On UNIX platforms, EAServer allows you to configure an effective
user name and group for the server to run as. This is useful if
you start the server while logged in as a UNIX user with administrator
privileges: you can start the server with administrator privileges,
but the server switches to an account that has fewer privileges
before it begins accepting client connections. When changing the
effective user that runs the process, you must use a group name
to which the effective user belongs. If not, the error Invalid
OS group specified: 'groupname' is
generated in the EAServer log file. For example, if you set username to
user1 and groupname to group1 and start the server
as user2, an error is generated if user2 is not a member of group1.
To change the effective account, set the following properties:
UNIX User Name The name of the effective user that runs the server process.
UNIX Group Name A group to which the effective user belongs.
This feature is useful if you use listener ports less than 1024, such as 80 for HTTP and 443 for SSL. You cannot use port numbers less than 1024 unless the server is started by the root user. After establishing network listeners, the server switches to the specified user and group. This allows you to start the server with listeners using standard HTTP and SSL port numbers, while running it as an account that has fewer privileges.
These properties are ignored on Windows platforms.
The Java Secure Sockets Extension (JSSE) classes provide secure HTTP-tunnelled (HTTPS protocol) connections. JSSE provides an alternative to the built-in SSL implementations when secure connections are needed from an applet running in a Web browser. To use JSSE, configure these properties on the JSSE tab:
SSL Trust Store The store that contains trusted certificates. The configuration property name is trustStore.
SSL Trust Store Password The password to access the truststore. The configuration property name is trustStorePassword.
SSL Trust Store Type The truststore type; for example, JKS or PKCS12. The configuration property name is trustStoreType.
SSL Key Store The store that contains private keys and their associated public keys. The configuration property name is keyStore.
SSL Key Store Password The password to access the keystore. The configuration property name is keyStorePassword.
SSL Key Store Type The keystore type; for example, JKS or PKCS12. The configuration property name is keyStoreType.
FIPS Mode Enabled Select to enable Federal Information Processing Standards (FIPS) mode. The configuration property name is fipsEnabled.
Additional configuration may be required—see “Configuring JSSE” in Chapter 10, “Security Configuration Tasks,” of the EAServer Security Administration and Programming Guide.
