<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<div class="moz-cite-prefix">Le 24/07/2014 17:42, Cantor, Scott a
écrit :<br>
</div>
<blockquote cite="mid:CFF6A11B.52D0F%25cantor.2@osu.edu" type="cite">
<pre wrap="">On 7/24/14, 11:31 AM, "Marc Kalberer" <a class="moz-txt-link-rfc2396E" href="mailto:info@programmers.ch"><info@programmers.ch></a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">
The reason is because of the infrastructure of the hosting company Im
working with. They are pretty flexible but
- they allow daemons to be run only as "non-root" user
- they run apache on a dedicated server, different from the one accessed
by ssh (on witch the daemon would be running)
If I understand you correctly : this approach is too far from the
"classic" way of running shibd ?
</pre>
</blockquote>
<pre wrap="">
It won't perform well at scale, though it handles light loads ok, and it
is dependent on a secure link between the servers, there is no security of
any kind around the communication.</pre>
</blockquote>
Communication is "internal", so security is not an issue.<br>
But while writing, I wonder how apache (mod_shib) would know where
to access the "PID", is this in shibboleth2.xml, or this way of
doing implies hacking mod_shid ? <br>
<blockquote cite="mid:CFF6A11B.52D0F%25cantor.2@osu.edu" type="cite">
<pre wrap="">
-- Scott
</pre>
</blockquote>
<br>
<div class="moz-signature">-- <br>
<b>Programmers.ch</b><br>
Développement WEB<br>
Solutions libres et Opensources<br>
Tel: ++41 76 44 888 72<br>
Site: <a class="moz-txt-link-freetext" href="http://www.programmers.ch">http://www.programmers.ch</a><br>
</div>
</body>
</html>