From frankmartin@example.com Mon Sep 05 08:09:00 2005 Return-Path: <frankmartin@example.com> Delivered-To: frankmartin@example.com Received: (qmail 16563 invoked from network); 5 Sep 2005 08:09:00 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 5 Sep 2005 08:09:00 -0000 Received: (qmail 97506 invoked by uid 500); 5 Sep 2005 08:09:00 -0000 Delivered-To: frankmartin@example.com Received: (qmail 97389 invoked by uid 500); 5 Sep 2005 08:08:58 -0000 Mailing-List: contact frankmartin@example.com; run by ezmlm Precedence: bulk list-help: <mailto:frankmartin@example.com> list-unsubscribe: <mailto:frankmartin@example.com> List-Post: <mailto:frankmartin@example.com> List-Id: <embperl.perl.apache.org> Delivered-To: mailing list frankmartin@example.com Received: (qmail 97370 invoked by uid 99); 5 Sep 2005 08:08:58 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 05 Sep 2005 01:08:58 -0700 X-ASF-Spam-Status: No, hits=0.5 required=10.0 tests=INFO_TLD X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: local policy) Received: from [83.161.120.155] (HELO neptun.ecos.de) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 05 Sep 2005 01:09:10 -0700 Received: from 83.161.120.155 (localhost [83.161.120.155]) by neptun.ecos.de (Postfix) with SMTP id 3EB7D42AD7 for <frankmartin@example.com>; Mon, 5 Sep 2005 10:08:52 +0200 (MEST) Received: from lnx1.i.ecos.de (lnx1.i.ecos.de [83.161.120.155]) by neptun.ecos.de (Postfix) with ESMTP id 1C3FC42AD6 for <frankmartin@example.com>; Mon, 5 Sep 2005 10:08:52 +0200 (MEST) Received: from wingr2 (unknown [83.161.120.155]) by lnx1.i.ecos.de (Postfix) with ESMTP id 0A8332E6243 for <frankmartin@example.com>; Mon, 5 Sep 2005 10:08:52 +0200 (CEST) From: "Gerald Richter" <frankmartin@example.com> To: <frankmartin@example.com> Subject: Website Update and Wiki Date: Mon, 5 Sep 2005 10:08:46 +0200 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Office Outlook, Build 11.0.6353 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1478 Thread-Index: AcWx8QnNlvDkpEPAQGmJqBXf/dOC8w== Message-Id: <frankmartin@example.com> X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N Hi, After some days of holidy I was finaly able to update the Embperl = Website to contain all Embperl 2.0.0 docs, fix and improve the dynamic part (adding sites, modules, examples, etc.) and add a Wiki. Currently only http://www.ecos.de/embperl is updated. http://perl.apache.org/embperl will follow soon . Most important I have integrated Kwiki into the site, so everybody can = start sharing informations. Hopefully the Wiki will fill up soon. I am looking forward to your contributions! Gerald P.S. Please let me know if anything is not working as expected! -------------------------------------------------------------------------= -- Besuchen Sie uns auf der Systems 2005 in M=FCnchen, Halle B2, Stand 704 -------------------------------------------------------------------------= -- Gerald Richter ecos electronic communication services gmbh IT-Securityl=F6sungen * Webapplikationen mit = Apache/Perl/mod_perl/Embperl Post: Tulpenstrasse 5 D-55276 Dienheim b. Mainz E-Mail: frankmartin@example.com Voice: (838)284-2274 WWW: http://www.ecos.de/ Fax: (838)284-2274 -------------------------------------------------------------------------= -- ECOS BB-5000 Firewall- und IT-Security Appliance: www.bb-5000.info -------------------------------------------------------------------------= -- =20 --------------------------------------------------------------------- To unsubscribe, e-mail: frankmartin@example.com For additional commands, e-mail: frankmartin@example.com From frankmartin@example.com Wed Sep 07 00:42:34 2005 Return-Path: <frankmartin@example.com> Delivered-To: frankmartin@example.com Received: (qmail 95962 invoked from network); 7 Sep 2005 00:42:34 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 7 Sep 2005 00:42:34 -0000 Received: (qmail 95827 invoked by uid 500); 7 Sep 2005 00:42:34 -0000 Delivered-To: frankmartin@example.com Received: (qmail 95745 invoked by uid 500); 7 Sep 2005 00:42:33 -0000 Mailing-List: contact frankmartin@example.com; run by ezmlm Precedence: bulk list-help: <mailto:frankmartin@example.com> list-unsubscribe: <mailto:frankmartin@example.com> List-Post: <mailto:frankmartin@example.com> List-Id: <embperl.perl.apache.org> Delivered-To: mailing list frankmartin@example.com Received: (qmail 95731 invoked by uid 99); 7 Sep 2005 00:42:33 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 06 Sep 2005 17:42:33 -0700 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: local policy) Received: from [83.161.120.155] (HELO bubba.net-rayman-net.net) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 06 Sep 2005 17:42:46 -0700 Received: from [83.161.120.155] ([83.161.120.155]) (authenticated bits=0) by bubba.net-rayman-net.net (8.12.11/8.12.11) with ESMTP id j870kZij005438 for <frankmartin@example.com>; Tue, 6 Sep 2005 17:46:35 -0700 Message-ID: <frankmartin@example.com> Date: Tue, 06 Sep 2005 17:41:07 -0700 From: ___cliff rayman___ <frankmartin@example.com> User-Agent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.7.2) Gecko/20040804 Netscape/7.2 (ax) X-Accept-Language: en-us, en MIME-Version: 1.0 To: frankmartin@example.com Subject: Need to send "404 Not Found" instead of "ERR: 12 open error Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Scanned-By: MIMEDefang 2.51 on 83.161.120.155 X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N We are receiving "ERR 12" open errors from Embperl instead of "404 Not Found" errors. Is anyone having the same problem? Does anyone know what is wrong with our configuration? --------------------- Message in browser: Internal Server Error The server encountered an internal error or misconfiguration and was unable to complete your request. Please contact the server administrator, frankmartin@example.com and inform them of the time the error occurred, and anything you might have done that may have caused the error. [26419]ERR: 12: uv-index.html(1): File /var/www/html/crowd-control/uv-index.html open error: No such file or directory Embperl/2.0b11 Apache/2.0.50 (Fedora) [Tue Sep 6 10:21:06 2005] ----------------------- error_log: [Tue Sep 06 10:21:05 2005] [error] [26419]ERR: 12: uv-index.html(1): File /var/www/html/crowd-control/uv-index.html open er ror: No such file or directory --------------------- Server specs : Fedora Core release 1 (Yarrow) perl, v5.8.3 built for i386-linux-thread-multi mod_perl/1.99_12 Embperl 2.0b11 Apache/2.0.50 ---------------------- httpd -V: Server version: Apache/2.0.50 Server built: Jul 1 2004 08:49:07 Server's Module Magic Number: 20020903:8 Architecture: 32-bit Server compiled with.... -D APACHE_MPM_DIR="server/mpm/prefork" -D APR_HAS_SENDFILE -D APR_HAS_MMAP -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled) -D APR_USE_SYSVSEM_SERIALIZE -D APR_USE_PTHREAD_SERIALIZE -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT -D APR_HAS_OTHER_CHILD -D AP_HAVE_RELIABLE_PIPED_LOGS -D HTTPD_ROOT="/etc/httpd" -D SUEXEC_BIN="/usr/sbin/suexec" -D DEFAULT_PIDLOG="logs/httpd.pid" -D DEFAULT_SCOREBOARD="logs/apache_runtime_status" -D DEFAULT_LOCKFILE="logs/accept.lock" -D DEFAULT_ERRORLOG="logs/error_log" -D AP_TYPES_CONFIG_FILE="conf/mime.types" -D SERVER_CONFIG_FILE="conf/httpd.conf" ----------------------- httpd.conf (relevant): LoadModule access_module modules/mod_access.so LoadModule auth_module modules/mod_auth.so LoadModule auth_anon_module modules/mod_auth_anon.so LoadModule auth_dbm_module modules/mod_auth_dbm.so LoadModule auth_digest_module modules/mod_auth_digest.so LoadModule ldap_module modules/mod_ldap.so LoadModule auth_ldap_module modules/mod_auth_ldap.so LoadModule include_module modules/mod_include.so LoadModule log_config_module modules/mod_log_config.so LoadModule env_module modules/mod_env.so LoadModule mime_magic_module modules/mod_mime_magic.so LoadModule cern_meta_module modules/mod_cern_meta.so LoadModule expires_module modules/mod_expires.so LoadModule deflate_module modules/mod_deflate.so LoadModule headers_module modules/mod_headers.so LoadModule usertrack_module modules/mod_usertrack.so LoadModule unique_id_module modules/mod_unique_id.so LoadModule setenvif_module modules/mod_setenvif.so LoadModule mime_module modules/mod_mime.so LoadModule dav_module modules/mod_dav.so LoadModule status_module modules/mod_status.so LoadModule autoindex_module modules/mod_autoindex.so