users@glassfish.java.net

Re: How to set up Solaris SMF to run under non-root user?

From: Dick Davies <rasputnik_at_hellooperator.net>
Date: Thu, 5 Jun 2008 09:36:55 +0100

You need to understand RBAC. There's a line somewhere in the generated
manifest that looks
like:

        <method_credential user='root' privileges='basic'/>

Which means that although Glassfish does start up as root, it runs with much
lower privileges than root usually has.

I guess you could change this to a different user if you were extra paranoid.

On Wed, Jun 4, 2008 at 4:33 AM, <glassfish_at_javadesktop.org> wrote:
> Does anyone have a HOWTO an getting SMF to start up Glassfish under a non-root user, but still have access to port 80 and 443?
>
> I'm pretty sure this can be done, but I don't know the details of how to pull it off. Has anyone done this yet and can provide a pointer?
>
> I know you can generate an SMF script from asadmin, but I also need to run GF as a different user than root, while still accessing the restricted ports.
> [Message sent by forum member 'whartung' (whartung)]
>
> http://forums.java.net/jive/thread.jspa?messageID=278176
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe_at_glassfish.dev.java.net
> For additional commands, e-mail: users-help_at_glassfish.dev.java.net
>
>



-- 
Rasputnik :: Jack of All Trades - Master of Nuns
http://number9.hellooperator.net/