Re: AW: Apache::DBI and password security

2002-11-15 Thread Matthew Byng-Maddick
danglies off for that one. Which is why you copied him in the first place? :-) In general, though, there isn't a good way to get any security from any system that has to be able to access sensitive data in an automatic way. MBM -- Matthew Byng-Maddick [EMAIL PROTECTED] http

Re: Using mod_ssl and client certificates

2002-11-09 Thread Matthew Byng-Maddick
that this is available in Apache-SSL, I think it's available in mod_ssl too), and access the certificate DN as if it were a userid. MBM -- Matthew Byng-Maddick [EMAIL PROTECTED] http://colondot.net/

Re: XML::RPC

2002-04-21 Thread Matthew Byng-Maddick
are going to use SOAP, be *very* *very* aware of the security issues with any RPC-like mechanism, review any code you're going to use, thoroughly. And only then, decide whether it is actually the best solution. MBM -- Matthew Byng-Maddick [EMAIL PROTECTED] http://colondot.net/

Re: [OT] log analyzing programs

2001-12-02 Thread Matthew Byng-Maddick
written, keeps everything in globals (though I believe analog also currently does this and Stephen said he'd like to change it), and uses scary amounts of memory. It also doesn't have particularly good integrity checking for its database dumps. MBM -- Matthew Byng-Maddick [EMAIL

Re: Advanced daemon allocation

2001-06-18 Thread Matthew Byng-Maddick
, and then delegates to children (probably by passing the fd), but then you still have to do rather too much work on the URL before you can do anything about it. It isn't as unclean as you might think, though. Hope this helps MBM -- Matthew Byng-Maddick [EMAIL PROTECTED] http

Re: Advanced daemon allocation

2001-06-18 Thread Matthew Byng-Maddick
connections will not incur the additional three-way TCP handshake, turning it off will be kinder to the network. erm Surely if you turn it *on* you'll be kinder to the network, because you're not reinitiating the handshake? MBM -- Matthew Byng-Maddick [EMAIL PROTECTED] http

Re: can not redirect on POST w/ CGI.pm

2001-06-13 Thread Matthew Byng-Maddick
On Wed, Jun 13, 2001 at 11:58:24AM -0400, David Young wrote: I've found that if I post to this PerlAccessHandler, I get no response: # package Apache::Redirect; use strict; use Apache::Constants qw(REDIRECT); use CGI (); sub handler { my($r) = @_; my

Re: [OT] ApacheCon BOF

2001-03-21 Thread Matthew Byng-Maddick
On 21 Mar 2001, Piers Cawley wrote: You mean apart from the trademark infringement? I know, what about "mod_perl is my bNO CARRIER All your base are belong to mod_perl ?? MBM g, d rlh -- Matthew Byng-Maddick Home: [EMAIL PROTECTED] +44 20 8980 5714 (Home) http://colondot.net/

Re: Getting MAC address

2001-03-21 Thread Matthew Byng-Maddick
the output of arp -a, or equivalent... MBM -- Matthew Byng-Maddick Home: [EMAIL PROTECTED] +44 20 8980 5714 (Home) http://colondot.net/ Work: [EMAIL PROTECTED] +44 7956 613942 (Mobile) Genius may have its limitations, but stupidity is not thus handicapped

[CV] [JOB WANTED]

2001-03-02 Thread Matthew Byng-Maddick
After not following up a lot of potential leads when I tried this last time, I'm once again posting my CV here. The CV in question is at http://colondot.net/mbm/cv.shtml I am up for doing sysadmin on any UNIX (although I'd prefer one of FreeBSD/Solaris/Linux), mod_perl development (which I've

Re: Using rewrite...

2001-01-19 Thread Matthew Byng-Maddick
on handler. MBM -- Matthew Byng-Maddick Home: [EMAIL PROTECTED] +44 20 8981 8633 (Home) http://colondot.net/ Work: [EMAIL PROTECTED] +44 7956 613942 (Mobile) Under any conditions, anywhere, whatever you are doing, there is some ordinance under which you can be booked. -- Robert D. Spr

Re: Using rewrite...

