Re: [coldsync-hackers] Design logic of Sync conduits

[IwantToKeepAnon <iwanttokeepanon at yahoo dot com>]

"Andrew Arensburger" <arensb+CShackers@ooblick.com>
writes:

> 	This leads to the next problem: unless I've
> missed something, there's no way to connect
> conduits in the .coldsyncrc: you can't say "run
> conduit B only if conduit A ran successfully" or
> "if conduit C failed, abort."

One could write a fetch conduit to do the
authentication since all fetches run before all syncs
(at least by default) and a dump conduit to
un-authenticate.

conduit Fetch {
	# Fetch the public key and test ...
	path: .../doauth;
	type: */*;

   # Have coldsync read "Saved Preferences" and
provide us the sshkey
   # (assuming "sshkey" has already been saved into
"Saved Preferences" somehow)
	pref: sshkey/0;
}

conduit Sync {
	path: .../syncit;
	type: */*;
}

conduit Dump {
	path: .../doneauth;
	type: */*;
}


Flow:

  doauth : test for a file (say ~/.palm/auth/ok?),
     if it does not exist then we are not authorized.
     "touch" ~/.palm/auth/ok if and only if sshkey
     authorization goes well.
     Maybe re-authenticate if ~/.palm/auth/ok is old
     (maybe somebody touched ~/.palm/auth/ok to force
     a sync?).

  syncit : only syncs if ~/.palm/auth/ok exists
     (i.e. authorization passed)

  doneauth : delete ~/.palm/auth/ok ; forces an
     authorization each and every coldsync.

Note: could do something as blase as use the Palm OS
security password.  How sophisticated does this need
to get with unencrypted communications and unencrypted
databases?

This is a little kludgy because anyone could "touch" a
file called ~/.palm/auth/ok and syncs would go on its
merry way.  A "chmod 700 ~/.palm" goes a long way in
keeping prying eyes out.

Just an idea ...
-- 
Rodney

=====
-- 
"A smile is the shortest distance between two people."
Victor Borge

__________________________________
Do you Yahoo!?
Yahoo! Search - Find what you?re looking for faster
http://search.yahoo.com
This message was sent through the coldsync-hackers mailing list.  To remove
yourself from this mailing list, send a message to majordomo@thedotin.net
with the words "unsubscribe coldsync-hackers" in the message body.  For more
information on Coldsync, send mail to coldsync-hackers-owner@thedotin.net.