<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments for David Fischer dot Name</title>
	<atom:link href="http://www.davidfischer.name/comments/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.davidfischer.name</link>
	<description>Some Things to Some People</description>
	<lastBuildDate>Wed, 02 Jun 2010 15:03:50 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
	<item>
		<title>Comment on Django Scripting and the Crontab by David</title>
		<link>http://www.davidfischer.name/2010/02/django-scripting-and-the-crontab-2/comment-page-1/#comment-215</link>
		<dc:creator>David</dc:creator>
		<pubDate>Wed, 02 Jun 2010 15:03:50 +0000</pubDate>
		<guid isPermaLink="false">http://www.davidfischer.name/?p=400#comment-215</guid>
		<description>I discovered later that this had to do with my hosting provider rather than Django.</description>
		<content:encoded><![CDATA[<p>I discovered later that this had to do with my hosting provider rather than Django.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Django Scripting and the Crontab by Mandx</title>
		<link>http://www.davidfischer.name/2010/02/django-scripting-and-the-crontab-2/comment-page-1/#comment-213</link>
		<dc:creator>Mandx</dc:creator>
		<pubDate>Tue, 01 Jun 2010 15:54:07 +0000</pubDate>
		<guid isPermaLink="false">http://www.davidfischer.name/?p=400#comment-213</guid>
		<description>There is no need to change the current directory to where &quot;manage.py&quot; is in the crontab. Just give Python the full path to it, followong with the necesary parameters:


* * * * * python /home/path/to/project/manage.py mycommand
</description>
		<content:encoded><![CDATA[<p>There is no need to change the current directory to where &#8220;manage.py&#8221; is in the crontab. Just give Python the full path to it, followong with the necesary parameters:</p>
<p>* * * * * python /home/path/to/project/manage.py mycommand</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Django authentication and mod_wsgi by David</title>
		<link>http://www.davidfischer.name/2009/10/django-authentication-and-mod_wsgi/comment-page-1/#comment-212</link>
		<dc:creator>David</dc:creator>
		<pubDate>Wed, 26 May 2010 14:55:12 +0000</pubDate>
		<guid isPermaLink="false">http://www.davidfischer.name/?p=270#comment-212</guid>
		<description>Alessandro is correct. Without a middleware or something else, RPC4Django will not support some authenticated methods out of the box while others can be used by unauthenticated users. It&#039;s currently all or nothing.

There is currently a blueprint regarding adding a sort of &lt;a href=&quot;https://blueprints.launchpad.net/rpc4django/+spec/handle-authentication&quot; rel=&quot;nofollow&quot;&gt;out of the box authentication&lt;/a&gt; which would solve this but I have not had time to work on it.

I also want to talk about security in the next release. HTTP basic authentication really should not be used without SSL/TLS for maximum security. The new out of the box authentication will not solve the security issue. Unless you don&#039;t care about packet sniffing, passwords should be encrypted.</description>
		<content:encoded><![CDATA[<p>Alessandro is correct. Without a middleware or something else, RPC4Django will not support some authenticated methods out of the box while others can be used by unauthenticated users. It&#8217;s currently all or nothing.</p>
<p>There is currently a blueprint regarding adding a sort of <a href="https://blueprints.launchpad.net/rpc4django/+spec/handle-authentication" rel="nofollow">out of the box authentication</a> which would solve this but I have not had time to work on it.</p>
<p>I also want to talk about security in the next release. HTTP basic authentication really should not be used without SSL/TLS for maximum security. The new out of the box authentication will not solve the security issue. Unless you don&#8217;t care about packet sniffing, passwords should be encrypted.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Django authentication and mod_wsgi by Alessandro</title>
		<link>http://www.davidfischer.name/2009/10/django-authentication-and-mod_wsgi/comment-page-1/#comment-211</link>
		<dc:creator>Alessandro</dc:creator>
		<pubDate>Mon, 24 May 2010 10:44:23 +0000</pubDate>
		<guid isPermaLink="false">http://www.davidfischer.name/?p=270#comment-211</guid>
		<description>Hi,

the suggested method is not compatible with having both open and restricted methods, I solved the problem with a  tiny middleware and with the following directive in the virtual server conf:

&lt;code&gt;WSGIPassAuthorization On&lt;/code&gt;

The middleware :




&lt;pre&gt;&lt;code class=&quot;python&quot;&gt;
class HttpAuthMiddleware:
    &quot;&quot;&quot;
    Simple HTTP-Basic auth for testing webservices
    &quot;&quot;&quot;
    def process_request(self, request):
        auth_basic = request.META.get(&#039;HTTP_AUTHORIZATION&#039;)
        if auth_basic:
            import base64
            try:
                username , dummy,  password = base64.decodestring(auth_basic[6:]).partition(&#039;:&#039;)
                user = User.objects.get(username=username)
                if user.check_password(password):
                   request.user = user
            except User.DoesNotExist:
                pass
        return None
&lt;/code&gt;&lt;/pre&gt;

&lt;strong&gt;Edit:&lt;/strong&gt; Changes to formatting made by David.</description>
		<content:encoded><![CDATA[<p>Hi,</p>
<p>the suggested method is not compatible with having both open and restricted methods, I solved the problem with a  tiny middleware and with the following directive in the virtual server conf:</p>
<p><code>WSGIPassAuthorization On</code></p>
<p>The middleware :</p>
<pre><code class="python">
class HttpAuthMiddleware:
    """
    Simple HTTP-Basic auth for testing webservices
    """
    def process_request(self, request):
        auth_basic = request.META.get('HTTP_AUTHORIZATION')
        if auth_basic:
            import base64
            try:
                username , dummy,  password = base64.decodestring(auth_basic[6:]).partition(':')
                user = User.objects.get(username=username)
                if user.check_password(password):
                   request.user = user
            except User.DoesNotExist:
                pass
        return None
</code></pre>
<p><strong>Edit:</strong> Changes to formatting made by David.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Working with World Bank Data in R by David</title>
		<link>http://www.davidfischer.name/2010/04/working-with-world-bank-data-in-r/comment-page-1/#comment-210</link>
		<dc:creator>David</dc:creator>
		<pubDate>Fri, 21 May 2010 05:22:38 +0000</pubDate>
		<guid isPermaLink="false">http://www.davidfischer.name/?p=514#comment-210</guid>
		<description>While the population figure may not be too relevant to the energy use per capita (doh!), I still think there&#039;s something impressive that people today with all their computers and electronic devices are using the same or less energy than 35 years ago.</description>
		<content:encoded><![CDATA[<p>While the population figure may not be too relevant to the energy use per capita (doh!), I still think there&#8217;s something impressive that people today with all their computers and electronic devices are using the same or less energy than 35 years ago.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
