Deciding The User And Group For Your Netscape Servers (Unix Only) - Netscape DIRECTORY SERVER 6.0 Installation Manual

Configuration Decisions
By default, the server root directory is one of the following:
•
/usr/netscape/servers
•
c:\netscape\servers
Deciding the User and Group for Your Netscape
Servers (UNIX only)
For security reasons, it is always best to run UNIX-based production servers with
normal user privileges. That is, you do not want to run Directory Server with root
privileges. However, you will have to run Directory Server with root privileges if
you are using the default Directory Server ports. If Directory Server is to be started
by Administration Server, Administration Server must run either as root or as the
same user as Directory Server.
You must therefore decide what user accounts you will use for the following
purposes:
• The user and group under which you will run Directory Server.
If you will not be running the directory server as root, it is strongly
recommended that you create a user account for all Netscape servers. You
should not use any existing operating system account, and must not use the
nobody
server files; again, you must not use the
• The user and group under which you will run Administration Server.
For installations that use the default port numbers, this must be root. However,
if you use ports over 1024, then you should create a user account for all
Netscape servers, and run Administration Server as this account.
As a security precaution, when Administration Server is being run as root, it
should be shut it down when it is not in use.
You should use a common group for all Netscape servers, such as
to ensure that files can be shared between servers when necessary.
Before you can install Directory Server and Administration Server, you must make
sure that the user and group accounts you will use exist on your system.
14 Netscape Directory Server Installation Guide • December 2001
(on UNIX systems)
(on Windows NT and Windows 2000 systems)
account. Also you should create a common group for the directory
group.
nobody
,
gid Netscape