On 26/02/2024 06:11, Saha, Rajib wrote:
Hi Experts,
In our product, we are using Tomcat [OriginalFileName: prunsrv.exe] for
creating a service[Say, Service-A]. It's a huge product running in market for
last 20 years.
We are in progress of moving from Tomcat-8 to tomcat-9.
When we are creating the Service-A with Tomcat-8 [tomcat8.exe]. In "Services" desktop app, we can
see the service is created with "Local System" in "Log On as".
When we are creating the Service-A with Tomcat-9 [tomcat9.exe]. in "Services" desktop app, we can
see the service is created with "Local service" in "Log On as".
Looks like "Local service" has less power than "Local System".
Due to it, Service-A created with Tomcat-9 failing for several operation inside
product.
That should be a security concern. Local System is broadly equivalent to
local administrator. You generally don't want to be running Tomcat under
Local System.
Can somebody suggest, how we can create a service with tomcat-9, with the privilege of
"Local System"?
Have you looked at the documentation?
https://tomcat.apache.org/tomcat-9.0-doc/windows-service-howto.html
Look for "--ServiceUser"
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org