shibboleth-dev - Re: Apache2: one module or two?
Subject: Shibboleth Developers
List archive
- From: Derek Atkins <>
- To: Scott Cantor <>
- Cc: "'Shibboleth Design Team'" <>
- Subject: Re: Apache2: one module or two?
- Date: 11 Sep 2003 14:06:06 -0400
Scott Cantor
<>
writes:
> > In my port to Apache2 I'm seriously considering a return to a
> > single plugin module. It appears that about 50% of the code
> > in mod_shire and mod_shibrm is duplicated, and much of the
> > configuration wonkiness was due to the module split. I think
> > it would be easier to code AND easier to administer if it
> > were returned to a single module.
>
> At this point, I'm personally inclined to agree. I actually think that if we
> want to support pluggable RM functionality, we might be better served doing
> it ourselves via some kind of simple interface called from the "base" RM in
> the module. I think it's potentially more portable to other environments
> that way, too.
Ok. I'll make a single module, then.
> > I could always add a ShibRM=Off directive to turn off the RM
> > processing for sites that want to do it themselves (to retain
> > the same functionality as not using mod_shibrm)
>
> Note that mod_shibrm does two things...exports attributes and enforces
> htaccess. The former seems like a given to me. W/o it, why even use
> mod_shire? Eventually we might have other ways of getting attributes via a
> library, but the shire module itself is worthless as an Apache plugin w/o
> that functionality coming from somewhere. The piece for htaccess files might
> be just the opposite of your suggestion...turn it on if you want it.
Well, we can make it a boolean and decide later what the default value is.
> -- Scott
Thanks,
-derek
--
Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
Member, MIT Student Information Processing Board (SIPB)
URL: http://web.mit.edu/warlord/ PP-ASEL-IA N1NWH
PGP key available
------------------------------------------------------mace-shib-design-+
For list utilities, archives, subscribe, unsubscribe, etc. please visit the
ListProc web interface at
http://archives.internet2.edu/
------------------------------------------------------mace-shib-design--
- Apache2: one module or two?, Derek Atkins, 09/11/2003
- RE: Apache2: one module or two?, Scott Cantor, 09/11/2003
- Re: Apache2: one module or two?, Derek Atkins, 09/11/2003
- Re: Apache2: one module or two?, RL 'Bob' Morgan, 09/12/2003
- RE: Apache2: one module or two?, Scott Cantor, 09/12/2003
- Re: Apache2: one module or two?, Derek Atkins, 09/12/2003
- <Possible follow-up(s)>
- RE: Apache2: one module or two?, Wilcox, Mark, 09/14/2003
- Re: Apache2: one module or two?, Derek Atkins, 09/14/2003
- RE: Apache2: one module or two?, Scott Cantor, 09/11/2003
Archive powered by MHonArc 2.6.16.