Has shibd to run on the same server

Cantor, Scott cantor.2 at osu.edu
Thu Jul 24 11:42:37 EDT 2014


On 7/24/14, 11:31 AM, "Marc Kalberer" <info at programmers.ch> wrote:
>
>The reason is because of the infrastructure of the hosting company Im
>working with.  They are pretty flexible but
>
>- they allow daemons to be run only as "non-root" user
>- they run apache on a dedicated server, different from the one accessed
>by ssh (on witch the daemon would be running)
>
>If I understand you correctly : this approach is too far from the
>"classic" way of running shibd ?

It won't perform well at scale, though it handles light loads ok, and it
is dependent on a secure link between the servers, there is no security of
any kind around the communication.

-- Scott



More information about the users mailing list