Return-Path: <Craig.McClanahan@eng.sun.com>
Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm
Delivered-To: mailing list tomcat-user@jakarta.apache.org
Received: (qmail 25594 invoked from network); 2 Aug 2000 17:47:33 -0000
Received: from mercury.sun.com (192.9.25.1)
  by locus.apache.org with SMTP; 2 Aug 2000 17:47:33 -0000
Received: from taller.eng.sun.com ([129.144.174.34])
	by mercury.Sun.COM (8.9.3+Sun/8.9.3) with ESMTP id KAA27346
	for <tomcat-user@jakarta.apache.org>; Wed, 2 Aug 2000 10:47:05 -0700 (PDT)
Received: from eng.sun.com (d-ucup02-251-97 [129.144.251.97])
	by taller.eng.sun.com (8.9.3+Sun/8.9.3/ENSMAIL,v1.7) with ESMTP id KAA14453
	for <tomcat-user@jakarta.apache.org>; Wed, 2 Aug 2000 10:45:58 -0700 (PDT)
Message-ID: <39885E81.F5AE8E62@eng.sun.com>
Date: Wed, 02 Aug 2000 10:46:41 -0700
From: "Craig R. McClanahan" <Craig.McClanahan@eng.sun.com>
X-Mailer: Mozilla 4.74 [en]C-CCK-MCD {Sony}  (Win98; U)
X-Accept-Language: en
MIME-Version: 1.0
To: tomcat-user@jakarta.apache.org
Subject: Re: Running Tomcat as user nobody
References: <39873ACF.8456A4FB@gmd-net.de>
 <p04320414b5ad5786464c@[216.15.105.123]> <398852F9.592FA8A1@eng.sun.com>
 <01bd01bffca8$29f0b790$dd29680a@tgt.com>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Spam-Rating: locus.apache.org 1.6.2 0/1000/N

Sorry -- forgot an ampersand character ("&") at the end to run the process in
the background.

Craig


"Thomas T. Veldhouse" wrote:

> This doesn't seem to work.  When the script ends - the process ends - taking
> all the children with it.  Thus, tomcat dies.  How do you keep this from
> happening?
>
> Tom Veldhouse
> veldy@veldy.net
>
> ----- Original Message -----
> From: Craig R. McClanahan <Craig.McClanahan@eng.sun.com>
> To: <tomcat-user@jakarta.apache.org>
> Sent: Wednesday, August 02, 2000 11:57 AM
> Subject: Re: Running Tomcat as user nobody
>
> > "Michael A. Alderete" wrote:
> >
> > > Hi,
> > >
> > > How can I get Tomcat to run as user "nobody" on my FreeBSD system? I
> > > imagine it's a line or two in one of the startup shell scripts for
> Tomcat,
> > > but I can't get that to work; I keep getting "this account is not
> > > available" error messages, presumably because nobody is using
> /sbin/nologin
> > > for a shell.
> > >
> > > Here's my configuration:
> > >
> > > FreeBSD 3.2
> > > Apache 1.3.12
> > > Tomcat 3.1
> > > JDK 1.1.8 from the FreeBSD ports collection
> > >
> > > Even if no one here is running FreeBSD, I'd imagine the procedure is
> > > similar for Linux, if you can tell me how you did it there.
> > >
> >
> > The way I've done this in the past is set up a special script executable
> by
> > root that has the following contents (or something similar):
> >
> >     su - nobody -c "$TOMCAT_HOME/bin/tomcat.sh start"
> >
> > Then execute this script as root (for example, in whatever FreeBSD uses as
> the
> > equivalent of the /etc/rc.d/init.d directory) and the actual Tomcat
> process
> > will start up as user nobody.
> >
> > >
> > > Thanks!
> > >
> > > Michael
> > >
> >
> > Craig McClanahan
> >
> >
> >