Deciding The User And Group For Your Netscape Servers (Unix Only) - Netscape DIRECTORY SERVER 7.0 Installation Manual

Configuration Decisions
By default, the server root directory is one of the following:
•
/usr/netscape/servers
•
c:\netscape\servers
Deciding the User and Group for Your Netscape
Servers (UNIX only)
For security reasons, it is always best to run UNIX-based production servers with
normal user privileges. That is, you do not want to run Directory Server with
root
privileges if you are using the default Directory Server ports. If Directory Server is
to be started by Administration Server, Administration Server must run either as
root
You must therefore decide what user accounts you will use for the following
purposes:
• The user and group under which you will run Directory Server.
If you will not be running the Directory Server as
recommended that you create a user account for all Netscape servers. You
should not use any existing operating system account and must not use the
nobody
server files; again, you must not use the
• The user and group under which you will run Administration Server.
For installations that use the default port numbers, this must be
However, if you use ports over
for all Netscape servers and run Administration Server as this account.
As a security precaution, when Administration Server is being run as
should be shut down when it is not in use.
You should use a common group for all Netscape servers, such as
to ensure that files can be shared between servers when necessary.
Before you can install Directory Server and Administration Server, you must
make sure that the user and group accounts you will use exist on your system.
14 Netscape Directory Server Installation Guide • October 2004
privileges. However, you will have to run Directory Server with
or as the same user as Directory Server.
account. Also, you should create a common group for the directory
(on UNIX systems)
(on Windows systems)
nobody
, then you should create a user account
1024
root
, it is strongly
root
group.
root
gid Netscape
.
, it
root
,