| Andrew Cooke | Contents | Latest | RSS | Twitter | Previous | Next

C[omp]ute

Welcome to my blog, which was once a mailing list of the same name and is still generated by mail. Please reply via the "comment" links.

Always interested in offers/projects/new ideas. Eclectic experience in fields like: numerical computing; Python web; Java enterprise; functional languages; GPGPU; SQL databases; etc. Based in Santiago, Chile; telecommute worldwide. CV; email.

Personal Projects

Lepl parser for Python.

Colorless Green.

Photography around Santiago.

SVG experiment.

Professional Portfolio

Calibration of seismometers.

Data access via web services.

Cache rewrite.

Extending OpenSSH.

C-ORM: docs, API.

Last 100 entries

Calling C From Fortran 95; Bjork DJ Set; Z3 Example With Python; Week 1; Useful Guide To Starting With IJulia; UK Election + Media; Review: Reinventing Organizations; Inline Assembly With Julia / LLVM; Against the definition of types; Dumb Crypto Paper; The Search For Quasi-Periodicity...; Is There An Alternative To Processing?; CARDIAC (CARDboard Illustrative Aid to Computation); The Bolivian Case Against Chile At The Hague; Clear, Cogent Economic Arguments For Immigration; A Program To Say If I Am Working; Decent Cards For Ill People; New Photo; Luksic And Barrick Gold; President Bachelet's Speech; Baltimore Primer; libxml2 Parsing Stream; configure.ac Recipe For Library Path; The Davalos Affair For Idiots; Not The Onion: Google Fireside Chat w Kissinger; Bicycle Wheels, Inertia, and Energy; Another Tax Fraud; Google's Borg; A Verion That Redirects To Local HTTP Server; Spanish Accents For Idiots; Aluminium Cans; Advice on Spray Painting; Female View of Online Chat From a Male; UX Reading List; S4 Subgroups - Geometric Interpretation; Fucking Email; The SQM Affair For Idiots; Using Kolmogorov Complexity; Oblique Strategies in bash; Curses Tools; Markov Chain Monte Carlo Without all the Bullshit; Email Para Matias Godoy Mercado; The Penta Affair For Idiots; Example Code To Create numpy Array in C; Good Article on Bias in Graphic Design (NYTimes); Do You Backup github?; Data Mining Books; SimpleDateFormat should be synchronized; British Words; Chinese Govt Intercepts External Web To DDOS github; Numbering Permutations; Teenage Engineering - Low Price Synths; GCHQ Can Do Whatever It Wants; Dublinesque; A Cryptographic SAT Solver; Security Challenges; Word Lists for Crosswords; 3D Printing and Speaker Design; Searchable Snowden Archive; XCode Backdoored; Derived Apps Have Malware (CIA); Rowhammer - Hacking Software Via Hardware (DRAM) Bugs; Immutable SQL Database (Kinda); Tor GPS Tracker; That PyCon Dongle Mess...; ASCII Fluid Dynamics; Brandalism; Table of Shifter, Cassette and Derailleur Compatability; Lenovo Demonstrates How Bad HTTPS Is; Telegraph Owned by HSBC; Smaptop - Sunrise (Music); Equation Group (NSA); UK Torture in NI; And - A Natural Extension To Regexps; This Is The Future Of Religion; The Shazam (Music Matching) Algorithm; Tributes To Lesbian Community From AIDS Survivors; Nice Rust Summary; List of Good Fiction Books; Constructing JSON From Postgres (Part 2); Constructing JSON From Postgres (Part 1); Postgres in Docker; Why Poor Places Are More Diverse; Smart Writing on Graceland; Satire in France; Free Speech in France; MTB Cornering - Where Should We Point Our Thrusters?; Secure Secure Shell; Java Generics over Primitives; 2014 (Charlie Brooker); How I am 7; Neural Nets Applied to Go; Programming, Business, Social Contracts; Distributed Systems for Fun and Profit; XML and Scheme; Internet Radio Stations (Curated List); Solid Data About Placebos; Half of Americans Think Climate Change Is a Sign of the Apocalypse; Saturday Surf Sessions With Juvenile Delinquents; Ssh, tty, stdout and stderr; Feathers falling in a vacuum; Santiago 30m Bike Route

© 2006-2015 Andrew Cooke (site) / post authors (content).

