I'm working on a project where I have to meet some regulatory requirements that require at least 3 out of 5 authorized users to start a backend web service that handles very sensitive information using pre-assigned passwords.
Right now, the prototype has been approved and is running using Python's wsgiref.simple_server(), which I have programmed to manually prompt for the passwords. Now that the prototype has been approved, I have to migrate the web application to a production environment where I will need to run it behind
I have two questions:
Right now, I use a thin Python wrapper around
expectto programmatically allow for remote password entry. How do I get Apache to prompt me for a password before starting? Will this have to be in the
app.wsgiscript that's executed by
mod_wsgi? How would that work since Apache daemonizes, and thus, has no stdin!
Will I have to worry about some type of code reload? Apache probably has some maximum number of requests before it kills and restarts another worker process, but, would this require a password prompt as well?
Any help here would be appreciated.