Re: Proxying access to restricted information

2004-08-11 Thread Stas Bekman
Dan Horne wrote: Following on from this, it seems that the PerlTransHandler looked like my best bet, but it doesn’t seem to be able to alter the hostname (please correct me if there is a way to do this, as I struggled with it so far) I guess mod_rewrite allows the hostname to be altered, but I need

Re: Proxying access to restricted information

2004-08-11 Thread Dan Horne
Following on from this, it seems that the PerlTransHandler looked like my best bet, but it doesn’t seem to be able to alter the hostname (please correct me if there is a way to do this, as I struggled with it so far) I guess mod_rewrite allows the hostname to be altered, but I need to intercept th

Proxying access to restricted information

2004-08-11 Thread Dan Horne
Hi all I’m sure that this has been asked before, but I couldn’t seem to find the right terms when searching the archive. We have a website (not written in Perl or mod_perl), where we would now like to protect certain parts of the content. The business is loath to change the architecture, as there

Re: make test hangs

2004-08-11 Thread Stas Bekman
William Fulmer wrote: We need to back up a bit. I tried something different just for giggles because I thought we might be on the wrong track with setuid. I wrote a little script that this #!/bin/bash /usr/opt/httpd-2.0.49/bin/httpd -d t -f conf/httpd.conf -DAPACHE2 -DONE_PROCESS -DNO_DETATCH >

Re: make test hangs

2004-08-11 Thread Stas Bekman
William Fulmer wrote: I have a non root user that I use for all of my software builds (called build strangely enough). All elements (apache, perl, mod_perl) were built as this user. I just tried building as root as the email suggested. It would not run apache as root, but tried to use nobody(whi

Re: advantages of mod_perl over java servlets

2004-08-11 Thread Stas Bekman
Torsten Foertsch wrote: A few years ago I was in a similar situation. I was working for a big company (~500.000 employees) and someone from the upper management had 'decided' that java was the best tool for all purposes. Then some department had startet a new project and of cource tried to imple

RE: Apache::DBI Connection Lost

2004-08-11 Thread Kreimendahl, Chad J
right, only suggesting that maybe he verify that the ping is being done and the reconnect is as well... :) -Original Message- From: Perrin Harkins [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 11, 2004 2:16 PM To: Kreimendahl, Chad J Cc: David Hofmann; Modperl List Subject: RE: Apac

RE: Apache::DBI Connection Lost

2004-08-11 Thread Perrin Harkins
On Wed, 2004-08-11 at 14:58, Kreimendahl, Chad J wrote: > Not if he's set the vars that disable pinging... It's on by default. Turning on DBI_TRACE to verify it is getting called would be a good idea though, and $Apache::DBI::DEBUG too. > Also, I've found that (in the past) sometimes the ping d

Re: APR::Base64 uses

2004-08-11 Thread Perrin Harkins
On Wed, 2004-08-11 at 13:36, Chris Ochs wrote: > It's basically just an ssl connection to our gateway > passing the correct parameters. We do not use a separate client like > Verisign does for their api product. That's actually what Verisign does now too, at least with their PayFlow Pro product.

RE: Apache::DBI Connection Lost

2004-08-11 Thread Kreimendahl, Chad J
Not if he's set the vars that disable pinging... Also, I've found that (in the past) sometimes the ping done by Apache::DBI for MySQL doesn't always repsond cause reconnection (though, this was many versions ago). -Original Message- From: Perrin Harkins [mailto:[EMAIL PROTECTED] Sent:

RE: Apache::DBI Connection Lost

2004-08-11 Thread Perrin Harkins
On Wed, 2004-08-11 at 14:43, Kreimendahl, Chad J wrote: > Simple answer... do a $dbh->ping ... if unresponsive, reconnect. He's already using Apache::DBI, and that's exactly what it does. - Perrin -- Report problems: http://perl.apache.org/bugs/ Mail list info: http://perl.apache.org/maillist/

RE: Apache::DBI Connection Lost

2004-08-11 Thread Kreimendahl, Chad J
Simple answer... do a $dbh->ping ... if unresponsive, reconnect. It's not that costly unless we're talking about hundreds of thousands of hits in a short period :) -Original Message- From: David Hofmann [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 11, 2004 12:24 PM To: [EMAIL PROT

Re: APR::Base64 uses

2004-08-11 Thread mock
On Wed, Aug 11, 2004 at 09:36:42AM -0400, Perrin Harkins wrote: > mock wrote: > >This is about to go out to CPAN, but since it seems there is some question > >as to how to do this, I'll send it out a little early. Attached is a > >module > >for safely encrypting and storing credit cards using the

