arsperl-users

[Arsperl-users] Using ARSPerl to Build a Web Interface

[Mike W. <mdw...@gm...>]

Hey all.

So I'm working on a proof of concept idea for myself. I want to look
into rolling my own web interface to Remedy using ARSPerl, and before
I go too far down that road, I wanted to ask everyone to share any and
all experiences (if any) they may have had. I'm fairly familiar with
Perl development for tools and the like, but I'm new to using Perl for
web interfaces (but not web interfaces in general).

Specifically:

1.) How would one go about keeping a user's session in tact? I'd like
to have a control record for each individual user, rather than write
code to always log in to the server with a static username/password,
and then "proxy" that superuser to a "real" user. Is this even
possible/a good idea? Would it be possible to implement this at the
Apache server level using mod_perl or something similar?

2.) (a bit OT): Since I'm new to Perl web development, are there any
sort of best practices or guidelines for Perl web development? Should
I be using mod_perl, CGI, roll my own, etc.?

I've been scanning the mod_perl docs, and that looks promising, but
before I get too deep, I wanted to see if anyone had an opinion about
whether this is even worth the time or not.

Thanks everyone.

Mike

Re: [Arsperl-users] Using ARSPerl to Build a Web Interface

[Axton W Grams/N. <Axt...@ne...>]

I assume you will be writing the interface as a perl CGI.

Question 1: Using a Session Cookie is one way
http://www.webmasterworld.com/forum13/4021.htm
http://jan.newmarch.name/ecommerce/session.html
http://www.perlmonks.org/?node_id=2746

Question 2: mod_perl is an apache thing.  writing your apps as a cgi 
script will ensure that people on any web server capable of cgi can run 
the scripts.  I run the arswiki.org bugzilla app using mod_perl, but it 
was originally run as a cgi.  mod_perl does require much more memory than 
a regular cgi, but on the flip-side, it is also much faster.


Axton Grams





"Mike Wallick" <mdw...@gm...> 
Sent by: ars...@ar...
06/26/2007 12:15 PM
Please respond to
ARSperl User Discussion <ars...@ar...>


To
ars...@ar...
cc

Subject
[Arsperl-users] Using ARSPerl to Build a Web Interface






Hey all.

So I'm working on a proof of concept idea for myself. I want to look
into rolling my own web interface to Remedy using ARSPerl, and before
I go too far down that road, I wanted to ask everyone to share any and
all experiences (if any) they may have had. I'm fairly familiar with
Perl development for tools and the like, but I'm new to using Perl for
web interfaces (but not web interfaces in general).

Specifically:

1.) How would one go about keeping a user's session in tact? I'd like
to have a control record for each individual user, rather than write
code to always log in to the server with a static username/password,
and then "proxy" that superuser to a "real" user. Is this even
possible/a good idea? Would it be possible to implement this at the
Apache server level using mod_perl or something similar?

2.) (a bit OT): Since I'm new to Perl web development, are there any
sort of best practices or guidelines for Perl web development? Should
I be using mod_perl, CGI, roll my own, etc.?

I've been scanning the mod_perl docs, and that looks promising, but
before I get too deep, I wanted to see if anyone had an opinion about
whether this is even worth the time or not.

Thanks everyone.

Mike

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Arsperl-users mailing list
Ars...@ar...
https://lists.sourceforge.net/lists/listinfo/arsperl-users

Re: [Arsperl-users] Using ARSPerl to Build a Web Interface

[Mike W. <mdw...@gm...>]

Forgive me for being dense, but I don't understand how one would tie a
control record that was created from a login routine, for example, to a
session ID or similar. Given a session ID, how does one tie that to a
control record that has already been created/validated?

In other words, where does the control record "live" and how does one get at
it? Doesn't the control record "disappear" once the web server request is
complete?

Mike

On 6/26/07, Axton W Grams/NYLIC <Axt...@ne...> wrote:
>
>
> I assume you will be writing the interface as a perl CGI.
>
> Question 1: Using a Session Cookie is one way
> http://www.webmasterworld.com/forum13/4021.htm
> http://jan.newmarch.name/ecommerce/session.html
> http://www.perlmonks.org/?node_id=2746
>
> Question 2: mod_perl is an apache thing.  writing your apps as a cgi
> script will ensure that people on any web server capable of cgi can run the
> scripts.  I run the arswiki.org bugzilla app using mod_perl, but it was
> originally run as a cgi.  mod_perl does require much more memory than a
> regular cgi, but on the flip-side, it is also much faster.
>
>
> Axton Grams
>
>
>
>
>  *"Mike Wallick" <mdw...@gm...>*
> Sent by: ars...@ar...
>
> 06/26/2007 12:15 PM  Please respond to
> ARSperl User Discussion <ars...@ar...>
>
>   To
> ars...@ar...  cc
>
>  Subject
> [Arsperl-users] Using ARSPerl to Build a Web Interface
>
>
>
>
>
>
> Hey all.
>
> So I'm working on a proof of concept idea for myself. I want to look
> into rolling my own web interface to Remedy using ARSPerl, and before
> I go too far down that road, I wanted to ask everyone to share any and
> all experiences (if any) they may have had. I'm fairly familiar with
> Perl development for tools and the like, but I'm new to using Perl for
> web interfaces (but not web interfaces in general).
>
> Specifically:
>
> 1.) How would one go about keeping a user's session in tact? I'd like
> to have a control record for each individual user, rather than write
> code to always log in to the server with a static username/password,
> and then "proxy" that superuser to a "real" user. Is this even
> possible/a good idea? Would it be possible to implement this at the
> Apache server level using mod_perl or something similar?
>
> 2.) (a bit OT): Since I'm new to Perl web development, are there any
> sort of best practices or guidelines for Perl web development? Should
> I be using mod_perl, CGI, roll my own, etc.?
>
> I've been scanning the mod_perl docs, and that looks promising, but
> before I get too deep, I wanted to see if anyone had an opinion about
> whether this is even worth the time or not.
>
> Thanks everyone.
>
> Mike
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2 express and take
> control of your XML. No limits. Just data. Click to get it now.
> http://sourceforge.net/powerbar/db2/
> _______________________________________________
> Arsperl-users mailing list
> Ars...@ar...
> https://lists.sourceforge.net/lists/listinfo/arsperl-users
>
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2 express and take
> control of your XML. No limits. Just data. Click to get it now.
> http://sourceforge.net/powerbar/db2/
> _______________________________________________
> Arsperl-users mailing list
> Ars...@ar...
> https://lists.sourceforge.net/lists/listinfo/arsperl-users
>
>

Re: [Arsperl-users] Using ARSPerl to Build a Web Interface

[Carey M. B. <bla...@gm...>]

Mike,

Ref:
http://www.webopedia.com/TERM/S/session_cookie.html
http://www.allaboutcookies.org/cookies/session-cookies-used-for.html
http://searchwebservices.techtarget.com/sDefinition/0,,sid26_gci752450,00.html


IMHO... this is a bad way to keep state for a web site. It is client side
and could present security concerns if your browser is flawed. (Like maybe
the most popular choice... IE.)


If I were you... I would start at a better staring point. Try the Java API
and go to the JSP/Servlet model for this approach. And here are just a few
reasons why:

1) Most ARS customers will have a web server capible of being a Mid-tier
server. (And your interface might be helpful in some cases in addition to
the Mid-Tier.)
2) JSP/Servlets are a "later generation" and approach the web with more
security options by design than CGI's ever had.
3) The Java API will be supported by BMC. ARSPerl never has been directly
supported by Remedy or BMC.
4) The new Java API is reported to be "totally Java" (no more JNI layer) and
that will make such a web interface as portable as any JSP engine out there.
And that will be more portable than any ARSPerl interface could be because
it will still be (as far as I know) a wrapper around the C API that has
limited platform support.

But that might be more work than your interested in too. ( I just think it
is a much better path to go down if you have any time to spend on such a
major undertaking.)

HTH.

AND just to be clear... ARSPerl is great. It has served a very needed niche
in the ARS universe for years and I expect it to continue to do so. A
command line Perl script is likely faster than a command line Java program.
However, there are support and maintenance issues to sort out too. So for
server side command line scripting... ARSPerl is still a good choice. Time
will tell if the new Java API can put a dent in that niche or not. ( And
given the Filter plugin options... command line interfaces mostly should be
moved into that universe anyway.)

