Change the user/group

[thbar]

Hi!

First I have to say I'm very happy with LSWS (I'm using it with LSAPI and Rails applications) - everything is working very well, adding SSL support was really straightforward etc. So, well, thanks!

During one installation, I choosed nobody:nogroup as the user to run lsws (now I would choose a dedicated user lsws:lsws for that purpose).

It seems that I need to reinstall LSWS to be able to change the user. Can I safely install again on top of an existing installation for that purpose ? Will it keep the existing configuration ?

regards

Thibaut

[mistwang]

You need to backup lsws/conf directory and restore it after reinstallation.

[thbar]

You need to backup lsws/conf directory and restore it after reinstallation.

In conf/httpd_config.xml I've noticed:

<user>nobody</user>
<group>nogroup</group>

Obviously I guess I should update this file to match the new user.

is it used purely for display purpose or is it used for something else ?

[mistwang]

Yeah, you need to update that. :)

[amaltemara]

I'm having difficulty enabling litespeed to run as lsws/lsws as per the page: 'How to Secure User Accounts in Shared Hosting Environment':

http://www.litespeedtech.com/support/wiki/doku.php?id=litespeed_wiki:security:shared_hosting _securities

I tried to re-install, but it never asked me what user/group to run litespeed as, which contradicts the install documentation which says the installer will ask you this.

I looked at the install.sh script, and noticed it automatically used the user of the install directory, so then I tried changing the install directory and files to the 'lsws/lsws' user/group, and tried the install again...
This did not work, as when I got to the port, it would not let me choose '80', as you must run as 'root' to use that port.

I also want to run SuExec mode as well, as the security page suggests..

How can I get to this setup, running as lsws/lsws, and SuExec, with cPanel/WHM?

TIA...

[mistwang]

If you want to reinstall, you should remove the whole lsws/ directory.

[amaltemara]

If you want to reinstall, you should remove the whole lsws/ directory.

Thanks! I'll remember... but what about running on port 80?

What I want to happen is for the spawned listeners to run as 'lsws/lsws', on port 80.

[mistwang]

Yes, you can install LSWS to use "lsws/lsws" as user/group, set HTTP port to 80, make sure other web server have been stopped.