Hi,

yes its running as "james" user. Commons daemon bind the ports with root
privileges and after that drop the priveleges to the other user. So all
is ok :-)

bye
Norman

eCommunicate schrieb:
> Hi Norman,
>
> Thanks to your small howto and previous email I found the files under:
>
> http://svn.apache.org/viewvc/james/server/trunk/phoenix-deployment/phoenix-b
> in/bin/
>
> I'm now running James under james-server.sh.  I set the USER to james
> Please confirm its running correctly as I still get it running under root
> and also now under james?
>
> ps -auxwww|grep james
> root      7487  0.0  0.0  1960  304 ?        Ss   10:56   0:00 jsvc.exec
> -user james -pidfile /var/run/james.pid
> -Djava.ext.dirs=/usr/local/james-2.3.0/james-2.3.0/lib:/usr/local/james-2.3.
> 0/james-2.3.0/tools/lib -Djava.security.manager -outfile
> /usr/local/james-2.3.0/james-2.3.0/logs/james.out -errfile
> /usr/local/james-2.3.0/james-2.3.0/logs/james.err
> -Djava.security.policy=jar:file:/usr/local/james-2.3.0/james-2.3.0/bin/phoen
> ix-loader.jar!/META-INF/java.policy -Dnetworkaddress.cache.ttl=300
> -Dphoenix.home=/usr/local/james-2.3.0/james-2.3.0
> -Djava.io.tmpdir=/usr/local/james-2.3.0/james-2.3.0/temp -cp
> /usr/local/james-2.3.0/james-2.3.0/bin/phoenix-loader.jar:/usr/local/james-2
> .3.0/james-2.3.0/bin/commons-daemon.jar:/usr/local/james-2.3.0/james-2.3.0/b
> in/phoenix-daemon-loader-0.1.jar
> org.apache.avalon.phoenix.launcher.CommonsDaemonLauncher
>
> james     7488  0.6  1.9 297212 40568 ?      Sl   10:56   0:03 jsvc.exec
> -user james -pidfile /var/run/james.pid
> -Djava.ext.dirs=/usr/local/james-2.3.0/james-2.3.0/lib:/usr/local/james-2.3.
> 0/james-2.3.0/tools/lib -Djava.security.manager -outfile
> /usr/local/james-2.3.0/james-2.3.0/logs/james.out -errfile
> /usr/local/james-2.3.0/james-2.3.0/logs/james.err
> -Djava.security.policy=jar:file:/usr/local/james-2.3.0/james-2.3.0/bin/phoen
> ix-loader.jar!/META-INF/java.policy -Dnetworkaddress.cache.ttl=300
> -Dphoenix.home=/usr/local/james-2.3.0/james-2.3.0
> -Djava.io.tmpdir=/usr/local/james-2.3.0/james-2.3.0/temp -cp
> /usr/local/james-2.3.0/james-2.3.0/bin/phoenix-loader.jar:/usr/local/james-2
> .3.0/james-2.3.0/bin/commons-daemon.jar:/usr/local/james-2.3.0/james-2.3.0/b
> in/phoenix-daemon-loader-0.1.jar
> org.apache.avalon.phoenix.launcher.CommonsDaemonLauncher
>
> thanks
>
> -----Original Message-----
> From: eCommunicate [mailto:[EMAIL PROTECTED] 
> Sent: 05 April 2007 22:53
> To: 'James Users List'; [EMAIL PROTECTED]
> Subject: run James under a non-root user and as a service
>
> Hi,
>
> 1. I've just installed james 2.3.0 and can't find the script to change the
> user James is running under to be the james user.  I start James using
> phoenix.
>
> root      2174  0.4  1.9 295308 39184 pts/0  Sl   22:34   0:02
> /usr/java/jdk/bin/java
> -Djava.ext.dirs=/usr/local/james-2.3.0/james-2.3.0/lib:/usr/local/james-2.3.
> 0/james-2.3.0/tools/lib -Djava.security.manager
> -Djava.security.policy=jar:file:/usr/local/james-2.3.0/james-2.3.0/bin/phoen
> ix-loader.jar!/META-INF/java.policy
> -Dphoenix.home=/usr/local/james-2.3.0/james-2.3.0
> -Djava.io.tmpdir=/usr/local/james-2.3.0/james-2.3.0/temp -jar
> /usr/local/james-2.3.0/james-2.3.0/bin/phoenix-loader.jar
>
> 2. I would like to run James as a service running under the james user.
> service james start  - the way one runs other Linux services
>
> Any help appreciated
>
> -----Original Message-----
> From: Norman Maurer [mailto:[EMAIL PROTECTED] 
> Sent: 01 March 2007 15:59
> To: James Users List
> Subject: Re: help to set the user James runs under
>
> Look for the USER identifier in the script. Ass default it use nobody:
>
> USER=nobody
>
> bye
> Norman
>
>
>
>
> eCommunicate schrieb:
>   
