Running ispcp without root privileges

[kts]

Hello,

I was wondering if it's possible to somehow run ispCP Omega entirely as a "non-root" user. The Documentation suggests to run the installation process with root privileges - that's alright. But from there on I find it kinda risky to just go on like that. So what would I have to do in order to make ispcp omega work without root privileges?

Thanks in advance,
kts

[joximu]

Hi

the gui (webservice) runs without root privileges (vu2000) but since ispcp needs to create users and so on - it needs some higher privileges - this is limited to the ispcp_daemon which calls the engines (perl scripts).

/J

[kts]

Thanks for your response first of all!

Isn't there any way to to run the daemon process with certain extended rights (which would they be?), as I would feel much more comfortable not to use the root account for such purposes?

[joximu]

I don't know if this works.
After all - the perl scripts (engine) has to have write privileges to some other daemon config (apache-config, proftpd-config, postfix-config etc) and - one of the engine scripts must have the right to create an remove system users.

So, if you find a user/group other than root to create users - you'll be on a good way.

/J

[kts]

Alright, thanks a lot!

But I did get it right that it is very common to run ispcp as root, didn't I?
And has anyone ever experienced serious problems with that?

[joximu]

AFAIK it is common to run such software with root privileges.

It is a tool which does the tasks of a administrator - so it needs the privileges...

Serious problems? Well I never read of such problems here.

/J

[kts]

Okay, splendid.
Thanks for your help again, very much appreciated.