Running TS as other than root in Unix????

Does anyone have any experience with TeamSIte in a Unix environment where root access to the server will not be given to the TS admin?? I keep running into a brick wall where I need to add custom cgi scripts to directories owned by root and accesible on by the daemon group and I received the attached email from our Unix group today:

protocol for running the application as an application ID and not under the root id?

For instance can we create a userid called TeamSite and have everything work? If so, we could potentially add the user account and change all the subdirectories to that account user. If there are certain programs that are needed to be root owned, the vendor might know.
Any help would be appreciated as I can not find this info anywhere.

Find more posts tagged with

Comments

Migrateduser

All you need is an account set up with sudo access. That's what we do.

Dave Smith
Sr. Software Engineer
Nike, Inc.
(503) 671-4238
DavidH.Smith@nike.com

Lynchy

Hey Dave,
Thanks for the response that would make sense, but according to our UNIX admins allowing file transfers as sudo is dangerous. So what they propose is to create a new account and make that account the owner of the iw-home tree. I assume that this would casue conflicts with TeamSite but I don't know alot about UNIX so I am a bit lost.

Johnny

not everything under the iw-home tree needs to owned by root : daemon

I have set it up in the past so that a TS admin account can modify certain areas.

I would be careful with this though, change directories where you need to create files, but dont change product files that you have no reason to modify.

John Cuiuli
Consultant
Sydney, Australia

Adam Stoller

I think some, if not all, of the information regarding root-owned files is in here: http://devnet.interwoven.com/site.fcgi/techlib/002234

--fish
(Interwoven Senior Technical Consultant)

Migrateduser

Based on our experience, if you intend to be the TeamSite administrator, you better get root priviledges, at least with a sudo account. If you don't have it, life will not be fun for you. Of course having root is dangerous, but if they don't give it to you I hope they are prepared for you bugging them to update files and do all your user administration on a regular basis.

Dave Smith
Sr. Software Engineer
Nike, Inc.
(503) 671-4238
DavidH.Smith@nike.com

Johnny

Exactly.

Its like working with one hand tied behind your back!

John Cuiuli
Consultant
Sydney, Australia

johnjamesmarsh

Our Teamsite instance runs as root but most of the configuration files are owned by an interwoven user. This means we can modify the config and do iwreset but we can't stop and start Teamsite. This is a production service so this is desirable.

When we need to stop Teamsite we will put in a request to the UNIX team and arrange a convenient time with the users. You just need to foster a better relationship with your UNIX team for the odd occasions that Teamsite needs to be restarted.

John