Has shibd to run on the same server

[Marc Kalberer]

Le 24/07/2014 17:42, Cantor, Scott a écrit :
> On 7/24/14, 11:31 AM, "Marc Kalberer" <info at programmers.ch> wrote:
>> The reason is because of the infrastructure of the hosting company Im
>> working with.  They are pretty flexible but
>>
>> - they allow daemons to be run only as "non-root" user
>> - they run apache on a dedicated server, different from the one accessed
>> by ssh (on witch the daemon would be running)
>>
>> If I understand you correctly : this approach is too far from the
>> "classic" way of running shibd ?
> It won't perform well at scale, though it handles light loads ok, and it
> is dependent on a secure link between the servers, there is no security of
> any kind around the communication.
Communication is "internal", so security is not an issue.
But while writing, I wonder how apache (mod_shib) would know where to 
access the "PID", is this in shibboleth2.xml, or this way of doing 
implies hacking mod_shid ?
>
> -- Scott
>

-- 
*Programmers.ch*
Développement WEB
Solutions libres et Opensources
Tel: ++41 76 44 888 72
Site: http://www.programmers.ch
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140724/05356fd1/attachment.html