Re: aname_to_locaname vs gssapi svc/host.domain.org@REALM
Russ Allbery <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.heimdal.general |
|---|---|
| Organization | The Eyrie |
| Message-ID | <[email protected]> |
Nico Williams <[email protected]> writes: > Also, regarding Apache... Yes, Apache has a legitimate reason for being > a daemon that is also an NFS (or AFS, or...) client. However, Apache is > effectively a proxy for its clients. No, that is a rare case for Apache, actually. It's only really true in the old world of static web pages, which is vanishing. You almost never want the user of a PHP application to have access to the PHP source, which is what's stored in the shared file system. The job of Apache these days is usually to run dynamic interpreted applications or to mediate and possibly rewrite or selectively release raw data stored elsewhere. -- Russ Allbery ([email protected]) <http://www.eyrie.org/~eagle/>