-- 
Carey Matthew Black
Remedy Skilled Professional (RSP)
ARS = Action Request System(Remedy)

Love, then teach
Solution = People + Process + Tools
Fast, Accurate, Cheap.... Pick two.

On 6/26/07, Mike Wallick <mdw...@gm...> wrote:
>
> Forgive me for being dense, but I don't understand how one would tie a
> control record that was created from a login routine, for example, to a
> session ID or similar. Given a session ID, how does one tie that to a
> control record that has already been created/validated?
>
> In other words, where does the control record "live" and how does one get
> at it? Doesn't the control record "disappear" once the web server request is
> complete?
>
> Mike

Re: [Arsperl-users] Using ARSPerl to Build a Web Interface

[Mike W. <mdw...@gm...>]

That's what I get for writing an email in a hurry :) I wasn't all that
clear on what I was asking.

What I was asking originally was not how to maintain state (that I
knew), what I was wondering was if/how I could use references to a
server-side control record by way of tying it to an http session,
rather than create a new control record on every request. As far as I
can tell, that isn't quite possible in ARSPerl (or, at least I can't
figure out how).

The Java API/JSP/Servlet method was another avenue that I was
considering, but since I know Perl better than Java ("web" Java,
anyway), I started with ARSPerl.

I've been playing with the Java API for a few days now, and I'm
finding that it's not all that easy to use. I saw on ARSWiki that
there is an "api" to the API provided by the JOARSE project. Is anyone
actively using JOARSE or is it kind of a dead project? I was thinking
of writing a layer on top of the BMC Java API to make it easier to
use, but I don't want to reinvent the wheel if someone else has
already done something similar. I'd even like to contribute to the
project if there's a need.

Thanks for the feedback, by the way; this is exactly the kind of
information I'm looking for.

Mike

On 6/27/07, Carey Matthew Black <bla...@gm...> wrote:
> Mike,
>
> Ref:
> http://www.webopedia.com/TERM/S/session_cookie.html
> http://www.allaboutcookies.org/cookies/session-cookies-used-for.html
> http://searchwebservices.techtarget.com/sDefinition/0,,sid26_gci752450,00.html
>
>
> IMHO... this is a bad way to keep state for a web site. It is client side
> and could present security concerns if your browser is flawed. (Like maybe
> the most popular choice... IE.)
>
>
> If I were you... I would start at a better staring point. Try the Java API
> and go to the JSP/Servlet model for this approach. And here are just a few
> reasons why:
>
> 1) Most ARS customers will have a web server capible of being a Mid-tier
> server. (And your interface might be helpful in some cases in addition to
> the Mid-Tier.)
> 2) JSP/Servlets are a "later generation" and approach the web with more
> security options by design than CGI's ever had.
> 3) The Java API will be supported by BMC. ARSPerl never has been directly
> supported by Remedy or BMC.
> 4) The new Java API is reported to be "totally Java" (no more JNI layer) and
> that will make such a web interface as portable as any JSP engine out there.
> And that will be more portable than any ARSPerl interface could be because
> it will still be (as far as I know) a wrapper around the C API that has
> limited platform support.
>
> But that might be more work than your interested in too. ( I just think it
> is a much better path to go down if you have any time to spend on such a
> major undertaking.)
>
> HTH.
>
> AND just to be clear... ARSPerl is great. It has served a very needed niche
> in the ARS universe for years and I expect it to continue to do so. A
> command line Perl script is likely faster than a command line Java program.
> However, there are support and maintenance issues to sort out too. So for
> server side command line scripting... ARSPerl is still a good choice. Time
> will tell if the new Java API can put a dent in that niche or not. ( And
> given the Filter plugin options... command line interfaces mostly should be
> moved into that universe anyway.)
>
> --
> Carey Matthew Black
> Remedy Skilled Professional (RSP)
> ARS = Action Request System(Remedy)
>
> Love, then teach
> Solution = People + Process + Tools
> Fast, Accurate, Cheap.... Pick two.
>
>
> On 6/26/07, Mike Wallick <mdw...@gm...> wrote:
> > Forgive me for being dense, but I don't understand how one would tie a
> control record that was created from a login routine, for example, to a
> session ID or similar. Given a session ID, how does one tie that to a
> control record that has already been created/validated?
> >
> > In other words, where does the control record "live" and how does one get
> at it? Doesn't the control record "disappear" once the web server request is
> complete?
> >
> > Mike
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2 express and take
> control of your XML. No limits. Just data. Click to get it now.
> http://sourceforge.net/powerbar/db2/
> _______________________________________________
> Arsperl-users mailing list
> Ars...@ar...
> https://lists.sourceforge.net/lists/listinfo/arsperl-users
>
>

Re: [Arsperl-users] Using ARSPerl to Build a Web Interface

[Axton W Grams/N. <Axt...@ne...>]

Sounds like what you are trying to do is emulate the session pool/proxy 
that the java api provides, using arsperl.  I am not sure how you would 
approach this.  Most interpreted languages have a problem with persistence 
with things like this, unless there is a way to serialize the data.  I'm 
not sure how you could do that with arsperl; just don't have the skills 
and knowledge to work at that level.

I've contributed some to JOARSE, mainly to be compliant with the 7.x api. 
I would not say the project is dead, it has been maintained, but it does 
not have the widespread adoption of things like arsperl.

If you can, I would suggest waiting until 7.1 is released; to see if the 
new java api is all that I am hearing it is.  I am going to take a guess 
that the new java api, if a complete rewrite/rearchitecture will be bug 
ridden for some time, but the best way for things like this to mature is 
for people to use it and report back to the vendor.

Axton Grams




That's what I get for writing an email in a hurry :) I wasn't all that
clear on what I was asking.

What I was asking originally was not how to maintain state (that I
knew), what I was wondering was if/how I could use references to a
server-side control record by way of tying it to an http session,
rather than create a new control record on every request. As far as I
can tell, that isn't quite possible in ARSPerl (or, at least I can't
figure out how).

The Java API/JSP/Servlet method was another avenue that I was
considering, but since I know Perl better than Java ("web" Java,
anyway), I started with ARSPerl.

I've been playing with the Java API for a few days now, and I'm
finding that it's not all that easy to use. I saw on ARSWiki that
there is an "api" to the API provided by the JOARSE project. Is anyone
actively using JOARSE or is it kind of a dead project? I was thinking
of writing a layer on top of the BMC Java API to make it easier to
use, but I don't want to reinvent the wheel if someone else has
already done something similar. I'd even like to contribute to the
project if there's a need.

Thanks for the feedback, by the way; this is exactly the kind of
information I'm looking for.

Mike

On 6/27/07, Carey Matthew Black <bla...@gm...> wrote:
> Mike,
>
> Ref:
> http://www.webopedia.com/TERM/S/session_cookie.html
> http://www.allaboutcookies.org/cookies/session-cookies-used-for.html
> 
http://searchwebservices.techtarget.com/sDefinition/0,,sid26_gci752450,00.html

