Hi Greg:

On Wed, 19 Mar 2008, Gregory Favre wrote:

> Googlebot, MSNbot and yahoo slurp accept cookies but do not use
> them. Therefore, each access creates a new session. [...]
> Discussing with Sam about this issue, we went to the conclusion that
> the robots should not receive any session.

The patch looks good, but this technique has a drawback of not
catching all robots, not catching the ones that bypass robots.txt or
that pretend to be MSIE (we have been exposed to a few), and slowing
down the system for the regular end users a bit.  Which is why I
suggested in the past:

On Fri, 11 Jan 2008, Tibor Simko wrote:

| Another thing is not to distribute sessions to anonymous users,
| i.e. to treat them all as uid=0.  This would force the personal
| features to be available only to registered users, but you do that
| on your site anyway, I think.

We have discussed this option within the CDS team and the Inspire
collaboration, and we have agreed that we don't need to distinguish
between a guest A and a guest B anymore.  We did this in the past
mostly so that people could try out baskets without having to
register.  At CERN, there is less need now for this due to the Single
Sign On, and outside of CERN, there may be less need for this too due
to forthcoming basket facility end-user documentation.[1]

Therefore please expect a new invenio.conf option soon that would fix
this problem in an "ultimate way"...

[1] I was actually planning to address the -users list in the future
    to see if people would like to switch or if there is an interest
    to keep the old behaviour...

Best regards
-- 
Tibor Simko ** CERN Document Server ** <http://cds.cern.ch/>

Reply via email to