You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@trafficserver.apache.org by "Mladen Turk (JIRA)" <ji...@apache.org> on 2010/05/15 13:31:43 UTC
[jira] Created: (TS-353) Allow numeric user notation for
proxy.config.admin.user_id
Allow numeric user notation for proxy.config.admin.user_id
----------------------------------------------------------
Key: TS-353
URL: https://issues.apache.org/jira/browse/TS-353
Project: Traffic Server
Issue Type: New Feature
Components: Documentation
Affects Versions: 2.1.1
Reporter: Mladen Turk
Assignee: Miles Libbey
New way of specifying the user_id has been added.
Currently the proxy.config.admin.user_id allows only specifying user names.
Since 2.1.1 if the user_id is prefixed with pound character (#) the remaining of the
string is considered to be numeric user id.
If the user_id equals '#-1' this would cause the trafficserver to not change the user
during startup.
Setting user_id to 'root' or to '#0' is now forbidden because of security reasons.
Trying to do so, will cause the traffic_server fatal failure.
However there are two ways to bypass that restriction.
The first one is by specifying -DBIG_SECURITY_HOLE in CXXFLAGS during compilation
The second is setting user_id=#-1 and starting trafficserver under root account.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Resolved: (TS-353) Allow numeric user notation for
proxy.config.admin.user_id
Posted by "Miles Libbey (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/TS-353?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Miles Libbey resolved TS-353.
-----------------------------
Resolution: Fixed
> Allow numeric user notation for proxy.config.admin.user_id
> ----------------------------------------------------------
>
> Key: TS-353
> URL: https://issues.apache.org/jira/browse/TS-353
> Project: Traffic Server
> Issue Type: New Feature
> Components: Documentation
> Affects Versions: 2.1.1
> Reporter: Mladen Turk
> Assignee: Miles Libbey
>
> New way of specifying the user_id has been added.
> Currently the proxy.config.admin.user_id allows only specifying user names.
> Since 2.1.1 if the user_id is prefixed with pound character (#) the remaining of the
> string is considered to be numeric user id.
> If the user_id equals '#-1' this would cause the trafficserver to not change the user
> during startup.
> Setting user_id to 'root' or to '#0' is now forbidden because of security reasons.
> Trying to do so, will cause the traffic_server fatal failure.
> However there are two ways to bypass that restriction.
> The first one is by specifying -DBIG_SECURITY_HOLE in CXXFLAGS during compilation
> The second is setting user_id=#-1 and starting trafficserver under root account.
>
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.