too much work

Re: can not redirect on POST w/ CGI.pm

2001-06-13 Thread Matthew Byng-Maddick
On Wed, Jun 13, 2001 at 11:58:24AM -0400, David Young wrote: > I've found that if I post to this PerlAccessHandler, I get no response: > # > package Apache::Redirect; > > use strict; > use Apache::Constants qw(REDIRECT); > use CGI (); > > sub handler { > my($r) = @_;

Re: Getting MAC address

2001-03-21 Thread Matthew Byng-Maddick
s to parse the output of arp -a, or equivalent... MBM -- Matthew Byng-Maddick Home: <[EMAIL PROTECTED]> +44 20 8980 5714 (Home) http://colondot.net/ Work: <[EMAIL PROTECTED]> +44 7956 613942 (Mobile) Genius may have its limitations, but stupidit

Re: [OT] ApacheCon BOF

2001-03-21 Thread Matthew Byng-Maddick
On 21 Mar 2001, Piers Cawley wrote: > You mean apart from the trademark infringement? I know, what about > "mod_perl is my bNO CARRIER All your base are belong to mod_perl ?? MBM -- Matthew Byng-Maddick Home: <[EMAIL PROTECTED]> +44 20 8980 5714 (Home) http://col

[CV] [JOB WANTED]

2001-03-02 Thread Matthew Byng-Maddick
After not following up a lot of potential leads when I tried this last time, I'm once again posting my CV here. The CV in question is at http://colondot.net/mbm/cv.shtml I am up for doing sysadmin on any UNIX (although I'd prefer one of FreeBSD/Solaris/Linux), mod_perl development (which I've s

Re: Using rewrite...

2001-01-19 Thread Matthew Byng-Maddick
On Fri, 19 Jan 2001, Matthew Byng-Maddick wrote: > On Fri, 19 Jan 2001, Tomas Edwardsson wrote: > > The problem is that I can't find a way to send the request > > to a relevant port if the request calls for a URL which ends > > with a slash ("/"). Any hints ?

Re: Using rewrite...

2001-01-19 Thread Matthew Byng-Maddick
pens if you turn RewriteLog On and set RewriteLogLevel 9? MBM -- Matthew Byng-Maddick Home: <[EMAIL PROTECTED]> +44 20 8981 8633 (Home) http://colondot.net/ Work: <[EMAIL PROTECTED]> +44 7956 613942 (Mobile) Under any conditions, anywhere, whatever you are doing, there i

Re: Using rewrite...

2001-01-19 Thread Matthew Byng-Maddick
URI Translation handler. MBM -- Matthew Byng-Maddick Home: <[EMAIL PROTECTED]> +44 20 8981 8633 (Home) http://colondot.net/ Work: <[EMAIL PROTECTED]> +44 7956 613942 (Mobile) Under any conditions, anywhere, whatever you are doing, there is some ordinance under which you

Re: how to secure backend server ?

2001-01-03 Thread Matthew Byng-Maddick
On Tue, 2 Jan 2001, darren chamberlain wrote: > Oleg Bartunov ([EMAIL PROTECTED]) said something to this effect on 01/02/2001: > > > You can explicitly bind an apache server to localhost. > > This works only if frontend and backend are on the same physical server. > > But it will not works even in

[JOB] [CV] Job wanted

2000-12-22 Thread Matthew Byng-Maddick
nd details what experience I have. I would be on a 1 month notice period in terms of availability. I would be happy to answer any questions you may have about things I've done in email. Please reply by private email (the email address here) rather than to the list. Thank you Matthew Byng-Maddi

Re: mod_perl in chroot environment

2000-12-12 Thread Matthew Byng-Maddick
On Tue, 12 Dec 2000, Gunther Birznieks wrote: > At 09:58 AM 12/11/00 +0000, Matthew Byng-Maddick wrote: > >On Sun, 10 Dec 2000, Gunther Birznieks wrote: > > > For example, perhaps the mod_perl server and the HTML/images server should > > > be separately chrooted from ea

Re: mod_perl in chroot environment

2000-12-11 Thread Matthew Byng-Maddick
./bin"); chroot("./bin"); for(j=0;j file but it seemed odd to me. He also advocates copying it over and then > creating a new one from scratch which seems redundant and potentially > dangerous if the second step is forgotten. Very much so, agreed. MBM -- Matthew Byng-Ma

Re: RFC: mod_perl advocacy project resurrection (and a proposal!)

2000-12-06 Thread Matthew Byng-Maddick
ite; it's so > easy to use that most people don't think beyond it. How many of you have > ever thought about implementing an Object-Relational middleware layer using > mod_perl? We could create a set of generic OR classes as part of our > foundation framework. DBI is a

Re: mod_perl advocacy project resurrection

2000-12-06 Thread Matthew Byng-Maddick
On Tue, 5 Dec 2000, brian moseley wrote: [coldfusion/php] > how is mason not like this? It has no point-n-drool authoring tools. This is actually the killer app. Once this is done, Mason / other templating system of choice gets catapulted to the forefront MBM -- Matthew Byng-Madd

Re: Question

2000-11-22 Thread Matthew Byng-Maddick
yes. MBM -- Matthew Byng-Maddick Home: <[EMAIL PROTECTED]> +44 20 8981 8633 (Home) http://colondot.net/ Work: <[EMAIL PROTECTED]> +44 7956 613942 (Mobile) Diplomacy is the art of saying "nice doggie" until you can find a rock.

Re: mod_perl for NT when using another Web server other than Apache.

2000-11-21 Thread Matthew Byng-Maddick
an do, unfortunately. MBM -- Matthew Byng-Maddick Home: <[EMAIL PROTECTED]> +44 20 8981 8633 (Home) http://colondot.net/ Work: <[EMAIL PROTECTED]> +44 7956 613942 (Mobile) Trifles make perfection, and perfection is

Re: Apache::VirtualHostRegistry

2000-11-17 Thread Matthew Byng-Maddick
On Fri, 17 Nov 2000, Gunther Birznieks wrote: > At 11:15 AM 11/17/00 +0000, Matthew Byng-Maddick wrote: > >man jail() on FreeBSD 4. > But then you lose the benefits of having shared apache processes among many > shared users many of whom may have very non-busy web sites. No? Y

Re: Apache::VirtualHostRegistry

2000-11-17 Thread Matthew Byng-Maddick
I'm thinking of a module like APache::Registry but it segments the > namespace/memory netween virtual servers --- a sandbox that each virtual > host is kept in? man jail() on FreeBSD 4. MBM -- Matthew Byng-Maddick Home: <[EMAIL PROTECTED]> +44 20 8981 8633 (Home) http://colon

Re: Microperl

2000-11-16 Thread Matthew Byng-Maddick
On Thu, 16 Nov 2000, Robin Berjon wrote: > At 00:12 16/11/2000 -0600, Les Mikesell wrote: > >> Nothing against mod_rewrite -- I was just wondering if a small perl could > >> be embedded with out bloating the server too much. > >I don't think 'small' and 'perl' belong in the same sentence... > I kn

Re: Fast DB access

2000-11-10 Thread Matthew Byng-Maddick
On Fri, 10 Nov 2000, Les Mikesell wrote: [ReiserFS] > production just to avoid the possibility of a slow fsck after a crash, > but it is enormously faster at creating and deleting files too because > everything is indexed so it would be an ideal stash for fast changing > session data. If you don

Re: mod_perl on specific scripts (fwd)

2000-11-06 Thread Matthew Byng-Maddick
n 6 Nov 2000, David Hodgkinson wrote: > Matthew Byng-Maddick <[EMAIL PROTECTED]> writes: > > On 1 Nov 2000, David Hodgkinson wrote: > > > Matthew Byng-Maddick <[EMAIL PROTECTED]> writes: > > > > You do, of course, know about all the latest patches f

