Re: create users from /etc/passwd?

2012-02-02 Thread David Fischer
Depending on your intranet, you may already have an LDAP directory. If you do, I would use a combination of Apache, mod_ldapand Django's RemoteUserMiddleware . -- You received thi

Re: brute force protection

2012-08-30 Thread David Fischer
This has definitely been discussed before[1], but I think it is worth discussing again. This issue has become even more pressing since the password hashing algorithm has increased its computational complexity significantly in 1.4. Because of that increased CPU utilization, a denial of service (

Re: Posting from HTTP to HTTPS on same domain results in CSRF failure

2012-10-31 Thread David Fischer
Django does strict referrer checking[1] which includes checking the scheme (HTTP vs. HTTPS). Like the others, I suggest you serve the whole site over HTTPS and forward HTTP traffic to the appropriate HTTPS URLs. -David [1] https://docs.djangoproject.com/en/1.4/ref/contrib/csrf/#how-it-works [1

Re: apache and remote_user

2011-10-25 Thread David Fischer
Have you taken a look at the RemoteUserMiddleware? https://docs.djangoproject.com/en/1.3/howto/auth-remote-user/ On Oct 25, 11:16 am, Tim wrote: > Hi, > I've read the django, wsgi, and apache docs and still making no progress. > Freebsd 8, Apache2.2.17, Django1.30, Python 2.7.1 > > I'm inside an

Re: Is it possible to use MS SQL 2008 as the Django database engine?

2011-12-03 Thread David Fischer
It is possible. The two major projects that I know of are django-pyodbcwhich I have used quite a bit and django-mssql which I have not used. Django-mssql only works on Windows and I have no experience with it. A