Has shibd to run on the same server

[Ian Rifkin]

Hi,

On Thu, Jul 24, 2014 at 12:15 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> Yeah, in practical terms if you're not root on the Apache system, you
> can't operate Shibboleth
>

Is that true? You don't need to be root, but you probably need some kind of
permissions on the server. Apache doesn't need to run as root, shibd
doesn't need to run as root, shib sp config can be installed anywhere, the
apache module can be installed anywhere, etc. Off the top of my head, you'd
only need root for putting something in intit.d and chkconfig (which is a
good practice, but not required).

In regards to Marc's question, you should get clarification on what your
hosting provider will do on the Apache server. For example will they even
install mod shib? If so, will they be willing to run the daemon if you
supply some info about why it's needed and how it works? Configuration
management is another piece, which Peter mentioned above. And don't forget
the ability for "someone" to maintain things (config, upgrades, etc.).

Regards,
Ian

-- 
Ian Rifkin
Software Systems Manager
Brandeis University
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140724/cd4c2459/attachment.html