
the owner. It is best to create a UNIX or Linux account for the server that has restricted access to
your system resources. The account needs read permissions for the conguration les and write
permissions for the logs directory.
On Solaris OE, by default, a user and group account named webservd is created for Sun Java
System Web Server if it does not already exist.
On non-Solaris UNIX platforms (where the webservd user/group cannot be reserved outright),
if you do not create a dedicated user account for Sun Java System Web Server, you can use the
account with the name nobody . You might not however want to give the user nobody
permissions for running the Sun Java System Web Server. Sometimes the user nobody does not
work on some systems if a negative uid/gid is assigned during installation. Check the
/etc/passwd le to see if the uid for nobody exists, and make sure it is greater than 0.
Note – It is strongly recommended that you use a dedicated account for the server.
The Administration Server can also run with a user account that has write permissions to the
conguration les for all installed servers. However, it is much easier to run the Administration
Server as root because then the Administration Server user can start and stop servers with port
numbers less than 1024. (Port numbers greater than 1024 can be started by any user).
The user you use to run the Sun Java System Web Server (often nobody) should be in the same
group as the user you use to run the Administration Server (often root).
Note – When changing the server user, remove any /tmp/lock.* les created in the /tmp
directory.
Windows User Accounts for the Server
You should create a Windows user account for your Sun Java System Web Server. It should
have restricted access to your system resources and run under a nonprivileged system user
account (one that has a limited set of system permissions to your system). When the server
starts, it runs with this user account. Any server extension modules the server uses are created
with this user account as the owner.
During installation, the server uses the LocalSystem account, not the user account you created.
Once you start and run the server, you should use the user account you created. You can change
the user account for the server after the installation process. You can congure that user
account so that it has permissions to get les on another computer, so that your server can serve
les that are mounted from another computer.
In addition, the user account you create for the server should belong to a group that contains
the server users for all Sun Java System servers so that multiple servers can have access to shared
les.
Other Technical Requirements
Sun Java System Web Server 6.1 SP9 Installation and Migration Guide • February 200820
Comentários a estes Manuais