[AOLSERVER] Zlib module

2003-10-31 Thread Vlad Seryakov
Hello,
If somebody interested, i wrote simple zlib module for aolserver,
supports compressing/uncompressing Tcl strings, gzip files support.
Can be downloaded from http://www.crystalballinc.com/vlad/software

--
AOLserver - http://www.aolserver.com/
To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> with the
body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field of 
your email blank.


Re: [AOLSERVER] [PATCH] ns_conn state

2003-10-31 Thread Nathan Folkman
Sorry,

The patch looks good. We'll discuss specifics at our next Core Team
meeting and let you know when you can expect it.

Thanks for taking the time to look into this! :-)

- Nathan

Joshua Ginsberg wrote on 10/31/03, 1:30 PM:

 > So, will there be any official commentary on the patch? Or is there a
 > better place to submit patches for discussion?
 >
 > -jag


--
AOLserver - http://www.aolserver.com/

To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> with the
body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field of 
your email blank.


Re: [AOLSERVER] [PATCH] ns_conn state

2003-10-31 Thread Joshua Ginsberg
So, will there be any official commentary on the patch? Or is there a
better place to submit patches for discussion?
-jag

--
AOLserver - http://www.aolserver.com/
To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> with the
body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field of 
your email blank.


Re: [AOLSERVER] Ns_SetRequestAuthorizeProc has no Tcl Command

2003-10-31 Thread Zoran Vasiljevic
On Friday 31 October 2003 18:38, you wrote:
> Sure,
> Here is what I am doing.
>
> I am working on WebDAV access to content in an OpenACS intsallation.
>
> If a reqest doesn't send an authentication header, I want to ask for the
> info, so I figured it would be best to use what is already built into
> AOLserver. It looks like auth.c was written to allow this, but noone
> exposed the command that registers the user tcl procedure as a tcl
> procedure itself.
>

AFAIK, the dav uses digest authentication and AS does not
undersand this per-se. So, you can't just use nsperm module
and its user database to authenticate users.
Currently, I can't think of any solution except getting all done
by hand using filters. I maybe wrong, though...

Zoran


--
AOLserver - http://www.aolserver.com/

To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> with the
body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field of 
your email blank.


Re: [AOLSERVER] Ns_SetRequestAuthorizeProc has no Tcl Command

2003-10-31 Thread Zoran Vasiljevic
On Friday 31 October 2003 18:39, you wrote:
> On Fri, 2003-10-31 at 17:19, Chris Davies wrote:
> > How about an authentication plugin structure that would allow one to
> > load their own authentication method.
>
> The named function _is_ the plugin structure. Just provide a C function
> that does what you want. I think Dave wants to be able to specify a tcl

Tom,
The problem with this one is that it already expects the username
and password pre-parsed from the http headers. This is only done
for the basic auth method.

Zoran


--
AOLserver - http://www.aolserver.com/

To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> with the
body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field of 
your email blank.


Re: [AOLSERVER] Ns_SetRequestAuthorizeProc has no Tcl Command

2003-10-31 Thread Nathan Folkman
This is what I was thinking as well. At the very least we should make
sure the necessary hooks are provided (C and Tcl).

Zoran Vasiljevic wrote on 10/31/03, 12:42 PM:

 > You read my mind. This is one of the things we can schedule
 > for some (near)future release. In fact, we should be somehow
 > gathering ideas for what needs to be done in 4.1 because the
 > 4.0 is out of the door (well, almost).
 >
 > I'd like to see nice clean C-level hooks which would allow AS
 > to accomodate various authentication methods as a plugin
 > module (either in C or in Tcl alone).
 > This is of course only one interesting addition. I'm sure there
 > are number of them out there.
 >
 > Cheers,
 > Zoran


--
AOLserver - http://www.aolserver.com/

To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> with the
body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field of 
your email blank.


Re: [AOLSERVER] Ns_SetRequestAuthorizeProc has no Tcl Command

2003-10-31 Thread Dave Bauer
Sure,
Here is what I am doing.

I am working on WebDAV access to content in an OpenACS intsallation.

