Trying to Implement Web Session Control with Python
2 views
Skip to first unread message
Larry Davis
Jul 7, 2010, 11:07:40 PM7/7/10
to Orlando Python Users Group
Hello All,
I have a question about implementing session control in Python.
Here's the situation:
I have a LAMP setup with a head node directing traffic to multiple
servers for load balancing. My python cgi application requires that
each client to connect to the same backend server. I also need to
store information regarding the state of the client in the database in
case the user decides to pause and continue later.
Traditional session control methods would normally work. But because
of security concerns, I don't want to use URL based sessions or store
session information on the client computer via cookies. In addition,
IP address-based sessions can't guarantee a unique user in places
where multiple computers may share the same external IP address (like
libraries).
I've been trying to think of some kind of combination of methods to
solve this problem. Is there a library that exists that does this
already? Suggestions anyone?
Larry
I have a question about implementing session control in Python.
Here's the situation:
I have a LAMP setup with a head node directing traffic to multiple
servers for load balancing. My python cgi application requires that
each client to connect to the same backend server. I also need to
store information regarding the state of the client in the database in
case the user decides to pause and continue later.
Traditional session control methods would normally work. But because
of security concerns, I don't want to use URL based sessions or store
session information on the client computer via cookies. In addition,
IP address-based sessions can't guarantee a unique user in places
where multiple computers may share the same external IP address (like
libraries).
I've been trying to think of some kind of combination of methods to
solve this problem. Is there a library that exists that does this
already? Suggestions anyone?
Larry
Chad MILLER
Jul 8, 2010, 9:08:29 AM7/8/10
to orlan...@googlegroups.com
On Wed, Jul 7, 2010 at 23:07, Larry Davis <ldda...@gmail.com> wrote:
> Hello All,
>
> I have a question about implementing session control in Python.
> Here's the situation:
>
> I have a LAMP setup with a head node directing traffic to multiple
> servers for load balancing. My python cgi application requires that
> each client to connect to the same backend server. I also need to
> store information regarding the state of the client in the database in
> case the user decides to pause and continue later.
>
> Traditional session control methods would normally work. But because
> of security concerns, ...> Hello All,
>
> I have a question about implementing session control in Python.
> Here's the situation:
>
> I have a LAMP setup with a head node directing traffic to multiple
> servers for load balancing. My python cgi application requires that
> each client to connect to the same backend server. I also need to
> store information regarding the state of the client in the database in
> case the user decides to pause and continue later.
>
> Traditional session control methods would normally work. But because
Stop right there. Security is policy enforcement, and you should be
explicit about what policies you have in mind. We can't even begin to
help without knowing what you're trying to prevent. What are you
concerned about?
- chad
Chris Stewart
Jul 8, 2010, 9:09:41 AM7/8/10
to orlan...@googlegroups.com
Uhh... What Chad said :)
-chris
> --
> You received this message because you are subscribed to the Google Groups "Orlando Python Users Group" group.
> To post to this group, send email to orlan...@googlegroups.com.
> To unsubscribe from this group, send email to orlando-pug...@googlegroups.com.
> For more options, visit this group at http://groups.google.com/group/orlando-pug?hl=en.
>
>
Reply all
Reply to author
Forward
0 new messages