Re: Win32 Apache service not run as System...

From: cmoon@fas.harvard.edu
Date: 07/16/02 

Date: Tue, 16 Jul 2002 08:39:56 -0400
From: cmoon@fas.harvard.edu
To: Catfish <catfish@catfish.homeip.net>

Catfish,

I am running multiple instances of apache on win32 and each has a corresponding
user. It is very straight forward to do. Here are the steps.

1. Create a user account that you want to user for apache. I use %
application_name%_apache so that I can differentiate the seperate apache
instances.

2. Set the NTFS permissions on on the apache directory (I have never needed to
change any of the %system root% permissions to get things to work)

3. Set the service to start as the new user that you created.

4. Restart the service

There is no need to recomplile apache.

I hope that this helps. Feel free to email me with any other questions you
might have

-Chris

-----Original Message-----
From: Catfish [mailto:catfish@catfish.homeip.net]
Sent: Saturday, July 13, 2002 11:20 PM
To: focus-ms@securityfocus.com
Subject: Win32 Apache service not run as System...

    I hear a lot of talk, mostly on the *nix side, about not running
daemon/services as root/system accounts if you can avoid it... Is this
doable for Apache 2.x under win32? The current setup sets the server to run
as the SYSTEM account along with all the other services but I would love to
setup a different restricted user with registry/NTFS permissions that would
only allows access to the http root folders and any other required folders
(%systemdir%...etc) but I can't do that with the System user if I want my
system to continue running.
    Would doing something like this require recompiling apache? If so I
heard that they are (already have?) planing to code it in a way that would
compile under bcc free tools (I don't have access to vcc++).
    If it's such a good idea to run it as a different user why not make that
the default setup?

    Thanks for any info.

Quoting Catfish <catfish@catfish.homeip.net>:

> I hear a lot of talk, mostly on the *nix side, about not running
> daemon/services as root/system accounts if you can avoid it... Is this
> doable for Apache 2.x under win32? The current setup sets the server to run
> as the SYSTEM account along with all the other services but I would love to
> setup a different restricted user with registry/NTFS permissions that would
> only allows access to the http root folders and any other required folders
> (%systemdir%...etc) but I can't do that with the System user if I want my
> system to continue running.
> Would doing something like this require recompiling apache? If so I
> heard that they are (already have?) planing to code it in a way that would
> compile under bcc free tools (I don't have access to vcc++).
> If it's such a good idea to run it as a different user why not make
> that
> the default setup?
>
> Thanks for any info.
>
>

Relevant Pages

  • phpMyAdmin & mbstring
    ... apache 2.0.55 win32-x86 no_ssl ... mysql essentia 4.1.16 win32 ... Sorry for my BAD english!! ...
    (comp.lang.php)
  • Apache appending .php extension?
    ... This is kind of an obscure question, and I hope someone has a clue ... I've got PHP4 running on Apache 1.3 on win32, ... Apache does not try to serve up anything at all. ...
    (comp.lang.php)
  • Re: No wonder so few web hosts support java...
    ... Have you tried Apache? ... It may well be worth having a go at it, ... Win32, but they don't support it as far as I know. ... But the Apache website seems to augur well for Java support. ...
    (comp.programming)
  • Re: Indigo httpd.conf - mod_perl.so cannot be loaded
    ... Just a blind guess from my side, since I never ran apache on win32: ... Do you have to use backslashes instead of forward slashes, or does apache ...
    (comp.lang.perl.misc)
  • RPC over HTTPS reversed proxy configuration...
    ... I am trying to setup RPC over HTTPs via an apache reverse proxy. ... OWA and OMA without issue to the exchange server. ...
    (microsoft.public.exchange.connectivity)
Quantcast