Re: APR::Base64 uses

2004-08-11 Thread mock
On Wed, Aug 11, 2004 at 08:23:42AM -0500, JupiterHost.Net wrote: > > > > >This sounds really awesome. Thanks. just what we need. > > > >Can one key decrypt the whole batch of cards? > > I didn't look to close but I'm thinking "no" since it was randomly > generated, and a single key for them all

Re: APR::Base64 uses

2004-08-11 Thread mock
On Wed, Aug 11, 2004 at 01:01:23AM -0700, Bart Simpson wrote: > > --- mock <[EMAIL PROTECTED]> wrote: > > > This is about to go out to CPAN, but since it seems > > there is some question > > as to how to do this, I'll send it out a little > > early. Attached is a module > > for safely encrypting

Re: APR::Base64 uses

2004-08-11 Thread JupiterHost.Net
You don't use google then do you? ;p probably msn or yahoo, or gulp AOL :) CMON, would Bart Simpson use anything but the Google? Never used yahoo but MSN,AOL ??? That's insulting. EAt my shorts man . LOL =) HAHA good one :) ! google had ads but they are way more discreet and talk about relevant r

Re: Apache::DBI Connection Lost

2004-08-11 Thread David Hofmann
Just tried it, still has the same problem. David From: Perrin Harkins <[EMAIL PROTECTED]> To: David Hofmann <[EMAIL PROTECTED]> CC: Modperl List <[EMAIL PROTECTED]> Subject: Re: Apache::DBI Connection Lost Date: Wed, 11 Aug 2004 12:43:59 -0400 On Wed, 2004-08-11 at 10:01, David Hofmann wrote: > Any

Re: APR::Base64 uses

2004-08-11 Thread Chris Ochs
> On Wed, 2004-08-11 at 11:53, Chris Ochs wrote: > > I thought I would chime in here. Many are probably not aware of the new > > security regulations by Visa and Mastercard that are now in effect. > > Thanks for the info, Chris. Is Payment Online a Verisign competitor? > Does it have a mod_perl

Re: APR::Base64 uses

2004-08-11 Thread Bart Simpson
--- "JupiterHost.Net" <[EMAIL PROTECTED]> wrote: > >> > >>You used paper? Did someone break Google? :) > >>http://www.google.com/search?q=define%3Aencode > >>http://www.google.com/search?q=define%3Aencrypt > > > > [snip] > > > stuff on the way to what i'm looking for. Doing a > web > > searc

Re: APR::Base64 uses

2004-08-11 Thread Perrin Harkins
On Wed, 2004-08-11 at 11:53, Chris Ochs wrote: > I thought I would chime in here. Many are probably not aware of the new > security regulations by Visa and Mastercard that are now in effect. Thanks for the info, Chris. Is Payment Online a Verisign competitor? Does it have a mod_perl-friendly AP

Re: Apache::DBI Connection Lost

2004-08-11 Thread Perrin Harkins
On Wed, 2004-08-11 at 10:01, David Hofmann wrote: > Any suggestion on why Apache::DBI won't reconnect ? > > David Hofmann > > --- My Apache Startup Script --- > > # make sure we are in a sane environment. > $ENV{MOD_PERL} or die "not running under mod_perl!"; > > use strict; > use Carp (); > us

RE: advantages of mod_perl over java servlets

2004-08-11 Thread Goehring, Chuck, RCI - San Diego
There's the selling point he needs then. -Original Message- From: Perrin Harkins [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 11, 2004 8:27 AM To: Goehring, Chuck, RCI - San Diego Cc: [EMAIL PROTECTED] Subject: Re: advantages of mod_perl over java servlets Goehring, Chuck, RCI - S

RE: APR::Base64 uses

2004-08-11 Thread Kreimendahl, Chad J
That's a pretty interesting way to go about it. I had developed something very similar for storing account information (CC, ACH, etc) securely within a database. The only real difference was my use of Rijndael (AES) over Blow/TwoFish. Crypt::CBC rocks. The problem that was run into is that

Re: APR::Base64 uses

2004-08-11 Thread Chris Ochs
I thought I would chime in here. Many are probably not aware of the new security regulations by Visa and Mastercard that are now in effect. Basically, anyone who stores or handles credit card data has to comply. If you use an online processing company such as Verisign they take care of most of i

Re: advantages of mod_perl over java servlets

2004-08-11 Thread Perrin Harkins
Goehring, Chuck, RCI - San Diego wrote: Maybe we need "mpsp pages" technology" We already have about a dozen toolkits that are equivalent to JSP. Or did you just mean we need a brand name for them? - Perrin -- Report problems: http://perl.apache.org/bugs/ Mail list info: http://perl.apache.org/m

