- tbnl-devel@common-lisp.net - mailman3.common-lisp.net

Re: [hunchentoot-devel] CMUCL vs SBCL: server speed
by Edi Weitz 04 Dec '06

04 Dec '06

[Please use the mailing list.} On Sun, 3 Dec 2006 14:24:52 -0800, Jeffrey Cunningham <jeffrey(a)cunningham.net> wrote: > Hmmm. That's interesting. I just tried both at once and it killed > CMUCL (running under slime). I guess my unstable collection of CMUCL > + Slime + various CL packages don't all like each other yet. I think one of the links I sent talks about issues with SLIME. I'm sure Google will find something for you, but ISTR that the general wisdom is that these two don't mix well - the guys on the SLIME or CMUCL mailing list will probably know more about it. Cheers, Edi.

1 0

[hunchentoot-devel] CMUCL vs SBCL: server speed
by Jeffrey Cunningham 03 Dec '06

03 Dec '06

I thought I'd share some observations concerning a big difference in server speed I've observered between CMUCL (19d) and SBCL (0.9.18). I've been working on a small website consisting of six or eight pages, each with mixed text and graphics (images from a few k up to 80k) using Hunchentoot as the server. Running it with CMUCL I noticed that the page load times were rather slow (2-5 seconds to all the images) I tried serving all the images out of ram (as in Edi's example), but it really made little differnce. It didn't matter whether I was browsing it via localhost or over the internet - the server was too slow for anything but a testbench. After the problems I had trying to get SSL to work with CMUCL, I decided to get the test site running with SBCL. (I hadn't worked with SBCL before, so it took some reworking). It was well worth the trouble: the page loading speed is now so fast I can't really measure it - fractions of a second. Question: does anyone know a way to profile handlers? I tried the usual method using TIME, but its alot of trouble trying to capture its output, and anyway it returns all 0 times and a few thousand cons', which is clearly not right. Regards, --Jeff

4 3

[hunchentoot-devel] tbnl
by Jeffrey Cunningham 03 Dec '06

03 Dec '06

I wondering if I'm doing something wrong, or if the DELETE-SESSION-VALUE function is broken. I set some values using strings for symbols. They work fine with SESSION-VALUE, but if I try to use DELETE-SESSION-VALUE they're still there. I can null them out, but they're still show up as session values (of NULL). Has anyone else seen this behavior? Regards, --Jeff

2 1

[hunchentoot-devel] loop over session values?
by Jeffrey Cunningham 02 Dec '06

02 Dec '06

Is there a way to loop over all the session-values that have been set in a session? Something like DO-SESSION-VALUES? The only way I can think to do it now involves exploiting the structure of *session* object, which is supposed to be considered opaque. --Jeff

2 1

[hunchentoot-devel] Expired sessions
by Nico de Jager 01 Dec '06

01 Dec '06

Hi How do I get rid of expired sessions in hunchentoot without deleting valid sessions ("reset-sessions" invalidates and destroys all sessions)? When looking at the sessions returned by "do-sessions", it seems that expired sessions are only removed once a user tries to reuse the expired session. But what if the user never revisits the site, will his/her expired session remain in the session list? (Or remain at least until the next call to "reset-sessions", which will also delete active sessions). How do I identify expired sessions when traversing the sessions with "do-session", or do I have to manually keep track of this? Thanks. Nico

2 6

[hunchentoot-devel] Progress with SSL
by Jeffrey Cunningham 01 Dec '06

01 Dec '06

I've made some progress with my stand-alone server using SSL but still can't quite get it to work. I'm hoping someone will have an new idea. I finally figured out how to correctly generate the CA files without passwords. I start the server like this: (hunchentoot:start-server :port 4000 :ssl-certificate-file "CA3/ca-cert.pem" :ssl-privatekey-file "CA3/private/ca-key.pem") When I point a browser at the url https://achilles.olympus.net:4000/test it brings up a dialog box asking if I want to accept this unrecognized certificate. I say "yes" and it then times out after about fifteen seconds without producing any html. I know it is going through the test html generator because I added a log-messages statement in it and it writes my message to the log. And I know the html generator works alright because if I run the same server without SSL it generates the test page as it should. Any ideas? Regards, --Jeff

