Allow numeric user notation for proxy.config.admin.user_id
----------------------------------------------------------

                 Key: TS-353
                 URL: https://issues.apache.org/jira/browse/TS-353
             Project: Traffic Server
          Issue Type: New Feature
          Components: Documentation
    Affects Versions: 2.1.1
            Reporter: Mladen Turk
            Assignee: Miles Libbey


New way of specifying the user_id has been added.

Currently the proxy.config.admin.user_id allows only specifying user names.
Since 2.1.1 if the user_id is prefixed with pound character (#) the remaining 
of the
string is considered to be numeric user id.

If the user_id equals '#-1' this would cause the trafficserver to not change 
the user
during startup.

Setting user_id to 'root' or to '#0' is now forbidden because of security 
reasons.
Trying to do so, will cause the traffic_server fatal failure.
However there are two ways to bypass that restriction.
The first one is by specifying -DBIG_SECURITY_HOLE in CXXFLAGS during 
compilation
The second is setting user_id=#-1 and starting trafficserver under root account.

 

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to