Re: [naviserver-devel] Session module

2009-02-20 Thread Vlad Seryakov
I know, i asked just in case:-)) But if you combine seqid with currenttime in milliseconds for example and produce md5 hash including IP address, it will be much more difficult to hijack just base don sequential number Ian Harding wrote: > Vlad Seryakov wrote: >> Why not to use nsv_incr to gene

Re: [naviserver-devel] Session module

2009-02-20 Thread Ian Harding
Vlad Seryakov wrote: > Why not to use nsv_incr to generate sequential session id? > > Or sequential ids is a bad idea? > > It makes it super easy to hijack sessions. They are supposed to be difficult to brute force. > Ian Harding wrote: > >> Stephen Deasey wrote: >> >>> On Sun, Feb 15,

Re: [naviserver-devel] Session module

2009-02-20 Thread Vlad Seryakov
Why not to use nsv_incr to generate sequential session id? Or sequential ids is a bad idea? Ian Harding wrote: > Stephen Deasey wrote: >> On Sun, Feb 15, 2009 at 6:55 PM, Ian Harding wrote: >> >>> Hello, >>> >>> I am migrating to Naviserver from AOLServer mostly because of the >>> excellent n

Re: [naviserver-devel] Session module

2009-02-20 Thread Ian Harding
Stephen Deasey wrote: > On Sun, Feb 15, 2009 at 6:55 PM, Ian Harding wrote: > >> Hello, >> >> I am migrating to Naviserver from AOLServer mostly because of the >> excellent nsdbi module. >> >> My existing code is depended on the nssession module >> http://bas.scheffers.net/aolserver/ . It doe

Re: [naviserver-devel] Session module

2009-02-20 Thread Ian Harding
Stephen Deasey wrote: > On Sun, Feb 15, 2009 at 6:55 PM, Ian Harding wrote: > >> Hello, >> >> I am migrating to Naviserver from AOLServer mostly because of the >> excellent nsdbi module. >> >> My existing code is depended on the nssession module >> http://bas.scheffers.net/aolserver/ . It doe

Re: [naviserver-devel] Session module

2009-02-16 Thread Stephen Deasey
On Sun, Feb 15, 2009 at 6:55 PM, Ian Harding wrote: > Hello, > > I am migrating to Naviserver from AOLServer mostly because of the > excellent nsdbi module. > > My existing code is depended on the nssession module > http://bas.scheffers.net/aolserver/ . It doesn't compile and run > unmodified un

Re: [naviserver-devel] Session module

2009-02-15 Thread Vlad Seryakov
No such module exists. You can port your module, the only thing to implement is Ns_CacheFind, because naviserver does not keep track of new caches, this is up to developer to decide Ian Harding wrote: > Hello, > > I am migrating to Naviserver from AOLServer mostly because of the > excellent nsd