2001-01-19 Thread Matthew Byng-Maddick
On and set RewriteLogLevel 9? MBM -- Matthew Byng-Maddick Home: [EMAIL PROTECTED] +44 20 8981 8633 (Home) http://colondot.net/ Work: [EMAIL PROTECTED] +44 7956 613942 (Mobile) Under any conditions, anywhere, whatever you are doing, there is some ordinance under which you can be booked

Re: Using rewrite...

2001-01-19 Thread Matthew Byng-Maddick
On Fri, 19 Jan 2001, Matthew Byng-Maddick wrote: On Fri, 19 Jan 2001, Tomas Edwardsson wrote: The problem is that I can't find a way to send the request to a relevant port if the request calls for a URL which ends with a slash ("/"). Any hints ? RewriteCond and %{REQUES

Re: how to secure backend server ?

2001-01-03 Thread Matthew Byng-Maddick
On Tue, 2 Jan 2001, darren chamberlain wrote: Oleg Bartunov ([EMAIL PROTECTED]) said something to this effect on 01/02/2001: You can explicitly bind an apache server to localhost. This works only if frontend and backend are on the same physical server. But it will not works even in this

[JOB] [CV] Job wanted

2000-12-22 Thread Matthew Byng-Maddick
what experience I have. I would be on a 1 month notice period in terms of availability. I would be happy to answer any questions you may have about things I've done in email. Please reply by private email (the email address here) rather than to the list. Thank you Matthew Byng-Maddick -- Matthew

Re: mod_perl in chroot environment

2000-12-12 Thread Matthew Byng-Maddick
On Tue, 12 Dec 2000, Gunther Birznieks wrote: At 09:58 AM 12/11/00 +, Matthew Byng-Maddick wrote: On Sun, 10 Dec 2000, Gunther Birznieks wrote: For example, perhaps the mod_perl server and the HTML/images server should be separately chrooted from each other? That way, someone who

Re: mod_perl in chroot environment

2000-12-11 Thread Matthew Byng-Maddick
ms redundant and potentially dangerous if the second step is forgotten. Very much so, agreed. MBM -- Matthew Byng-Maddick Home: [EMAIL PROTECTED] +44 20 8981 8633 (Home) http://colondot.net/ Work: [EMAIL PROTECTED] +44 7956 613942 (Mobile) philosophy, n.: Unintelligible answers to insoluble problems.

Re: mod_perl advocacy project resurrection

2000-12-06 Thread Matthew Byng-Maddick
On Tue, 5 Dec 2000, brian moseley wrote: [coldfusion/php] how is mason not like this? It has no point-n-drool authoring tools. This is actually the killer app. Once this is done, Mason / other templating system of choice gets catapulted to the forefront MBM -- Matthew Byng-Maddick

Re: RFC: mod_perl advocacy project resurrection (and a proposal!)

2000-12-06 Thread Matthew Byng-Maddick
ssle to use sensibly, and I've got my own library functions that call the DBI ones, and return errors in a way that is consistent. I also have the run object open DB connections. (YATS) another plughttp://codix.net/ASPerl//plug. MBM -- Matthew Byng-Maddick Home: [EMAIL PROTECTED] +44 20 8

Re: Question

2000-11-22 Thread Matthew Byng-Maddick
-- Matthew Byng-Maddick Home: [EMAIL PROTECTED] +44 20 8981 8633 (Home) http://colondot.net/ Work: [EMAIL PROTECTED] +44 7956 613942 (Mobile) Diplomacy is the art of saying "nice doggie" until you can find a rock. -- W

Re: mod_perl for NT when using another Web server other than Apache.

2000-11-21 Thread Matthew Byng-Maddick
-- Matthew Byng-Maddick Home: [EMAIL PROTECTED] +44 20 8981 8633 (Home) http://colondot.net/ Work: [EMAIL PROTECTED] +44 7956 613942 (Mobile) Trifles make perfection, and perfection is no trifle. -- Michelangelo

Re: Apache::VirtualHostRegistry

2000-11-17 Thread Matthew Byng-Maddick
of a module like APache::Registry but it segments the namespace/memory netween virtual servers --- a sandbox that each virtual host is kept in? man jail() on FreeBSD 4. MBM -- Matthew Byng-Maddick Home: [EMAIL PROTECTED] +44 20 8981 8633 (Home) http://colondot.net/ Work: [EMAIL PROTECTED] +44