If a reqest doesn't send an authentication header, I want to ask for the
info, so I figured it would be best to use what is already built into
AOLserver. It looks like auth.c was written to allow this, but noone
exposed the command that registers the user tcl procedure as a tcl
procedure itself.

Dave

On Fri, Oct 31, 2003 at 10:22:45AM -0700, Ross Simpson wrote:
> Isn't the HTTP authentication implementation already built into
> AOLserver, via ns_conn authuser and ns_conn authpassword?
>
> I have a site which has a filter registered to /*.  That filter merely
> looks at ns_conn authuser/ns_conn authpassword and then authenticates
> against a file -- you could to the same, and do a db call to validate
> the user's credentials.
>
> Ross
>
>
>
> Zoran Vasiljevic wrote on 10/31/2003, 9:52 AM:
>
>  > On Friday 31 October 2003 17:07, you wrote:
>  > > Not really.
>  > >
>  > > I need to do HTTP authentication. I could write an HTTP authentication
>  > > implementation and register that as a filter, but I'd rather not.
>  > >
>  >
>  > I agree with you. In the same go, we might even introduce hooks
>  > for entirely different auth methods like digest etc.
>  >
>  > Cheers
>  > Zoran
>  >
>  >
>  > --
>  > AOLserver - http://www.aolserver.com/
>  >
>  > To Remove yourself from this list, simply send an email to
>  > <[EMAIL PROTECTED]> with the
>  > body of "SIGNOFF AOLSERVER" in the email message. You can leave the
>  > Subject: field of your email blank.
>  >
>
>
> --
> AOLserver - http://www.aolserver.com/
>
> To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> with 
> the
> body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field 
> of your email blank.
>

--
Dave Bauer
[EMAIL PROTECTED]
http://www.thedesignexperience.org


--
AOLserver - http://www.aolserver.com/

To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> with the
body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field of 
your email blank.


Re: [AOLSERVER] Ns_SetRequestAuthorizeProc has no Tcl Command

2003-10-31 Thread Zoran Vasiljevic
On Friday 31 October 2003 18:19, you wrote:
> How about an authentication plugin structure that would allow one to
> load their own authentication method.
>
> HTTP-Auth against a database, HTTP-Auth against a flat-file, HTTP-Auth
> against LDAP, etc.
> Digest, Certificate, Session Auth,  etc.
>
> At least in the long run, it would be much more flexible.
>

You read my mind. This is one of the things we can schedule
for some (near)future release. In fact, we should be somehow
gathering ideas for what needs to be done in 4.1 because the
4.0 is out of the door (well, almost).

I'd like to see nice clean C-level hooks which would allow AS
to accomodate various authentication methods as a plugin
module (either in C or in Tcl alone).
This is of course only one interesting addition. I'm sure there
are number of them out there.

Cheers,
Zoran


--
AOLserver - http://www.aolserver.com/

To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> with the
body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field of 
your email blank.


Re: [AOLSERVER] Ns_SetRequestAuthorizeProc has no Tcl Command

2003-10-31 Thread Nathan Folkman
Yes. It's one of the area's we've been looking to possibly improve as in
upcoming releases.

Zoran Vasiljevic wrote on 10/31/03, 12:36 PM:

 > I's only the basic authentication (hard-wired into C-code)
 > Pretty inflexible, that is.
 >
 > Zoran


--
AOLserver - http://www.aolserver.com/

To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> with the
body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field of 
your email blank.


Re: [AOLSERVER] Ns_SetRequestAuthorizeProc has no Tcl Command

2003-10-31 Thread Tom Jackson
On Fri, 2003-10-31 at 17:19, Chris Davies wrote:
> How about an authentication plugin structure that would allow one to
> load their own authentication method.

The named function _is_ the plugin structure. Just provide a C function
that does what you want. I think Dave wants to be able to specify a tcl
proc via a tcl command, or maybe a different c proc via a tcl command.
But the point is, this is a single point of entry for replacing the
authentication for a request. You don't need a filter, although there is
already support for providing these in tcl right now.

