James MacFarlane wrote:
> So far I can't see a ready way to limit how pkg.depotd works in this 
> way. It can be run in read-only mode and restarted in read / write mode 
> to publish a package, but that just limits the opportunity for 
> unauthorised packages to be published.
> 
> The other option I've been thinking of is to do something with an Apache 
>   front-end, and then to restrict access to the backend pkg.depotd port 
> with IP Filter.

Using a reverse-proxy setup for Apache is probably your best bet for the 
moment.

The following open bugs are related to your request though:
2153 IPS depot needs to have authentication database interface

Cheers,
-- 
Shawn Walker
_______________________________________________
pkg-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/pkg-discuss

Reply via email to