Re: running resin as non-root usr

"Erik Beeson" <[email protected]> Tue, 9 May 2006 16:04:07 -0700
Newsgroups gmane.text.xml.resin.user
Message-ID <[email protected]>
> There is a FAQ entry for that, at least for Linux users:
>
>
> http://www.caucho.com/resin-3.0/install/faq.xtp#How-can-I-bind-to-a-port-under-1024-and-still-run-as-a-non-root-user
> ?



Does the real client ip address still show up in your access logs with
iptables? No iptables on Solaris anyways. Maybe ipfilter could do it. Also,
requiring root to bind to ports <1024 is done for a reason. I think setuid
is the only real right answer if you aren't going to run apache out front
(which I'd rather not do, resin is a fine webserver).

--Erik