[OpenAFS] Re: suEXEC/FastCGI/OpenAFS question

Andrew Deason adeason@sinenomine.net
Wed, 23 Nov 2011 18:08:04 -0600


On Wed, 23 Nov 2011 13:41:22 -0700
Ken Dreyer <ktdreyer@ktdreyer.com> wrote:

> Are you using mod_fcgid ? Looking over
> https://httpd.apache.org/mod_fcgid/mod/mod_fcgid.html , I was planning
> to make the FcgidWrapper script run aklog (well, with k5start), and
> use a slightly different FcgidWrapper for each vhost.

I'm not sure if you literally mean a different wrapper, but a wrapper
should be able to determine itself which credentials to use, at least if
you're just doing it by vhost. Just having one may simplify the config,
if you can automate the host -> princ/keytab mapping.

-- 
Andrew Deason
adeason@sinenomine.net