Actually....

Ports below 1024 require root.
Per RedHat Linux anyway:


If you set Apache to listen to a port under 1024, you must be root to start 
it. For port 1024 and above, httpd can be started as a regular user
(www.redhat.com)

and....

The TCP/IP port numbers below 1024 are special in that normal users are not 
allowed to run servers on them. This is a security feaure, in that if you 
connect to a service on one of these ports you can be fairly sure that you 
have the real thing, and not a fake which some hacker has put up for you.

The normal port number for W3 servers is port 80. This number has been 
assigned to WWW by the Internet Assigned Numbers Authority, IANA.

When you run a server as a test from a non-priviliged account, you will 
normally test it on other ports, such as 2784, 5000, 8001 or 8080.

from:  http://www.w3.org/Daemon/User/Installation/PrivilegedPorts.html

So, what about running on port 80?  I am assuming from this that tomcat must 
be run as root?  This seems a bit insecure.....

Thoughts?




>From: Sébastien Dui <[EMAIL PROTECTED]>
>Reply-To: "Tomcat Users List" <[EMAIL PROTECTED]>
>To: 'Tomcat Users List' <[EMAIL PROTECTED]>
>Subject: RE: Apache for jsp...
>Date: Thu, 4 Jul 2002 21:45:37 +0200
>
>haem... no
>
>the instance would be opened on another user, such as nobody ...
>
>-----Message d'origine-----
>De : Mark Hutchinson [mailto:[EMAIL PROTECTED]]
>Envoyé : jeu. 4 juillet 2002 21:44
>À : [EMAIL PROTECTED]
>Objet : RE: Apache for jsp...
>
>
>
>Would this not require tomcat to be run as root because only root can 
>access
>
>ports lower than 1024?
>
>Mark
>
> >From: "Ten-Hung Chu" <[EMAIL PROTECTED]>
> >Reply-To: "Tomcat Users List" <[EMAIL PROTECTED]>
> >To: "'Tomcat Users List'" <[EMAIL PROTECTED]>
> >Subject: RE: Apache for jsp...
> >Date: Thu, 4 Jul 2002 14:22:57 -0500
> >
> >If you want to run Apache HTTPd and Tomcat, you need some connection 
>module
> >for Apache to talk to tomcat. Like mod_jk or mod_webapp. However if your
> >site does not have too much traffic and you don't mind serving static 
>files
> >through tomcat, you can run tomcat on port 80 by itself. Just modify
> >server.xml and change 8080 to 80.
> >
> >Ten
> >
> >-----Original Message-----
> >From: Mario Henley Becerril Geldis [mailto:[EMAIL PROTECTED]]
> >Sent: Thursday, July 04, 2002 2:09 PM
> >To: [EMAIL PROTECTED]
> >Subject: Apache for jsp...
> >
> >
> >
> >
> >
> >   Is posible run tomcat on port 80..???
> >
> >   i want run my server with http://www.mydomain/example.jsp and no with
> >http://www.mydomain:8080/example.jsp...
> >
> >   but i don't known if i will modify my httpd.conf for load my
> >context...or i need aditional module..???
> >
> >
> >
> >--
> >To unsubscribe, e-mail:
> ><mailto:[EMAIL PROTECTED]>
> >For additional commands, e-mail:
> ><mailto:[EMAIL PROTECTED]>
> >
> >
> >
> >--
> >To unsubscribe, e-mail:
> ><mailto:[EMAIL PROTECTED]>
> >For additional commands, e-mail:
> ><mailto:[EMAIL PROTECTED]>
>
>
>
>
>_________________________________________________________________
>Send and receive Hotmail on your mobile device: http://mobile.msn.com
>
>
>--
>To unsubscribe, e-mail:
><mailto:[EMAIL PROTECTED]>
>For additional commands, e-mail:
><mailto:[EMAIL PROTECTED]>
>
>--
>To unsubscribe, e-mail:   
><mailto:[EMAIL PROTECTED]>
>For additional commands, e-mail: 
><mailto:[EMAIL PROTECTED]>




_________________________________________________________________
Chat with friends online, try MSN Messenger: http://messenger.msn.com


--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to