Re: New jsvc (commons-daemon-native); catalina.out is owned by root - WTF?

2010-12-02 Thread Gregor Schneider
-owbership to catalina.out Is it possible that if catalina.out already exists and is owned by, say, tomcat, that it's ownership will be retained when jsvc opens it for append? If that's the case, you may have simply deleted the file during your upgrade and had it re-created by jsvc (owned

Re: New jsvc (commons-daemon-native); catalina.out is owned by root - WTF?

2010-12-02 Thread Mladen Turk
On 12/02/2010 12:05 PM, Gregor Schneider wrote: Besides, all logs are owned by tomcat:tomcat (as it should be) - the only exception is catalina.out. I guess you agree that this is not what somebody would call consistent behaviour... The catalina.out is written by a parent process running

Re: New jsvc (commons-daemon-native); catalina.out is owned by root - WTF?

2010-12-02 Thread Gregor Schneider
Mladen, On Thu, Dec 2, 2010 at 12:37 PM, Mladen Turk mt...@apache.org wrote: On 12/02/2010 12:05 PM, Gregor Schneider wrote: If your developers need to see the stdout of the Tomcat on the production server then you have a serious problem. The first one that I find (well funny) is that they

Re: New jsvc (commons-daemon-native); catalina.out is owned by root - WTF?

2010-12-02 Thread Justin Case
From: Gregor Schneider rc4...@googlemail.com I feel that ppl have a problem if they mistrust their developers in so far that they have to lock their box even to their own developers maintaing the apps. And I'm not talking about full access but I'm talking about browsing the logs.

Re: New jsvc (commons-daemon-native); catalina.out is owned by root - WTF?

2010-12-01 Thread Gregor Schneider
Konstantin, On Tue, Nov 30, 2010 at 9:42 PM, Konstantin Kolinko knst.koli...@gmail.com wrote: The above one is tomcat-native, aka Tomcat-Apr, a library that provides code for Http11AprProtocol and AjpAprProtocol connectors. This one is commons-daemon, which gives you jsvc.

Re: New jsvc (commons-daemon-native); catalina.out is owned by root - WTF?

2010-12-01 Thread Gregor Schneider
Christopher, On Tue, Nov 30, 2010 at 10:33 PM, Christopher Schultz ch...@christopherschultz.net wrote: Apache httpd acts this way: Sure, since Apache is usually started within root-context (sbin) - so that does make sense. When talking about servers, I'm not talking about a webserver but a

Re: New jsvc (commons-daemon-native); catalina.out is owned by root - WTF?

2010-12-01 Thread André Warnier
Gregor, (by the way, hi!) But what's really puzzling me - and for which I don't have any explanation - is, that with the old version of jsvc, catalina.out had ${TOMCAT_USER}-ownership (mind you: in the startup-script there's a su ${TOMCAT-USER} before starting jsvc), and to me it seems that

Re: New jsvc (commons-daemon-native); catalina.out is owned by root - WTF?

2010-12-01 Thread Gregor Schneider
Hi André, long time no see ;) On Wed, Dec 1, 2010 at 12:20 PM, André Warnier a...@ice-sa.com wrote: As far as I know, these startup scripts are created by the packagers of Debian, RedHat etc.. when they wrap Tomcat in a platform-specific package. /They/ are the ones who decide how they call

Re: New jsvc (commons-daemon-native); catalina.out is owned by root - WTF?

2010-12-01 Thread André Warnier
Gregor Schneider wrote: Hi André, long time no see ;) On Wed, Dec 1, 2010 at 12:20 PM, André Warnier a...@ice-sa.com wrote: As far as I know, these startup scripts are created by the packagers of Debian, RedHat etc.. when they wrap Tomcat in a platform-specific package. /They/ are the ones

Re: New jsvc (commons-daemon-native); catalina.out is owned by root - WTF?

2010-12-01 Thread Mladen Turk
On 12/01/2010 11:55 AM, Gregor Schneider wrote: Sure, since Apache is usually started within root-context (sbin) - so that does make sense. Right but it drops the user to apache if instructed to do so. Even then logs are root owned, and this is security precaution (like with jsvc

Re: New jsvc (commons-daemon-native); catalina.out is owned by root - WTF?

