RE: Configuring Tomcat to NOT run as Root
But if you don't run as root then you won't be able to use ports 80 or 443 because only root can grab those. Maybe this isn't a problem though, if you are using 8080 and/or 8443. Rob -Original Message- From: Scott W Ricketts [mailto:[EMAIL PROTECTED] Sent: 26 August 2003 12:59 To: [EMAIL PROTECTED] Subject: Configuring Tomcat to NOT run as Root I am helping set up a Citrix NFuse server running on Solaris, using Tomcat and Apache 1.3. The default install for NFuse 1.7 does not fire up Apache, rather it calls Tomcat to start alone. The default also has this running as root, something I am very uncomfortable with. I have Googled and searched archives, and whenever mentioned, it sounds rather trivial but I cannot find where in my config files to set this to run as 'nobody'. I am totally clueless with Tomcat, can anyone help? This email has been scanned for all viruses by the MessageLabs SkyScan service.___ Note: Please update your email address for this user to reflect the new MeadWestvaco Corporation. MeadWestvaco employee email addresses are in the format of [EMAIL PROTECTED] This electronic message contains information from MeadWestvaco Corporation or subsidiary companies, which may be confidential, privileged or otherwise protected from disclosure. The information is intended to be used solely by the recipient(s) named. If you are not an intended recipient, be aware that any review, disclosure, copying, distribution or use of this transmission or its contents is prohibited. If you have received this transmission in error, please notify MeadWestvaco immediately at [EMAIL PROTECTED] ___ This e-mail is confidential and privileged. If you are not the intended recipient please accept our apologies; please do not disclose, copy or distribute information in this e-mail or take any action in reliance on its contents: to do so is strictly prohibited and may be unlawful. Please inform us that this message has gone astray before deleting it. Thank you for your co-operation. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Configuring Tomcat to NOT run as Root
Tomcat runs as whatever user executes the startup scripts in $CATALINA_HOME/bin. If that user is root, then Tomcat runs as root. If that user is nobody, then Tomcat's effective user is nobody. There's no (current) facility in Tomcat to switch UID as Apache does after startup. As root, something like: su - SOMEUSER -c $CATALINA_HOME/bin/startup.sh will run Tomcat as the user defined by SOMEUSER. John Scott W Ricketts wrote: I am helping set up a Citrix NFuse server running on Solaris, using Tomcat and Apache 1.3. The default install for NFuse 1.7 does not fire up Apache, rather it calls Tomcat to start alone. The default also has this running as root, something I am very uncomfortable with. I have Googled and searched archives, and whenever mentioned, it sounds rather trivial but I cannot find where in my config files to set this to run as 'nobody'. I am totally clueless with Tomcat, can anyone help? This email has been scanned for all viruses by the MessageLabs SkyScan service.___ Note: Please update your email address for this user to reflect the new MeadWestvaco Corporation. MeadWestvaco employee email addresses are in the format of [EMAIL PROTECTED] This electronic message contains information from MeadWestvaco Corporation or subsidiary companies, which may be confidential, privileged or otherwise protected from disclosure. The information is intended to be used solely by the recipient(s) named. If you are not an intended recipient, be aware that any review, disclosure, copying, distribution or use of this transmission or its contents is prohibited. If you have received this transmission in error, please notify MeadWestvaco immediately at [EMAIL PROTECTED] ___ - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
