[Freeipa-devel] SSL

[Karl MacMillan]

On Thu, 2007-07-12 at 14:35 -0400, Simo Sorce wrote:
> On Thu, 2007-07-12 at 14:34 -0400, Karl MacMillan wrote:
> > On Thu, 2007-07-12 at 14:31 -0400, Simo Sorce wrote:
> > > On Thu, 2007-07-12 at 11:34 -0400, Rob Crittenden wrote:
> > > 
> > > > I think we need to revisit the resistance to Apache here. It already 
> > > > provides kerberos authentication with ticket forwarding. It seems
> > > > like 
> > > > reinventing the wheel doing it in Python instead. koji/brew use
> > > > Apache 
> > > > as the front-end and it seems to work ok.
> > > 
> > > If you can come up with a simple way to drop a configuration file in the
> > > pache dir that does all we need (simply doing an service httpd restart)
> > > then I think using apache may make sense.
> > > I don't think people will use the same box to store identities and to
> > > serve casual HTTP content anyway :)
> > > 
> > 
> > That's fine with me - and we already require it for the DS admin server.
> > And since we were planning on taking over port 80 with some server I
> > don't think people could use the box for web serving anyway.
> 
> You mean 443 here, right? :-)
> 

Oops.

> > What about the xml-rpc layer though?
> 
> What about it ?
> 

Will it also go through apache?

Karl

> Simo.
>