<div dir="ltr">Hi,<br><div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Jul 24, 2014 at 12:15 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div class="">Yeah, in practical terms if you're not root on the Apache system, you can't operate Shibboleth<br>
</div></blockquote><div><div><div class="gmail_extra"><div class="gmail_quote"><div><br></div><div>Is that true? You
don't need to be root, but you probably need some kind of permissions
on the server. Apache doesn't need to run as root, shibd doesn't need to
run as root, shib sp config can be installed anywhere, the apache
module can be installed anywhere, etc. Off the top of my head, you'd
only need root for putting something in intit.d and chkconfig (which is a
good practice, but not required).<br><br></div><div>In regards to
Marc's question, you should get clarification on what your hosting
provider will do on the Apache server. For example will they even
install mod shib? If so, will they be willing to run the daemon if you
supply some info about why it's needed and how it works? Configuration
management is another piece, which Peter mentioned above. And don't
forget the ability for "someone" to maintain things (config, upgrades,
etc.).<br></div><div><br></div><div>Regards,<br></div><div>Ian<br clear="all"></div></div><br>-- <br>Ian Rifkin<br>Software Systems Manager<br>Brandeis University<br>
</div></div></div></div></div></div></div>