Lucee/Tomcat "Run As" User

Running Lucee 4.5 on CentOS Linux.

We’re currently running on a test server and have been reviewing Lucee
settings and functionality before installing on our first production server.

I have a question about what we should be using for the “run as” user for
Lucee/Tomcat that is prompted for during the Lucee install.

On this test server, we chose the default, which is “root”. I’m not
entirely sure that was the best choice due to security reasons.

On our old CFMX box, that we are migrating from, we have CF running as the
Apache user.

Would that (Apache) be the recommended user we should use for Lucee/Tomcat,
or would we be better off setting up some completely new user, such as a
user named “tomcat”?

If we do use something other than root, are there any permissions, access,
or functionality issues that we should be aware of?

Thanks in advance for any help!

Steve

I would certainly suggest to install Lucee under a separate user that
cannot login. I run my production servers using Nginx, but in my experience
on CentOS, Lucee runs just fine under a separate username.

I think it would be better if the installer asked you to specify a user and
user group to install Lucee under, rather than offering root as the default
option.

Aria Media Sagl
+41 (0)76 303 4477 cell
skype: ariamediaOn Mon, May 9, 2016 at 7:25 PM, Steve Lauen <@Steve_Lauen> wrote:

Running Lucee 4.5 on CentOS Linux.

We’re currently running on a test server and have been reviewing Lucee
settings and functionality before installing on our first production server.

I have a question about what we should be using for the “run as” user for
Lucee/Tomcat that is prompted for during the Lucee install.

On this test server, we chose the default, which is “root”. I’m not
entirely sure that was the best choice due to security reasons.

On our old CFMX box, that we are migrating from, we have CF running as the
Apache user.

Would that (Apache) be the recommended user we should use for
Lucee/Tomcat, or would we be better off setting up some completely new
user, such as a user named “tomcat”?

If we do use something other than root, are there any permissions, access,
or functionality issues that we should be aware of?

Thanks in advance for any help!

Steve


Love Lucee? Become a supporter and be part of the Lucee project today! -
http://lucee.org/supporters/become-a-supporter.html

You received this message because you are subscribed to the Google Groups
“Lucee” group.
To unsubscribe from this group and stop receiving emails from it, send an
email to lucee+unsubscribe@googlegroups.com.
To post to this group, send email to lucee@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/lucee/2dbac274-3aba-48ad-a57d-93c5b1174daf%40googlegroups.com
https://groups.google.com/d/msgid/lucee/2dbac274-3aba-48ad-a57d-93c5b1174daf%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

“some other user” works for me just fine

Aria Media Sagl
+41 (0)76 303 4477 cell
skype: ariamediaOn Tue, May 10, 2016 at 11:12 PM, Steve Lauen <@Steve_Lauen> wrote:

Thanks Nando!

Would you recommend using the Apache user, or some other user?

Steve

On Monday, May 9, 2016 at 1:42:59 PM UTC-5, Nando Breiter wrote:

I would certainly suggest to install Lucee under a separate user that
cannot login. I run my production servers using Nginx, but in my experience
on CentOS, Lucee runs just fine under a separate username.

I think it would be better if the installer asked you to specify a user
and user group to install Lucee under, rather than offering root as the
default option.

Aria Media Sagl
+41 (0)76 303 4477 cell
skype: ariamedia

On Mon, May 9, 2016 at 7:25 PM, Steve Lauen sla...@gmail.com wrote:

Running Lucee 4.5 on CentOS Linux.

We’re currently running on a test server and have been reviewing Lucee
settings and functionality before installing on our first production server.

I have a question about what we should be using for the “run as” user
for Lucee/Tomcat that is prompted for during the Lucee install.

On this test server, we chose the default, which is “root”. I’m not
entirely sure that was the best choice due to security reasons.

On our old CFMX box, that we are migrating from, we have CF running as
the Apache user.

Would that (Apache) be the recommended user we should use for
Lucee/Tomcat, or would we be better off setting up some completely new
user, such as a user named “tomcat”?

If we do use something other than root, are there any permissions,
access, or functionality issues that we should be aware of?

Thanks in advance for any help!

Steve


Love Lucee? Become a supporter and be part of the Lucee project today! -
http://lucee.org/supporters/become-a-supporter.html

You received this message because you are subscribed to the Google
Groups “Lucee” group.
To unsubscribe from this group and stop receiving emails from it, send
an email to lucee+un...@googlegroups.com.
To post to this group, send email to lu...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/lucee/2dbac274-3aba-48ad-a57d-93c5b1174daf%40googlegroups.com
https://groups.google.com/d/msgid/lucee/2dbac274-3aba-48ad-a57d-93c5b1174daf%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.


Love Lucee? Become a supporter and be part of the Lucee project today! -
http://lucee.org/supporters/become-a-supporter.html


You received this message because you are subscribed to the Google Groups
“Lucee” group.
To unsubscribe from this group and stop receiving emails from it, send an
email to lucee+unsubscribe@googlegroups.com.
To post to this group, send email to lucee@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/lucee/87c5b5de-5581-459d-a255-94bfa346a0de%40googlegroups.com
https://groups.google.com/d/msgid/lucee/87c5b5de-5581-459d-a255-94bfa346a0de%40googlegroups.com?utm_medium=email&utm_source=footer
.

For more options, visit https://groups.google.com/d/optout.

Thanks Nando!

Would you recommend using the Apache user, or some other user?

SteveOn Monday, May 9, 2016 at 1:42:59 PM UTC-5, Nando Breiter wrote:

I would certainly suggest to install Lucee under a separate user that
cannot login. I run my production servers using Nginx, but in my experience
on CentOS, Lucee runs just fine under a separate username.

I think it would be better if the installer asked you to specify a user
and user group to install Lucee under, rather than offering root as the
default option.

Aria Media Sagl
+41 (0)76 303 4477 cell
skype: ariamedia

On Mon, May 9, 2016 at 7:25 PM, Steve Lauen <sla...@gmail.com <javascript:>> wrote:

Running Lucee 4.5 on CentOS Linux.

We’re currently running on a test server and have been reviewing Lucee
settings and functionality before installing on our first production server.

I have a question about what we should be using for the “run as” user for
Lucee/Tomcat that is prompted for during the Lucee install.

On this test server, we chose the default, which is “root”. I’m not
entirely sure that was the best choice due to security reasons.

On our old CFMX box, that we are migrating from, we have CF running as
the Apache user.

Would that (Apache) be the recommended user we should use for
Lucee/Tomcat, or would we be better off setting up some completely new
user, such as a user named “tomcat”?

If we do use something other than root, are there any permissions,
access, or functionality issues that we should be aware of?

Thanks in advance for any help!

Steve


Love Lucee? Become a supporter and be part of the Lucee project today! -
http://lucee.org/supporters/become-a-supporter.html

You received this message because you are subscribed to the Google Groups
“Lucee” group.
To unsubscribe from this group and stop receiving emails from it, send an
email to lucee+un...@googlegroups.com <javascript:>.
To post to this group, send email to lu...@googlegroups.com <javascript:>
.
To view this discussion on the web visit
https://groups.google.com/d/msgid/lucee/2dbac274-3aba-48ad-a57d-93c5b1174daf%40googlegroups.com
https://groups.google.com/d/msgid/lucee/2dbac274-3aba-48ad-a57d-93c5b1174daf%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.