LoadModule asis_module modules/mod_asis.so LoadModule info_module modules/mod_info.so LoadModule dav_fs_module modules/mod_dav_fs.so LoadModule vhost_alias_module modules/mod_vhost_alias.so LoadModule negotiation_module modules/mod_negotiation.so LoadModule dir_module modules/mod_dir.so LoadModule imap_module modules/mod_imap.so LoadModule actions_module modules/mod_actions.so LoadModule speling_module modules/mod_speling.so LoadModule userdir_module modules/mod_userdir.so LoadModule alias_module modules/mod_alias.so LoadModule rewrite_module modules/mod_rewrite.so LoadModule proxy_module modules/mod_proxy.so LoadModule proxy_ftp_module modules/mod_proxy_ftp.so LoadModule proxy_http_module modules/mod_proxy_http.so LoadModule proxy_connect_module modules/mod_proxy_connect.so LoadModule cache_module modules/mod_cache.so LoadModule suexec_module modules/mod_suexec.so LoadModule disk_cache_module modules/mod_disk_cache.so LoadModule file_cache_module modules/mod_file_cache.so LoadModule mem_cache_module modules/mod_mem_cache.so LoadModule cgi_module modules/mod_cgi.so Include conf.d/*.conf ErrorDocument 404 /missing.html ErrorDocument 500 /missing.html Alias /error/ "/var/www/error/" BrowserMatch "Mozilla/2" nokeepalive BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0 BrowserMatch "RealPlayer 4\.0" force-response-1.0 BrowserMatch "Java/1\.0" force-response-1.0 BrowserMatch "JDK/1\.0" force-response-1.0 BrowserMatch "Microsoft Data Access Internet Publishing Provider" redirect-carefully BrowserMatch "^WebDrive" redirect-carefully BrowserMatch "^WebDAVFS/1.[012]" redirect-carefully BrowserMatch "^gnome-vfs" redirect-carefully <Directory /var/www/html/download> Options Indexes FollowSymLinks AllowOverride All </Directory> <Directory /var/www/html/wwm> Options Indexes FollowSymLinks AllowOverride All </Directory> ------------------ perl.conf (relevant): LoadModule perl_module modules/mod_perl.so LoadModule embperl_module /usr/lib/perl5/site_perl/5.8.3/i386-linux-thread-multi/auto/Embperl/Embp erl.so PerlModule Embperl PerlSetEnv EMBPERL_DEBUG 1 PerlSetEnv EMBPERL_MAIL_ERRORS_TO hostmaster PerlSetEnv EMBPERL_MAIL_ERRORS_LIMIT 1 PerlSetEnv EMBPERL_MAIL_ERRORS_RESET_TIME 600 PerlSetEnv EMBPERL_OPTIONS 8208 PerlSetEnv EMBPERL_COOKIE_NAME XDCUID PerlSetEnv EMBPERL_COOKIE_DOMAIN .xulucorp.com PerlSetEnv EMBPERL_COOKIE_PATH / PerlSetEnv EMBPERL_COOKIE_EXPIRES 'Friday, 31-Dec-2010 14:00:00 GMT' PerlSetEnv EMBPERL_LOG /var/log/httpd/embperl_log PerlSetEnv EMBPERL_SESSION_CLASSES "File File" PerlSetEnv EMBPERL_SESSION_ARGS "Directory=/var/www/embperl_sessions LockDirectory=/var/www/embperl_locks" AddType text/html .epl <Directory /var/www/html> <FilesMatch ".*\.html?$"> SetHandler perl-script PerlHandler Embperl Options ExecCGI PerlSetVar cnfNetAddress 83.161.120.155 PerlSetVar cnfNetPort 841 #PerlSetVar cnfNetAddress 83.161.120.155 #PerlSetVar cnfNetPort 4241 PerlSetVar cnfRefererHistMax 15 PerlSetVar cnfLoginTime 20 </FilesMatch> </Directory> -------------------- TIA, Cliff -- _____cliff_rayman_____________________________________ Business Consulting and Turnaround Management [web] http://www.rayman.com/ [web] http://all-clear-turnaround-management.com/ [eml] cliff _at_ rayman.com [phn] (838)284-2274 [fax] (838)284-2274 ______________________________________________________ --------------------------------------------------------------------- To unsubscribe, e-mail: frankmartin@example.com For additional commands, e-mail: frankmartin@example.com From frankmartin@example.com Thu Sep 08 13:11:33 2005 Return-Path: <frankmartin@example.com> Delivered-To: frankmartin@example.com Received: (qmail 63143 invoked from network); 8 Sep 2005 13:11:33 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 8 Sep 2005 13:11:33 -0000 Received: (qmail 10319 invoked by uid 500); 8 Sep 2005 13:11:32 -0000 Delivered-To: frankmartin@example.com Received: (qmail 10306 invoked by uid 500); 8 Sep 2005 13:11:32 -0000 Mailing-List: contact frankmartin@example.com; run by ezmlm Precedence: bulk list-help: <mailto:frankmartin@example.com> list-unsubscribe: <mailto:frankmartin@example.com> List-Post: <mailto:frankmartin@example.com> List-Id: <embperl.perl.apache.org> Delivered-To: mailing list frankmartin@example.com Received: (qmail 10292 invoked by uid 99); 8 Sep 2005 13:11:31 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 08 Sep 2005 06:11:31 -0700 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: local policy) Received: from [83.161.120.155] (HELO neptun.ecos.de) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 08 Sep 2005 06:11:44 -0700 Received: from 83.161.120.155 (localhost [83.161.120.155]) by neptun.ecos.de (Postfix) with SMTP id 0FD6E42CB5; Thu, 8 Sep 2005 15:11:28 +0200 (MEST) Received: from lnx1.i.ecos.de (lnx1.i.ecos.de [83.161.120.155]) by neptun.ecos.de (Postfix) with ESMTP id E084042CA1; Thu, 8 Sep 2005 15:11:27 +0200 (MEST) Received: from wingr2 (unknown [83.161.120.155]) by lnx1.i.ecos.de (Postfix) with ESMTP id CC9772DE6B8; Thu, 8 Sep 2005 15:11:27 +0200 (CEST) From: "Gerald Richter" <frankmartin@example.com> To: "'___cliff rayman___'" <frankmartin@example.com>, <frankmartin@example.com> Subject: RE: Need to send "404 Not Found" instead of "ERR: 12 open error Date: Thu, 8 Sep 2005 15:11:25 +0200 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook, Build 11.0.6353 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1478 Thread-Index: AcWzRQsVM93hR2H0TC6dH3KbFf661gBMZ/Ww In-Reply-To: <frankmartin@example.com> Message-Id: <frankmartin@example.com> X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N Hi, > > We are receiving "ERR 12" open errors from Embperl instead of > "404 Not Found" errors. > Is anyone having the same problem? Does anyone know what is > wrong with our configuration? > You are right. Should return a 404 instead of 500. I am going to fix it and will get back to you as soon as this is done Gerald --------------------------------------------------------------------- To unsubscribe, e-mail: frankmartin@example.com For additional commands, e-mail: frankmartin@example.com From frankmartin@example.com Sun Sep 11 23:52:52 2005 Return-Path: <frankmartin@example.com> Delivered-To: frankmartin@example.com Received: (qmail 65935 invoked from network); 11 Sep 2005 23:52:52 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 11 Sep 2005 23:52:52 -0000 Received: (qmail 73750 invoked by uid 500); 11 Sep 2005 23:52:51 -0000 Delivered-To: frankmartin@example.com Received: (qmail 73733 invoked by uid 500); 11 Sep 2005 23:52:50 -0000 Mailing-List: contact frankmartin@example.com; run by ezmlm Precedence: bulk list-help: <mailto:frankmartin@example.com> list-unsubscribe: <mailto:frankmartin@example.com> List-Post: <mailto:frankmartin@example.com> List-Id: <embperl.perl.apache.org> Delivered-To: mailing list frankmartin@example.com Received: (qmail 73719 invoked by uid 99); 11 Sep 2005 23:52:50 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 11 Sep 2005 16:52:50 -0700 X-ASF-Spam-Status: No, hits=0.5 required=10.0 tests=SPF_HELO_PASS,SPF_PASS,TO_ADDRESS_EQ_REAL X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: domain of frankmartin@example.com designates 83.161.120.155 as permitted sender) Received: from [83.161.120.155] (HELO granite.openfusion.com.au) (83.161.120.155) by apache.org (qpsmtpd/0.29) with SMTP; Sun, 11 Sep 2005 16:53:01 -0700 Received: (qmail 22444 invoked by uid 900); 11 Sep 2005 23:50:42 -0000 Date: Mon, 12 Sep 2005 09:50:42 +1000 From: Gavin Carr <frankmartin@example.com> To: "frankmartin@example.com" <frankmartin@example.com> Subject: Embperl888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4Object888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4xecute segfault Message-ID: <frankmartin@example.com> Mail-Followup-To: "frankmartin@example.com" <frankmartin@example.