>
>
> IMHO... this is a bad way to keep state for a web site. It is client 
side
> and could present security concerns if your browser is flawed. (Like 
maybe
> the most popular choice... IE.)
>
>
> If I were you... I would start at a better staring point. Try the Java 
API
> and go to the JSP/Servlet model for this approach. And here are just a 
few
> reasons why:
>
> 1) Most ARS customers will have a web server capible of being a Mid-tier
> server. (And your interface might be helpful in some cases in addition 
to
> the Mid-Tier.)
> 2) JSP/Servlets are a "later generation" and approach the web with more
> security options by design than CGI's ever had.
> 3) The Java API will be supported by BMC. ARSPerl never has been 
directly
> supported by Remedy or BMC.
> 4) The new Java API is reported to be "totally Java" (no more JNI layer) 
and
> that will make such a web interface as portable as any JSP engine out 
there.
> And that will be more portable than any ARSPerl interface could be 
because
> it will still be (as far as I know) a wrapper around the C API that has
> limited platform support.
>
> But that might be more work than your interested in too. ( I just think 
it
> is a much better path to go down if you have any time to spend on such a
> major undertaking.)
>
> HTH.
>
> AND just to be clear... ARSPerl is great. It has served a very needed 
niche
> in the ARS universe for years and I expect it to continue to do so. A
> command line Perl script is likely faster than a command line Java 
program.
> However, there are support and maintenance issues to sort out too. So 
for
> server side command line scripting... ARSPerl is still a good choice. 
Time
> will tell if the new Java API can put a dent in that niche or not. ( And
> given the Filter plugin options... command line interfaces mostly should 
be
> moved into that universe anyway.)
>
> --
> Carey Matthew Black
> Remedy Skilled Professional (RSP)
> ARS = Action Request System(Remedy)
>
> Love, then teach
> Solution = People + Process + Tools
> Fast, Accurate, Cheap.... Pick two.
>
>
> On 6/26/07, Mike Wallick <mdw...@gm...> wrote:
> > Forgive me for being dense, but I don't understand how one would tie a
> control record that was created from a login routine, for example, to a
> session ID or similar. Given a session ID, how does one tie that to a
> control record that has already been created/validated?
> >
> > In other words, where does the control record "live" and how does one 
get
> at it? Doesn't the control record "disappear" once the web server 
request is
> complete?
> >
> > Mike
>
> 
-------------------------------------------------------------------------
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2 express and take
> control of your XML. No limits. Just data. Click to get it now.
> http://sourceforge.net/powerbar/db2/
> _______________________________________________
> Arsperl-users mailing list
> Ars...@ar...
> https://lists.sourceforge.net/lists/listinfo/arsperl-users
>
>

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Arsperl-users mailing list
Ars...@ar...
https://lists.sourceforge.net/lists/listinfo/arsperl-users

Re: [Arsperl-users] Using ARSPerl to Build a Web Interface

[Mike W. <mdw...@gm...>]

I tried several ways of serializing the control record in Perl with no
luck and using CGI::Session, Apache::Session, .etc.. I've given up
going down that avenue. It looks like Java is the way I want to go.

When is 7.1 slated for release? This summer (July maybe?) IIRC.

Thanks, everyone. Again, this is exactly the kind of feedback I was
hoping to get.

Mike

On 6/29/07, Axton W Grams/NYLIC <Axt...@ne...> wrote:
>
> Sounds like what you are trying to do is emulate the session pool/proxy that
> the java api provides, using arsperl.  I am not sure how you would approach
> this.  Most interpreted languages have a problem with persistence with
> things like this, unless there is a way to serialize the data.  I'm not sure
> how you could do that with arsperl; just don't have the skills and knowledge
> to work at that level.
>
> I've contributed some to JOARSE, mainly to be compliant with the 7.x api.  I
> would not say the project is dead, it has been maintained, but it does not
> have the widespread adoption of things like arsperl.
>
> If you can, I would suggest waiting until 7.1 is released; to see if the new
> java api is all that I am hearing it is.  I am going to take a guess that
> the new java api, if a complete rewrite/rearchitecture will be bug ridden
> for some time, but the best way for things like this to mature is for people
> to use it and report back to the vendor.
>
> Axton Grams
>
>
>
>
>
> That's what I get for writing an email in a hurry :) I wasn't all that
>  clear on what I was asking.
>
>  What I was asking originally was not how to maintain state (that I
>  knew), what I was wondering was if/how I could use references to a
>  server-side control record by way of tying it to an http session,
>  rather than create a new control record on every request. As far as I
>  can tell, that isn't quite possible in ARSPerl (or, at least I can't
>  figure out how).
>
>  The Java API/JSP/Servlet method was another avenue that I was
>  considering, but since I know Perl better than Java ("web" Java,
>  anyway), I started with ARSPerl.
>
>  I've been playing with the Java API for a few days now, and I'm
>  finding that it's not all that easy to use. I saw on ARSWiki that
>  there is an "api" to the API provided by the JOARSE project. Is anyone
>  actively using JOARSE or is it kind of a dead project? I was thinking
>  of writing a layer on top of the BMC Java API to make it easier to
>  use, but I don't want to reinvent the wheel if someone else has
>  already done something similar. I'd even like to contribute to the
>  project if there's a need.
>
>  Thanks for the feedback, by the way; this is exactly the kind of
>  information I'm looking for.
>
>  Mike
>
>  On 6/27/07, Carey Matthew Black <bla...@gm...> wrote:
>  > Mike,
>  >
>  > Ref:
>  > http://www.webopedia.com/TERM/S/session_cookie.html
>  >
> http://www.allaboutcookies.org/cookies/session-cookies-used-for.html
>  >
> http://searchwebservices.techtarget.com/sDefinition/0,,sid26_gci752450,00.html
>  >
>  >
>  > IMHO... this is a bad way to keep state for a web site. It is client side
>  > and could present security concerns if your browser is flawed. (Like
> maybe
>  > the most popular choice... IE.)
>  >
>  >
>  > If I were you... I would start at a better staring point. Try the Java
> API
>  > and go to the JSP/Servlet model for this approach. And here are just a
> few
>  > reasons why:
>  >
>  > 1) Most ARS customers will have a web server capible of being a Mid-tier
>  > server. (And your interface might be helpful in some cases in addition to
>  > the Mid-Tier.)
>  > 2) JSP/Servlets are a "later generation" and approach the web with more
>  > security options by design than CGI's ever had.
>  > 3) The Java API will be supported by BMC. ARSPerl never has been directly
>  > supported by Remedy or BMC.
>  > 4) The new Java API is reported to be "totally Java" (no more JNI layer)
> and
>  > that will make such a web interface as portable as any JSP engine out
> there.
>  > And that will be more portable than any ARSPerl interface could be
> because
>  > it will still be (as far as I know) a wrapper around the C API that has
>  > limited platform support.
>  >
>  > But that might be more work than your interested in too. ( I just think
> it
>  > is a much better path to go down if you have any time to spend on such a
>  > major undertaking.)
>  >
>  > HTH.
>  >
>  > AND just to be clear... ARSPerl is great. It has served a very needed
> niche
>  > in the ARS universe for years and I expect it to continue to do so. A
>  > command line Perl script is likely faster than a command line Java
> program.
>  > However, there are support and maintenance issues to sort out too. So for
>  > server side command line scripting... ARSPerl is still a good choice.
> Time
>  > will tell if the new Java API can put a dent in that niche or not. ( And
>  > given the Filter plugin options... command line interfaces mostly should
> be
>  > moved into that universe anyway.)
>  >
>  > --
>  > Carey Matthew Black
>  > Remedy Skilled Professional (RSP)
>  > ARS = Action Request System(Remedy)
>  >
>  > Love, then teach
>  > Solution = People + Process + Tools
>  > Fast, Accurate, Cheap.... Pick two.
>  >
>  >
>  > On 6/26/07, Mike Wallick <mdw...@gm...> wrote:
>  > > Forgive me for being dense, but I don't understand how one would tie a
>  > control record that was created from a login routine, for example, to a
>  > session ID or similar. Given a session ID, how does one tie that to a
>  > control record that has already been created/validated?
>  > >
>  > > In other words, where does the control record "live" and how does one
> get
>  > at it? Doesn't the control record "disappear" once the web server request
> is
>  > complete?
>  > >
>  > > Mike
>  >
>  >
> -------------------------------------------------------------------------
>  > This SF.net email is sponsored by DB2 Express
>  > Download DB2 Express C - the FREE version of DB2 express and take
>  > control of your XML. No limits. Just data. Click to get it now.
>  > http://sourceforge.net/powerbar/db2/
>  > _______________________________________________
>  > Arsperl-users mailing list
>  > Ars...@ar...
>  >
> https://lists.sourceforge.net/lists/listinfo/arsperl-users
>  >
>  >
>
> -------------------------------------------------------------------------
>  This SF.net email is sponsored by DB2 Express
>  Download DB2 Express C - the FREE version of DB2 express and take
>  control of your XML. No limits. Just data. Click to get it now.
>  http://sourceforge.net/powerbar/db2/
>  _______________________________________________
>  Arsperl-users mailing list
>  Ars...@ar...
>  https://lists.sourceforge.net/lists/listinfo/arsperl-users
>
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2 express and take
> control of your XML. No limits. Just data. Click to get it now.
> http://sourceforge.net/powerbar/db2/
> _______________________________________________
> Arsperl-users mailing list
> Ars...@ar...
> https://lists.sourceforge.net/lists/listinfo/arsperl-users
>
>

Re: [Arsperl-users] Using ARSPerl to Build a Web Interface

[Clayton S. <cla...@gm...>]

Mark,
I take it that you're doing CGI and not mod_perl?