Session Limitation with Acegi

From: "andrew cooke" <andrew@...>

Date: Mon, 27 Feb 2006 14:44:16 -0300 (CLST)

Sometimes it's useful to restrict a user a single session.  This
simplifies the logic needed to guarantee certain restrictions.

For example, I always want a user to have a minimum of one valid email
address.  With two parallel sessions and two valid emails a user could
delete one email in each session and I would need to verify consistency in
the database.  Restrictig to one session lets me implement the restriction
in the business logic.

However, the exact configuration was not obvious.  After some
experimentation the following seemed to work.

First, you need some way of detectig when sessions expire.  This is
largely automatic as long as you register the following in web.xml:

  <!-- used to track session events (single user session) -->
  <listener>
    <listener-class>org.acegisecurity.ui.\
      session.HttpSessionEventPublisher</listener-class>
  </listener>

I have all my authentication-related xml in web-authentication.xml (and
referenced via context-param in web.xml).  It includes:

  <bean id="authenticationManager"
    class="org.acegisecurity.providers.ProviderManager">
    <property name="sessionController" ref="singleSession"/>
    <property name="providers">
      ...
    </property>
  </bean>

  <bean id="sessionRegistry"
    class="org.acegisecurity.concurrent.SessionRegistryImpl"/>

  <bean id="singleSession"
    class="org.acegisecurity.concurrent.ConcurrentSessionControllerImpl">
    <property name="maximumSessions" value="1"/>
    <property name="exceptionIfMaximumExceeded" value="true"/>
    <property name="sessionRegistry" ref="sessionRegistry"/>
  </bean>

Which is all that is needed (I suspect sessionRegistry is supplied by
default anyway).

The way it seems to work is as follows:
- authenticationManager calls the appropriate provider
- if that succeeds, it calls sessionController
- sessionController applies the appropriate logic, using the information
  in sessionRegistry
- sessionRegistry is correct because of the event system (which includes
  the listener you registered).

Andrew

Session Limitation with Acegi blog post

From: "andrew cooke" <andrew@...>

Date: Fri, 10 Oct 2008 07:07:52 -0400 (CLT)

---------------------------- Original Message ----------------------------
From:    "m zyzy" <myzyzy@...>
Date:    Thu, October 9, 2008 10:40 pm
--------------------------------------------------------------------------

First of all, I am new in spring and acegi , and I know the post is a bit
old, but I am stuck with acegi v1.0.4 - Spring security V2.0.4 -wait for
me-We'll meet in my next project..

why you dont use this filter below ? is there an explanation as why you
didnt use it?
<bean id="concurrentSessionFilter"
class="org.acegisecurity.concurrent.ConcurrentSessionFilter">
      <property name="sessionRegistry"> <ref bean="sessionRegistry"/>
</property>
      <property name="expiredUrl" value="/login.jsp"/>
    </bean>

I also use the same config xml code as you wrote in the blog post but with
the addition of above code and it's work fine for me (of course, with the
above code , I need to add the concurrentSessionFilter in the
filterChainProxy's filter sequence).

-Second as we both use the way that to prevent second login attempt at a
time in different machine/browser , how to show a text message in a jsp
page to indicate that the unsuccessful second logger of user he/she is
trying to log in to is in used already currently? How this can be done?

Thanks .

No Idea!

From: "andrew cooke" <andrew@...>

Date: Fri, 10 Oct 2008 07:14:33 -0400 (CLT)

Hi,

No idea why I didn't use that - perhaps it wasn't around when I wrote the
code?  Perhaps I missed it?

Curiously, it's not mentioned at
http://www.acegisecurity.org/guide/springsecurity.html#concurrent-sessions
either.

I haven't used Acegi since this post, so I'm afraid I can't help more (but
thanks for posting - people do sometimes read this page, according to my
logs, so it will help them).

Cheers,
Andrew

Comment on this post