tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From André Warnier ...@ice-sa.com>
Subject Re: Windows Service Security
Date Wed, 31 Oct 2012 20:13:36 GMT
Martin Gainty wrote:
> Good Afternoon Bill
> 
> did you have a chance to take a look at the how to for configuring Windows domain controller
>   (to enable Tomcat to support Windows authentication)
> 
> http://tomcat.apache.org/tomcat-7.0-doc/windows-auth-howto.html#Built-in_Tomcat_support
> 
> Does this help?

Probably not at all, except in utterly confusing the OP, if he is not familiar with this list.
He's not asking about authenticating Tomcat users.
He's asking about running Tomcat as a normal Windows user, as opposed to "LocalSystem" e.g.

Bill,

- create a local user, e.g. "tomcat"
- stop Tomcat
- use whatever path the Microsoft geniuses have invented this week to reach the Services 
applet
- search for the "Apache Tomcat" Service
- right click on it and select Settings or Properties (ditto)
- in the tab "Login as" (or ditto), change the account to the one you just created
- before you restart Tomcat, make sure that all it's files/directories can be read/written

by this user
- then restart Tomcat

As long as the Tomcat process (and any of its webapps) does not need any Windows network 
resources (network "shares" or printers or the like), you'll be fine.
If you need any of these, then you'll have to use a Domain user instead of a local one.

(Note that Tomcat probably does not need any of those, since it was running fine as 
"LocalSystem" and that user does not have access to Windows network resources either).



---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message