You could persist the username and password in the session
and call ars_Login on each part of the request, or build a separate
daemon process that does your communications to ARS.

The overhead on setting up a new control record was pretty low
I've found.

Clayton

On 6/29/07, Mike Wallick <mdw...@gm...> wrote:
>
> I tried several ways of serializing the control record in Perl with no
> luck and using CGI::Session, Apache::Session, .etc.. I've given up
> going down that avenue. It looks like Java is the way I want to go.
>
> When is 7.1 slated for release? This summer (July maybe?) IIRC.
>
> Thanks, everyone. Again, this is exactly the kind of feedback I was
> hoping to get.
>
> Mike
>
> On 6/29/07, Axton W Grams/NYLIC <Axt...@ne...> wrote:
> >
> > Sounds like what you are trying to do is emulate the session pool/proxy
> that
> > the java api provides, using arsperl.  I am not sure how you would
> approach
> > this.  Most interpreted languages have a problem with persistence with
> > things like this, unless there is a way to serialize the data.  I'm not
> sure
> > how you could do that with arsperl; just don't have the skills and
> knowledge
> > to work at that level.
> >
> > I've contributed some to JOARSE, mainly to be compliant with the 7.xapi.  I
> > would not say the project is dead, it has been maintained, but it does
> not
> > have the widespread adoption of things like arsperl.
> >
> > If you can, I would suggest waiting until 7.1 is released; to see if the
> new
> > java api is all that I am hearing it is.  I am going to take a guess
> that
> > the new java api, if a complete rewrite/rearchitecture will be bug
> ridden
> > for some time, but the best way for things like this to mature is for
> people
> > to use it and report back to the vendor.
> >
> > Axton Grams
> >
> >
> >
> >
> >
> > That's what I get for writing an email in a hurry :) I wasn't all that
> >  clear on what I was asking.
> >
> >  What I was asking originally was not how to maintain state (that I
> >  knew), what I was wondering was if/how I could use references to a
> >  server-side control record by way of tying it to an http session,
> >  rather than create a new control record on every request. As far as I
> >  can tell, that isn't quite possible in ARSPerl (or, at least I can't
> >  figure out how).
> >
> >  The Java API/JSP/Servlet method was another avenue that I was
> >  considering, but since I know Perl better than Java ("web" Java,
> >  anyway), I started with ARSPerl.
> >
> >  I've been playing with the Java API for a few days now, and I'm
> >  finding that it's not all that easy to use. I saw on ARSWiki that
> >  there is an "api" to the API provided by the JOARSE project. Is anyone
> >  actively using JOARSE or is it kind of a dead project? I was thinking
> >  of writing a layer on top of the BMC Java API to make it easier to
> >  use, but I don't want to reinvent the wheel if someone else has
> >  already done something similar. I'd even like to contribute to the
> >  project if there's a need.
> >
> >  Thanks for the feedback, by the way; this is exactly the kind of
> >  information I'm looking for.
> >
> >  Mike
> >
> >  On 6/27/07, Carey Matthew Black <bla...@gm...> wrote:
> >  > Mike,
> >  >
> >  > Ref:
> >  > http://www.webopedia.com/TERM/S/session_cookie.html
> >  >
> > http://www.allaboutcookies.org/cookies/session-cookies-used-for.html
> >  >
> >
> http://searchwebservices.techtarget.com/sDefinition/0,,sid26_gci752450,00.html
> >  >
> >  >
> >  > IMHO... this is a bad way to keep state for a web site. It is client
> side
> >  > and could present security concerns if your browser is flawed. (Like
> > maybe
> >  > the most popular choice... IE.)
> >  >
> >  >
> >  > If I were you... I would start at a better staring point. Try the
> Java
> > API
> >  > and go to the JSP/Servlet model for this approach. And here are just
> a
> > few
> >  > reasons why:
> >  >
> >  > 1) Most ARS customers will have a web server capible of being a
> Mid-tier
> >  > server. (And your interface might be helpful in some cases in
> addition to
> >  > the Mid-Tier.)
> >  > 2) JSP/Servlets are a "later generation" and approach the web with
> more
> >  > security options by design than CGI's ever had.
> >  > 3) The Java API will be supported by BMC. ARSPerl never has been
> directly
> >  > supported by Remedy or BMC.
> >  > 4) The new Java API is reported to be "totally Java" (no more JNI
> layer)
> > and
> >  > that will make such a web interface as portable as any JSP engine out
> > there.
> >  > And that will be more portable than any ARSPerl interface could be
> > because
> >  > it will still be (as far as I know) a wrapper around the C API that
> has
> >  > limited platform support.
> >  >
> >  > But that might be more work than your interested in too. ( I just
> think
> > it
> >  > is a much better path to go down if you have any time to spend on
> such a
> >  > major undertaking.)
> >  >
> >  > HTH.
> >  >
> >  > AND just to be clear... ARSPerl is great. It has served a very needed
> > niche
> >  > in the ARS universe for years and I expect it to continue to do so. A
> >  > command line Perl script is likely faster than a command line Java
> > program.
> >  > However, there are support and maintenance issues to sort out too. So
> for
> >  > server side command line scripting... ARSPerl is still a good choice.
> > Time
> >  > will tell if the new Java API can put a dent in that niche or not. (
> And
> >  > given the Filter plugin options... command line interfaces mostly
> should
> > be
> >  > moved into that universe anyway.)
> >  >
> >  > --
> >  > Carey Matthew Black
> >  > Remedy Skilled Professional (RSP)
> >  > ARS = Action Request System(Remedy)
> >  >
> >  > Love, then teach
> >  > Solution = People + Process + Tools
> >  > Fast, Accurate, Cheap.... Pick two.
> >  >
> >  >
> >  > On 6/26/07, Mike Wallick <mdw...@gm...> wrote:
> >  > > Forgive me for being dense, but I don't understand how one would
> tie a
> >  > control record that was created from a login routine, for example, to
> a
> >  > session ID or similar. Given a session ID, how does one tie that to a
> >  > control record that has already been created/validated?
> >  > >
> >  > > In other words, where does the control record "live" and how does
> one
> > get
> >  > at it? Doesn't the control record "disappear" once the web server
> request
> > is
> >  > complete?
> >  > >
> >  > > Mike
> >  >
> >  >
> >
> -------------------------------------------------------------------------
> >  > This SF.net email is sponsored by DB2 Express
> >  > Download DB2 Express C - the FREE version of DB2 express and take
> >  > control of your XML. No limits. Just data. Click to get it now.
> >  > http://sourceforge.net/powerbar/db2/
> >  > _______________________________________________
> >  > Arsperl-users mailing list
> >  > Ars...@ar...
> >  >
> > https://lists.sourceforge.net/lists/listinfo/arsperl-users
> >  >
> >  >
> >
> >
> -------------------------------------------------------------------------
> >  This SF.net email is sponsored by DB2 Express
> >  Download DB2 Express C - the FREE version of DB2 express and take
> >  control of your XML. No limits. Just data. Click to get it now.
> >  http://sourceforge.net/powerbar/db2/
> >  _______________________________________________
> >  Arsperl-users mailing list
> >  Ars...@ar...
> >  https://lists.sourceforge.net/lists/listinfo/arsperl-users
> >
> >
> >
> -------------------------------------------------------------------------
> > This SF.net email is sponsored by DB2 Express
> > Download DB2 Express C - the FREE version of DB2 express and take
> > control of your XML. No limits. Just data. Click to get it now.
> > http://sourceforge.net/powerbar/db2/
> > _______________________________________________
> > Arsperl-users mailing list
> > Ars...@ar...
> > https://lists.sourceforge.net/lists/listinfo/arsperl-users
> >
> >
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2 express and take
> control of your XML. No limits. Just data. Click to get it now.
> http://sourceforge.net/powerbar/db2/
> _______________________________________________
> Arsperl-users mailing list
> Ars...@ar...
> https://lists.sourceforge.net/lists/listinfo/arsperl-users
>



-- 

Clayton Scott
cla...@gm...

