Max Bowsher wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> Ben Collins-Sussman wrote:
>>Actually, if there's enough inertia to add a new feature here, I'd
>>much rather see the authz-policy file gain the ability to "#include"
>>sub-files, much like the way httpd.conf is able to do. (Somebody here
>>already suggested that.)
>>In addition to solving the original poster's problem, it will add
> It doesn't solve the OP's problem, unless you have a complicated include
> system which doesn't just include, but also allows you to restrict
> included files to affect only a specific repository.
> In view of this, I don't really see what benefit an include capability
I was the one that initially brought up the include option - mainly as a
way to split the file without having to do as much of a change. I did not
intend the include mechanism to enforce anything - just to enable the
external enforcement of "file a for repository a"
I would much rather have the system natively understand this for various
> Note that the servers re-load and re-parse the config file for every
> connection - in the case of HTTP, this is a lot, and having to do this
> for multiple files could get quite unpleasant.
This is where having the auth file per repository would help - only the
auth file for the path/repository being requested would need to be read
in any one request. This could be a significant savings (albeit reasonable
in-core caching of the last read with timestamp checks would provide much
of the same benefit)
> Then, there is the difficultly of defining how to merge conflicting
> statements between multiple files.
> At the moment, I don't understand any use-cases for include.
Like I said, the rules would be to treat it just as a single file (other
than being able to have multiple groups sections - maybe)
Anyway, I would much rather have the per-repository authentication file.
I believe it would be able to provide the biggest benefits.
Michael Sinz Technology and Engineering Director/Consultant
"Starting Startups" mailto:email@example.com
My place on the web http://www.sinz.org/Michael.Sinz
To unsubscribe, e-mail: firstname.lastname@example.org
For additional commands, e-mail: email@example.com
Received on Fri Dec 2 03:27:30 2005