>> Where do you set the user that James runs under in the james-server.sh
>> script?
>>
>> Thanks
>>
>>   
>>     
>>> -----Original Message-----
>>> From: Norman Maurer [mailto:[EMAIL PROTECTED]
>>> Sent: 01 March 2007 14:55
>>> To: James Users List
>>> Subject: Re: help to set the user James runs under
>>>
>>>
>>> Its possible with using commons-daemon.. Look at the trunk (SVN) for
>>> more infos.
>>>
>>> Just a quick "howto":
>>> You just need to get the follow files and put it to the bin directory:
>>>
>>> james-server.sh
>>> commons-daemon.jar
>>> phoenix-daemon-loader-0.1.jar
>>> jsvc.tar.gz
>>>
>>> You can find the files here:
>>> http://svn.apache.org/viewvc/james/server/trunk/pheonix-deployment
>>> /phoenix-bin/bin/
>>>
>>> Get sure you unpack jsvc and compile it. After that start james with
>>> james-server.sh script.
>>>
>>> bye
>>> Norman
>>>
>>>
>>> eCommunicate schrieb:
>>>     
>>>       
>>>> Hey,
>>>>
>>>> Does anyone know how to set the user that James runs under to
>>>>       
>>>>         
>>> use another
>>>     
>>>       
>>>> user other than root?
>>>> This is important for security that James runs as not as root.
>>>>
>>>> Thanks for any help
>>>>
>>>>
>>>> ---------------------------------------------------------------------
>>>> To unsubscribe, e-mail: [EMAIL PROTECTED]
>>>> For additional commands, e-mail: [EMAIL PROTECTED]
>>>>
>>>> !EXCUBATOR:1,45e6ca8139078170587191!
>>>>
>>>>       
>>>>         
>>> --
>>> Mit freundlichen Grüßen
>>>
>>> i.A. Norman Maurer
>>> Systemadministrator
>>>
>>> ByteAction GmbH
>>> Auf der Beune 83-85
>>> 64839 Münster
>>>
>>> Phone:   +49 (0) 60 71 92 16 - 21
>>> Fax:       +49 (0) 60 71 92 16 - 20
>>> E-mail:    [EMAIL PROTECTED]
>>> Internet: www.byteaction.de
>>> AG Darmstadt, HRB 33271
>>> Ust-Id: DE206997247
>>> GF: Thomas Volkert
>>> ------------------------------------------------------
>>> Diese E-Mail enthält vertrauliche Informationen und ist nur für
>>> den in der E-Mail genannten Adressaten bestimmt. Für den Fall,
>>> dass der Empfänger dieser E-Mail nicht der in der E-Mail benannte
>>> Adressat ist, weisen wir darauf hin, dass das Lesen, Kopieren,
>>> die Wiedergabe, Verbreitung, Vervielfältigung, Bekanntmachung,
>>> Veränderung, Verteilung und/oder Veröffentlichung der E-Mail
>>> strengstens untersagt ist. Bitte verständigen Sie den Absender
>>> dieser E-Mail unter folgender Rufnummer +49 (0) 6071 / 9216-0,
>>> falls Sie irrtümlich diese E-Mail erhalten haben und löschen Sie
>>> diese E-Mail. Der Inhalt dieser E-Mail ist nur rechtsverbindlich,
>>> wenn er von unserer Seite schriftlich durch Brief oder Telefax
>>> bestätigt wird. Die Versendung von E-Mails an uns hat keine
>>> fristwahrende Wirkung.
>>>
>>> This e-mail contains information which is privileged and is
>>> intended only for the Addressee named in the e-mail. In case that
>>> the recipient of this e-mail is not the named addressee, we would
>>> like to inform you that it is strictly prohibited to read, to
>>> reproduce, to disseminate, to copy, to disclose, to modify, to
>>> distribute and/or to publish this e-mail. If you have received
>>> this e-mail in error, please call the sender under following
>>> telephone number +49 (0) 6071 / 9216-0 and delete this e-mail.
>>> The content of this e-mail is not legally binding unless
>>> confirmed by letter or telefax. E-mails which are sent to us do
>>> not constitute compliance with any time limits or deadlines.
>>> ------------------------------------------------------
>>>
>>>
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: [EMAIL PROTECTED]
>>> For additional commands, e-mail: [EMAIL PROTECTED]
>>>
>>>
>>>
>>>     
>>>       
>> !EXCUBATOR:1,45e6db5e39073472820808!
>>   
>>     
>
>
>   


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to