Re: [Arsperl-users] Using ARSPerl to Build a Web Interface

[Mike W. <mdw...@gm...>]

Right now I'm just fishing for options/feedback and researching how I
might accomplish something like this. CGI and/or mod_perl is one
method I am considering, along with a Java API/JSP/Servlet method.

Mike

On 6/29/07, Clayton Scott <cla...@gm...> wrote:
> Mark,
> I take it that you're doing CGI and not mod_perl?
>
> You could persist the username and password in the session
> and call ars_Login on each part of the request, or build a separate
> daemon process that does your communications to ARS.
>
> The overhead on setting up a new control record was pretty low
> I've found.
>
> Clayton
>
>
> On 6/29/07, Mike Wallick < mdw...@gm...> wrote:
> > I tried several ways of serializing the control record in Perl with no
> > luck and using CGI::Session, Apache::Session, .etc.. I've given up
> > going down that avenue. It looks like Java is the way I want to go.
> >
> > When is 7.1 slated for release? This summer (July maybe?) IIRC.
> >
> > Thanks, everyone. Again, this is exactly the kind of feedback I was
> > hoping to get.
> >
> > Mike
> >
> > On 6/29/07, Axton W Grams/NYLIC <Axt...@ne... > wrote:
> > >
> > > Sounds like what you are trying to do is emulate the session pool/proxy
> that
> > > the java api provides, using arsperl.  I am not sure how you would
> approach
> > > this.  Most interpreted languages have a problem with persistence with
> > > things like this, unless there is a way to serialize the data.  I'm not
> sure
> > > how you could do that with arsperl; just don't have the skills and
> knowledge
> > > to work at that level.
> > >
> > > I've contributed some to JOARSE, mainly to be compliant with the 7.x
> api.  I
> > > would not say the project is dead, it has been maintained, but it does
> not
> > > have the widespread adoption of things like arsperl.
> > >
> > > If you can, I would suggest waiting until 7.1 is released; to see if the
> new
> > > java api is all that I am hearing it is.  I am going to take a guess
> that
> > > the new java api, if a complete rewrite/rearchitecture will be bug
> ridden
> > > for some time, but the best way for things like this to mature is for
> people
> > > to use it and report back to the vendor.
> > >
> > > Axton Grams
> > >
> > >
> > >
> > >
> > >
> > > That's what I get for writing an email in a hurry :) I wasn't all that
> > >  clear on what I was asking.
> > >
> > >  What I was asking originally was not how to maintain state (that I
> > >  knew), what I was wondering was if/how I could use references to a
> > >  server-side control record by way of tying it to an http session,
> > >  rather than create a new control record on every request. As far as I
> > >  can tell, that isn't quite possible in ARSPerl (or, at least I can't
> > >  figure out how).
> > >
> > >  The Java API/JSP/Servlet method was another avenue that I was
> > >  considering, but since I know Perl better than Java ("web" Java,
> > >  anyway), I started with ARSPerl.
> > >
> > >  I've been playing with the Java API for a few days now, and I'm
> > >  finding that it's not all that easy to use. I saw on ARSWiki that
> > >  there is an "api" to the API provided by the JOARSE project. Is anyone
> > >  actively using JOARSE or is it kind of a dead project? I was thinking
> > >  of writing a layer on top of the BMC Java API to make it easier to
> > >  use, but I don't want to reinvent the wheel if someone else has
> > >  already done something similar. I'd even like to contribute to the
> > >  project if there's a need.
> > >
> > >  Thanks for the feedback, by the way; this is exactly the kind of
> > >  information I'm looking for.
> > >
> > >  Mike
> > >
> > >  On 6/27/07, Carey Matthew Black <bla...@gm...> wrote:
> > >  > Mike,
> > >  >
> > >  > Ref:
> > >  > http://www.webopedia.com/TERM/S/session_cookie.html
> > >  >
> > >
> http://www.allaboutcookies.org/cookies/session-cookies-used-for.html
> > >  >
> > >
> http://searchwebservices.techtarget.com/sDefinition/0,,sid26_gci752450,00.html
> > >  >
> > >  >
> > >  > IMHO... this is a bad way to keep state for a web site. It is client
> side
> > >  > and could present security concerns if your browser is flawed. (Like
> > > maybe
> > >  > the most popular choice... IE.)
> > >  >
> > >  >
> > >  > If I were you... I would start at a better staring point. Try the
> Java
> > > API
> > >  > and go to the JSP/Servlet model for this approach. And here are just
> a
> > > few
> > >  > reasons why:
> > >  >
> > >  > 1) Most ARS customers will have a web server capible of being a
> Mid-tier
> > >  > server. (And your interface might be helpful in some cases in
> addition to
> > >  > the Mid-Tier.)
> > >  > 2) JSP/Servlets are a "later generation" and approach the web with
> more
> > >  > security options by design than CGI's ever had.
> > >  > 3) The Java API will be supported by BMC. ARSPerl never has been
> directly
> > >  > supported by Remedy or BMC.
> > >  > 4) The new Java API is reported to be "totally Java" (no more JNI
> layer)
> > > and
> > >  > that will make such a web interface as portable as any JSP engine out
> > > there.
> > >  > And that will be more portable than any ARSPerl interface could be
> > > because
> > >  > it will still be (as far as I know) a wrapper around the C API that
> has
> > >  > limited platform support.
> > >  >
> > >  > But that might be more work than your interested in too. ( I just
> think
> > > it
> > >  > is a much better path to go down if you have any time to spend on
> such a
> > >  > major undertaking.)
> > >  >
> > >  > HTH.
> > >  >
> > >  > AND just to be clear... ARSPerl is great. It has served a very needed
> > > niche
> > >  > in the ARS universe for years and I expect it to continue to do so. A
> > >  > command line Perl script is likely faster than a command line Java
> > > program.
> > >  > However, there are support and maintenance issues to sort out too. So
> for
> > >  > server side command line scripting... ARSPerl is still a good choice.
> > > Time
> > >  > will tell if the new Java API can put a dent in that niche or not. (
> And
> > >  > given the Filter plugin options... command line interfaces mostly
> should
> > > be
> > >  > moved into that universe anyway.)
> > >  >
> > >  > --
> > >  > Carey Matthew Black
> > >  > Remedy Skilled Professional (RSP)
> > >  > ARS = Action Request System(Remedy)
> > >  >
> > >  > Love, then teach
> > >  > Solution = People + Process + Tools
> > >  > Fast, Accurate, Cheap.... Pick two.
> > >  >
> > >  >
> > >  > On 6/26/07, Mike Wallick <mdw...@gm...> wrote:
> > >  > > Forgive me for being dense, but I don't understand how one would
> tie a
> > >  > control record that was created from a login routine, for example, to
> a
> > >  > session ID or similar. Given a session ID, how does one tie that to a
> > >  > control record that has already been created/validated?
> > >  > >
> > >  > > In other words, where does the control record "live" and how does
> one
> > > get
> > >  > at it? Doesn't the control record "disappear" once the web server
> request
> > > is
> > >  > complete?
> > >  > >
> > >  > > Mike
> > >  >
> > >  >
> > >
> -------------------------------------------------------------------------
> > >  > This SF.net email is sponsored by DB2 Express
> > >  > Download DB2 Express C - the FREE version of DB2 express and take
> > >  > control of your XML. No limits. Just data. Click to get it now.
> > >  > http://sourceforge.net/powerbar/db2/
> > >  > _______________________________________________
> > >  > Arsperl-users mailing list
> > >  > Ars...@ar...
> > >  >
> > >
> https://lists.sourceforge.net/lists/listinfo/arsperl-users
> > >  >
> > >  >
> > >
> > >
> -------------------------------------------------------------------------
> > >  This SF.net email is sponsored by DB2 Express
> > >  Download DB2 Express C - the FREE version of DB2 express and take
> > >  control of your XML. No limits. Just data. Click to get it now.
> > >  http://sourceforge.net/powerbar/db2/
> > >  _______________________________________________
> > >  Arsperl-users mailing list
> > >  Ars...@ar...
> > >
> https://lists.sourceforge.net/lists/listinfo/arsperl-users
> > >
> > >
> > >
> -------------------------------------------------------------------------
> > > This SF.net email is sponsored by DB2 Express
> > > Download DB2 Express C - the FREE version of DB2 express and take
> > > control of your XML. No limits. Just data. Click to get it now.
> > > http://sourceforge.net/powerbar/db2/
> > > _______________________________________________
> > > Arsperl-users mailing list
> > > Ars...@ar...
> > >
> https://lists.sourceforge.net/lists/listinfo/arsperl-users
> > >
> > >
> >
> >
> -------------------------------------------------------------------------
> > This SF.net email is sponsored by DB2 Express
> > Download DB2 Express C - the FREE version of DB2 express and take
> > control of your XML. No limits. Just data. Click to get it now.
> > http://sourceforge.net/powerbar/db2/
> > _______________________________________________
> > Arsperl-users mailing list
> > Ars...@ar...
> >
> https://lists.sourceforge.net/lists/listinfo/arsperl-users
> >
>
>
>
> --
>
> Clayton Scott
> cla...@gm...
> -------------------------------------------------------------------------
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2 express and take
> control of your XML. No limits. Just data. Click to get it now.
> http://sourceforge.net/powerbar/db2/
> _______________________________________________
> Arsperl-users mailing list
> Ars...@ar...
> https://lists.sourceforge.net/lists/listinfo/arsperl-users
>
>

