Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Programming > Python > xmlrpc and auth-digest

Reply
Thread Tools

xmlrpc and auth-digest

 
 
Thomas Liesner
Guest
Posts: n/a
 
      01-08-2007
Hi all,

this may have been asked before, but as a newbie with xmlrpc i can't
find any suitable info on that. Sorry.
I am trying to write a simple xmlrpc-client in python and the server i
am trying to receive data from requires http auth digest.
The info on xmlrpclib covers auth basic thrugh url econding such as
"userass@server", but no auth digest.

Is there any other library i could use for that or can i write some sort
of wrapper around this using a differnt library like urllib?

TIA,
Tom
 
Reply With Quote
 
 
 
 
Laszlo Nagy
Guest
Posts: n/a
 
      01-08-2007
Thomas Liesner írta:
> Hi all,
>
> this may have been asked before, but as a newbie with xmlrpc i can't
> find any suitable info on that. Sorry.
> I am trying to write a simple xmlrpc-client in python and the server i
> am trying to receive data from requires http auth digest.
> The info on xmlrpclib covers auth basic thrugh url econding such as
> "userass@server", but no auth digest.
>
> Is there any other library i could use for that or can i write some sort
> of wrapper around this using a differnt library like urllib?
>

What I did before is that I added additional parameters of my published
functions for the username and the password, and used xmlrpc over https.
This is secure, but somewhat clumsy. You can also implement this by
creating a persistent "session" when logging in, then use the session
identifier for identification.

If you are interested in XML/RPC over HTTPS:

http://aspn.activestate.com/ASPN/Coo.../Recipe/496786

Regarding basic or digest http authentication, I believe it has nothing
to do with the XML/RPC protocol itself. The basic and digest
authentication is defined at the HTTP level. It is implemented with HTTP
headers. Probably you can do this but not with the built-in xmlrpclib.
If you look at xmlrpclib.py, then you will see that the ServerProxy
class is an old style class that uses the xmlrpclib.Transport class for
communication. The Transport class itself uses httplib to post the
information. In theory, you can copy your own xmlrpclib and send/check
extra http headers. In my opinion, it would be too much work, too much
trouble and still not secure.

Regards,

Laszlo


 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
XMLRPC and non-ascii characters Joxean Koret Python 1 06-29-2005 01:24 PM
xmlrpc with Python and large datases writeson Python 5 03-23-2005 04:02 PM
Java and xmlrpc? ted holden Java 9 12-08-2004 04:01 PM
Re: xmlrpc, httplib and SSL (HTTP 1.1 XMLRPC client) Etienne Posthumus Python 1 04-01-2004 05:13 PM
xmlrpc / SimpleXMLRPCServer and multi-threading Marco Aschwanden Python 2 12-29-2003 06:28 PM



Advertisments