httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Vasanth Kumar ravi" <josvasa...@gmail.com>
Subject Re: [users@httpd] Run Apache as Non Root user on port other than 80
Date Thu, 04 Dec 2008 07:29:08 GMT
Well sudo is not allowed in our complaince/audit policy even for Dev boxes.
so i will either run it on non standard ports and ask the app guys to access
by mentioning the port for Dev environment or ask the sys admin to manage
the apache(which they wont accept).
thanks folks.



On Thu, Dec 4, 2008 at 2:50 PM, Krist van Besien
<krist.vanbesien@gmail.com>wrote:

> On Thu, Dec 4, 2008 at 7:28 AM, William A. Rowe, Jr.
> <wrowe@rowe-clan.net> wrote:
> > Vasanth Kumar ravi wrote:
> >> Well the problem is here is the root access.
> >> I am an application administrator and the root passwd is owned by the
> >> system administrator team.
> >> since this a dev setup, i got the root passwd but for production they
> >> would not give it.
> >> so either I have to go for a port forward in production or ask the
> >> system admin to manage the apache.
> >
> > Or you ask for sudo access to a script which kicks off, starts and stops
> > apache.  This requires you to have nobody's password except your own.
>
> Anybody who has the privileges to edit the apache config file and to
> start and stop apache using sudo can become root. So if system
> administrators don't want you to have root access to should be
> prepared to manage apache themselves.
> Basically the best practise is to develop your apache config on a dev
> server, and delvier the result to the production server's admin with
> instructions on how to install and manage it.
>
> Krist
>
> --
> krist.vanbesien@gmail.com
> krist@vanbesien.org
> Bremgarten b. Bern, Switzerland
> --
> A: It reverses the normal flow of conversation.
> Q: What's wrong with top-posting?
> A: Top-posting.
> Q: What's the biggest scourge on plain text email discussions?
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>   "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>


-- 
Regards&Thanks,
Vasanth Kumar Ravi

Mime
View raw message