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4.1i Organisation: Open Fusion X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N Porting an apache1 / HTML888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4mbperl app to apache2 / Embperl, and I'm getting segfaults doing an Embperl888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4Object888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4xecute under mod_perl. Simple example: - simple.html: 2 + 2 = [+ 2 + 2 +] - execute.html: [- Embperl888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4Object888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4xecute({ inputfile => 'simple.html', appname => 'test' }) -] This segfaults. Straight Embperl888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4xecute works fine. My app version has all the additional Embperl888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4Object object_base, object_stopdir, object_addpath parameters as well, but it doesn't make any difference. Versions are httpd 2.0.52, mod_perl 2.0.0, Embperl 2.0.0. Anyone else seen this or can replicate it? Cheers, Gavin --------------------------------------------------------------------- To unsubscribe, e-mail: frankmartin@example.com For additional commands, e-mail: frankmartin@example.com From frankmartin@example.com Tue Sep 13 03:22:20 2005 Return-Path: <frankmartin@example.com> Delivered-To: frankmartin@example.com Received: (qmail 30545 invoked from network); 13 Sep 2005 03:22:20 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 13 Sep 2005 03:22:20 -0000 Received: (qmail 28409 invoked by uid 500); 13 Sep 2005 03:22:20 -0000 Delivered-To: frankmartin@example.com Received: (qmail 28190 invoked by uid 500); 13 Sep 2005 03:22:19 -0000 Mailing-List: contact frankmartin@example.com; run by ezmlm Precedence: bulk list-help: <mailto:frankmartin@example.com> list-unsubscribe: <mailto:frankmartin@example.com> List-Post: <mailto:frankmartin@example.com> List-Id: <embperl.perl.apache.org> Delivered-To: mailing list frankmartin@example.com Received: (qmail 28177 invoked by uid 99); 13 Sep 2005 03:22:19 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 12 Sep 2005 20:22:19 -0700 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: local policy) Received: from [83.161.120.155] (HELO neptun.ecos.de) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 12 Sep 2005 20:22:29 -0700 Received: from 83.161.120.155 (localhost [83.161.120.155]) by neptun.ecos.de (Postfix) with SMTP id D54A942F87; Tue, 13 Sep 2005 05:22:15 +0200 (MEST) Received: from lnx1.i.ecos.de (lnx1.i.ecos.de [83.161.120.155]) by neptun.ecos.de (Postfix) with ESMTP id AAEAC42F85; Tue, 13 Sep 2005 05:22:15 +0200 (MEST) Received: from wingr2 (unknown [83.161.120.155]) by lnx1.i.ecos.de (Postfix) with ESMTP id A09B72D36C0; Tue, 13 Sep 2005 05:22:15 +0200 (CEST) From: "Gerald Richter" <frankmartin@example.com> To: "'Gavin Carr'" <frankmartin@example.com>, <frankmartin@example.com> Subject: RE: Embperl888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4Object888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4xecute segfault Date: Tue, 13 Sep 2005 05:21:58 +0200 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook, Build 11.0.6353 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1478 Thread-Index: AcW3K+0kbZuJTiatShm4DMb4TpOWEgA5jHBw In-Reply-To: <frankmartin@example.com> Message-Id: <frankmartin@example.com> X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N Hi, > > > Porting an apache1 / HTML888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4mbperl app to apache2 / Embperl, > and I'm getting segfaults doing an Embperl888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4Object888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4xecute > under mod_perl. Simple example: > > - simple.html: > > 2 + 2 = [+ 2 + 2 +] > > - execute.html: > > [- Embperl888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4Object888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4xecute({ inputfile => 'simple.html', > appname => 'test' }) -] > Looks like your are calling Embperl888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4Object from within an Embperl page, which doesn't make sense to me (also it should not segfault). What do you want to do? Gerald > This segfaults. Straight Embperl888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4xecute works fine. My app > version has all the additional Embperl888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4Object object_base, > object_stopdir, object_addpath parameters as well, but it > doesn't make any difference. > > Versions are httpd 2.0.52, mod_perl 2.0.0, Embperl 2.0.0. > > Anyone else seen this or can replicate it? > > Cheers, > Gavin > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: frankmartin@example.com > For additional commands, e-mail: frankmartin@example.com > > --------------------------------------------------------------------- To unsubscribe, e-mail: frankmartin@example.com For additional commands, e-mail: frankmartin@example.com From frankmartin@example.com Tue Sep 13 04:05:12 2005 Return-Path: <frankmartin@example.com> Delivered-To: frankmartin@example.com Received: (qmail 44354 invoked from network); 13 Sep 2005 04:05:12 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 13 Sep 2005 04:05:12 -0000 Received: (qmail 54739 invoked by uid 500); 13 Sep 2005 04:05:12 -0000 Delivered-To: frankmartin@example.com Received: (qmail 54518 invoked by uid 500); 13 Sep 2005 04:05:11 -0000 Mailing-List: contact frankmartin@example.com; run by ezmlm Precedence: bulk list-help: <mailto:frankmartin@example.com> list-unsubscribe: <mailto:frankmartin@example.com> List-Post: <mailto:frankmartin@example.com> List-Id: <embperl.perl.apache.org> Delivered-To: mailing list frankmartin@example.com Received: (qmail 54504 invoked by uid 99); 13 Sep 2005 04:05:11 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 12 Sep 2005 21:05:11 -0700 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_HELO_PASS,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: domain of frankmartin@example.com designates 83.161.120.155 as permitted sender) Received: from [83.161.120.155] (HELO granite.openfusion.com.au) (83.161.120.155) by apache.org (qpsmtpd/0.29) with SMTP; Mon, 12 Sep 2005 21:05:21 -0700 Received: (qmail 28039 invoked by uid 900); 13 Sep 2005 04:03:03 -0000 Date: Tue, 13 Sep 2005 14:03:03 +1000 From: Gavin Carr <frankmartin@example.com> To: frankmartin@example.com Subject: Re: Embperl888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4Object888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4xecute segfault Message-ID: <frankmartin@example.com> Mail-Followup-To: frankmartin@example.com References: <frankmartin@example.com> <frankmartin@example.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <frankmartin@example.com> User-Agent: Mutt/1.4.1i Organisation: Open Fusion X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N On Tue, Sep 13, 2005 at 05:21:58AM +0200, Gerald Richter wrote: > > Porting an apache1 / HTML888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4mbperl app to apache2 / Embperl, > > and I'm getting segfaults doing an Embperl888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4Object888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4xecute > > under mod_perl. Simple example: > > > > - simple.html: > > > > 2 + 2 = [+ 2 + 2 +] > > > > - execute.html: > > > > [- Embperl888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4Object888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4xecute({ inputfile => 'simple.html', > > appname => 'test' }) -] > > Looks like your are calling Embperl888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4Object from within an Embperl page, > which doesn't make sense to me (also it should not segfault). What do you > want to do? The app is my ewok CMS - http://www.openfusion.com.au/labs/ewok/. I use Embperl888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4Object888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4xecute for 'publishing' static pages to an output scalar (and thence to a file). In ewok the code lives in a perl module rather than in the page like the example above; the actual app code looks like this: if ($Config->{EMBPERL_VERSION} == 2) { require Embperl888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4Object; my $execute = { appname => 'ewok', inputfile => "$fs_dir/$f", output => \$new, fdat => $fdat, object_base => $base, object_stopdir => $src_fs_dir, object_addpath => [ split /[;:]/, $addpath ], syntax => 'EmbperlBlocks', }; Embperl888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4Object888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4xecute($execute); } Does that make sense Gerald? The corresponding code works fine using HTML888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4mbperlObject888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4xecute. Cheers, Gavin --------------------------------------------------------------------- To unsubscribe, e-mail: frankmartin@example.com For additional commands, e-mail: frankmartin@example.com From frankmartin@example.com Tue Sep 13 06:56:40 2005 Return-Path: <frankmartin@example.com> Delivered-To: frankmartin@example.com Received: (qmail 91158 invoked from network); 13 Sep 2005 06:56:40 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 13 Sep 2005 06:56:40 -0000 Received: (qmail 52360 invoked by uid 500); 13 Sep 2005 06:56:39 -0000 Delivered-To: frankmartin@example.com Received: (qmail 52345 invoked by uid 500); 13 Sep 2005 06:56:39 -0000 Mailing-List: contact frankmartin@example.com; run by ezmlm Precedence: bulk list-help: <mailto:frankmartin@example.com> list-unsubscribe: <mailto:frankmartin@example.com> List-Post: <mailto:frankmartin@example.com> List-Id: <embperl.perl.apache.org> Delivered-To: mailing list frankmartin@example.com Received: (qmail 52332 invoked by uid 99); 13 Sep 2005 06:56:39 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 12 Sep 2005 23:56:39 -0700 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: local policy) Received: from [83.161.120.155] (HELO neptun.ecos.de) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 12 Sep 2005 23:56:49 -0700 Received: from 83.161.120.155 (localhost [83.161.120.155]) by neptun.ecos.de (Postfix) with SMTP id 3667242F7A; Tue, 13 Sep 2005 08:56:35 +0200 (MEST) Received: from lnx1.i.ecos.de (lnx1.i.ecos.de [83.161.120.155]) by neptun.ecos.de (Postfix) with ESMTP id EE83742F5A; Tue, 13 Sep 2005 08:56:34 +0200 (MEST) Received: from wingr2 (unknown [83.161.120.155]) by lnx1.i.ecos.de (Postfix) with ESMTP id D4F312DDA83; Tue, 13 Sep 2005 08:56:34 +0200 (CEST) From: "Gerald Richter" <frankmartin@example.com> To: "'Gavin Carr'" <frankmartin@example.com>, <frankmartin@example.com> Subject: RE: Embperl888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4Object888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4xecute segfault Date: Tue, 13 Sep 2005 08:56:20 +0200 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook, Build 11.0.6353 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1478 Thread-Index: AcW4GFjkNxNsodlXSZyeLAEjqZe1JgAF8Ibg In-Reply-To: <frankmartin@example.com> Message-Id: <frankmartin@example.com> X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N Hi, > > The app is my ewok CMS - > http://www.openfusion.com.au/labs/ewok/. I use > Embperl888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4Object888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4xecute for 'publishing' static pages to an > output scalar (and thence to a file). In ewok the code lives > in a perl module rather than in the page like the example > above; the actual app code looks like this: > > if ($Config->{EMBPERL_VERSION} == 2) { > require Embperl888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4Object; > my $execute = { > appname => 'ewok', > inputfile => "$fs_dir/$f", > output => \$new, > fdat => $fdat, > object_base => $base, > object_stopdir => $src_fs_dir, > object_addpath => [ split /[;:]/, $addpath ], > syntax => 'EmbperlBlocks', > }; > Embperl888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4Object888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4xecute($execute); > } > > Does that make sense Gerald? The corresponding code works > fine using HTML888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4mbperlObject888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4xecute. > Yes, this makes more sense. Do you call this from the commandline or from within mod_perl? If you do it from within mod_perl, can you try it from the command line? Gerald --------------------------------------------------------------------- To unsubscribe, e-mail: frankmartin@example.com For additional commands, e-mail: frankmartin@example.com From frankmartin@example.com Tue Sep 13 19:33:34 2005 Return-Path: <frankmartin@example.com> Delivered-To: frankmartin@example.com Received: (qmail 5194 invoked from network); 13 Sep 2005 19:33:34 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 13 Sep 2005 19:33:34 -0000 Received: (qmail 85390 invoked by uid 500); 13 Sep 2005 19:33:33 -0000 Delivered-To: frankmartin@example.com Received: (qmail 85376 invoked by uid 500); 13 Sep 2005 19:33:33 -0000 Mailing-List: contact frankmartin@example.com; run by ezmlm Precedence: bulk list-help: <mailto:frankmartin@example.com> list-unsubscribe: <mailto:frankmartin@example.com> List-Post: <mailto:frankmartin@example.com> List-Id: <embperl.perl.apache.org> Delivered-To: mailing list frankmartin@example.com Received: (qmail 85363 invoked by uid 99); 13 Sep 2005 19:33:33 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 13 Sep 2005 12:33:33 -0700 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests=FORGED_RCVD_HELO,SPF_HELO_PASS,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: domain of frankmartin@example.com designates 83.161.120.155 as permitted sender) Received: from [83.161.120.155] (HELO roasted.cubic.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with SMTP; Tue, 13 Sep 2005 12:33:43 -0700 Received: from d099013.adsl.hansenet.de ([83.161.120.155] helo=mrmucke.doj) by roasted.cubic.org with esmtp (Exim 3.36 #1) id 1EFGX3-00048s-00 for frankmartin@example.com; Tue, 13 Sep 2005 21:33:29 +0200 Received: from [83.161.120.155] (helo=[83.161.120.155]) by mrmucke.doj with esmtp (Exim 3.36 #1) id 1EFGX9-0004mI-00 for frankmartin@example.com; Tue, 13 Sep 2005 21:33:35 +0200 Message-ID: <frankmartin@example.com> Date: Tue, 13 Sep 2005 21:33:28 +0200 From: Dirk Jagdmann <frankmartin@example.com> Organization: Cubic User-Agent: Mozilla Thunderbird 1.0.6 (X11/20050716) X-Accept-Language: en-us, en MIME-Version: 1.0 To: frankmartin@example.com Subject: username and password with basic auth Content-Type: text/plain; charset=ISO-8859-15; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N Hello developers, I'm currently developing a software which is receiving requests via http where username and password are transmitted via HTTP (basic) authentication (as base64 encoded string in the HTTP request header). The other parameters are transmitted as a GET request, thus encoded into the URL of the request. If have (yet) not found any way to retrieve the password in my perl code. The username is set in the REQUEST_USER environment variable, but I did not find out, wherer I can access the password. Is this possible? Or would it be possible if I code a custom Auth Handler (as shown in the mod_perl manual) and then store the password somewhere where I can access it from my (Emb)perl code? -- ---> doj / cubic ----> http://cubic.org/~doj -----> http://llg.cubic.org --------------------------------------------------------------------- To unsubscribe, e-mail: frankmartin@example.com For additional commands, e-mail: frankmartin@example.com From frankmartin@example.com Wed Sep 14 03:05:22 2005 Return-Path: <frankmartin@example.com> Delivered-To: frankmartin@example.com Received: (qmail 46514 invoked from network); 14 Sep 2005 03:05:22 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 14 Sep 2005 03:05:22 -0000 Received: (qmail 60522 invoked by uid 500); 14 Sep 2005 03:05:22 -0000 Delivered-To: frankmartin@example.com Received: (qmail 60505 invoked by uid 500); 14 Sep 2005 03:05:21 -0000 Mailing-List: contact frankmartin@example.com; run by ezmlm Precedence: bulk list-help: <mailto:frankmartin@example.com> list-unsubscribe: <mailto:frankmartin@example.com> List-Post: <mailto:frankmartin@example.com> List-Id: <embperl.perl.apache.org> Delivered-To: mailing list frankmartin@example.com Received: (qmail 60492 invoked by uid 99); 14 Sep 2005 03:05:21 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 13 Sep 2005 20:05:21 -0700 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_HELO_PASS,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: domain of frankmartin@example.com designates 83.161.120.155 as permitted sender) Received: from [83.161.120.155] (HELO granite.openfusion.com.au) (83.161.120.155) by apache.org (qpsmtpd/0.29) with SMTP; Tue, 13 Sep 2005 20:05:31 -0700 Received: (qmail 31428 invoked by uid 900); 14 Sep 2005 03:03:13 -0000 Date: Wed, 14 Sep 2005 13:03:13 +1000 From: Gavin Carr <frankmartin@example.com> To: frankmartin@example.com Subject: Re: username and password with basic auth Message-ID: <frankmartin@example.com> Mail-Followup-To: frankmartin@example.com References: <frankmartin@example.