2010-12-01 Thread Wesley Acheson
, since Apache is usually started within root-context (sbin) - so that does make sense. Right but it drops the user to apache if instructed to do so. Even then logs are root owned, and this is security precaution (like with jsvc) And if you take a look into /var/logs, you can see exactly

Re: New jsvc (commons-daemon-native); catalina.out is owned by root - WTF?

2010-12-01 Thread Christopher Schultz
that this has changed with the new version. Is it possible that if catalina.out already exists and is owned by, say, tomcat, that it's ownership will be retained when jsvc opens it for append? If that's the case, you may have simply deleted the file during your upgrade and had it re-created by jsvc (owned

New jsvc (commons-daemon-native); catalina.out is owned by root - WTF?

2010-11-30 Thread Gregor Schneider
\ -cp $CLASSPATH \ org.apache.catalina.startup.Bootstrap exit $? ;; What's really puzzling me, is, that since we upgraded Tomcat, catalina.out is not owned by the user specified in $TOMCAT_USER any more but is owned by root. All other files are owned by $TOMCAT_USER as expected

Re: New jsvc (commons-daemon-native); catalina.out is owned by root - WTF?

2010-11-30 Thread Mladen Turk
On 11/30/2010 07:31 PM, Gregor Schneider wrote: Hi guys, What's really puzzling me, is, that since we upgraded Tomcat, catalina.out is not owned by the user specified in $TOMCAT_USER any more but is owned by root. Believe it or not, this is intentional and correct behavior. Almost any server

Re: New jsvc (commons-daemon-native); catalina.out is owned by root - WTF?

2010-11-30 Thread Konstantin Kolinko
2010/11/30 Gregor Schneider rc4...@googlemail.com: Well, in the old version, there was the archive tomcat-native.tar.gz containing the sources for the native wrapper. The above one is tomcat-native, aka Tomcat-Apr, a library that provides code for Http11AprProtocol and AjpAprProtocol

Re: New jsvc (commons-daemon-native); catalina.out is owned by root - WTF?

2010-11-30 Thread Gregor Schneider
Mladen, Believe it or not, this is intentional and correct behavior. Almost any server behaves like that. thanks for sharing your views on this one, which I, however, do not share at all besides, no server behaves like you're stating: if an application is started in a non-root-context and

Re: New jsvc (commons-daemon-native); catalina.out is owned by root - WTF?

2010-11-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gregor, On 11/30/2010 4:18 PM, Gregor Schneider wrote: Mladen, Believe it or not, this is intentional and correct behavior. Almost any server behaves like that. thanks for sharing your views on this one, which I, however, do not share at all

owned by root

2009-06-29 Thread Melanie Pfefer
Hi Any idea what makes web applications owned by root even though tomcat runs as a non-root user? (I have mod_jk installed and apache running as root) Thank you, - To unsubscribe, e-mail: users-unsubscr

Re: owned by root

2009-06-29 Thread David Smith
Melanie Pfefer wrote: Hi Any idea what makes web applications owned by root even though tomcat runs as a non-root user? (I have mod_jk installed and apache running as root) Thank you, I have two thoughts: 1. You installed the webapp as root which caused the OS to write the files

Re: owned by root

2009-06-29 Thread Hassan Schroeder
On Mon, Jun 29, 2009 at 8:55 AM, Melanie Pfefermelanie_pfe...@yahoo.co.uk wrote: Any idea what makes web applications owned by root even though tomcat runs as a non-root user? Uh, they were installed by root? :-) -- Hassan Schroeder hassan.schroe...@gmail.com

Re: owned by root

2009-06-29 Thread André Warnier
Hassan Schroeder wrote: On Mon, Jun 29, 2009 at 8:55 AM, Melanie Pfefermelanie_pfe...@yahoo.co.uk wrote: Any idea what makes web applications owned by root even though tomcat runs as a non-root user? Uh, they were installed by root? :-) Uh, Uh. What do you mean by web applications owned

