Re: only superuser can make the connection ...

[KC <kcc1967 gmail com>]

Hi,

Sorry for my last statement ... turn off ORBIIPOUNIX does work :-)

If I run ORBit2-2.14.0 server as root, and want to allow client which run
as regular user to connect to server from the same host, I must
only use ORBIIOPIPv4 (or v6 which I did not test).   Use ORBIIOPUNIX
will cause "permission deny" when low level API connect() had been called.

I think this new policy is OK, but why not try ORBIIOPUNIX first, and
if it doesn't work,  try ORBIIOPIPv4, then ORBIIOPIPv6 ... until one of
them success or all failed ...


Regards
KC





On 4/18/06, KC <kcc1967 gmail com> wrote:
> Hi
>
> On 4/17/06, Patrick Ohly <patrick ohly intel com> wrote:
> > On Mo, 2006-04-17 at 17:35 +0800, KC wrote:
> > > I need to run my ORBit2 server application as root (it's a daemon program),
> > > and allow client run as regular user to connect the services ... How can
> > > I solve the problem ?
> >
> > I'm not sure how to fix the problem. Perhaps you can work around it by
> > starting the server with Unix domain sockets disabled (ORBIIOPUNIX=0
> > as parameter to CORBA_ORB_init())?
>
> This doesn't work :-(
> I were guessing it probably because I'm testing ORBit2-2.14.0
> under RH9 ... so I did the same test under FC5 ... it's the real
> problem introduce in 2.14.0 (not in 2.12.x or FC4).
>
>
> Regards,
> KC
>
>
>
> >
> > I assume that you have ORBIIOPv4=1 already, otherwise it wouldn't
> > work across different machines (which you said worked).
> >
> > --
> > Best Regards, Patrick Ohly
> >
> > The content of this message is my personal opinion only and although
> > I am an employee of Intel, the statements I make here in no way
> > represent Intel's position on the issue, nor am I authorized to speak
> > on behalf of Intel on this matter.
> >
> >
> > _______________________________________________
> > orbit-list mailing list
> > orbit-list gnome org
> > http://mail.gnome.org/mailman/listinfo/orbit-list
> >
>