|
Home > Archive > Web Servers on Windows > June 2004 > Running apache daemon on xp pro as specific user instead of system
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Running apache daemon on xp pro as specific user instead of system
|
|
| TheKeith 2004-06-11, 6:52 pm |
| I have just set up apache with its root directory pointing to another
computer on the lan (//host/wwwroot)--the problem is that the
daemon,like all the other daemon/services, automtically signs in using
the 'system' account, which cause apache not to be able to access the
network. I solved this problem by requiring apache to sign in to the
administrative account instead and I'm now able to use '//host/wwwroot'
as the server's root dir.
Will this impact the server in any way? Is there anything special about
the system account that I should know about? If it should use the system
account only, what other ways are there to access the network if any?
Help would be appreciated--thanks.
| |
| Jim Patterson 2004-06-11, 6:52 pm |
| TheKeith wrote:
> I have just set up apache with its root directory pointing to another
> computer on the lan (//host/wwwroot)--the problem is that the
> daemon,like all the other daemon/services, automtically signs in using
> the 'system' account, which cause apache not to be able to access the
> network. I solved this problem by requiring apache to sign in to the
> administrative account instead and I'm now able to use '//host/wwwroot'
> as the server's root dir.
>
> Will this impact the server in any way? Is there anything special about
> the system account that I should know about? If it should use the system
> account only, what other ways are there to access the network if any?
> Help would be appreciated--thanks.
The main concern with using the Administrator account is security.
Apache is no doubt better than IIS in this regard, but it's still
prudent to run any service accessible from the internet as a user with
only the necessary privileges. It would be safer to create a user with
read only network access to the shares that it needs, and run Apache as
that user.
--
Jim Patterson
Ottawa, CANADA
| |
| TheKeith 2004-06-11, 6:52 pm |
| Jim Patterson wrote:
> TheKeith wrote:
>
>
>
> The main concern with using the Administrator account is security.
> Apache is no doubt better than IIS in this regard, but it's still
> prudent to run any service accessible from the internet as a user with
> only the necessary privileges. It would be safer to create a user with
> read only network access to the shares that it needs, and run Apache as
> that user.
>
OK Jim, thanks a lot. I'll create a limited user account for the server.
I wish xp pro made user permissions easy, like win2000 did. I can't seem
to figure out how to create a custom group with only the exact
permissions I want.
|
|
|
|
|