Re: [Arsperl-users] Using ARSPerl to Build a Web Interface

[Jeff M. <jcm...@je...>]

Mike Wallick wrote:
> Right now I'm just fishing for options/feedback and researching how I
> might accomplish something like this. CGI and/or mod_perl is one
> method I am considering, along with a Java API/JSP/Servlet method.
> 


>>> I tried several ways of serializing the control record in Perl with no
>>> luck and using CGI::Session, Apache::Session, .etc..



The control record is (essentially) just the username, password and
server name packed into a C-struct. There's no magic in it. What you
want to do is cache that information within your application (by using
Apache::Session for example) and then fetch it and call ars_Login() for
each http transaction.

Yes, there are security issues with doing the above, but if you could
serialize the control record, you'd have the same issues.

You can fetch the contents of the control record and store the useful
fields by using ars_GetControlStructFields()

Save this as /tmp/t.pl

#!/usr/bin/perl
use ARS;
$c = ars_Login(shift, shift, shift);
die $ars_errstr unless $c;
print join(',', ars_GetControlStructFields($c)), "\n";
exit 0;



and type this:


perl /tmp/t.pl yourserver youruser yourpass



and you'll see that the control record contains very little information.



jeff

Re: [Arsperl-users] Using ARSPerl to Build a Web Interface

[Michiel B. <mic...@gm...>]

If you're looking into Joarse I guess you should also consider ExpertDesk
Plus;

http://code.google.com/p/edplus/

Kind regards,

Michiel


On 6/29/07, Mike Wallick <mdw...@gm...> wrote:
>
> That's what I get for writing an email in a hurry :) I wasn't all that
> clear on what I was asking.
>
> What I was asking originally was not how to maintain state (that I
> knew), what I was wondering was if/how I could use references to a
> server-side control record by way of tying it to an http session,
> rather than create a new control record on every request. As far as I
> can tell, that isn't quite possible in ARSPerl (or, at least I can't
> figure out how).
>
> The Java API/JSP/Servlet method was another avenue that I was
> considering, but since I know Perl better than Java ("web" Java,
> anyway), I started with ARSPerl.
>
> I've been playing with the Java API for a few days now, and I'm
> finding that it's not all that easy to use. I saw on ARSWiki that
> there is an "api" to the API provided by the JOARSE project. Is anyone
> actively using JOARSE or is it kind of a dead project? I was thinking
> of writing a layer on top of the BMC Java API to make it easier to
> use, but I don't want to reinvent the wheel if someone else has
> already done something similar. I'd even like to contribute to the
> project if there's a need.
>
> Thanks for the feedback, by the way; this is exactly the kind of
> information I'm looking for.
>
> Mike
>
> On 6/27/07, Carey Matthew Black <bla...@gm...> wrote:
> > Mike,
> >
> > Ref:
> > http://www.webopedia.com/TERM/S/session_cookie.html
> > http://www.allaboutcookies.org/cookies/session-cookies-used-for.html
> >
> http://searchwebservices.techtarget.com/sDefinition/0,,sid26_gci752450,00.html
> >
> >
> > IMHO... this is a bad way to keep state for a web site. It is client
> side
> > and could present security concerns if your browser is flawed. (Like
> maybe
> > the most popular choice... IE.)
> >
> >
> > If I were you... I would start at a better staring point. Try the Java
> API
> > and go to the JSP/Servlet model for this approach. And here are just a
> few
> > reasons why:
> >
> > 1) Most ARS customers will have a web server capible of being a Mid-tier
> > server. (And your interface might be helpful in some cases in addition
> to
> > the Mid-Tier.)
> > 2) JSP/Servlets are a "later generation" and approach the web with more
> > security options by design than CGI's ever had.
> > 3) The Java API will be supported by BMC. ARSPerl never has been
> directly
> > supported by Remedy or BMC.
> > 4) The new Java API is reported to be "totally Java" (no more JNI layer)
> and
> > that will make such a web interface as portable as any JSP engine out
> there.
> > And that will be more portable than any ARSPerl interface could be
> because
> > it will still be (as far as I know) a wrapper around the C API that has
> > limited platform support.
> >
> > But that might be more work than your interested in too. ( I just think
> it
> > is a much better path to go down if you have any time to spend on such a
> > major undertaking.)
> >
> > HTH.
> >
> > AND just to be clear... ARSPerl is great. It has served a very needed
> niche
> > in the ARS universe for years and I expect it to continue to do so. A
> > command line Perl script is likely faster than a command line Java
> program.
> > However, there are support and maintenance issues to sort out too. So
> for
> > server side command line scripting... ARSPerl is still a good choice.
> Time
> > will tell if the new Java API can put a dent in that niche or not. ( And
> > given the Filter plugin options... command line interfaces mostly should
> be
> > moved into that universe anyway.)
> >
> > --
> > Carey Matthew Black
> > Remedy Skilled Professional (RSP)
> > ARS = Action Request System(Remedy)
> >
> > Love, then teach
> > Solution = People + Process + Tools
> > Fast, Accurate, Cheap.... Pick two.
> >
> >
> > On 6/26/07, Mike Wallick <mdw...@gm...> wrote:
> > > Forgive me for being dense, but I don't understand how one would tie a
> > control record that was created from a login routine, for example, to a
> > session ID or similar. Given a session ID, how does one tie that to a
> > control record that has already been created/validated?
> > >
> > > In other words, where does the control record "live" and how does one
> get
> > at it? Doesn't the control record "disappear" once the web server
> request is
> > complete?
> > >
> > > Mike
> >
> >
> -------------------------------------------------------------------------
> > This SF.net email is sponsored by DB2 Express
> > Download DB2 Express C - the FREE version of DB2 express and take
> > control of your XML. No limits. Just data. Click to get it now.
> > http://sourceforge.net/powerbar/db2/
> > _______________________________________________
> > Arsperl-users mailing list
> > Ars...@ar...
> > https://lists.sourceforge.net/lists/listinfo/arsperl-users
> >
> >
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2 express and take
> control of your XML. No limits. Just data. Click to get it now.
> http://sourceforge.net/powerbar/db2/
> _______________________________________________
> Arsperl-users mailing list
> Ars...@ar...
> https://lists.sourceforge.net/lists/listinfo/arsperl-users
>

Re: [Arsperl-users] Using ARSPerl to Build a Web Interface

[Mike W. <mdw...@gm...>]

Oh, one more thing...my apologies for drifting off topic. I suppose I
should have posted this reply to the ARSList (since now this thread
has little to do with ARSPerl).

