On 13/11/11 04:32, Tobias Crefeld wrote:
Am Sat, 12 Nov 2011 07:21:58 -0500 schrieb whoswho<pongd...@gmail.com>:

Tomcat has been installed as a non-root user.  I want to use SSL port
443 and not the deafult port 8443.  When I modify the SSL connector,
and try connecting as 443, I get permission denied since the tomcat
account owner is non-root.

It's a (Unix?-) principle that services with numbers below 1024 are
only allowed to get startet by root.

If you have the authbind package available under AIX, you can configure it so the tomcat user has permission to listen on low port numbers, e.g. 80 and 443.

You can use NAT to exchange port numbers.
Or if it's possible to extract SSL-certificates you install Apache
(httpd) that is using it's own mechanism to start services with "low
port numbers", setup SSL and use something like mod_proxy_ajp or mod_jk
to contact Tomcat's ajp-connector.


RU,
  Tobias.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to