I used to use Apache::Session (AS), but I'm about to migrate to CGI::Session (CS). Despite the name, AS does work under vanilla CGI (I didn't do much mod_perl). The convenient in using AS is lying on the tie interface. You work on the session data as usual with ordinarny hash.

But, this is the tie interface that brings the cons for me since I have to worry about extra variable. Another cons is that I had to explicitly say relevant driver for the storage.

use Apache::Session::MySQL;
my %session;
tie %session, 'Apache::Session::MySQL';
[download]

I haven't used CS, but the docs look promising. So I can't actually give real experience here. I can imagine that I can use my conf structure to fill in the dsn option. I prefer the method call interface provided by CS. I still hope that CS will take an active dbh as alternative to dsn. Another downside for CS is that its constructor is too way polymorphic (if this term is correct). While I have no problem with this, but it can confuses newbie.