On 19.02.2013 16:36, Andy Wang wrote: > On 02/19/2013 12:11 AM, Mladen Turk wrote: >> On 02/18/2013 10:47 PM, Andy Wang wrote: >>> >>> If I execute startserv as the non-privileged user rather than root or >>> do this on Solaris 10, no problems. >>> Any ideas why systhread_start (this is an iPlanet NSAPI function) >>> would fail here as root? >>> >> >> Did you tried to check the ulimit. >> Seems like webservd once when switched to non privileged user cannot >> create threads >> either because of some security settings or lack of resources. >> > Yeah, sorry, I should have mentioned it. > -u is 29995 > -n is 1024 > both are identical for the root role or the webservd user. > > I'm not that familiar with Solaris 11 and what they did to the root as a > role instead of a regular user so I wasn't sure what other resource > configuration to look at. What does confuse me though is the thread > pool stuff in the webserver itself (as well as the built-in servlet > engine) seem fully functional so this issue seems specific to the > jk_init call to systhread_start.
It will be tedious, but if we want to check whether the OS disallows some syscalls when running as suid under root, then truss should provide insight. So run iPlanet (the iPlanet start script) under truss -f -o /some/path/tr.out once in the working config and once in the non-working one and try to find differences w.r.t. to syscalls that return an error. Once you know what you are looking after, the additional truss flags "-v all -w all -r all" will provide aditional insight (and a huge volume of output). Regards, Rainer --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
