You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by whoswho <po...@gmail.com> on 2011/11/12 13:21:58 UTC
SSL Port 443 for AIX
Tomcat Version: TOMCAT 6.0.x
Operating System: IBM AIX 6.1
Problem:
Tomcat has been installed as a non-root user. I want to use SSL port 443
and not the deafult port 8443. When I modify the SSL connector, and try
connecting as 443, I get permission denied since the tomcat account owner
is non-root.
In Linux, I know we can use IPTABLES, how about AIX?
Ed
Re: SSL Port 443 for AIX
Posted by Brian Burch <br...@pingtoo.com>.
On 13/11/11 04:32, Tobias Crefeld wrote:
> Am Sat, 12 Nov 2011 07:21:58 -0500 schrieb whoswho<po...@gmail.com>:
>
>> Tomcat has been installed as a non-root user. I want to use SSL port
>> 443 and not the deafult port 8443. When I modify the SSL connector,
>> and try connecting as 443, I get permission denied since the tomcat
>> account owner is non-root.
>
> It's a (Unix?-) principle that services with numbers below 1024 are
> only allowed to get startet by root.
If you have the authbind package available under AIX, you can configure
it so the tomcat user has permission to listen on low port numbers, e.g.
80 and 443.
> You can use NAT to exchange port numbers.
> Or if it's possible to extract SSL-certificates you install Apache
> (httpd) that is using it's own mechanism to start services with "low
> port numbers", setup SSL and use something like mod_proxy_ajp or mod_jk
> to contact Tomcat's ajp-connector.
>
>
> RU,
> Tobias.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: SSL Port 443 for AIX
Posted by Tobias Crefeld <tc...@cataneo.eu>.
Am Sat, 12 Nov 2011 07:21:58 -0500 schrieb whoswho <po...@gmail.com>:
> Tomcat has been installed as a non-root user. I want to use SSL port
> 443 and not the deafult port 8443. When I modify the SSL connector,
> and try connecting as 443, I get permission denied since the tomcat
> account owner is non-root.
It's a (Unix?-) principle that services with numbers below 1024 are
only allowed to get startet by root.
You can use NAT to exchange port numbers.
Or if it's possible to extract SSL-certificates you install Apache
(httpd) that is using it's own mechanism to start services with "low
port numbers", setup SSL and use something like mod_proxy_ajp or mod_jk
to contact Tomcat's ajp-connector.
RU,
Tobias.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org