2 3

[hunchentoot-devel] How to enable directory browsing?
by vedm 26 Nov '06

26 Nov '06

When I point the browser to a directory, I want to see a list of the files in that directory - how can I do this with hunchentoot? -- vedm

4 3

[hunchentoot-devel] How do I run a standalone server on port 80?
by Jeffrey Cunningham 25 Nov '06

25 Nov '06

I've been bothering Edi in a private email thread that really should have been directed to the list (sorry Edi). Here's the thread: > On Fri, 24 Nov 2006 08:36:33 -0800, Jeffrey Cunningham <jeffrey(a)cunningham.net> wrote: > > > You say something in your comments about SETUID and SETGID on the > > process to something other than root, but I don't know how to do > > that other than write a little C-code. Is there another way? If I > > understand you correctly, the idea would be to launch the server as > > root, then change the UID and GID for the running process. > > http://weitz.de/hunchentoot/#start-server > Yes, those were the comments I was referring to : "On Unix you can use setuid and setgid to change the UID and GID of the process directly after the server has been started. (You might want to do this if you're using a privileged port like 80.) setuid and setgid can be integers (the actual IDs) or strings (for the user and group name respectively)." Forgive me if this is obvious, but I don't understand. In order to start the server from lisp running as a regular user, I have to specify a port. If I specify :port 80, it fails with an error message that the port is priviliged. So, I don't see how I could change setuid and setgid "after the server has been started". I see that in the UNIX package there are two functions: 'setuidexec and 'setgidexec. Would it work to call these *before* starting the server? I apologize for taking so much of your time. Regards, -Jeff I think maybe I figured it out. I should start the server from lisp running as root, but using setuid and setgid values for a non-privileged user. I was looking at your code and it appears you switch them after the server has started. One of the things I really like about your server is the ability to hack the handler code on the fly while the server is operating. Wouldn't this be a little dangerous if I have to run from lisp as root? --Jeff

2 2

[hunchentoot-devel] Re: setuid/setgid
by Edi Weitz 25 Nov '06

25 Nov '06

On Fri, 24 Nov 2006 11:28:27 -0800, Jeffrey Cunningham <jeffrey(a)cunningham.net> wrote: > I think maybe I figured it out. I should start the server from lisp > running as root, but using setuid and setgid values for a > non-privileged user. I was looking at your code and it appears you > switch them after the server has started. > > One of the things I really like about your server is the ability to > hack the handler code on the fly while the server is > operating. Wouldn't this be a little dangerous if I have to run from > lisp as root? [Please use the mailing list.] Once you've called START-SERVER with setuid/setgid, you're no longer root, so to say.

1 0

[hunchentoot-devel] setuid/setgid
by Edi Weitz 25 Nov '06

25 Nov '06

On Fri, 24 Nov 2006 11:14:51 -0800, Jeffrey Cunningham <jeffrey(a)cunningham.net> wrote: > On Fri Nov 24, 2006 at 06:41:07PM +0100, Edi Weitz wrote: >> On Fri, 24 Nov 2006 08:36:33 -0800, Jeffrey Cunningham <jeffrey(a)cunningham.net> wrote: >> >> > You say something in your comments about SETUID and SETGID on the >> > process to something other than root, but I don't know how to do >> > that other than write a little C-code. Is there another way? If I >> > understand you correctly, the idea would be to launch the server >> > as root, then change the UID and GID for the running process. >> >> http://weitz.de/hunchentoot/#start-server > > Yes, those were the comments I was referring to : > > "On Unix you can use setuid and setgid to change the UID and GID of > the process directly after the server has been started. (You might > want to do this if you're using a privileged port like 80.) setuid > and setgid can be integers (the actual IDs) or strings (for the user > and group name respectively)." > > Forgive me if this is obvious, but I don't understand. In order to > start the server from lisp running as a regular user, I have to > specify a port. If I specify :port 80, it fails with an error > message that the port is priviliged. So, I don't see how I could > change setuid and setgid "after the server has been started". I see > that in the UNIX package there are two functions: 'setuidexec and > 'setgidexec. Would it work to call these *before* starting the > server? [Please use the mailing list.] You start the Lisp image as root, load Hunchentoot, then call START-SERVER with the corresponding setuid/setgid arguments. That's basically how Apache and other apps do it as well (or AllegroServe). Cheers, Edi.

1 0