Re: (=DoD.net Collective=) User database

From: Chris Mooney (godsflaw@dod.net)
Date: Tue Oct 10 2000 - 14:11:54 PDT


           **************************************
           ********* DoD.net Collective *********
           **************************************

On Mon, Oct 09, 2000 at 11:30:58AM -0700, James M. Luedke wrote:
> Sup: everyone.

Hey bro. So I will do the best I can to answer the things I already
know about.

>
> > oddity@unixpunx.org wrote:

<-*- SNIP -*->

>
> +++ This sound's like a good idea to me. Only one question, are there
> any security restrictions on (shm)? I.E. will the daemon have to run as
> user webserv in order to access the shared memory?

I would prefer to do this for security reasons. But I think I see the
question. If the memory is shared do all users have access to it. Or
can you do this by group. That way not all users will have the ability
to access the memory. If the daemons need to retrieve information from
the memory can the user ID they are running under access this
information straight from memory? Or will the library need to
authenticate itself to the daemon before it can retrieve any information.
This would mean that the only user allowed to access the shared memory
would be the daemon.

> (not that this would
> be a problem) Or do you just use a ipc_perm struct as if using normal
> IPC? I have a limited knowledge of shm + ipc, so any info you could give
> me to help me understand it better would be great. =)

I think I am with blindcry on this one. I need more information on IPC
and SHM. How can we secure the shared memory segments from normal user
access?

>

<-*- SNIP -*->

>
> Everything sound's great.
>
> >
> > Just keep in mind the primary objectives of having our own database and
> > not just using a pre-made one:
>
> +++ Is this going to just be proprietary or do we plan on using the
> database on other projects as well.

Well this project will just be using a custom database. This means
that MySQL will still be free for use by the WFEs.

> The reason why I am curious is that
> I plan on doing allot of database driven WFE (web front ends) and right
> now they rely on mySQL. In the future I imagine we will get allot of
> traffic hitting the web-based DB's and worry the mySQL may not handle
> the load, I worry that searches may take to long, especially in the case
> of the news, and event apps coming in the near future. This may not be a
> problem any thoughts?

There is always going to be a breaking point. I am not sure about how
efficient MySQL can handle incoming requests. Obviously if you were to
have the time to write your own database it would be much quicker.
Simply not needing all the extra crap that MySQL has in there will speed
things up immensely. For now I say we go with it and hopefully darkside
and MySQL can handle the requests with a fair amount of speed.

>
> > FAST, effecient lookups of common data (shared memory segment)
> > Customizable in every way
> > Secure for retrivals/lookups across the internet.
> > Modular (can put it on any machine, anywhere)
> > (any others?)
> >
> > -Eric
> >
> This plan look's great, I am very excited!

So here is the other question. I was expecting that you would be
writing the WFEs for the account management stuff. Do you think that you
will have the time to work on the other portions of this project? I know
that next you will be tackling the Distro server. While you are doing
that we are probably going to work on the database and the billing
system. With the billing system out of the way I can gain some spare
cycles and work on the more important stuff. I imagine that these two
steps will take about as long as it will take you to do the distro
stuff. After you are finished with the distro stuff will you be joining
us on this project? Or are there other things that your going to try
and do after the distro server ( like fix bugs in the news server =P )?
let me know what your plans are after the distro server.

>
>
> Rock, Revolution, and Rebellion... James . . .
> --
>
>
>
> ___blindcry_____________________________
> - "Great things remain for the great." -
> ----------------------------------------
> http://home.dod.net - webmaster@dod.net
>
>

Chris

-- 
=====================================================================
| Chris Mooney			      | UNIX Systems Administrator  |
| Daemons ofThe Damned		      | http://home.dod.net/	    |
| P.O. Box 640760		      | Tel: (619) 665-3845	    |
| San Jose, CA  95164		      | godsflaw@dod.net	    |
=====================================================================

********************************************************* *If you would like to unsubscribe from this mailing list* *please e-mail mail-lists@dod.net with the following in * *the body of the message. * * * * unsubscribe collective * * * *If for any reason you need to contact the administrator* *of this list please mail owner-collective@dod.net. You* *can access the archives and more information about this* *list by going to http://www.dod.net/collective/ . * *********************************************************



This archive was generated by hypermail 2b29 : Wed Oct 11 2000 - 23:26:07 PDT