For whats worth it: in a previous thread someone mentioned the ipchains equivalent for
Solaris. Ipchains
does Network Address Translation. My bet is that the overhead is minimal (as is likely
to be with ssh).
Sudo is an option, I guess. I've never used the tools. NAT does give you more options
to fine tune your
security, but requires probably more knowledge and skills then ssh and sudo.
On Sunday, January 07, 2001 7:36 PM, Ronald Hatcher [SMTP:[EMAIL PROTECTED]]
wrote:
> Since Solaris doesn't have ipchains, you may have better luck using ssh port
> forwarding. something like ssh -L80:nnn.nnn.nnn.nnn:8080 orion@localhost
>
> Ron Hatcher
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Christian
> Billen
> Sent: 07 January 2001 16:20
> To: Orion-Interest
> Subject: RE: orion on unix
>
>
> You could run the following command in your script as root:
> ipchains -A input --destination-port 80 -p tcp -j REDIRECT 10080
> Then su to the orion user and start orion on a port > 1024 as non root,
> there is an article on orionsupport.com about this but it's down at the
> moment.
>
> Christian Billen
>
> -----Original Message-----
> From: Heng Chee, Lee - SG [SMTP:[EMAIL PROTECTED]]
> Sent: Sunday, January 07, 2001 2:54 AM
> To: Orion-Interest
> Subject: orion on unix
>
> Hi,
> I used to run orion on NT machine and now I have to deploy it on a Sun
> Sparc
> Solaris machine.
> Honestly, my knowledge on unix system admin is very limited.
> Ok, now I have this problem:
> I have untar the orion archieve to a folder called orion, this folder and
> all the files and subfolders under it are belongs to a user name 'orion',
> the group access permission for this folder (and all it's files) are also
> called 'orion'. When I log in to unix as user 'orion' and try to start up
> the app server by typing java -jar orion.jar, I get a message "Error
> starting HTTP-Server : Permission denied". I can only startup orion if I
> log in as root user. This is not acceptable because I can't let everyone to
> have root access just for starting up the orion server.(Our project still
> in
> the development phase so we need to start and stop the server quite often)
>
> I am puzzle with this error because I have already set the owner of all the
> files under orion folder to be 'orion', and orion app server is using it's
> own http-server internally so it shouldn't has any permission problem.
> I think that orion app server might try to access some of the unix system
> file which must have root access, if this is the case can someone tell me
> which file it it?
> Or is there any alternative work around for this problem?
>
>
>
>
>
> Thanks and best regards
> Lee
>
>
>
>
>
>
>