So the question is: couldn't you get the same effect by ensuring the new
auth code ran as the first 'post-auth' filter?

tom jackson


--
AOLserver - http://www.aolserver.com/

To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> with the
body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field of 
your email blank.


Re: [AOLSERVER] Ns_SetRequestAuthorizeProc has no Tcl Command

2003-10-31 Thread Zoran Vasiljevic
On Friday 31 October 2003 18:22, you wrote:
> Isn't the HTTP authentication implementation already built into
> AOLserver, via ns_conn authuser and ns_conn authpassword?
>

I's only the basic authentication (hard-wired into C-code)
Pretty inflexible, that is.

Zoran


--
AOLserver - http://www.aolserver.com/

To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> with the
body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field of 
your email blank.


Re: [AOLSERVER] Ns_SetRequestAuthorizeProc has no Tcl Command

2003-10-31 Thread Ross Simpson
Isn't the HTTP authentication implementation already built into
AOLserver, via ns_conn authuser and ns_conn authpassword?

I have a site which has a filter registered to /*.  That filter merely
looks at ns_conn authuser/ns_conn authpassword and then authenticates
against a file -- you could to the same, and do a db call to validate
the user's credentials.

Ross



Zoran Vasiljevic wrote on 10/31/2003, 9:52 AM:

 > On Friday 31 October 2003 17:07, you wrote:
 > > Not really.
 > >
 > > I need to do HTTP authentication. I could write an HTTP authentication
 > > implementation and register that as a filter, but I'd rather not.
 > >
 >
 > I agree with you. In the same go, we might even introduce hooks
 > for entirely different auth methods like digest etc.
 >
 > Cheers
 > Zoran
 >
 >
 > --
 > AOLserver - http://www.aolserver.com/
 >
 > To Remove yourself from this list, simply send an email to
 > <[EMAIL PROTECTED]> with the
 > body of "SIGNOFF AOLSERVER" in the email message. You can leave the
 > Subject: field of your email blank.
 >


--
AOLserver - http://www.aolserver.com/

To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> with the
body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field of 
your email blank.


Re: [AOLSERVER] Ns_SetRequestAuthorizeProc has no Tcl Command

2003-10-31 Thread Chris Davies
How about an authentication plugin structure that would allow one to
load their own authentication method.

HTTP-Auth against a database, HTTP-Auth against a flat-file, HTTP-Auth
against LDAP, etc.
Digest, Certificate, Session Auth,  etc.

At least in the long run, it would be much more flexible.

The problems I have with HTTP-Auth are actually forcing me to go in the
direction of Session mananged Authentication for a number of reasons --
but those are particular issues that my clients deal with.

HTTP-Auth has no decent way of maintaining 1 User, 1 Session.  HTTP-Auth
is easily probed by automated tools (not that they cannot be developed
for other methods).  Poor Realm support (user education issue here)

On Fri, 2003-10-31 at 11:52, Zoran Vasiljevic wrote:
> On Friday 31 October 2003 17:07, you wrote:
> > Not really.
> >
> > I need to do HTTP authentication. I could write an HTTP authentication
> > implementation and register that as a filter, but I'd rather not.


--
AOLserver - http://www.aolserver.com/

To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> with the
body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field of 
your email blank.


Re: [AOLSERVER] Ns_SetRequestAuthorizeProc has no Tcl Command

2003-10-31 Thread Zoran Vasiljevic
On Friday 31 October 2003 17:07, you wrote:
> Not really.
>
> I need to do HTTP authentication. I could write an HTTP authentication
> implementation and register that as a filter, but I'd rather not.
>

I agree with you. In the same go, we might even introduce hooks
for entirely different auth methods like digest etc.

Cheers
Zoran


--
AOLserver - http://www.aolserver.com/

To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> with the
body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field of 
your email blank.


Re: [AOLSERVER] Ns_SetRequestAuthorizeProc has no Tcl Command

2003-10-31 Thread Dave Bauer
Not really.

I need to do HTTP authentication. I could write an HTTP authentication
implementation and register that as a filter, but I'd rather not.