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <frankmartin@example.com> User-Agent: Mutt/1.4.1i Organisation: Open Fusion X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N On Tue, Sep 13, 2005 at 09:33:28PM +0200, Dirk Jagdmann wrote: > I'm currently developing a software which is receiving requests via http > where username and password are transmitted via HTTP (basic) > authentication (as base64 encoded string in the HTTP request header). > The other parameters are transmitted as a GET request, thus encoded into > the URL of the request. > > If have (yet) not found any way to retrieve the password in my perl > code. The username is set in the REQUEST_USER environment variable, but > I did not find out, wherer I can access the password. Is this possible? I haven't tried it, but you should just be able to get the Authorization http header (via the apache request) and base64 decode it, giving you a 'username:password' string. Of course, Basic Authentication is evil, and should only be used for toy projects (since it doesn't scale) over HTTPS. > Or would it be possible if I code a custom Auth Handler (as shown in the > mod_perl manual) and then store the password somewhere where I can > access it from my (Emb)perl code? <plug> Yep. There are lots of ways to do this - my mod_auth_tkt module: http://www.openfusion.com.au/labs/mod_auth_tkt/ is one, providing a drop-in replacement for Basic Authentication, apache single-signon, yada yada. You'd typically just store the encrypted password in the auth ticket data section, which shows up in the REMOTE_USER_DATA environment variable. </plug> Cheers, Gavin --------------------------------------------------------------------- To unsubscribe, e-mail: frankmartin@example.com For additional commands, e-mail: frankmartin@example.com From frankmartin@example.com Wed Sep 14 03:41:58 2005 Return-Path: <frankmartin@example.com> Delivered-To: frankmartin@example.com Received: (qmail 55174 invoked from network); 14 Sep 2005 03:41:58 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 14 Sep 2005 03:41:58 -0000 Received: (qmail 83122 invoked by uid 500); 14 Sep 2005 03:41:58 -0000 Delivered-To: frankmartin@example.com Received: (qmail 82887 invoked by uid 500); 14 Sep 2005 03:41:57 -0000 Mailing-List: contact frankmartin@example.com; run by ezmlm Precedence: bulk list-help: <mailto:frankmartin@example.com> list-unsubscribe: <mailto:frankmartin@example.com> List-Post: <mailto:frankmartin@example.com> List-Id: <embperl.perl.apache.org> Delivered-To: mailing list frankmartin@example.com Received: (qmail 82874 invoked by uid 99); 14 Sep 2005 03:41:56 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 13 Sep 2005 20:41:56 -0700 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: local policy) Received: from [83.161.120.155] (HELO neptun.ecos.de) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 13 Sep 2005 20:42:07 -0700 Received: from 83.161.120.155 (localhost [83.161.120.155]) by neptun.ecos.de (Postfix) with SMTP id 221F441F45; Wed, 14 Sep 2005 05:41:53 +0200 (MEST) Received: from lnx1.i.ecos.de (lnx1.i.ecos.de [83.161.120.155]) by neptun.ecos.de (Postfix) with ESMTP id EF3B81DB; Wed, 14 Sep 2005 05:41:52 +0200 (MEST) Received: from wingr2 (unknown [83.161.120.155]) by lnx1.i.ecos.de (Postfix) with ESMTP id BE4072D3DFF; Wed, 14 Sep 2005 05:41:52 +0200 (CEST) From: "Gerald Richter" <frankmartin@example.com> To: "'Gavin Carr'" <frankmartin@example.com>, <frankmartin@example.com> Subject: RE: username and password with basic auth Date: Wed, 14 Sep 2005 05:41:35 +0200 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook, Build 11.0.6353 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1478 Thread-Index: AcW42Sbmd1MmUQMLT5mosuijaa12FwABK0/A In-Reply-To: <frankmartin@example.com> Message-Id: <frankmartin@example.com> X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N > > I haven't tried it, but you should just be able to get the > Authorization http header (via the apache request) and base64 > decode it, giving you a 'username:password' string. > That will work, ($ret, $pw) = $req_rec -> get_basic_auth_pw ; Will do it for you (see perldoc Apache). > Of course, Basic Authentication is evil, and should only be > used for toy projects (since it doesn't scale) over HTTPS. > I see that, since password is transmitted in clear text, it is a security problem in http, but where is the problem with https? Gerald --------------------------------------------------------------------- To unsubscribe, e-mail: frankmartin@example.com For additional commands, e-mail: frankmartin@example.com From frankmartin@example.com Wed Sep 14 03:46:36 2005 Return-Path: <frankmartin@example.com> Delivered-To: frankmartin@example.com Received: (qmail 56478 invoked from network); 14 Sep 2005 03:46:36 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 14 Sep 2005 03:46:36 -0000 Received: (qmail 87359 invoked by uid 500); 14 Sep 2005 03:46:34 -0000 Delivered-To: frankmartin@example.com Received: (qmail 87315 invoked by uid 500); 14 Sep 2005 03:46:34 -0000 Mailing-List: contact frankmartin@example.com; run by ezmlm Precedence: bulk list-help: <mailto:frankmartin@example.com> list-unsubscribe: <mailto:frankmartin@example.com> List-Post: <mailto:frankmartin@example.com> List-Id: <embperl.perl.apache.org> Delivered-To: mailing list frankmartin@example.com Received: (qmail 87268 invoked by uid 99); 14 Sep 2005 03:46:33 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 13 Sep 2005 20:46:33 -0700 X-ASF-Spam-Status: No, hits=-4.3 required=10.0 tests=FORGED_RCVD_HELO,RCVD_IN_BSP_TRUSTED,SPF_HELO_PASS X-Spam-Check-By: apache.org Received-SPF: neutral (asf.osuosl.org: local policy) Received: from [83.161.120.155] (HELO 216-239-45-4.google.com) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 13 Sep 2005 20:46:44 -0700 Received: from smtp.google.com (angband.corp.google.com [83.161.120.155]) by chris.corp.google.com with ESMTP id j8E3jp5G009962 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 13 Sep 2005 20:45:52 -0700 Received: from localhost.localdomain.inodes.org (c-67-169-188-175.hsd1.ca.comcast.net [83.161.120.155]) (authenticated bits=0) by smtp.google.com (8.12.11/8.12.11) with ESMTP id j8E3jnuI007889 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Tue, 13 Sep 2005 20:45:51 -0700 Date: Tue, 13 Sep 2005 20:46:59 -0700 Message-ID: <frankmartin@example.com> From: Angus Lees <frankmartin@example.com> To: Dirk Jagdmann <frankmartin@example.com> Cc: frankmartin@example.com Subject: Re: username and password with basic auth In-Reply-To: <frankmartin@example.com> References: <frankmartin@example.com> Mail-Followup-To: Dirk Jagdmann <frankmartin@example.com>, frankmartin@example.com User-Agent: Wanderlust/2.14.0 (Africa) XEmacs/21.4 (Jumbo Shrimp) X-Meat: Parma Mail-Copies-To: never MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka") Content-Type: text/plain; charset=US-ASCII X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N At Tue, 13 Sep 2005 21:33:28 +0200, Dirk Jagdmann wrote: > Or would it be possible if I code a custom Auth Handler (as shown in the > mod_perl manual) and then store the password somewhere where I can > access it from my (Emb)perl code? Best would be to write a custom auth handler and do whatever authentication it is you want there (and not in your embperl code). Otherwise you'll need to stash the password somewhere during Authentication for retrieval later on in the content stage - I'd suggest using the apache request's "notes" ($req_rec->notes) -- - Gus --------------------------------------------------------------------- To unsubscribe, e-mail: frankmartin@example.com For additional commands, e-mail: frankmartin@example.com From frankmartin@example.com Wed Sep 14 04:32:02 2005 Return-Path: <frankmartin@example.com> Delivered-To: frankmartin@example.com Received: (qmail 74213 invoked from network); 14 Sep 2005 04:32:02 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 14 Sep 2005 04:32:02 -0000 Received: (qmail 19274 invoked by uid 500); 14 Sep 2005 04:32:02 -0000 Delivered-To: frankmartin@example.com Received: (qmail 19260 invoked by uid 500); 14 Sep 2005 04:32:01 -0000 Mailing-List: contact frankmartin@example.com; run by ezmlm Precedence: bulk list-help: <mailto:frankmartin@example.com> list-unsubscribe: <mailto:frankmartin@example.com> List-Post: <mailto:frankmartin@example.com> List-Id: <embperl.perl.apache.org> Delivered-To: mailing list frankmartin@example.com Received: (qmail 19247 invoked by uid 99); 14 Sep 2005 04:32:01 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 13 Sep 2005 21:32:01 -0700 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_HELO_PASS,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: domain of frankmartin@example.com designates 83.161.120.155 as permitted sender) Received: from [83.161.120.155] (HELO granite.openfusion.com.au) (83.161.120.155) by apache.org (qpsmtpd/0.29) with SMTP; Tue, 13 Sep 2005 21:32:11 -0700 Received: (qmail 31637 invoked by uid 900); 14 Sep 2005 04:29:53 -0000 Date: Wed, 14 Sep 2005 14:29:53 +1000 From: Gavin Carr <frankmartin@example.com> To: frankmartin@example.com Subject: Re: username and password with basic auth Message-ID: <frankmartin@example.com> Mail-Followup-To: frankmartin@example.com References: <frankmartin@example.com> <frankmartin@example.