Re: mod_perl on specific scripts

2000-11-01 Thread Matthew Byng-Maddick
On 1 Nov 2000, David Hodgkinson wrote: > Matthew Byng-Maddick <[EMAIL PROTECTED]> writes: > > On 31 Oct 2000, David Hodgkinson wrote: > > > Did I just condemn you to learning mod_rewrite? Ooops :-) > > You do, of course, know about all the latest patches for this,

Re: mod_perl on specific scripts

2000-10-31 Thread Matthew Byng-Maddick
On 31 Oct 2000, David Hodgkinson wrote: > Did I just condemn you to learning mod_rewrite? Ooops :-) You do, of course, know about all the latest patches for this, due to potential security problems MBM -- Matthew Byng-Maddick Home: <[EMAIL PROTECTED]> +44 20 8981 8633 (H

Re: how to really bang on a script?

2000-10-31 Thread Matthew Byng-Maddick
On Mon, 30 Oct 2000, Perrin Harkins wrote: > On Sat, 28 Oct 2000, Matthew Byng-Maddick wrote: > > Theo, during the mod_backhand talk, or at lunch just before, I can't > > remember. > It was during the talk. The tool is called Daquiri, and he said it was > available in

Re: Apache Modules in General

2000-10-30 Thread Matthew Byng-Maddick
--suexec-uidmin=500, --suexec-gidmin=500' Then you do | $ make | $ make test | # make install | # cd ../apache_x.xx | # make install But that's how I do it. and being perl, TIMTOWTDI. MBM -- Matthew Byng-Maddick Home: <[EMAIL PROTECTED]> +44 20 8981 8633 (Home) http://colond

Re: Problem with Apache::ASP

2000-10-30 Thread Matthew Byng-Maddick
my log file for the status message and it didn't mention > mod_perl... Do I have to re-install it or how do I get it to work with my > statically compiled Apache? You'll still need an AddModule mod_perl.c declaration in your httpd.conf MBM -- Matthew Byng-Maddick Home: &l

Re: maximum (practical) size of $r->notes

2000-10-30 Thread Matthew Byng-Maddick
ent system in apache is only limited by the amount of memory that the system will let it allocate - which means that you should be OK. MBM -- Matthew Byng-Maddick Home: <[EMAIL PROTECTED]> +44 20 8981 8633 (Home) http://colondot.net/ Work: <[EMAIL PROTECTED]> +44 7956 613942 (Mobile) "It's today!" said Piglet. "My favourite day," said Pooh.

Re: ApacheCon report

2000-10-28 Thread Matthew Byng-Maddick
ed. :) (hopes that rbb doesn't read this...) According to various asf people, apache2 is at least a month away from being finished, and probably more... MBM -- Matthew Byng-Maddick Home: <[EMAIL PROTECTED]> +44 20 8981 8633 (Home) http://colondot.net/ Work: <[EMAIL PROTECTED

Re: how to really bang on a script?

2000-10-28 Thread Matthew Byng-Maddick
On Sat, 28 Oct 2000, Matt Sergeant wrote: > exactly the same thing (changing server logs into a benchmark tool) at > ApacheCon, only I can't for the life of me remember who it was. Theo, during the mod_backhand talk, or at lunch just before, I can't remember. MBM -- Matt

Re: ApacheCon Sunday Pub Meet

2000-10-26 Thread Matthew Byng-Maddick
Including Sander's green hair and flashing horns. > [...490 more mod_perl emails to read...] I've managed to catch up, already - wow. MBM -- Matthew Byng-Maddick Home: <[EMAIL PROTECTED]> +44 20 8981 8633 (Home) http://colondot.net/ Work: <[EMAIL PROTECTED]> +44 7956 613942 (Mobile) The secret of creativity is knowing how to hide your sources. -- Albert Einstein

Re: Remembering Authentication

2000-10-18 Thread Matthew Byng-Maddick
; put into security at the expense of convenience? I think that the usage of digicerts is not wide enough yet that the use of them is probably an inconvenience. Plus it doesn't work if someone physically steals the computer. :) MBM -- Matthew Byng-Maddick Home: <[EMAIL PROTECTED]>

Re: bytes_sent -> bytes_received?

