[Tilesathome] Batik, and batik-agent

[Jiri Klement]

>> > 2) Batik agent seems to do some logging to the STDOUT or ERR of the
>> > agent server, and some to the file specified with log= on the inet
>> > socket. I'd really like to avoid creating logfiles at the place in the
>> > program I want to put this, would it be possible for it to dump that
>> > output to the network socket instead?
>>
>> It should be safe to ignore logging to stdout/stderr, all important
>> stuff should get into log file. Data are written to log file only when
>> rendering fails, so I can instead of writing log file send error
>> description with agent response back to client.
>
> That would be great.

Done.

>> > 3) The network socket listens openly to everywhere and doesn't do any
>> > authentication or anything at all, which means anybody that's able to
>> > reach a machine running the agent over tcp/ip can make it use loads of
>> > resources, and even overwrite any files the user running the agent has
>> > write access to.

Agent now listen only on local interface by default.


>> > 4) I had some problems getting the agent to work at all, does it
>> > require the area= parameter or something? That really should be
>> > optional unless you don't care about using it for anything other than
>> > t at h.
>> I didn't intend to use batik agent in anything else than t at h. But
>> there is no reason while area and other parameters have to be
>> mandatory so I will change that.

Done.

> Cool, thanks. I'm making SVG::Rasterizer very generic and plan to
> eventually put it on CPAN, would be cool if batik-agent was robust
> enough to tag along... (If you're not opposed to it of course, what's
> the license anyway?)
>

I didn't think about giving it any licence, it's just few lines of
code. You can use it for CPAN if you want, but we will have to make
different authentification schema if it's to be used in non osm
related projects. What about this: client creates random password and
pass it as command line argument to batik agent (hashed so password is
not visible from process listing). Every request contains password
which agent checks.

Btw source code of batik agent is included in batik-agent.jar. I
should probably write it proper build script and put sources in svn.