On Tue, 24 Oct 2006 13:17:36 +0100
Greig A Cowan <[log in to unmask]> wrote:
> Hi all,
>
> Here is some information from the dCache SRM developer regarding
> the new SRM tomcat service.
>
> > Question 2:
> >
> > Also, the tomcat process is running as root. Is there any way to run
> > it under a user account?
>
> Yes, root access is needed, since for some operations srm has to get
> certain attributes directly from pnfs.
>
> Thanks,
> Timur
> -----------
>
> So if you install 1.7.0-16 then you should make sure the above ports
> can't be accessed.
>
> It's still not clear to me wny things have to run as root in dCache.
> Maybe Owen can comment further.
We at DESY thought it was possible, because of the permission manger
provides all the functions srm should need, pnfs-manager should run as
root though as it needs to interact with pnfs.
We at DESY, it appears, are incorrect in our assumptions.
Regards
Owen
|