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <frankmartin@example.com> User-Agent: Mutt/1.4.1i Organisation: Open Fusion X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N On Wed, Sep 14, 2005 at 05:41:35AM +0200, Gerald Richter wrote: > > Of course, Basic Authentication is evil, and should only be > > used for toy projects (since it doesn't scale) over HTTPS. > > I see that, since password is transmitted in clear text, it is a security > problem in http, but where is the problem with https? The problem is that the password is still transmitted in the clear on every request. If I can somehow sniff packets on your host I get lots of opportunities to steal your credentials; if I can get a hostile embperl page or cgi within the same Auth Realm on your webserver I can do the same. Authentication should be once only per-session and/or it shouldn't use cleartext passwords. The scalability thing is also significant, since is every request for every resource (which often means css, images, etc., not just html pages) is authorised. And typically the authorisation is non-trival (e.g. a linear scan through an htpasswd file, proportional to the number of users you have), rather than something fast like a ticket checksum. Cheers, Gavin -- Open Fusion P/L - Open Source Business Solutions [ Linux - Perl - Apache ] ph: (838)284-2274 fax: (838)284-2274 web: http://www.openfusion.com.au mob: (838)284-2274 - Fashion is a variable, but style is a constant - Programming Perl --------------------------------------------------------------------- To unsubscribe, e-mail: frankmartin@example.com For additional commands, e-mail: frankmartin@example.com From frankmartin@example.com Wed Sep 14 04:55:33 2005 Return-Path: <frankmartin@example.com> Delivered-To: frankmartin@example.com Received: (qmail 78371 invoked from network); 14 Sep 2005 04:55:32 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 14 Sep 2005 04:55:32 -0000 Received: (qmail 29659 invoked by uid 500); 14 Sep 2005 04:55:32 -0000 Delivered-To: frankmartin@example.com Received: (qmail 29437 invoked by uid 500); 14 Sep 2005 04:55:31 -0000 Mailing-List: contact frankmartin@example.com; run by ezmlm Precedence: bulk list-help: <mailto:frankmartin@example.com> list-unsubscribe: <mailto:frankmartin@example.com> List-Post: <mailto:frankmartin@example.com> List-Id: <embperl.perl.apache.org> Delivered-To: mailing list frankmartin@example.com Received: (qmail 29424 invoked by uid 99); 14 Sep 2005 04:55:31 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 13 Sep 2005 21:55:31 -0700 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: local policy) Received: from [83.161.120.155] (HELO bubba.net-rayman-net.net) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 13 Sep 2005 21:55:42 -0700 Received: from rayman.com ([83.161.120.155]) by bubba.net-rayman-net.net (8.12.11/8.12.11) with ESMTP id j8E52WvN005921 for <frankmartin@example.com>; Tue, 13 Sep 2005 22:02:32 -0700 Message-ID: <frankmartin@example.com> Date: Tue, 13 Sep 2005 21:55:23 -0700 From: ___cliff rayman___ <frankmartin@example.com> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax) X-Accept-Language: en-us, en MIME-Version: 1.0 To: frankmartin@example.com Subject: Session Problems Due to Apache Calling Back Into Itself Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit X-Scanned-By: MIMEDefang 2.51 on 83.161.120.155 X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N It seems that when a REDIRECT is requested, apache/mod_perl chooses to call back into itself, or resuse the same connection. In any case, when certain redirects occur, the session is not written and the next connection to use the process now has the same session id and session data. It is not yet clear if this only happens when a new user comes without a SET-COOKIE in the header, or if the SET-COOKIE is being ignored. When we have a user in the page: https://www.xulucorp.com/company/cartartwork.html and we redirect back to the same page (not sure this is a good idea in any case), the new user gets the existing session. We are redirecting as follows: $rdrloc="https://www.xulucorp.com/company/cartartwork.html"; $http_headers_out{'Location'} = [ $rdrloc, 302 ]; # we have tried with 301 Our routines are run from the html page using Execute with import set to true, and clean defaulted (from the manual - set to zero). I have a feeling that the CLEANUP handler is not being called, so the session is not being written and $udat is not being cleared. The next user of the process just inherits the session and the data. I found a thread where someone was having a similar problem, by I don't see it being solved: http://www2.ecos.de/~mailarc/embperl/2002-12/msg00053.html <http://www2.ecos.de/%7Emailarc/embperl/2002-12/msg00053.html> --------------------- Server specs: Fedora Core release 1 (Yarrow) perl, v5.8.3 built for i386-linux-thread-multi mod_perl/1.99_12 Embperl 2.0b11 Apache/2.0.50 ---------------------- I may try it with CLEANUP set to 1 for immediate, but I am not sure if that has any adverse effects besides server performance. We have had similar issues when we used LOCATION redirects that were not absolute, but the example above is an absolute redirect and the problem still exists. Anyone have any ideas why this problem is occuring and what we need to do to correct it? Thanks for all your help, Cliff --------------------------------------------------------------------- To unsubscribe, e-mail: frankmartin@example.com For additional commands, e-mail: frankmartin@example.com From frankmartin@example.com Wed Sep 14 04:55:45 2005 Return-Path: <frankmartin@example.com> Delivered-To: frankmartin@example.com Received: (qmail 78412 invoked from network); 14 Sep 2005 04:55:45 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 14 Sep 2005 04:55:45 -0000 Received: (qmail 29872 invoked by uid 500); 14 Sep 2005 04:55:44 -0000 Delivered-To: frankmartin@example.com Received: (qmail 29856 invoked by uid 500); 14 Sep 2005 04:55:44 -0000 Mailing-List: contact frankmartin@example.com; run by ezmlm Precedence: bulk list-help: <mailto:frankmartin@example.com> list-unsubscribe: <mailto:frankmartin@example.com> List-Post: <mailto:frankmartin@example.com> List-Id: <embperl.perl.apache.org> Delivered-To: mailing list frankmartin@example.com Received: (qmail 29843 invoked by uid 99); 14 Sep 2005 04:55:44 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 13 Sep 2005 21:55:44 -0700 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: local policy) Received: from [83.161.120.155] (HELO bubba.net-rayman-net.net) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 13 Sep 2005 21:55:54 -0700 Received: from rayman.com ([83.161.120.155]) by bubba.net-rayman-net.net (8.12.11/8.12.11) with ESMTP id j8E52kgc005932 for <frankmartin@example.com>; Tue, 13 Sep 2005 22:02:46 -0700 Message-ID: <frankmartin@example.com> Date: Tue, 13 Sep 2005 21:55:38 -0700 From: ___cliff rayman___ <frankmartin@example.com> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax) X-Accept-Language: en-us, en MIME-Version: 1.0 To: frankmartin@example.com Subject: Session Problems Due to Apache Calling Back Into Itself Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit X-Scanned-By: MIMEDefang 2.51 on 83.161.120.155 X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N It seems that when a REDIRECT is requested, apache/mod_perl chooses to call