Apache mod_python and Sessions

[Markus Schaber]

Hi,

Does anybody know a module that works with Apache 1.3 mod_python and provides session tracking?

I tried pso, but this didn't work as it should. Running in mod_python gives me one session per server process, and the session data is not rewritten to disk. Explicitly calling session.save() (as stated in the doc) fails with the error message that a dictionary doesn't have the "save" attribute. Calling it as CGI sputs the log files with error messages about missing permissions.

The apache-provided mod_session seems to miss python bindings.

I tried to google, but only found perl modules (except the pso package that doesn't work.)


Does anybody know a working solution?

Thanks,
Markus

 

[Dale Strickland-Clak]

Markus Schaber pushed the bounds of literature with:

Hi,

Does anybody know a module that works with Apache 1.3 mod_python and
provides session tracking?

<Snip>
Thanks,
Markus

This is pretty easy to do by hand using MD5 and a cookie.

 

[Van Gale]

Hi,

Does anybody know a module that works with Apache 1.3 mod_python and provides session tracking?

Most of the python web programming frameworks have session handling.
Here are a few:

Quixote http://www.mems-exchange.org/software/quixote/doc/
Albatross http://www.object-craft.com.au/projects/albatross/
Webware http://webware.sourceforge.net/
Jonpy http://jonpy.sf.net
Spyce http://spyce.sf.net
JOTweb http://jotweb.tummy.com/

More information can be found at:

http://www.python.org/cgi-bin/moinmoin/WebProgramming
http://colorstudy.com/docs/shootout.html

Here's an example of a module that does its own session handling using
MySQL for storage:

http://cvsview.tldp.org/index.cgi/L...y=author&content-type=text/vnd.viewcvs-markup

Van Gale

 

[Ng Pheng Siong]

Markus Schaber pushed the bounds of literature with:

This is pretty easy to do by hand using MD5 and a cookie.

Throw in a secret and get HMAC-MD5.

See AuthCookies in M2Crypto, http://www.post1.com/home/ngps/m2

 

[Markus Schaber]

Hi,

Does anybody know a module that works with Apache 1.3 mod_python and
provides session tracking?

Thanks for all that answered, I now found the nice debian package
python_weblib that does what I need (Additionally, my boss suggested
that we should not use mod_python but CGI instead.)

I just was too stupid by including "apache" in all my search requests on google and apt-cache - this filtered out lots of useful answers...

Thanks,
Markus

 

[Irmen de Jong]

python_weblib that does what I need (Additionally, my boss suggested
that we should not use mod_python but CGI instead.)

What!? Why!?
Any sane explanation why you should go with slow, outdated CGI scripts
instead of the nice, fast web server integration of mod_python?

--Irmen

 

[Markus Schaber]

Hello,

What!? Why!?
Any sane explanation why you should go with slow, outdated CGI scripts
instead of the nice, fast web server integration of mod_python?

The script will have a very low usage (maybe about ten sessions a month). And it spends lots of time doing ldap database queries, so the starting overhead doesn't hurt so much.

Additionally, the webserver currently doesn't have mod_python installed, and there is the fear that every additional module has disadvantages (bigger startup/fork time, potential bugs, memory footprint).

I hope that these two argumens are "sane" in your world, at least they are sane enough for my boss.

Greets,
Markus

 

[Irmen de Jong]

The script will have a very low usage (maybe about ten sessions a month).
And it spends lots of time doing ldap database queries, so the starting
overhead doesn't hurt so much.

This clears it all up. No further comments ;-)

--Irmen