2000-10-07 Thread Matthew Byng-Maddick
On Sat, 7 Oct 2000, Drew Degentesh wrote: > In addition to the number of bytes sent to the client, Id like to log how > many bytes are sent *by* the client (the size of the request + posts , etc.) Fair enough > I was guessing/hoping that length( scalar( $r->content ) ) would do it, but > earlier

Re: auth headers & logging

2000-10-02 Thread Matthew Byng-Maddick
On Mon, 2 Oct 2000, steven wrote: > I'm rewriting authentication headers on the fly and those rewritten > headers are being logged, but I would like to log the details supplied by > the client as opposed to what I've rewritten them as. I thought of writing > a logging module and passing it a note,

Re: Determine which subroutine to call at runtime

2000-09-29 Thread Matthew Byng-Maddick
On Sat, 30 Sep 2000 [EMAIL PROTECTED] wrote: > I'm going to write a perl cgi which needs to determine which > subroutine to call at runtime. And the number of choice is huge (more > than 300 and it is growing). I know I could do a bunch of if-then-else > but it makes the code looks very unreadable

Re: OT: use problem (need interpolation)

2000-09-28 Thread Matthew Byng-Maddick
any ways of trying to sneak it past but none seems to work... use is syntactically equiavalent to BEGIN { require Foo; Foo->import(@argarray); } so $baz will need to be defined at compile time, ie. within its own BEGIN block. MBM -- Matthew Byng-Maddick Home: <[

Re: tracking down why a module was loaded?;

2000-09-27 Thread Matthew Byng-Maddick
On Wed, 27 Sep 2000, Matt Sergeant wrote: > On Wed, 27 Sep 2000, Matthew Byng-Maddick wrote: > Actually I think the people we need to get involved are the web site > builders - the larger companies offering dynamic web content creation. We > also need some more mainstream tools, the o

Re: tracking down why a module was loaded?;

2000-09-27 Thread Matthew Byng-Maddick
On Wed, 27 Sep 2000, Gunther Birznieks wrote: > At 10:28 PM 9/26/2000 +0200, Alexander Farber (EED) wrote: > >Doug MacEachern wrote: > > > > modperl is the best kept secret on the net. Shame! > > > seems to generate plenty of list traffic for a "secret" ;) > >Don't you all think, that mod_perl isn

Re: open(FH,'|qmail-inject') fails

2000-09-25 Thread Matthew Byng-Maddick
On Mon, 25 Sep 2000, Matt Sergeant wrote: > On Mon, 25 Sep 2000, Stas Bekman wrote: > > On Mon, 25 Sep 2000, Doug MacEachern wrote: > > > On Mon, 25 Sep 2000, Stas Bekman wrote: > > > > All you care about is to measure the time between email sending start and > > > > end (when the process continue

Re: Apache::Request server error??

2000-09-25 Thread Matthew Byng-Maddick
On Mon, 25 Sep 2000, Sophokles Zafeiris wrote: > I' m trying to run the file_upload.pl. script, that can be found in the eg > directory of the Apache::Request source file. I've installed the > Apache::Request but I get the following server error : > Can't locate object method "new" via package "

Re: flock under win32

2000-09-24 Thread Matthew Byng-Maddick
On Sun, 24 Sep 2000, Jim Winstead wrote: > On Sep 24, Gunther Birznieks wrote: > > The PerlCookbook seemed to indicate that mkdir is an atomic operation (both > > checks if the directory exists and creates it if it does not), so a locking > > mechanism based on mkdir would take care of this issu

Adding directives using mod_perl

2000-02-02 Thread Matthew Byng-Maddick
I'm following the description in Chap 8. of the Eagle Book for creating a module which adds configuration directives to Apache, however on my server version etc (see below), the first time through, the directive passes, but the directive gets rejected as an invalid command in the reload phase. Do