Re: Apache::VirtualHostRegistry

2000-11-17 Thread Matthew Byng-Maddick
On Fri, 17 Nov 2000, Gunther Birznieks wrote: At 11:15 AM 11/17/00 +, Matthew Byng-Maddick wrote: man jail() on FreeBSD 4. But then you lose the benefits of having shared apache processes among many shared users many of whom may have very non-busy web sites. No? Yes

Re: Microperl

2000-11-16 Thread Matthew Byng-Maddick
On Thu, 16 Nov 2000, Robin Berjon wrote: At 00:12 16/11/2000 -0600, Les Mikesell wrote: Nothing against mod_rewrite -- I was just wondering if a small perl could be embedded with out bloating the server too much. I don't think 'small' and 'perl' belong in the same sentence... I know what

Re: Fast DB access

2000-11-10 Thread Matthew Byng-Maddick
On Fri, 10 Nov 2000, Les Mikesell wrote: [ReiserFS] production just to avoid the possibility of a slow fsck after a crash, but it is enormously faster at creating and deleting files too because everything is indexed so it would be an ideal stash for fast changing session data. If you don't

Re: mod_perl on specific scripts (fwd)

2000-11-06 Thread Matthew Byng-Maddick
n 6 Nov 2000, David Hodgkinson wrote: Matthew Byng-Maddick [EMAIL PROTECTED] writes: On 1 Nov 2000, David Hodgkinson wrote: Matthew Byng-Maddick [EMAIL PROTECTED] writes: You do, of course, know about all the latest patches for this, due to potential security problems

Re: mod_perl on specific scripts

2000-11-01 Thread Matthew Byng-Maddick
On 1 Nov 2000, David Hodgkinson wrote: Matthew Byng-Maddick [EMAIL PROTECTED] writes: On 31 Oct 2000, David Hodgkinson wrote: Did I just condemn you to learning mod_rewrite? Ooops :-) You do, of course, know about all the latest patches for this, due to potential security problems

Re: how to really bang on a script?

2000-10-31 Thread Matthew Byng-Maddick
On Mon, 30 Oct 2000, Perrin Harkins wrote: On Sat, 28 Oct 2000, Matthew Byng-Maddick wrote: Theo, during the mod_backhand talk, or at lunch just before, I can't remember. It was during the talk. The tool is called Daquiri, and he said it was available in the mod_backhand CVS tree. Ah yes

Re: mod_perl on specific scripts

2000-10-31 Thread Matthew Byng-Maddick
On 31 Oct 2000, David Hodgkinson wrote: Did I just condemn you to learning mod_rewrite? Ooops :-) You do, of course, know about all the latest patches for this, due to potential security problems MBM -- Matthew Byng-Maddick Home: [EMAIL PROTECTED] +44 20 8981 8633 (Home) http

Re: maximum (practical) size of $r-notes

2000-10-30 Thread Matthew Byng-Maddick
it allocate - which means that you should be OK. MBM -- Matthew Byng-Maddick Home: [EMAIL PROTECTED] +44 20 8981 8633 (Home) http://colondot.net/ Work: [EMAIL PROTECTED] +44 7956 613942 (Mobile) "It's today!" said Piglet. "My favourite day," said Pooh.

Re: Apache Modules in General

2000-10-30 Thread Matthew Byng-Maddick
../apache_x.xx | # make install But that's how I do it. and being perl, TIMTOWTDI. MBM -- Matthew Byng-Maddick Home: [EMAIL PROTECTED] +44 20 8981 8633 (Home) http://colondot.net/ Work: [EMAIL PROTECTED] +44 7956 613942 (Mobile) Trifles make perfection, and perfection is no trifle

Re: how to really bang on a script?

