Jahia Install Forum > Launching jahia:80...

0 (0 Good)
0 (0 Bad)

Launching jahia:80 as root

by  sly »  2011/06/25 04:07

Hello,

I've setup jahia to use port 80 on a Linux ubuntu server.

So I can't start it using user jahia since port 80 is restricted to root on Linux. (start fail to open port 80)

Starting it with root works, but all the process are run by root and i see no "su fork" witch is a security risk.

So how do I use port 80 properly ?

Second question Should I install jahia with root or with jahia user (regarding security) ?

  • Launching jahia:80 as root
    2011/06/25 04:07

    sly <p> Hello,</p> <p> I&#39;ve setup jahia to use port 80 on a Linux ubuntu server.</p> <p> So I can&#39;t start it using user jahia since port 80 is restricted to root on Linux. (start fail to open port 80)</p> <p> Starting it with root works, but all the process are run by root and i see no &quot;su fork&quot; witch is a security risk.</p> <p> So how do I use port 80 properly ?</p> <p> Second question Should I install jahia with root or with jahia user (regarding security) ?</p>

  • Number of messages  11
    Registration date Jun 25, 2011
    0 (0 Good)
    0 (0 Bad)

    Re: Launching jahia:80 as root

    by  faissah »  2011/06/28 20:02

    Hello,

    my opinion, according to what is usually said about Linux server administration, would be to avoid the root user as much as possible, for potential security issues as you said.
       
    What is the purpose of your installation? Is it a test installation or a production website you want to run?

    You could either install an Apache HTTP server, running with root and act as a relay for your requests (but it adds anoher piece of software to maintain) or just redirect requests on port 80 to port 8080 using your firewall

    (iptables I guess) # iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080  


    let us know if you meet further issues
       
    Regards

    Fabrice  (faissah)

    Number of messages  264
    Registration date
    0 (0 Good)
    0 (0 Bad)

    Re: Re: Launching jahia:80 as root

    by  sly »  2011/09/09 22:31

    I tried both way, it works.

    But with the redirection with apache, we lose the IP adresse of the client (always 127.0.0.1).

    Is there a way to avoid this ?

    Thanks.

     

  • Re: Re: Launching jahia:80 as root
    2011/09/09 22:31

    sly <p> I tried both way, it works.</p> <p> But with the redirection with apache, we lose the IP adresse of the client (always 127.0.0.1).</p> <p> Is there a way to avoid this ?</p> <p> Thanks.</p> <p> &nbsp;</p>

  • Number of messages  11
    Registration date Sep 9, 2011
    0 (0 Good)
    0 (0 Bad)

    Re: Re: Re: Launching jahia:80 as root

    by  rvt »  2011/09/12 16:43

    But with the redirection with apache, we lose the IP adresse of the client (always 127.0.0.1).

    I don't believe there is, for some own apps where we need to know the clients IP we currently use x-forwarded-for.

    For just general weblogging and statistics we just rely on the apache logs.

     

  • Re: Re: Re: Launching jahia:80 as root
    2011/09/12 16:43

    rvt <blockquote> <p> But with the redirection with apache, we lose the IP adresse of the client (always 127.0.0.1).</p> </blockquote> <p> I don&#39;t believe there is, for some own apps where we need to know the clients IP we currently use x-forwarded-for.</p> <p> For just general weblogging and statistics we just rely on the apache logs.</p> <p> &nbsp;</p>

  • Number of messages  185
    Registration date Sep 12, 2011
    Contact
    Share
    Feedback

    Get in touch

    Whether you are a current user or if you are just evaluating Jahia, we are here to help.

    Contact us

    Share this page