Hi List!
I forward a message received a few days ago from Rod Whitby
<Rod.Whitby at motorola.com>.
My reply to this suggestion is : authentication with en empty password
is IMHO way too much specific to your case, Rod, to be taken into account
for the official version. But it's just my 2 cents...
Loïc
---- Fwd -------------------
Subject: Potential patch for phpMyAdmin auth
From: Rod Whitby <Rod.Whitby(a)motorola.com>
Message-Id: <E1636QK-0007IT-00(a)usw-sf-web2.sourceforge.net>
Sender: nobody <nobody(a)sourceforge.net>
Date: Sun, 11 Nov 2001 18:02:08 -0800
I saw from the patch tracker that you are rewriting the
phpMyAdmin authentication routines.
I have a need for a particular type of authentication, and
wanted to check whether you were considering supporting
that style of authentication before I went to the trouble
of submitting my patch.
The style is that everyone is authenticated against the
HTTP server (via LDAP or some other non-MySQL means, for
example), and then I have entries in the user database for
people but have no password. The machine on which the web
server runs has restricted logins so I know that if someone
was able to log into the web server, then I can allow them
to log into MySQL server without a password (I still put in
a user entry for them, so I can restrict which databases
they have priviledges for).
So basically, I need a scheme where PHP_AUTH_USER and
PHP_AUTH_PW will be set to real values, but I only want to
use PHP_AUTH_USER and I want to ignore PHP_AUTH_PW.
At the moment I have a patch which does the following:
If the connect with PHP_AUTH_USER and PHP_AUTH_PW fails,
then try again with PHP_AUTH_USER and no password.
Is this something you are considering ?
Would what you are considering meet my needs some other
way ?
Should I just add another server config variable which says
to retry with no password on failure ?
I'd really like to get something into the standard
distribution so that I don't have to patch each new version
of phpMyAdmin myself locally.
Thanks,
Rod Whitby
--------------------------------------
______________________________________________________________________________
ifrance.com, l'email gratuit le plus complet de l'Internet !
vos emails depuis un navigateur, en POP3, sur Minitel, sur le WAP...
http://www.ifrance.com/_reloc/email.emailif
Hi Marc!
>However, beginners (and maybe pros) will prefer some quick links to click,
>than go to a separate index page.
>> Right but do you often create index on one field only?
>Yes! :)
OK so let's keep these links ;)
>But there will be complaints :)
>If we keep the current checkboxes, users will think that the index
>possibilities in phpMyAdmin are quite limited. If we remove them, they
>will see the complete index module on a separate page.
Well we can't really split table and index creation, at least because a
field
with the "auto_increment" property has to be defined as a primary index.
Loïc
______________________________________________________________________________
ifrance.com, l'email gratuit le plus complet de l'Internet !
vos emails depuis un navigateur, en POP3, sur Minitel, sur le WAP...
http://www.ifrance.com/_reloc/email.emailif
Hi Michal!
I've commited your patch a few hours ago and hopefully fixed the bug
your reported (my fault, my fault, my fault....)
I've beginning to work on the js you suggested but that's not so
easy :(
[About indexes links in "tbl_properties" actions]
>I thing that these actions are not needed anymore, but it is easiest to
>create index on one field using these actions than using advanced
editing...
Right but do you often create index on one field only?
[About checkboxes for indexes in table creation]
>At least there should stay checkbox for primary key.
Right at least because "auto_increment" fields require it.
Loïc
______________________________________________________________________________
ifrance.com, l'email gratuit le plus complet de l'Internet !
vos emails depuis un navigateur, en POP3, sur Minitel, sur le WAP...
http://www.ifrance.com/_reloc/email.emailif
Hi Michal and List!
Oops, It seems I didn't read your message before Michal, sorry...
>I've tested version in cvs and there are still some problems while adding
>fields to existing index. Tomorrow I'll have a look at it and probably make
>some fix of it.
What are these problems and do you manage to fix them?
>And there also could be some JavaScript that would disable non-text fields,
>while selecting index type "FULLTEXT".
Hum, I'll try to have a look at this tomorrow.
To all: two questions about indexes...
1. Do we still need "Primary, Index...." to be displayed in the table
properties
for each colums? IMHO the patch from Michal is enough and those features
are deprecated.
2. What to do whith indexes while creating a table? Should we keep this
feature as is (maybe just replace the three checkboxes by a combo) or
extend the index creation so it looks like the patch from Michal?
... and one more: what do you think of a 2.2.2-rc1 tomorrow (or maybe
a 2.3.0-rc1 since there are a bunch of new functionnalities ?)?
