Hi, we would like to have an OpenCA Installation as unprivileged user. All the files should be owned by a normal user and reside in his home. This user is equal to the openca-user. All privileges for the web-user should be given via ACL (setfacl).
I have written a wrapper for the install-script, that changes user and group ownership to openca-user, everytime an install as web-user is requested. Afterwards the file is given permissions for the web-user via setfacl. Perl: I changed PREFIX the Makefiles in all src/modules/* dirs to a directory of the unprivileged user. In order to find the modules outside @INC I put a line at the beginning of the scripts - for shell: `export PERL5LIB="/home/user/perl/"` for perl: `use lib "/home/user/perl";` This works until the Server is started via openca_start. But the server does not create the openca_socket properly, and is not functioning. Now, my questions: Is it possible (feasable) to have a setup like the described above, or is it neccesary to install OpenCA the normal way with root-permissions and appropriate ownership of the files? If this should work, can you give me a hint to track down the problem with the socket? I read documentation carefully and looked around in source with no success :( TIA, Philipp Letschert -- /-\ C oo "Das beste Werkzeug wird zum Tand in eines tumben Toren Hand." _( ^) Daniel D�sentrieb / -\ ------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_idP47&alloc_id808&op=click _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
