When do I need "root" privileges in order to run XML Canon on a Unix platform?
Article ID: KB0087555
Updated On:
| Products | Versions |
|---|---|
| TIBCO XML Canon | - |
| Not Applicable | - |
Description
Resolution:
When XML Canon is installed on UNIX platforms, the default requirement of the startup script xmlcanon.sh is that XML Canon must be started as 'root' or ‘nobody’. If started as ‘root’, then the script forks XML Canon to the 'nobody' user. The script specifies the 'nobody' user, since this account should represent an unprivileged user that would be the most secure user under whom to run XML Canon. Some environments do not allow applications to start as the root user or have an existing ‘nobody’ user. You can account for this by modifying the start script xmlcanon.sh.
The script checks if the current login username is the same as the username in the script ($user) or ‘root’. If it is neither, it will give the error “XML Canon must be run as either root or nobody”. If the current user is the same as $user it runs as this account. If the script is run as root, it will start and then fork XML Canon to run as the 'nobody' user.
If you wish to modify the script to run as a different user than ‘root’ or ‘nobody’, then modify line 18 to reflect the desired user.
Example:
The current user is 'tibco'. Edit xmlcanon.sh with the following changes:
On line 18 of xmlcanon.sh: user="nobody" becomes user="tibco"
XML Canon should now start and run as user 'tibco'.
When XML Canon is installed on UNIX platforms, the default requirement of the startup script xmlcanon.sh is that XML Canon must be started as 'root' or ‘nobody’. If started as ‘root’, then the script forks XML Canon to the 'nobody' user. The script specifies the 'nobody' user, since this account should represent an unprivileged user that would be the most secure user under whom to run XML Canon. Some environments do not allow applications to start as the root user or have an existing ‘nobody’ user. You can account for this by modifying the start script xmlcanon.sh.
The script checks if the current login username is the same as the username in the script ($user) or ‘root’. If it is neither, it will give the error “XML Canon must be run as either root or nobody”. If the current user is the same as $user it runs as this account. If the script is run as root, it will start and then fork XML Canon to run as the 'nobody' user.
If you wish to modify the script to run as a different user than ‘root’ or ‘nobody’, then modify line 18 to reflect the desired user.
Example:
The current user is 'tibco'. Edit xmlcanon.sh with the following changes:
On line 18 of xmlcanon.sh: user="nobody" becomes user="tibco"
XML Canon should now start and run as user 'tibco'.
Issue/Introduction
When do I need "root" privileges in order to run XML Canon on a Unix platform?
Feedback
Yes
No
Powered by
