Hi, Christian, and David: I've been running DSpace in this fashion for years
(with a shared group). This is especially handy in an environment where more
than one person will need to deploy DSpace to the container, or you don't want
to add an additional login step to a deploy process. I even went so far as to
change the Ant build.xml deploy script to ensure the group permissions were
persisted whenever I ran ant update as my own user. This configuration will
work well all the way up to DSpace 5. We've recently added some targets to
build.xml that perform maintenance on the Solr cores, and the only way these
targets will work in my environment is if the Solr cores are similarly set up
with group permissions (there *is* a hack you can add to the Tomcat start
script to ensure this [1], though I haven't yet tried using it). OR, you can
run all the command line scripts (including ant update) as the service user
(dspace in our case, though some people use the system-provided service user,
typically tomcat or tomcat7).
So, anyway, yes, other people use a shared group and carefully curated
permissions to "make DSpace go". You may run into trouble with DSpace 5, but
there *are* options if you'd like to continue to work that way.
--Hardy
[1]
https://mail-archives.apache.org/mod_mbox/lucene-solr-user/200903.mbox/%3cc66dcac40903030839v68d223d7k78e9d5c9008dc...@mail.gmail.com%3E
________________________________
From: Baker, David A. [daba...@milligan.edu]
Sent: Monday, December 22, 2014 8:31 AM
To: Hilton Gibson; christian.schei...@uni-konstanz.de
Cc: dspace-tech@lists.sourceforge.net
Subject: Re: [Dspace-tech] Must I Build/Install as Tomcat service user?
Christian, what version of DSpace are you running? How long have you been
running it like this?
Thanks!
Christian
Scheible<http://www.mail-archive.com/search?l=dspace-tech@lists.sourceforge.net&q=from:%22Christian+Scheible%22>
Mon, 22 Dec 2014 01:17:27
-0800<http://www.mail-archive.com/search?l=dspace-tech@lists.sourceforge.net&q=date:20141222>
We just add the users dspace and tomcat7 to a shared group (like dspace) and
recursivly add read/write permissions to the group for the dspace files and
folders.
Am 20.12.2014 um 09:34 schrieb Hilton Gibson:
Hi David
This is what I do:
http://wiki.lib.sun.ac.za/index.php/SUNScholar/Prepare_Ubuntu/S08#Step_8.5_Setup_Tomcat_server_permissions
Cheers
hg
*Hilton Gibson*
Ubuntu Linux Systems Administrator
JS Gericke Library
Room 1025C
Stellenbosch University
Private Bag X5036
Stellenbosch
7599
South Africa
Tel: +27 21 808 4100 | Cell: +27 84 646 4758
On 19 December 2014 at 22:33, Baker, David A. <daba...@milligan.edu
<mailto:daba...@milligan.edu>> wrote:
I’m doing some testing using Ubuntu server 14.04.1 and DSpace 4.2
Ubuntu’s package manager creates a service user, tomcat7, for
running Tomcat. So instead of fighting with Ubuntu, I am using
that user to run the Tomcat service. Also, I have created a Linux
user account, dspace, that I log into the server with.
Is it OK that I did my Maven/Ant build/install using my normal
user, dspace, and then gave ownership and permissions of all of
my dspace files to the Tomcat user, tomcat7?
Ubuntu gives the tomcat7 user a home directory of
“/usr/share/tomcat7” and a shell of “/bin/false”, so without
changing the user I am unable to do any building with it. Would it
be better if I were to assign “/home/tomcat7” to my Tomcat service
user so it can do the build, or is there some reason that the
Ubuntu package manager has assigned “/usr/share/tomcat7” as the
home directory? I don’t want to break the service user account,
and I don’t want to cause some problem down the road by doing the
build/install with a normal user.
Thanks for any info!
--
David Baker
Digital Resources & Web Development Specialist
Milligan College – P.H. Welshimer Memorial Library
423-461-8703 | library.milligan.edu <http://library.milligan.edu/>
sig
------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and
Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration
& more
Get technology previously reserved for billion-dollar
corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
_______________________________________________
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
<mailto:DSpace-tech@lists.sourceforge.net>
https://lists.sourceforge.net/lists/listinfo/dspace-tech
List Etiquette:
https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette
------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
_______________________________________________
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech
List Etiquette: https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette
--
Christian Scheible
Softwareentwickler / Abt. Content-basierte Dienste
Kommunikations-, Informations- und Medienzentrum (KIM)
Universität Konstanz
78457 Konstanz
+49 (0)7531 / 88-2857
Raum B 703
------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
_______________________________________________
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech
List Etiquette: https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette
------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_______________________________________________
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech
List Etiquette: https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette
