Re: [Monotone-devel] newbie question - SHA1 vs serials

[K. Richard Pixley]

Richard Levitte - VMS Whacker wrote:

> Hmm, but the authentication done through the apache server is user
> authentication, right?  How does that compare to the host
> authentication you initiated this discussion with?
>  
Pretty much any authentication possible under linux is available through 
apache.  This includes authentication by user, by host, all of the PAM 
modules, and a number of others.  More, it's available on a per-file 
and/or per directory or subtree basis which essentially gives you the 
ability to allow read/write access specifically to bob alone on machine 
x to file1 but only when he's connecting over an encrypted connection 
with valid certs on both sides resolving to our own internal circle of 
trust and authenticated against the company's ldap server, but only when 
he's using his unix style password, not his samba/smb password and only 
between the hours of 9am - 5pm.

That's a lot of flexibility.

--rich