back into itself, or resuse the same connection. In any case, when certain redirects occur, the session is not written and the next connection to use the process now has the same session id and session data. It is not yet clear if this only happens when a new user comes without a SET-COOKIE in the header, or if the SET-COOKIE is being ignored. When we have a user in the page: https://www.xulucorp.com/company/cartartwork.html and we redirect back to the same page (not sure this is a good idea in any case), the new user gets the existing session. We are redirecting as follows: $rdrloc="https://www.xulucorp.com/company/cartartwork.html"; $http_headers_out{'Location'} = [ $rdrloc, 302 ]; # we have tried with 301 Our routines are run from the html page using Execute with import set to true, and clean defaulted (from the manual - set to zero). I have a feeling that the CLEANUP handler is not being called, so the session is not being written and $udat is not being cleared. The next user of the process just inherits the session and the data. I found a thread where someone was having a similar problem, by I don't see it being solved: http://www2.ecos.de/~mailarc/embperl/2002-12/msg00053.html <http://www2.ecos.de/%7Emailarc/embperl/2002-12/msg00053.html> --------------------- Server specs: Fedora Core release 1 (Yarrow) perl, v5.8.3 built for i386-linux-thread-multi mod_perl/1.99_12 Embperl 2.0b11 Apache/2.0.50 ---------------------- I may try it with CLEANUP set to 1 for immediate, but I am not sure if that has any adverse effects besides server performance. We have had similar issues when we used LOCATION redirects that were not absolute, but the example above is an absolute redirect and the problem still exists. Anyone have any ideas why this problem is occuring and what we need to do to correct it? Thanks for all your help, Cliff --------------------------------------------------------------------- To unsubscribe, e-mail: frankmartin@example.com For additional commands, e-mail: frankmartin@example.com From frankmartin@example.com Wed Sep 14 05:05:27 2005 Return-Path: <frankmartin@example.com> Delivered-To: frankmartin@example.com Received: (qmail 81810 invoked from network); 14 Sep 2005 05:05:27 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 14 Sep 2005 05:05:27 -0000 Received: (qmail 35671 invoked by uid 500); 14 Sep 2005 05:05:26 -0000 Delivered-To: frankmartin@example.com Received: (qmail 35658 invoked by uid 500); 14 Sep 2005 05:05:26 -0000 Mailing-List: contact frankmartin@example.com; run by ezmlm Precedence: bulk list-help: <mailto:frankmartin@example.com> list-unsubscribe: <mailto:frankmartin@example.com> List-Post: <mailto:frankmartin@example.com> List-Id: <embperl.perl.apache.org> Delivered-To: mailing list frankmartin@example.com Received: (qmail 35645 invoked by uid 99); 14 Sep 2005 05:05:26 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 13 Sep 2005 22:05:26 -0700 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: local policy) Received: from [83.161.120.155] (HELO bubba.net-rayman-net.net) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 13 Sep 2005 22:05:36 -0700 Received: from rayman.com ([83.161.120.155]) by bubba.net-rayman-net.net (8.12.11/8.12.11) with ESMTP id j8E5CQBa005979 for <frankmartin@example.com>; Tue, 13 Sep 2005 22:12:28 -0700 Message-ID: <frankmartin@example.com> Date: Tue, 13 Sep 2005 22:05:17 -0700 From: ___cliff rayman___ <frankmartin@example.com> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax) X-Accept-Language: en-us, en MIME-Version: 1.0 To: frankmartin@example.com Subject: Re: Session Problems Due to Apache Calling Back Into Itself References: <frankmartin@example.com> In-Reply-To: <frankmartin@example.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit X-Scanned-By: MIMEDefang 2.51 on 83.161.120.155 X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N oops - editing below ___cliff rayman___ wrote: > It seems that when a REDIRECT is requested, apache/mod_perl chooses to > call back into itself, or resuse the same connection. In any case, > when certain redirects occur, the session is not written and the next > connection to use the process now has the same session id and session > data. It is not yet clear if this only happens when a new user comes > without a SET-COOKIE in the header, or if the SET-COOKIE is being > ignored. > > When we have a user in the page: > https://www.xulucorp.com/company/cartartwork.html > and we redirect back to the same page (not sure this is a good idea in > any case), then when a new user reuses this process > the new user gets the existing session. > > We are redirecting as follows: > $rdrloc="https://www.xulucorp.com/company/cartartwork.html"; > $http_headers_out{'Location'} = [ $rdrloc, 302 ]; # we have tried with > 301 > > Our routines are run from the html page using Execute with import set > to true, and clean defaulted (from the manual - set to zero). I have a > feeling that the CLEANUP handler is not being called, so the session > is not being written and $udat is not being cleared. The next user of > the process just inherits the session and the data. > > I found a thread where someone was having a similar problem, by I > don't see it being solved: > http://www2.ecos.de/~mailarc/embperl/2002-12/msg00053.html > <http://www2.ecos.de/%7Emailarc/embperl/2002-12/msg00053.html> > > --------------------- > Server specs: > > Fedora Core release 1 (Yarrow) > perl, v5.8.3 built for i386-linux-thread-multi > mod_perl/1.99_12 > Embperl 2.0b11 > Apache/2.0.50 > > ---------------------- > > I may try it with CLEANUP set to 1 for immediate, but I am not sure if > that has any adverse effects besides server performance. We have had > similar issues when we used LOCATION redirects that were not absolute, > but the example above is an absolute redirect and the problem still > exists. > > Anyone have any ideas why this problem is occuring and what we need to > do to correct it? > > > Thanks for all your help, > Cliff > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: frankmartin@example.com > For additional commands, e-mail: frankmartin@example.com --------------------------------------------------------------------- To unsubscribe, e-mail: frankmartin@example.com For additional commands, e-mail: frankmartin@example.com From frankmartin@example.com Wed Sep 14 07:57:18 2005 Return-Path: <frankmartin@example.com> Delivered-To: frankmartin@example.com Received: (qmail 49241 invoked from network); 14 Sep 2005 07:57:18 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 14 Sep 2005 07:57:18 -0000 Received: (qmail 17791 invoked by uid 500); 14 Sep 2005 07:57:17 -0000 Delivered-To: frankmartin@example.com Received: (qmail 17776 invoked by uid 500); 14 Sep 2005 07:57:17 -0000 Mailing-List: contact frankmartin@example.com; run by ezmlm Precedence: bulk list-help: <mailto:frankmartin@example.com> list-unsubscribe: <mailto:frankmartin@example.com> List-Post: <mailto:frankmartin@example.com> List-Id: <embperl.perl.apache.org> Delivered-To: mailing list frankmartin@example.com Received: (qmail 17762 invoked by uid 99); 14 Sep 2005 07:57:16 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 14 Sep 2005 00:57:16 -0700 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: local policy) Received: from [83.161.120.155] (HELO neptun.ecos.de) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 14 Sep 2005 00:57:26 -0700 Received: from 83.161.120.155 (localhost [83.161.120.155]) by neptun.ecos.de (Postfix) with SMTP id 33EC042FA9; Wed, 14 Sep 2005 09:57:13 +0200 (MEST) Received: from lnx1.i.ecos.de (lnx1.i.ecos.de [83.161.120.155]) by neptun.ecos.de (Postfix) with ESMTP id 1084B42F84; Wed, 14 Sep 2005 09:57:13 +0200 (MEST) Received: from wingr2 (unknown [83.161.120.155]) by lnx1.i.ecos.de (Postfix) with ESMTP id F265C30EF1E; Wed, 14 Sep 2005 09:57:12 +0200 (CEST) From: "Gerald Richter" <frankmartin@example.com> To: "'Gavin Carr'" <frankmartin@example.com>, <frankmartin@example.com> Subject: RE: username and password with basic auth Date: Wed, 14 Sep 2005 09:56:55 +0200 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook, Build 11.0.6353 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1478 In-Reply-To: <frankmartin@example.com> Thread-Index: AcW45UJXHO/5urZwRIKu7Vtv/wYSMwAHHY3Q Message-Id: <frankmartin@example.com> X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N Hi, > On Wed, Sep 