[news.eclipse.dsdp.tm] Re: Using privileged ports for RSE

["David McKnight" <dmcknigh@xxxxxxxxxx>]

"Denise Schmidt" <denise.schmidt@xxxxxxxx> wrote in message 
news:863819bfe4506ac862880afe40272127$1@xxxxxxxxxxxxxxxxxx
> In order to bind a socket to a privileged port, the process must be 
> running as root.  So I think it must be failing because the server process 
> is running as the client user ID (auth.pl does an "su" to the client user 
> ID to spawn the server).  I assume that the server runs as the client user 
> ID for a reason (exporting the client environment, client permissions, 
> etc).

That would explain it then.  The daemon needs to be run as root but the 
servers that gets started as run as the client user.

> So my next question would be is there a way that the server could maybe 
> start executing as root to bind the socket and make the connection, then 
> switch to the client user ID to get the proper environment and do the 
> remaining "real" work?  Could that work or would there still be problems 
> sending data over the port?
>

At the moment there is no ability to for the server to start executing as 
root and then switch to the client user.