mod_authn_dbi

[Paul Querna <ch...@cyan.com>]

DW> Second SELECT %s FROM ... without the conf->rec.isactive_field most
DW> propably needs the AND %s!=0 wacked :-)

d`oh. Fixed :)
 
DW> dbi_escape() escape scares me - i.e. it lets unicode and other fun like
DW> \n, \r, nl/cr survive. Are we sure that all backend DB's can handle 
DW> that ? Or does the DBI interface make a very explicit promise that 
DW> you -only- have to escape \,' and " ?

I now use DBI's own escaping functions, which uses each drivers escaping function.

thanks for the comments and suggestions DW.

so.  What does everyone thing about including this in apache-2.1?

newest version is at:
http://open.cyanworlds.com/#AUTHN_DBI

-chip

Re: mod_authn_dbi

[Paul Querna <ch...@cyan.com>]

> I've yet to be convinced that any of these belong in the main repository.
> It'd be much easier to grant commit access to people working on the auth
> modules if they lived in a separate repository.  As it stands now, 
> the main author of mod_authn_dbi would have to rely on others to 
> commit fixes on his behalf.  IMHO, that isn't a healthy way to 
> foster the community.  -- justin

that sure would make it more difficult to do timely updates without cvs access.

making a httpd-auth cvs auth repository makes sense to me.

-chip

Re: mod_authn_dbi

[Justin Erenkrantz <ju...@erenkrantz.com>]

--On Wednesday, March 5, 2003 8:48 PM -0800 Ian Holsman <ia...@apache.org> 
wrote:

> I'm +1 on this as well.
> so.. whats the procedure to get this committed into the
> experimental/auth area?

As I said before, I don't believe these auth modules should be in the core - 
the people who are so interested in this can go create a new repository - call 
it httpd-auth or something.

I've yet to be convinced that any of these belong in the main repository. 
It'd be much easier to grant commit access to people working on the auth 
modules if they lived in a separate repository.  As it stands now, the main 
author of mod_authn_dbi would have to rely on others to commit fixes on his 
behalf.  IMHO, that isn't a healthy way to foster the community.  -- justin

Re: mod_authn_dbi

[Ian Holsman <ia...@apache.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dirk-Willem van Gulik wrote:
|
| On Tue, 4 Mar 2003, Paul Querna wrote:
|
|
|>so.  What does everyone thing about including this in apache-2.1?
|
|
| Though a separate auth module tree was discussed for things like this -
| note that this module is very database agnostic - and I'd argue that it
| may be good for the base distribution.
|
| Dw.
|

I'm +1 on this as well.
so.. whats the procedure to get this committed into the
experimental/auth area?

- --Ian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE+ZtMgq3pgvCz4ZCcRAhxOAKCGFGcQCK1adQp8lQuWMgeneHRiHwCffHKG
LlRjF9IBOqOJkPG4QQzPCcQ=
=WCyZ
-----END PGP SIGNATURE-----

Re: mod_authn_dbi

[Dirk-Willem van Gulik <di...@webweaving.org>]

On Tue, 4 Mar 2003, Paul Querna wrote:

> so.  What does everyone thing about including this in apache-2.1?

Though a separate auth module tree was discussed for things like this -
note that this module is very database agnostic - and I'd argue that it
may be good for the base distribution.

Dw.