Tuesday, April 15, 2014

Off-topic - single signon [Was: recommended fcgi way for django 1.6 on windows? Problems with https]

On 16/04/2014 6:16 AM, anton wrote:
> I also looked at nginx which is quite nice,
>
> but now I found the mod_authn_ntlm SSPI win32 module
> for apache
>
> http://www.apachelounge.com/viewtopic.php?p=25073
>
> which finally alows me to do SingleSigneOn on windows,
> and it works :-)

I had a client who used single-signon for their staff convenience. It
was driven by their CEO. Their (php) intranet was hacked and all their
logins were compromised. Probably sold on the black market. They had to
dismantle single-signon and implement a new policy in a hurry to mandate
separate logins for different systems in case they are hacked in future.

It was ugly. My advice is to develop a contingency plan based on all
foreseeable hacks.

All the best

Mike

>
> for nginx I did not find such a module
> (I saw something outdated somewhere)
>
> But you are right nginx is nice too
>
> Anton
>
>
> Andre Terra wrote:
>
>> I've used nginx in windows with great results. In fact, I even compiled it
>> on cygwin with additional modules (namely, to track large file uploads)
>> and everything worked smoothly.
>>
>>
>> Cheers,
>> AT
>>
>>
>> On Mon, Apr 14, 2014 at 1:48 PM, anton <antonxx@gmx.de> wrote:
>>
>>> Hi
>>>
>>> I did a test with modwsgi on windows with apache,
>>> http and https work now both.
>>>
>>> Thanks :-)
>>>
>>> *BUT*: the modwsgi does not support Daemonmode on windows,
>>> which means that I need to restart the whole apache Server every time
>>> I update my django app.
>>>
>>> For a real productionserver its a nightmare, if there are different apps
>>> hosted.
>>>
>>> Perhaps I find a solution .. :-(
>>>
>>> Anton
>>>
>>>
>>> --
>>> You received this message because you are subscribed to the Google Groups
>>> "Django users" group.
>>> To unsubscribe from this group and stop receiving emails from it, send an
>>> email to django-users+unsubscribe@googlegroups.com.
>>> To post to this group, send email to django-users@googlegroups.com.
>>> Visit this group at http://groups.google.com/group/django-users.
>>> To view this discussion on the web visit
>>> https://groups.google.com/d/msgid/django-users/lih3hn%24sn4%241%40ger.gmane.org
>>> .
>>> For more options, visit https://groups.google.com/d/optout.
>>>
>>
>
>

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to django-users+unsubscribe@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at http://groups.google.com/group/django-users.
To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/534DAD6D.5000301%40dewhirst.com.au.
For more options, visit https://groups.google.com/d/optout.

No comments:

Post a Comment