The best way to get around this, I think, is to use apache as a front end
and connect Orion to it.
There is excellent documentation on how to do this on
www.orionsupport.com... when it comes up. It think it is one of the
featured links on the right hand menu.
Apache runs anywhere, pretty much.
What you do is start up apache as root. Apache grabs whatever lower
numbered ports it needs (including 80) and then changes its user to
something else (usually 'nobody'). You change the configuration in
/etc/httpd/conf/httpd.conf (at least on linux) and then you can connect to
it using standard procedures supported by both apache and orion.
The main benefit of this is that you can run jrun as whomever you would like
('orion' is a good username) and you only have to worry about the file
permissions from that point on.
You DEFINITELY don't want to run orion, or any other Servlet Container as
root. The main reason is security. One of your developers could very
easily write a piece of code that would wipe out the entire hard drive, or
worse... and if anyone was able to hack in... all they would need to do is
write up a jsp file, and they have all the access they want.
Anyway. The apache thing works for us. We are able to do a lot of things
with this. One example is Virtual hosting. Each developer is able to have
their own instance of orion, running on their own virtual IP address, on
their own code base and starting and stopping it on their own running as
their own user. Apache allows for this.
Tony Wilson
-----Original Message-----
From: Heng Chee, Lee - SG [mailto:[EMAIL PROTECTED]]
Sent: Sunday, January 07, 2001 12:54 AM
To: Orion-Interest
Subject: orion on unix
Hi,
I used to run orion on NT machine and now I have to deploy
it on a Sun Sparc
Solaris machine.
Honestly, my knowledge on unix system admin is very limited.
Ok, now I have this problem:
I have untar the orion archieve to a folder called orion,
this folder and
all the files and subfolders under it are belongs to a user
name 'orion',
the group access permission for this folder (and all it's
files) are also
called 'orion'. When I log in to unix as user 'orion' and
try to start up
the app server by typing java -jar orion.jar, I get a
message "Error
starting HTTP-Server : Permission denied". I can only
startup orion if I
log in as root user. This is not acceptable because I can't
let everyone to
have root access just for starting up the orion server.(Our
project still in
the development phase so we need to start and stop the
server quite often)
I am puzzle with this error because I have already set the
owner of all the
files under orion folder to be 'orion', and orion app server
is using it's
own http-server internally so it shouldn't has any
permission problem.
I think that orion app server might try to access some of
the unix system
file which must have root access, if this is the case can
someone tell me
which file it it?
Or is there any alternative work around for this problem?
Thanks and best regards
Lee