Mike

On 6/29/07, Mike Wallick <mdw...@gm...> wrote:
> That's what I get for writing an email in a hurry :) I wasn't all that
> clear on what I was asking.
>
> What I was asking originally was not how to maintain state (that I
> knew), what I was wondering was if/how I could use references to a
> server-side control record by way of tying it to an http session,
> rather than create a new control record on every request. As far as I
> can tell, that isn't quite possible in ARSPerl (or, at least I can't
> figure out how).
>
> The Java API/JSP/Servlet method was another avenue that I was
> considering, but since I know Perl better than Java ("web" Java,
> anyway), I started with ARSPerl.
>
> I've been playing with the Java API for a few days now, and I'm
> finding that it's not all that easy to use. I saw on ARSWiki that
> there is an "api" to the API provided by the JOARSE project. Is anyone
> actively using JOARSE or is it kind of a dead project? I was thinking
> of writing a layer on top of the BMC Java API to make it easier to
> use, but I don't want to reinvent the wheel if someone else has
> already done something similar. I'd even like to contribute to the
> project if there's a need.
>
> Thanks for the feedback, by the way; this is exactly the kind of
> information I'm looking for.
>
> Mike
>
> On 6/27/07, Carey Matthew Black <bla...@gm...> wrote:
> > Mike,
> >
> > Ref:
> > http://www.webopedia.com/TERM/S/session_cookie.html
> > http://www.allaboutcookies.org/cookies/session-cookies-used-for.html
> > http://searchwebservices.techtarget.com/sDefinition/0,,sid26_gci752450,00.html
> >
> >
> > IMHO... this is a bad way to keep state for a web site. It is client side
> > and could present security concerns if your browser is flawed. (Like maybe
> > the most popular choice... IE.)
> >
> >
> > If I were you... I would start at a better staring point. Try the Java API
> > and go to the JSP/Servlet model for this approach. And here are just a few
> > reasons why:
> >
> > 1) Most ARS customers will have a web server capible of being a Mid-tier
> > server. (And your interface might be helpful in some cases in addition to
> > the Mid-Tier.)
> > 2) JSP/Servlets are a "later generation" and approach the web with more
> > security options by design than CGI's ever had.
> > 3) The Java API will be supported by BMC. ARSPerl never has been directly
> > supported by Remedy or BMC.
> > 4) The new Java API is reported to be "totally Java" (no more JNI layer) and
> > that will make such a web interface as portable as any JSP engine out there.
> > And that will be more portable than any ARSPerl interface could be because
> > it will still be (as far as I know) a wrapper around the C API that has
> > limited platform support.
> >
> > But that might be more work than your interested in too. ( I just think it
> > is a much better path to go down if you have any time to spend on such a
> > major undertaking.)
> >
> > HTH.
> >
> > AND just to be clear... ARSPerl is great. It has served a very needed niche
> > in the ARS universe for years and I expect it to continue to do so. A
> > command line Perl script is likely faster than a command line Java program.
> > However, there are support and maintenance issues to sort out too. So for
> > server side command line scripting... ARSPerl is still a good choice. Time
> > will tell if the new Java API can put a dent in that niche or not. ( And
> > given the Filter plugin options... command line interfaces mostly should be
> > moved into that universe anyway.)
> >
> > --
> > Carey Matthew Black
> > Remedy Skilled Professional (RSP)
> > ARS = Action Request System(Remedy)
> >
> > Love, then teach
> > Solution = People + Process + Tools
> > Fast, Accurate, Cheap.... Pick two.
> >
> >
> > On 6/26/07, Mike Wallick <mdw...@gm...> wrote:
> > > Forgive me for being dense, but I don't understand how one would tie a
> > control record that was created from a login routine, for example, to a
> > session ID or similar. Given a session ID, how does one tie that to a
> > control record that has already been created/validated?
> > >
> > > In other words, where does the control record "live" and how does one get
> > at it? Doesn't the control record "disappear" once the web server request is
> > complete?
> > >
> > > Mike
> >
> > -------------------------------------------------------------------------
> > This SF.net email is sponsored by DB2 Express
> > Download DB2 Express C - the FREE version of DB2 express and take
> > control of your XML. No limits. Just data. Click to get it now.
> > http://sourceforge.net/powerbar/db2/
> > _______________________________________________
> > Arsperl-users mailing list
> > Ars...@ar...
> > https://lists.sourceforge.net/lists/listinfo/arsperl-users
> >
> >
>

Re: [Arsperl-users] Using ARSPerl to Build a Web Interface

[Paizo <pai...@gm...>]

i started with joarse and found it very easy to use for learn basic
things...
but its incomplete and with very poor documentation so i swap to perl very
soon.

2007/6/29, Mike Wallick <mdw...@gm...>:
>
> Oh, one more thing...my apologies for drifting off topic. I suppose I
> should have posted this reply to the ARSList (since now this thread
> has little to do with ARSPerl).
>
> Mike
>
> On 6/29/07, Mike Wallick <mdw...@gm...> wrote:
> > That's what I get for writing an email in a hurry :) I wasn't all that
> > clear on what I was asking.
> >
> > What I was asking originally was not how to maintain state (that I
> > knew), what I was wondering was if/how I could use references to a
> > server-side control record by way of tying it to an http session,
> > rather than create a new control record on every request. As far as I
> > can tell, that isn't quite possible in ARSPerl (or, at least I can't
> > figure out how).
> >
> > The Java API/JSP/Servlet method was another avenue that I was
> > considering, but since I know Perl better than Java ("web" Java,
> > anyway), I started with ARSPerl.
> >
> > I've been playing with the Java API for a few days now, and I'm
> > finding that it's not all that easy to use. I saw on ARSWiki that
> > there is an "api" to the API provided by the JOARSE project. Is anyone
> > actively using JOARSE or is it kind of a dead project? I was thinking
> > of writing a layer on top of the BMC Java API to make it easier to
> > use, but I don't want to reinvent the wheel if someone else has
> > already done something similar. I'd even like to contribute to the
> > project if there's a need.
> >
> > Thanks for the feedback, by the way; this is exactly the kind of
> > information I'm looking for.
> >
> > Mike
> >
> > On 6/27/07, Carey Matthew Black <bla...@gm...> wrote:
> > > Mike,
> > >
> > > Ref:
> > > http://www.webopedia.com/TERM/S/session_cookie.html
> > > http://www.allaboutcookies.org/cookies/session-cookies-used-for.html
> > >
> http://searchwebservices.techtarget.com/sDefinition/0,,sid26_gci752450,00=
.html
> > >
> > >
> > > IMHO... this is a bad way to keep state for a web site. It is client
> side
> > > and could present security concerns if your browser is flawed. (Like
> maybe
> > > the most popular choice... IE.)
> > >
> > >
> > > If I were you... I would start at a better staring point. Try the Jav=
a
> API
> > > and go to the JSP/Servlet model for this approach. And here are just =
a
> few
> > > reasons why:
> > >
> > > 1) Most ARS customers will have a web server capible of being a
> Mid-tier
> > > server. (And your interface might be helpful in some cases in additio=
n
> to
> > > the Mid-Tier.)
> > > 2) JSP/Servlets are a "later generation" and approach the web with
> more
> > > security options by design than CGI's ever had.
> > > 3) The Java API will be supported by BMC. ARSPerl never has been
> directly
> > > supported by Remedy or BMC.
> > > 4) The new Java API is reported to be "totally Java" (no more JNI
> layer) and
> > > that will make such a web interface as portable as any JSP engine out
> there.
> > > And that will be more portable than any ARSPerl interface could be
> because
> > > it will still be (as far as I know) a wrapper around the C API that
> has
> > > limited platform support.
> > >
> > > But that might be more work than your interested in too. ( I just
> think it
> > > is a much better path to go down if you have any time to spend on suc=
h
> a
> > > major undertaking.)
> > >
> > > HTH.
> > >
> > > AND just to be clear... ARSPerl is great. It has served a very needed
> niche
> > > in the ARS universe for years and I expect it to continue to do so. A
> > > command line Perl script is likely faster than a command line Java
> program.
> > > However, there are support and maintenance issues to sort out too. So
> for
> > > server side command line scripting... ARSPerl is still a good choice.
> Time
> > > will tell if the new Java API can put a dent in that niche or not. (
> And
> > > given the Filter plugin options... command line interfaces mostly
> should be
> > > moved into that universe anyway.)
> > >
> > > --
> > > Carey Matthew Black
> > > Remedy Skilled Professional (RSP)
> > > ARS =3D Action Request System(Remedy)
> > >
> > > Love, then teach
> > > Solution =3D People + Process + Tools
> > > Fast, Accurate, Cheap.... Pick two.
> > >
> > >
> > > On 6/26/07, Mike Wallick <mdw...@gm...> wrote:
> > > > Forgive me for being dense, but I don't understand how one would ti=
e
> a
> > > control record that was created from a login routine, for example, to
> a
> > > session ID or similar. Given a session ID, how does one tie that to a
> > > control record that has already been created/validated?
> > > >
> > > > In other words, where does the control record "live" and how does
> one get
> > > at it? Doesn't the control record "disappear" once the web server
> request is
> > > complete?
> > > >
> > > > Mike
> > >
> > >
> -------------------------------------------------------------------------
> > > This SF.net email is sponsored by DB2 Express
> > > Download DB2 Express C - the FREE version of DB2 express and take
> > > control of your XML. No limits. Just data. Click to get it now.
> > > http://sourceforge.net/powerbar/db2/
> > > _______________________________________________
> > > Arsperl-users mailing list
> > > Ars...@ar...
> > > https://lists.sourceforge.net/lists/listinfo/arsperl-users
> > >
> > >
> >
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2 express and take
> control of your XML. No limits. Just data. Click to get it now.
> http://sourceforge.net/powerbar/db2/
> _______________________________________________
> Arsperl-users mailing list
> Ars...@ar...
> https://lists.sourceforge.net/lists/listinfo/arsperl-users
>



