unrestricted access for specific domain

[Peter Schober]

* Cantor, Scott <cantor.2 at osu.edu> [2018-11-02 17:09]:
> > Maybe that should be revisited since support for dynamic modules
> > exists since a few years now:
> 
> That's a misnomer, it doesn't mean what you think it would. It
> allows modules to be enabled or disabled at runtime, but they still
> have to be built along with the nginx build they get used with, it's
> still all compiled at once. They don't have an ABI like Apache does.

OK, so packaging third-party modules for someone else's nginx build
isn't possible, they'd have to be enabled at build time which by
defintion isn't possible for third-party modules...

But I guess Debian (building, packaging and shippping both nginx and
the Shib SP) could still ship a Shib module for nginx alongside their
nginx and other modules?
IIRC Debian also enables FastCGI support in their Shib packages by
default. So that should allow fully prepackaged Shib support on
Debian (and friends), at least.

More of a topic for the Debian Shibboleth packaging team, of course.
-peter