1 Aug 2004 23:51
Enhanced security
Steven Frost <Steven.Frost <at> powerco.co.nz>
2004-08-01 21:51:12 GMT
2004-08-01 21:51:12 GMT
HI -- we have a single-sever 5.1A development system on enhanced security for evaluation prior to introducing onto a production cluster. I have discovered that a web application used for connection to a database on this server no longer works ( and that the middleware is also obsolete and no longer supported!). Is it possible to revert back to base security while the app can be tested . The security documentation doesn't seem to allow for back-tracking.Thanks. ##################################################################################### This e-mail message has been scanned for Viruses and Content and cleared by MailMarshal ##################################################################################### **************************************************************************************************************************** CAUTION: This email and any attachments may contain information that is confidential. If you are not the intended recipient, you must not read, copy, distribute, disclose or use this email or any attachments. If you have received this email in error, please notify us and erase this email and any attachments. You must scan this email and any attachments for viruses. DISCLAIMER: Powerco Limited accepts no liability for any loss, damage or other consequences, whether caused by its negligence or not, resulting directly or indirectly from the use of this email or attachments or for any changes made to this email and any attachments after sending by Powerco Limited. The opinions expressed in this email and any attachments are not necessarily those of Powerco Limited. ****************************************************************************************************************************
Here is his reply:
" It is hard to be certain without seeing the details of the startup
script,
but a common issue when moving startup scripts for applications
that work on other Unixen to Tru64 Unix, is that the init process
on Tru64 Unix will send anything started up by it a HUP signal
after the startup. If your daemon (e.g. Apache is OK) can handle
a HUP signal and either ignore it or reread the configuration file
then that's OK, but if it is not handled, you have a problem.
(Even though you have a nohup statement, I think you may find Tomcat
is getting a HUP...)
Very easy test: find the PID of your running Tomcat server, and send it
HUP.
If it goes down, you will need to add a signal handler somewhere. "
So, sending a HUP to my tomcat process does indeed prove that it cannot
handle it.
However, it isn't clear how to fix this, since init is running /bin/sh to
run
my startup script for tomcat, which in turn 'execs' the standard tomcat
RSS Feed