RE: jsvc creates pid file owned by root

2008-09-06 Thread Martin Gainty
PROTECTED] To: users@tomcat.apache.org Subject: Re: jsvc creates pid file owned by root [EMAIL PROTECTED] wrote: See Thread at: http://www.techienuggets.com/Detail?tx=31984 Posted on behalf of a User You shouldn't be messing about with the ownership of the PID file. It is created

Re: jsvc creates pid file owned by root

2008-09-05 Thread samk
and owned by root. I want to be able to read the pid file to check if the Tomcat process is up and running and also for other purposes. Is it possible to make the pid file be owned by the user that runs Tomcat or have the permissions to be set to 666? Regards Gunnar -- ... http://www.nabble.com/jsvc

Re: jsvc creates pid file owned by root

2008-09-05 Thread Steve Cohen
is created with permissions 600 and owned by root. I want to be able to read the pid file to check if the Tomcat process is up and running and also for other purposes. Is it possible to make the pid file be owned by the user that runs Tomcat or have the permissions to be set to 666? Regards

Re: jsvc creates pid file owned by root

2008-04-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gunnar, Gunnar Boström wrote: | I would be fine with 644 but I don't know how to set that. | The file is owned by root so I'm not allowed to change it. | My umask is by default 0022 which should be okay. I tried to set the mask to |

Re: jsvc creates pid file owned by root

2008-04-12 Thread Alan Chaney
each time. As I posted in my example, I set umask to 027 in my jsvc startup script and it works just fine. tomcat starts as root, binds to the ports and then switches to the 'tomcat' user. The pid file is owned by root (as it should be) and files created by tomcat are '640' which is what I wanted

Re: jsvc creates pid file owned by root

2008-04-11 Thread Gunnar Boström
Hi, Answers to all of you who has responded. I would be fine with 644 but I don't know how to set that. The file is owned by root so I'm not allowed to change it. My umask is by default 0022 which should be okay. I tried to set the mask to but no change. I created a pid file

Re: jsvc creates pid file owned by root

2008-04-11 Thread Alan Chaney
responded. I would be fine with 644 but I don't know how to set that. see umask above The file is owned by root so I'm not allowed to change it. My umask is by default 0022 which should be okay. I tried to set the mask to but no change. read about linux umask - you need to set it at the right

jsvc creates pid file owned by root

2008-04-10 Thread Gunnar Boström
Hi, I can start and stop Tomcat 5.5 with the jsvc program but the problem is that the pid file is created with permissions 600 and owned by root. I want to be able to read the pid file to check if the Tomcat process is up and running and also for other purposes. Is it possible to make the pid

Re: jsvc creates pid file owned by root

2008-04-10 Thread David Smith
folders. Or you could modify your service script to chmod the pid file on startup. --David Gunnar Boström wrote: Hi, I can start and stop Tomcat 5.5 with the jsvc program but the problem is that the pid file is created with permissions 600 and owned by root. I want to be able to read the pid

RE: jsvc creates pid file owned by root

2008-04-10 Thread Peter Crowther
can start and stop Tomcat 5.5 with the jsvc program but the problem is that the pid file is created with permissions 600 and owned by root. I want to be able to read the pid file to check if the Tomcat process is up and running and also for other purposes. Is it possible to make the pid

Re: jsvc creates pid file owned by root

2008-04-10 Thread fredk2
Hi, can you set the umask before you run jsvc ? Rgds Fred Gunnar Boström wrote: Hi, I can start and stop Tomcat 5.5 with the jsvc program but the problem is that the pid file is created with permissions 600 and owned by root. I want to be able to read the pid file to check

Re: jsvc creates pid file owned by root

2008-04-10 Thread Mark H. Wood
Do you *really* want that file to be world-writable? Why not 644? -- Mark H. Wood, Lead System Programmer [EMAIL PROTECTED] Typically when a software vendor says that a product is intuitive he means the exact opposite. pgp8EEJOzvw1S.pgp Description: PGP signature