Re: only superuser can make the connection ...

[KC <kcc1967 gmail com>]

Hi,

I did some source code study and found the problem comes
from function ORBit_object_get_connection() in
$ORBIT_SRC/src/orb/orb-core/corba-object.c

There is a if command:

            if (unix_socket_failed && ipv4_ipv6_enabled && is_localhost (host))
                   continue;

If server is run as root and client is run as regular user, the
above condition will be true and ORBit_object_get_connect() will return NULL.

I also found ChangeLog of ORBit2-2.14.0:

    2005-04-14  Arvind Samptur  <arvind samptur wipro com>

    * src/orb/orb-core/corba-object.c :
    (ORBit_object_get_connection): if we have failed on the unix
    socket, have IPv4 or IPv6 connections enabled and are on localhost,
    then don't connect on the corresponding port from the profiles.
    Patch reviewed by Michael Meeks.

Which may introduce the problem I got.

I need to run my ORBit2 server application as root (it's a daemon program),
and allow client run as regular user to connect the services ... How can
I solve the problem ?

So far I only find this problem on ORBit2-2.14.0.


Regards
KC




On 4/17/06, KC <kcc1967 gmail com> wrote:
> Hi,
>
> I did more test.  The problem happen when I run
> ORBit2 server using root account.   In this case, client
> running by regular user can't connect to server (127.0.0.1).
> Will get EXCEPTION (2): IDL:omg.org/CORBA/COMM_FAILURE:1.0
>
> If client run on other host, then it's OK no matter using root
> or regular user to run client.
>
> Any suggestion ?
> This problem does not happen on old ORBit2 (eg RH9)
>
>
> Regards
> KC
>
>
>
>
> On 4/16/06, KC <kcc1967 gmail com> wrote:
> > Hi,
> >
> > I'm testing ORBit2-2.14.0 under RH9 and found
> > only superuser can make the connection from client to
> > server when both client/server run on the same host
> > (connect via 127.0.0.1).
> >
> > If client and server are run on different host, there is no
> > such problem.
> >
> > I didn't have similar problem for ORBit2-2.10.4.
> > Does anyone know why ?
> >
> > Regards
> > KC
> >
>