Regards,
Loïc
______________________________________________________________________________
ifrance.com, l'email gratuit le plus complet de l'Internet !
vos emails depuis un navigateur, en POP3, sur Minitel, sur le WAP...
http://www.ifrance.com/_reloc/email.emailif
Hi List!
I forward this message from John Down (thanks to him):
----------------------------------------------------------------------
don't know, if that breaks anything in your code, but it seems to work
for me:
there is something in common.lib.php that makes it impossible to
connect to mysql on a Windows System via Pipes.
It's on lines 298-301:
// Don't use servers with no hostname
if (empty($val['host'])) {
unset($cfgServers[$key]);
}
If I comment this out, Pipes are also possible.
I just wanted to mention, maybe there are some people interested in
the "skip-networking" option for mysql, which makes it possible to
operate without an open 3306 tcp port on Windoze also.
At least I never saw this somewhere documented, but if you give no
hostname, php connects via pipes on the localhost.
Funny: $cfgServers[1]['connect_type'] = 'tcp'; has no meaning in that
case...
Have a nice day,
Jones
--------------------------------------------------------------------------
______________________________________________________________________________
ifrance.com, l'email gratuit le plus complet de l'Internet !
vos emails depuis un navigateur, en POP3, sur Minitel, sur le WAP...
http://www.ifrance.com/_reloc/email.emailif
Hi Oli!
>wow, good luck :)
Most of the work is already done and commited in the
CVS. I'm just waiting for the translation to start fine
testings.
>And what about the session-based stuff ? Have you
>already started to code something, or could I work
>on it ?
Well I can't find time to work on it the past week-end
and I'm afraid I won't find time time to do it this week.
So work on it if you can.
>well... I think the default settings (TCP, localhost) are fine for
>mostely everybody. I guess there is a little overhead if you
>use the TCP socket, but that's shouldn't be too bad... Any
>idea from mysql programmers ? :)
I was just wondering whether the $cfgServers[i]['socket'] is
usefull or not. I mean why not to use socket if
$cfgServers[i]['socket'] is defined, tcp else?
Loïc
______________________________________________________________________________
ifrance.com, l'email gratuit le plus complet de l'Internet !
vos emails depuis un navigateur, en POP3, sur Minitel, sur le WAP...
http://www.ifrance.com/_reloc/email.emailif
Hi again!
I've just commited the patch from Michal Cihar that add
advanced generation/editing features for indexes.
Please test it.
Maybe we will have to debate on some improvements Michal
would like to implement before the plain 2.2.2 release.
Loïc
______________________________________________________________________________
ifrance.com, l'email gratuit le plus complet de l'Internet !
vos emails depuis un navigateur, en POP3, sur Minitel, sur le WAP...
http://www.ifrance.com/_reloc/email.emailif
Hi All!
I didn't roll 2.2.2-rc1 during the past week-end because I'm
waiting for the Arabic translation: since it requires some
meaningfull changes in the code (for right to left writing) I
would like to have it included in the rc1 so it can be tested
and fixed for the plain 2.2.2.
It would be nice if someone who knows a bit about the use
of socket may have a look at this thread in the phpWizard forum:
http://www.phpwizard.net/phorum/read.php?f=1&i=6538&t=6532
(see the last post from Juergen Selent).
Loïc
______________________________________________________________________________
ifrance.com, l'email gratuit le plus complet de l'Internet !
vos emails depuis un navigateur, en POP3, sur Minitel, sur le WAP...
http://www.ifrance.com/_reloc/email.emailif
Hi Marc!
>Loïc, do you need more testers of this patch?
>Will it go in 2.2.2?
Well have you tested the last beta? If you (and maybe others)
don't find bugs, I will commit it tonight (let's say about 5 or
6 hours from now).
Two notes:
- could you test the improvement I've commited this morning
while killing process (once killed, you should now come
back to the process list rather than the main page);
- I'm still searching a solution for bug #474943...
Loïc
______________________________________________________________________________
ifrance.com, l'email gratuit le plus complet de l'Internet !
vos emails depuis un navigateur, en POP3, sur Minitel, sur le WAP...
http://www.ifrance.com/_reloc/email.emailif
>mmm, if you can't look at the password column field, how can
>you check if the password is correct ? I don't get the point
>here :)
Since mysql_(p)connect will return an error or false if you try
to connect with an invalid login/password pair, you don't need
need to check it before. That's the way the current cvs version
(and also the 2.2.1) works (see "libraries/common.lib.php3").
>Olivier, from the first snowy day of the winter :)
Loïc, from the second snowy day of the winter :p
______________________________________________________________________________
ifrance.com, l'email gratuit le plus complet de l'Internet !
vos emails depuis un navigateur, en POP3, sur Minitel, sur le WAP...
http://www.ifrance.com/_reloc/email.emailif
