httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From chris <ch...@ia.gov>
Subject Re: [users@httpd] apache as non-root
Date Tue, 06 Nov 2007 15:20:29 GMT
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

A work around, sort of:

If you are using an OS with the ability to port forward (iptables on
linux for example) you can create rules to forward the port 80
connection to a high port (say 8080) that the non-root-user apache
instance is listening on.

You end up listening on two ports, but you get the desired effect of
having a totally user owned (startable stoppable without ever being
root) apache instance that is accessible via port 80.

chris


Melanie Pfefer wrote:
> thanks. But any workaround?
> thanks.
> --- Tony Stevenson <tony@pc-tony.com> wrote:
> 
>> Melanie Pfefer wrote:
>>> hi
>>>
>>> I modified user in httpd.conf but as long as the
>> port
>>> number is 80, only root can start apache.
>> subsequent
>>> process will be run as non-root.
>> This is expected behaviour.
>>
>>> any idea how to allow this user to start apache?
>> To start Apache on port 80, you need root level
>> access as these are 
>> privilged ports.
>>
>> You can user another account, but the port has to be
>>> 1024.
>>
>> Tony
>>
> 
> 
> 
>       ___________________________________________________________ 
> Want ideas for reducing your carbon footprint? Visit Yahoo! For Good  http://uk.promotions.yahoo.com/forgood/environment.html
> 
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHMIY8tqidmIdniVgRAjtMAJoCM37rSapVIHec8t7tm/QKeqT9ZQCeLskc
yS2/8s/BLWdB13rzY9ZEz7M=
=2F1K
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message