Hi,
Is there a way to change the effective uid/gid of the perlbal from root to
non privileged user(if perlbal is listening on a privileged port?).

I saw a thread on this topic in the archives, but  it doesn't indicate if
someone has already added this functionality.

http://lists.danga.com/pipermail/pe...ary/000399.html

Thanx,
HB

[ Post a follow-up to this message ]

Hi Hemant,

The best solution I know of at this time is to simply run perlbal on a
high port. We use a firewall rule in iptables to redirect port 80 to that
high port. In shorewall config format, it is:

#       Allow incoming HTTP  to perlbal running on 7080
REDIRECT        net             7080            tcp     80

This way you can run perlbal as its own user.

Note: if you're not running as root, make sure you don't have ulimits set
for the perlbal user, especially "nofiles"

-Todd

On Sat, 25 Aug 2007, Hemant Bist wrote:

> Hi,
> Is there a way to change the effective uid/gid of the perlbal from root to
> non privileged user(if perlbal is listening on a privileged port?).
>
> I saw a thread on this topic in the archives, but  it doesn't indicate if
> someone has already added this functionality.
>
> http://lists.danga.com/pipermail/pe...ary/000399.html
>
> Thanx,
> HB
>

[ Post a follow-up to this message ]