RE: advantages of mod_perl over java servlets

2004-08-11 Thread Goehring, Chuck, RCI - San Diego
More than likely, a Java-based solution would mainly be done in JSPs with a single controlling servlet, rather than just servlets. JSPs can be written fairly fast because server re-starts are not required. Because they become servlets, they run at servlet speeds. Maybe we need "mpsp pages

Apache::DBI Connection Lost

2004-08-11 Thread David Hofmann
For some reason whenever I restart my Database process the web server loses it's connection and doesn't reconnect after the database comes back up. Bellow is the Apache Startup script, The connect module I use, and the connection string I use in my perl scripts. Any suggestion on why Apache::DB

Re: advantages of mod_perl over java servlets

2004-08-11 Thread Jim Martinez
On Aug 11 harm wrote: > On Tue, Aug 10, 2004 at 04:33:07PM -0400, Perrin Harkins wrote: > > > On Tue, 2004-08-10 at 16:24, Xavier Noria wrote: > > > I am confident too, Slashdot runs on Perl for instance > > > > Slashdot, although of great interest to techies like us, is tiny. > > Amazon runs o

Re: APR::Base64 uses

2004-08-11 Thread Perrin Harkins
mock wrote: This is about to go out to CPAN, but since it seems there is some question as to how to do this, I'll send it out a little early. Attached is a module for safely encrypting and storing credit cards using the Business::OnlinePayment interface. Public key encryption is the best that can

Re: APR::Base64 uses

2004-08-11 Thread JupiterHost.Net
You used paper? Did someone break Google? :) http://www.google.com/search?q=define%3Aencode http://www.google.com/search?q=define%3Aencrypt [snip] stuff on the way to what i'm looking for. Doing a web search , i see a little on what i was looking for only and a great deal of ads. You don't use

Re: APR::Base64 uses

2004-08-11 Thread JupiterHost.Net
This sounds really awesome. Thanks. just what we need. Can one key decrypt the whole batch of cards? I didn't look to close but I'm thinking "no" since it was randomly generated, and a single key for them all would again make it pointless to do anything with it because all they need now is one p

Re: advantages of mod_perl over java servlets

2004-08-11 Thread Perrin Harkins
harm wrote: Is there some documentation about Amazon and Perl somewhere? http://masonhq.com/?AmazonDotCom -- Report problems: http://perl.apache.org/bugs/ Mail list info: http://perl.apache.org/maillist/modperl.html List etiquette: http://perl.apache.org/maillist/email-etiquette.html

Re: MP2: Simple config question...

2004-08-11 Thread Tom Schindl
Tim Howell wrote: I've just installed Apache2 and mod_perl2. I'm not quite sure what I need to add to my httpd.conf to enable mod_perl on a directory. I'm not doing anything fancy--I just want to have a directory where scripts are executed with mod_perl rather than traditional CGI. I've read the

MP2: Simple config question...

2004-08-11 Thread Tim Howell
I've just installed Apache2 and mod_perl2. I'm not quite sure what I need to add to my httpd.conf to enable mod_perl on a directory. I'm not doing anything fancy--I just want to have a directory where scripts are executed with mod_perl rather than traditional CGI. I've read the docs and configur

Re: APR::Base64 uses

2004-08-11 Thread Trond Michelsen
On Tue, Aug 10, 2004 at 04:00:58PM -0700, Bart Simpson wrote: >> APR::Base64 and APR::URI look pretty >> useful too. > What are some practical uses of APR::Base64? Encoding > credit card nums before storing in DB? Passwords? Well, Basic Authentication uses Base64 to encode the username/passwo

Re: advantages of mod_perl over java servlets

2004-08-11 Thread harm
On Tue, Aug 10, 2004 at 04:33:07PM -0400, Perrin Harkins wrote: > On Tue, 2004-08-10 at 16:24, Xavier Noria wrote: > > I am confident too, Slashdot runs on Perl for instance > > Slashdot, although of great interest to techies like us, is tiny. > Amazon runs on Perl. Is there some documentation

Re: APR::Base64 uses

2004-08-11 Thread Bart Simpson
--- mock <[EMAIL PROTECTED]> wrote: > On Tue, Aug 10, 2004 at 08:57:14PM -0400, Geoffrey > Young wrote: > > > > >>but hiding the decryption key from technical > people is generally > > >>impossible > > > > > > > > > Only if they crack your application server. > Cracking the database or > > >