Caldarale, Charles R wrote:
> 
>> From: Andrew Ralph Feller, afelle1 [mailto:[EMAIL PROTECTED]
>> Subject: Re: relation between Tomcat and Apache Commons
>>
>> it seems possible to run Tomcat on a non-privileged port with a
>> non-root account and have requests for port 443 redirected to
>> Tomcat's listening port.
> 
> Of course - but it requires additional configuration (e.g., iptables,
> firewall).  Using jsvc may be simpler and avoid dependencies external to
> Tomcat.
> 

What I have just found is that jsvc enables Tomcat to bind privileged port
only on Linux (it's using capabilities).

For example on Solaris one need to add net_privadd privilege for Tomcat
user. This can be done by modifying /etc/user_attr.  In such case I believe
there is no need for jsvc.

grep tomcat /etc/user_attr 
tomcat::::defaultpriv=basic,net_privaddr

--

Petr

-- 
View this message in context: 
http://www.nabble.com/relation-between-Tomcat-and-Apache-Commons-tp20145816p20268834.html
Sent from the Tomcat - User mailing list archive at Nabble.com.


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to