[956] in RedHat Linux List

home help back first fref pref prev next nref lref last post

Re: Apache 1.1.1 & Caching Passwds

daemon@ATHENA.MIT.EDU (Tim Goeke)
Fri Oct 25 15:05:55 1996

Date: Fri, 25 Oct 1996 13:00:32 -0500
To: redhat-list@redhat.com
From: tgoeke@prismrsc.com (Tim Goeke)
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com


>
>You could do this with cookies - when you authenticate, send a cookie with
>an expiration date 1 minute in the future.  Write a cgi that requests the
>cookie before sending the html page, and if it gets the cookie, sends
>another one with another 1 minute expiration.
>

The problem with cookie expiration is that it is client-time dependent.
Since you can't syncronize every client on the 'Net, the expiration times
have to very long or the some users will have to login a lot and others will
never time out.

The only sure way to do it is to set the server time in a cookie and then
manually "expire" the cookie when the user hits the site.  This requires
either a server object (API) or a CGI based site.

-Tim Goeke
-tgoeke@prismrsc.com


--
  PLEASE read the Red Hat FAQ, Tips, HOWTO and the MAILING LIST ARCHIVES!
  ________________________________________________________________________
  http://www.redhat.com/RedHat-FAQ   http://www.redhat.com/RedHat-HOWTO 
  http://www.redhat.com/RedHat-Tips  http://www.redhat.com/mailing-lists
  ------------------------------------------------------------------------
To unsubscribe: mail -s unsubscribe redhat-list-request@redhat.com < /dev/null


home help back first fref pref prev next nref lref last post