-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Léa,
On 11/20/14 10:24 AM, Léa Massiot wrote: > Thank you for your answer. > >> Konstantin Kolinko wrote: Why do you need the ports to be 80 and >> 443? (You cannot open those on Linux unless you are a root). You >> can a) change the port numbers in your configuration b) use >> firewall (iptables) to map different local ports to those >> external ones >> https://wiki.apache.org/tomcat/HowTo#How_to_run_Tomcat_without_root_privileges.3F > >> > Well, apparently, according to the author of this article, I chose > the best method (JSVC)! But thank you very much for pointing me > towards this article and this FAQ which looks very interesting, > full of interesting questions (and answers). Indeed the iptables > solution looks attracting. I chose JSVC because I wanted Tomcat to > be started at boot time and, if I'm not mistaken, this is root who > runs the "/etc/init.d/" scripts including the "/etc/init.d/tomcat7" > script... but I needed Tomcat to be run as a non-root user etc. > etc. > >> Konstantin Kolinko wrote: Also, >> https://wiki.apache.org/tomcat/FAQ/Linux_Unix#Q5 > > That's exactly what I did and I did it for exactly the same reasons > given in this article. I didn't install the Tomcat Debian package. > I'm glad I did right. We also run on Debian Linux and we do not use jsvc. We just use "su" to run a command as a different user on startup. There are reasons to use jsvc, but the ability to run as a non-root uses is not one of them. - -chris -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJUbiulAAoJEBzwKT+lPKRY/+oP/1jXK7B1AiEE7JT1U3TKKX7K 6xQg8+a/ZMyRtO/9zsheUz2h9Pvo/+aUCKOLeBfaDnJI5SCA92/6ag1cj/BZonlT 3EO1ExXIpjtYOwYTfVTBgAV5pgTJDpcbbUaAfyGEp1JEp4clm+T/fVFmYT+jqtru mMVGWtrCXxALNBo/ot7nbSLUwRFuQZHtJ48lWHo1cTtq8YKe/LG8k/zZp0IafA7g kxfRGk7rUN1XcfhhM3WCNv1bgcmcuQ52yjo+iEmsQI+tmiP+18D+WkE9+dv8ihM9 irhS79Tkclj0ytKOchm13lIspYSPbS/tRxnfitF4DNnRjZYKdyHSWyKNnO1HWcOc r71K8NdacRG3EbOzoa7BDsaEU6q/dcnOc3Y5p/ALxZi5fGGciup0KOrSgh2DC+YN TeppUGDmrHXo+yY/uWlRKdQeqHKeDcXn2ZYVyY35J7r6bI5xEQU4BtreA1nfVjUu gYC+jUBqmEE4vbO3IMPg53881hBbi4CtSwJWrYP+qn8oQOqorhH9wnzW3PTcMy8x 0Esz73WKC/Yx6trFEftgrjU7g3yL/eij8vBQP+QnWHBhSjt7ydSlNACQ0VMskUAu pZuVC9cOxyFmMTbKAludWlRjfgkvPP85kgaPw0La3FR3rreRDGnKg9EJ6QsPK/Ka /hHoASHjDWLB0uNAAOli =b7y2 -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
