Mailing-List: contact bugs-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Apache HTTPD Bugs Notification List" <bugs@httpd.apache.org>
From: bugzilla@apache.org
To: bugs@httpd.apache.org
Subject: DO NOT REPLY [Bug 51079] [PATCH] mod_fcgid spawned CGI Process
 cannot impersonate windows users in order to access resources/database
 located in a remote machine in same windows workgroup.
Date: Thu, 19 Jan 2012 17:32:29 +0000
Message-ID: <bug-51079-7868-pjrYY3I37e@https.issues.apache.org/bugzilla/>
In-Reply-To: <bug-51079-7868@https.issues.apache.org/bugzilla/>
References: <bug-51079-7868@https.issues.apache.org/bugzilla/>
Auto-Submitted: auto-generated
Content-Type: text/plain; charset="UTF-8"
MIME-Version: 1.0

https://issues.apache.org/bugzilla/show_bug.cgi?id=51079

William A. Rowe Jr. <wrowe@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Severity|normal                      |enhancement

--- Comment #1 from William A. Rowe Jr. <wrowe@apache.org> 2012-01-19 17:32:29 UTC ---
The obvious hesitation is storing a password value in the configuration.

The reason this and the User directive have not been supported in httpd
is this fundamental weakness of the Windows security model, and that we
have not come up with any clever way to avoid it.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org