2000-10-28 Thread Matthew Byng-Maddick
On Sat, 28 Oct 2000, Matt Sergeant wrote: exactly the same thing (changing server logs into a benchmark tool) at ApacheCon, only I can't for the life of me remember who it was. Theo, during the mod_backhand talk, or at lunch just before, I can't remember. MBM -- Matthew Byng-Maddick Home

Re: ApacheCon report

2000-10-28 Thread Matthew Byng-Maddick
this...) According to various asf people, apache2 is at least a month away from being finished, and probably more... MBM -- Matthew Byng-Maddick Home: [EMAIL PROTECTED] +44 20 8981 8633 (Home) http://colondot.net/ Work: [EMAIL PROTECTED] +44 7956 613942 (Mobile) perl -e '$_="Oyvv bsswjfw Thtm mefm

Re: bytes_sent - bytes_received?

2000-10-07 Thread Matthew Byng-Maddick
On Sat, 7 Oct 2000, Drew Degentesh wrote: In addition to the number of bytes sent to the client, Id like to log how many bytes are sent *by* the client (the size of the request + posts , etc.) Fair enough I was guessing/hoping that length( scalar( $r-content ) ) would do it, but earlier in

Re: auth headers logging

2000-10-02 Thread Matthew Byng-Maddick
On Mon, 2 Oct 2000, steven wrote: I'm rewriting authentication headers on the fly and those rewritten headers are being logged, but I would like to log the details supplied by the client as opposed to what I've rewritten them as. I thought of writing a logging module and passing it a note,

Re: Determine which subroutine to call at runtime

2000-09-29 Thread Matthew Byng-Maddick
On Sat, 30 Sep 2000 [EMAIL PROTECTED] wrote: I'm going to write a perl cgi which needs to determine which subroutine to call at runtime. And the number of choice is huge (more than 300 and it is growing). I know I could do a bunch of if-then-else but it makes the code looks very unreadable.

Re: OT: use problem (need interpolation)

2000-09-28 Thread Matthew Byng-Maddick
is syntactically equiavalent to BEGIN { require Foo; Foo-import(@argarray); } so $baz will need to be defined at compile time, ie. within its own BEGIN block. MBM -- Matthew Byng-Maddick Home: [EMAIL PROTECTED] +44 20 8981 8633 (Home) http://colondot.net/ Work

Re: tracking down why a module was loaded?;

2000-09-27 Thread Matthew Byng-Maddick
On Wed, 27 Sep 2000, Gunther Birznieks wrote: At 10:28 PM 9/26/2000 +0200, Alexander Farber (EED) wrote: Doug MacEachern wrote: modperl is the best kept secret on the net. Shame! seems to generate plenty of list traffic for a "secret" ;) Don't you all think, that mod_perl isn't promoted

Re: tracking down why a module was loaded?;

2000-09-27 Thread Matthew Byng-Maddick
On Wed, 27 Sep 2000, Matt Sergeant wrote: On Wed, 27 Sep 2000, Matthew Byng-Maddick wrote: Actually I think the people we need to get involved are the web site builders - the larger companies offering dynamic web content creation. We also need some more mainstream tools, the oft-requested

Re: Apache::Request server error??

2000-09-25 Thread Matthew Byng-Maddick
On Mon, 25 Sep 2000, Sophokles Zafeiris wrote: I' m trying to run the file_upload.pl. script, that can be found in the eg directory of the Apache::Request source file. I've installed the Apache::Request but I get the following server error : Can't locate object method "new" via package

Re: open(FH,'|qmail-inject') fails

2000-09-25 Thread Matthew Byng-Maddick
On Mon, 25 Sep 2000, Matt Sergeant wrote: On Mon, 25 Sep 2000, Stas Bekman wrote: On Mon, 25 Sep 2000, Doug MacEachern wrote: On Mon, 25 Sep 2000, Stas Bekman wrote: All you care about is to measure the time between email sending start and end (when the process continues on its

Re: flock under win32

2000-09-24 Thread Matthew Byng-Maddick
On Sun, 24 Sep 2000, Jim Winstead wrote: On Sep 24, Gunther Birznieks wrote: The PerlCookbook seemed to indicate that mkdir is an atomic operation (both checks if the directory exists and creates it if it does not), so a locking mechanism based on mkdir would take care of this issue

Adding directives using mod_perl

2000-02-02 Thread Matthew Byng-Maddick
I'm following the description in Chap 8. of the Eagle Book for creating a module which adds configuration directives to Apache, however on my server version etc (see below), the first time through, the directive passes, but the directive gets rejected as an invalid command in the reload phase.