14, 2005 at 05:41:35AM +0200, Gerald Richter wrote: > > > Of course, Basic Authentication is evil, and should only > be used for > > > toy projects (since it doesn't scale) over HTTPS. > > > > I see that, since password is transmitted in clear text, it is a > > security problem in http, but where is the problem with https? > > The problem is that the password is still transmitted in the > clear on every request. If I can somehow sniff packets on > your host I get lots of opportunities to steal your > credentials; if I can get a hostile embperl page or cgi > within the same Auth Realm on your webserver I can do the > same. Authentication should be once only per-session and/or > it shouldn't use cleartext passwords. > Ok, I agree > The scalability thing is also significant, since is every > request for every resource (which often means css, images, > etc., not just html pages) is authorised. And typically the > authorisation is non-trival (e.g. a linear scan through an > htpasswd file, proportional to the number of users you have), > rather than something fast like a ticket checksum. > This depends on your userbase and the way you store passwords. Thanks for the feedback Gerald --------------------------------------------------------------------- To unsubscribe, e-mail: frankmartin@example.com For additional commands, e-mail: frankmartin@example.com From frankmartin@example.com Wed Sep 14 08:00:15 2005 Return-Path: <frankmartin@example.com> Delivered-To: frankmartin@example.com Received: (qmail 50312 invoked from network); 14 Sep 2005 08:00:15 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 14 Sep 2005 08:00:15 -0000 Received: (qmail 20033 invoked by uid 500); 14 Sep 2005 08:00:15 -0000 Delivered-To: frankmartin@example.com Received: (qmail 19813 invoked by uid 500); 14 Sep 2005 08:00:14 -0000 Mailing-List: contact frankmartin@example.com; run by ezmlm Precedence: bulk list-help: <mailto:frankmartin@example.com> list-unsubscribe: <mailto:frankmartin@example.com> List-Post: <mailto:frankmartin@example.com> List-Id: <embperl.perl.apache.org> Delivered-To: mailing list frankmartin@example.com Received: (qmail 19796 invoked by uid 99); 14 Sep 2005 08:00:14 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 14 Sep 2005 01:00:14 -0700 X-ASF-Spam-Status: No, hits=0.5 required=10.0 tests=INFO_TLD X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: local policy) Received: from [83.161.120.155] (HELO neptun.ecos.de) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 14 Sep 2005 01:00:24 -0700 Received: from 83.161.120.155 (localhost [83.161.120.155]) by neptun.ecos.de (Postfix) with SMTP id 8CAFB4302D; Wed, 14 Sep 2005 10:00:10 +0200 (MEST) Received: from lnx1.i.ecos.de (lnx1.i.ecos.de [83.161.120.155]) by neptun.ecos.de (Postfix) with ESMTP id 550EB42FA9; Wed, 14 Sep 2005 10:00:10 +0200 (MEST) Received: from wingr2 (unknown [83.161.120.155]) by lnx1.i.ecos.de (Postfix) with ESMTP id 4292430E90C; Wed, 14 Sep 2005 10:00:10 +0200 (CEST) From: "Gerald Richter" <frankmartin@example.com> To: "'___cliff rayman___'" <frankmartin@example.com>, <frankmartin@example.com> Subject: RE: Session Problems Due to Apache Calling Back Into Itself Date: Wed, 14 Sep 2005 09:59:52 +0200 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Office Outlook, Build 11.0.6353 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1478 In-Reply-To: <frankmartin@example.com> Thread-Index: AcW46JHrv9jORIVRTsGxZZZpfLSsxAAGaXxA Message-Id: <frankmartin@example.com> X-Virus-Checked: Checked by ClamAV on apache.org X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N Could you turn on dbgSession and see what session related entries appear = in the embperl.log? Gerald -------------------------------------------------------------------------= -- Besuchen Sie uns auf der Systems 2005 in M=FCnchen, Halle B2, Stand 704 -------------------------------------------------------------------------= -- Gerald Richter ecos electronic communication services gmbh IT-Securityl=F6sungen * Webapplikationen mit = Apache/Perl/mod_perl/Embperl Post: Tulpenstrasse 5 D-55276 Dienheim b. Mainz E-Mail: frankmartin@example.com Voice: (838)284-2274 WWW: http://www.ecos.de/ Fax: (838)284-2274 -------------------------------------------------------------------------= -- ECOS BB-5000 Firewall- und IT-Security Appliance: www.bb-5000.info -------------------------------------------------------------------------= -- =20 > -----Original Message----- > From: ___cliff rayman___ [mailto:frankmartin@example.com]=20 > Sent: Wednesday, September 14, 2005 6:56 AM > To: frankmartin@example.com > Subject: Session Problems Due to Apache Calling Back Into Itself >=20 > It seems that when a REDIRECT is requested, apache/mod_perl=20 > chooses to call back into itself, or resuse the same=20 > connection. In any case, when certain redirects occur, the=20 > session is not written and the next connection to use the=20 > process now has the same session id and session data. It is=20 > not yet clear if this only happens when a new user comes=20 > without a SET-COOKIE in the header, or if the SET-COOKIE is=20 > being ignored. >=20 > When we have a user in the page:=20 > https://www.xulucorp.com/company/cartartwork.html > and we redirect back to the same page (not sure this is a=20 > good idea in any case), the new user gets the existing session. >=20 > We are redirecting as follows: > $rdrloc=3D=94https://www.xulucorp.com/company/cartartwork.html=94; > $http_headers_out{'Location'} =3D [ $rdrloc, 302 ]; # we have=20 > tried with 301 >=20 > Our routines are run from the html page using Execute with=20 > import set to true, and clean defaulted (from the manual -=20 > set to zero). I have a feeling that the CLEANUP handler is=20 > not being called, so the session is not being written and=20 > $udat is not being cleared. The next user of the process just=20 > inherits the session and the data. >=20 > I found a thread where someone was having a similar problem,=20 > by I don't see it being solved: > http://www2.ecos.de/~mailarc/embperl/2002-12/msg00053.html > <http://www2.ecos.de/%7Emailarc/embperl/2002-12/msg00053.html> >=20 > --------------------- > Server specs: >=20 > Fedora Core release 1 (Yarrow) > perl, v5.8.3 built for i386-linux-thread-multi > mod_perl/1.99_12 > Embperl 2.0b11 > Apache/2.0.50 >=20 > ---------------------- >=20 > I may try it with CLEANUP set to 1 for immediate, but I am=20 > not sure if that has any adverse effects besides server=20 > performance. We have had similar issues when we used LOCATION=20 > redirects that were not absolute, but the example above is an=20 > absolute redirect and the problem still exists. >=20 > Anyone have any ideas why this problem is occuring and what=20 > we need to do to correct it? >=20 >=20 > Thanks for all your help, > Cliff >=20 >=20 >=20 >=20 > --------------------------------------------------------------------- > To unsubscribe, e-mail: frankmartin@example.com > For additional commands, e-mail: frankmartin@example.com >=20 >=20 --------------------------------------------------------------------- To unsubscribe, e-mail: frankmartin@example.com For additional commands, e-mail: frankmartin@example.com From frankmartin@example.com Thu Sep 15 08:45:43 2005 Return-Path: <frankmartin@example.com> Delivered-To: frankmartin@example.com Received: (qmail 11460 invoked from network); 15 Sep 2005 08:45:43 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 15 Sep 2005 08:45:43 -0000 Received: (qmail 97599 invoked by uid 500); 15 Sep 2005 08:45:42 -0000 Delivered-To: frankmartin@example.com Received: (qmail 97587 invoked by uid 500); 15 Sep 2005 08:45:42 -0000 Mailing-List: contact frankmartin@example.com; run by ezmlm Precedence: bulk list-help: <mailto:frankmartin@example.com> list-unsubscribe: <mailto:frankmartin@example.com> List-Post: <mailto:frankmartin@example.com> List-Id: <embperl.perl.apache.org> Delivered-To: mailing list frankmartin@example.com Received: (qmail 97574 invoked by uid 99); 15 Sep 2005 08:45:42 -0000 Received: from asf.osuosl.org (HELO asf.osuosl.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 15 Sep 2005 01:45:42 -0700 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received-SPF: pass (asf.osuosl.org: local policy) Received: from [83.161.120.155] (HELO ns.sofist.cz) (83.161.120.155) by apache.org (qpsmtpd/0.29)
{'source': 'Apache Software Foundation Public Mail Archives'}