Dave

On Fri, Oct 31, 2003 at 03:29:24PM +, Patrick O'Leary wrote:
> Alternatively you could just look at ns_register_filter-
> It's probably what your looking for.
>
> P
>
> Dave Bauer wrote on 31/10/2003, 15:21:
>
>  > Would it make sense to have Ns_SetRequestAuthroizeProc available in
>  > Tcl. I
>  > want to allow HTTP authentication against my database, and this looks
>  > like
>  > the way to go. Its defined in nsd/auth.c
>  >
>  > Seems that ideally ns_perm would use this instead of only checking the
>  > ns_perm  users list.
>  >
>  >
>  > --
>  > AOLserver - http://www.aolserver.com/
>  >
>  > To Remove yourself from this list, simply send an email to
>  > <[EMAIL PROTECTED]> with the
>  > body of "SIGNOFF AOLSERVER" in the email message. You can leave the
>  > Subject: field of your email blank.
>  >
>
> --
> Patrick O'Leary
>
> AIM: polearyuk
> Email: [EMAIL PROTECTED]
> Phone: +44 (0) 207 348 8462
>
>
> This email, its contents and any files transmitted with it are
> confidential and may be legally privileged. It is intended solely for the
> addressee(s) only. If you are not the intended recipient, you must not
> copy, distribute, or take any action in reliance upon it. If you have
> received this email in error, please notify us immediately via telephone
> or fax and delete the material from your computer system. AOL (UK) Ltd is
> registered in England under number 03462696, with its registered office at
> 80 Hammersmith RD, Hammersmith London w14 8ud.
>
>
> --
> AOLserver - http://www.aolserver.com/
>
> To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> with 
> the
> body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field 
> of your email blank.
>

--
Dave Bauer
[EMAIL PROTECTED]
http://www.thedesignexperience.org


--
AOLserver - http://www.aolserver.com/

To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> with the
body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field of 
your email blank.


Re: [AOLSERVER] Ns_SetRequestAuthorizeProc has no Tcl Command

2003-10-31 Thread Patrick O'Leary
Alternatively you could just look at ns_register_filter-
It's probably what your looking for.

P

Dave Bauer wrote on 31/10/2003, 15:21:

 > Would it make sense to have Ns_SetRequestAuthroizeProc available in
 > Tcl. I
 > want to allow HTTP authentication against my database, and this looks
 > like
 > the way to go. Its defined in nsd/auth.c
 >
 > Seems that ideally ns_perm would use this instead of only checking the
 > ns_perm  users list.
 >
 >
 > --
 > AOLserver - http://www.aolserver.com/
 >
 > To Remove yourself from this list, simply send an email to
 > <[EMAIL PROTECTED]> with the
 > body of "SIGNOFF AOLSERVER" in the email message. You can leave the
 > Subject: field of your email blank.
 >

--
Patrick O'Leary

AIM: polearyuk
Email: [EMAIL PROTECTED]
Phone: +44 (0) 207 348 8462


This email, its contents and any files transmitted with it are
confidential and may be legally privileged. It is intended solely for the
addressee(s) only. If you are not the intended recipient, you must not
copy, distribute, or take any action in reliance upon it. If you have
received this email in error, please notify us immediately via telephone
or fax and delete the material from your computer system. AOL (UK) Ltd is
registered in England under number 03462696, with its registered office at
80 Hammersmith RD, Hammersmith London w14 8ud.


--
AOLserver - http://www.aolserver.com/

To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> with the
body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field of 
your email blank.


[AOLSERVER] Ns_SetRequestAuthorizeProc has no Tcl Command

2003-10-31 Thread Dave Bauer
Would it make sense to have Ns_SetRequestAuthroizeProc available in Tcl. I
want to allow HTTP authentication against my database, and this looks like
the way to go. Its defined in nsd/auth.c

Seems that ideally ns_perm would use this instead of only checking the
ns_perm  users list.


--
AOLserver - http://www.aolserver.com/

To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> with the
body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field of 
your email blank.