--=20
--------------------
A me cugin na volta xe nd=E0 dal geataro e el ga domand=E0 na coppetta trig=
usto
co i gusti seegheta, sarexe e schie co na fettina de poenta.
El geataro pena sentio che=E0 goduriosa scelta, el se ga messo subito el
pigiama de banane e el ghe ga messo in testa a corona de poegge medie e lo
ga fatto diventare Re dei Gelati Biricchini.
-----------------------
Confezione trigusto seegheta/sarexe/chie co pratico contenitore par e fete
de poenta, stile estat=E8 o quea dea ciocoeata
Altri gusti poe essere bigadini/kiwi/lasonil co socoi de vacca da tociare o
erbagatta/straciatella/calsina co coe de sorxe da tociare
------------
Rileggendo a firma diria che se poe puntare al mercato dei ghiaccioli col e=
l
gusto crema al diserbo e parafl=F9 ricoperta da una soffice crosta de pus c=
o
al posto del bacheto un termometro anale pratico pa misurarse a freve dopo
aver magn=E0 el geato (chi xe che no lo fa al giorno d'oggi?!?!). Garantite
scorese bitonali e solfeggi anali.

Re: [Arsperl-users] Using ARSPerl to Build a Web Interface

[Clayton S. <cla...@gm...>]

Mike,

You should be able to stuff the control into a session variable and hang
onto it for the duration
of the session if you are using mod_perl and CGI::Session or
Apache::Session.

One thing that the API is missing (I'm pretty sure that this is a problem
with the ARS API and not perl or a misunderstanding on my part on how it
works.) is a method of checking whether the control record is still valid
according to the server.

Does ars_Login create a persistent connection/session or does it just create
a record that gets passed to the server with each request?

For general perl + web questions I recommend the archives and discussion
groups at perlmonks.org

Clayton
clscott on perlmonks


On 6/29/07, Mike Wallick <mdw...@gm...> wrote:
>
> Oh, one more thing...my apologies for drifting off topic. I suppose I
> should have posted this reply to the ARSList (since now this thread
> has little to do with ARSPerl).
>
> Mike
>
> On 6/29/07, Mike Wallick <mdw...@gm...> wrote:
> > That's what I get for writing an email in a hurry :) I wasn't all that
> > clear on what I was asking.
> >
> > What I was asking originally was not how to maintain state (that I
> > knew), what I was wondering was if/how I could use references to a
> > server-side control record by way of tying it to an http session,
> > rather than create a new control record on every request. As far as I
> > can tell, that isn't quite possible in ARSPerl (or, at least I can't
> > figure out how).
> >
> > The Java API/JSP/Servlet method was another avenue that I was
> > considering, but since I know Perl better than Java ("web" Java,
> > anyway), I started with ARSPerl.
> >
> > I've been playing with the Java API for a few days now, and I'm
> > finding that it's not all that easy to use. I saw on ARSWiki that
> > there is an "api" to the API provided by the JOARSE project. Is anyone
> > actively using JOARSE or is it kind of a dead project? I was thinking
> > of writing a layer on top of the BMC Java API to make it easier to
> > use, but I don't want to reinvent the wheel if someone else has
> > already done something similar. I'd even like to contribute to the
> > project if there's a need.
> >
> > Thanks for the feedback, by the way; this is exactly the kind of
> > information I'm looking for.
> >
> > Mike
> >
> > On 6/27/07, Carey Matthew Black <bla...@gm...> wrote:
> > > Mike,
> > >
> > > Ref:
> > > http://www.webopedia.com/TERM/S/session_cookie.html
> > > http://www.allaboutcookies.org/cookies/session-cookies-used-for.html
> > >
> http://searchwebservices.techtarget.com/sDefinition/0,,sid26_gci752450,00.html
> > >
> > >
> > > IMHO... this is a bad way to keep state for a web site. It is client
> side
> > > and could present security concerns if your browser is flawed. (Like
> maybe
> > > the most popular choice... IE.)
> > >
> > >
> > > If I were you... I would start at a better staring point. Try the Java
> API
> > > and go to the JSP/Servlet model for this approach. And here are just a
> few
> > > reasons why:
> > >
> > > 1) Most ARS customers will have a web server capible of being a
> Mid-tier
> > > server. (And your interface might be helpful in some cases in addition
> to
> > > the Mid-Tier.)
> > > 2) JSP/Servlets are a "later generation" and approach the web with
> more
> > > security options by design than CGI's ever had.
> > > 3) The Java API will be supported by BMC. ARSPerl never has been
> directly
> > > supported by Remedy or BMC.
> > > 4) The new Java API is reported to be "totally Java" (no more JNI
> layer) and
> > > that will make such a web interface as portable as any JSP engine out
> there.
> > > And that will be more portable than any ARSPerl interface could be
> because
> > > it will still be (as far as I know) a wrapper around the C API that
> has
> > > limited platform support.
> > >
> > > But that might be more work than your interested in too. ( I just
> think it
> > > is a much better path to go down if you have any time to spend on such
> a
> > > major undertaking.)
> > >
> > > HTH.
> > >
> > > AND just to be clear... ARSPerl is great. It has served a very needed
> niche
> > > in the ARS universe for years and I expect it to continue to do so. A
> > > command line Perl script is likely faster than a command line Java
> program.
> > > However, there are support and maintenance issues to sort out too. So
> for
> > > server side command line scripting... ARSPerl is still a good choice.
> Time
> > > will tell if the new Java API can put a dent in that niche or not. (
> And
> > > given the Filter plugin options... command line interfaces mostly
> should be
> > > moved into that universe anyway.)
> > >
> > > --
> > > Carey Matthew Black
> > > Remedy Skilled Professional (RSP)
> > > ARS = Action Request System(Remedy)
> > >
> > > Love, then teach
> > > Solution = People + Process + Tools
> > > Fast, Accurate, Cheap.... Pick two.
> > >
> > >
> > > On 6/26/07, Mike Wallick <mdw...@gm...> wrote:
> > > > Forgive me for being dense, but I don't understand how one would tie
> a
> > > control record that was created from a login routine, for example, to
> a
> > > session ID or similar. Given a session ID, how does one tie that to a
> > > control record that has already been created/validated?
> > > >
> > > > In other words, where does the control record "live" and how does
> one get
> > > at it? Doesn't the control record "disappear" once the web server
> request is
> > > complete?
> > > >
> > > > Mike
> > >
> > >
> -------------------------------------------------------------------------
> > > This SF.net email is sponsored by DB2 Express
> > > Download DB2 Express C - the FREE version of DB2 express and take
> > > control of your XML. No limits. Just data. Click to get it now.
> > > http://sourceforge.net/powerbar/db2/
> > > _______________________________________________
> > > Arsperl-users mailing list
> > > Ars...@ar...
> > > https://lists.sourceforge.net/lists/listinfo/arsperl-users
> > >
> > >
> >
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2 express and take
> control of your XML. No limits. Just data. Click to get it now.
> http://sourceforge.net/powerbar/db2/
> _______________________________________________
> Arsperl-users mailing list
> Ars...@ar...
> https://lists.sourceforge.net/lists/listinfo/arsperl-users
>



-- 

Clayton Scott
cla...@gm...