tomcat 以非root身份启动

diyself

该如何设置？并且，如何设置为使用80端口呢？


谢谢！

[ 本帖最后由 diyself 于 2009-9-25 09:59 编辑 ]

diyself

su - tomcat -c '/usr/local/tomcat/bin/startup.sh'

iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-ports 8080


自问自答

gamester88

看12期的开源时代

小兔怪怪

iptables

gilet

1. 
   
2. [root@tomcat ~]# cd /opt/tomcat/bin/
   
3. 
   
4. [root@tomcat bin]# ls
   
5. 
   
6. bootstrap.jar catalina-tasks.xml digest.bat service.bat shutdown.bat startup.sh tomcat-juli.jar tool-wrapper.sh
   
7. catalina.bat commons-daemon.jar digest.sh setclasspath.bat shutdown.sh tomcat6.exe tomcat-native.tar.gz version.bat
   
8. catalina.sh cpappend.bat jsvc.tar.gz setclasspath.sh startup.bat tomcat6w.exe tool-wrapper.bat version.sh
   
9. [root@tomcat bin]# tar zxvf jsvc.tar.gz
   
10. 
    
11. [root@tomcat bin]# cd jsvc-src/
    
12. 
    
13. [root@tomcat jsvc-src]# chmod +x configure
    
14. 
    
15. [root@tomcat jsvc-src]# ./configure --with-java=/opt/java
    
16. 
    
17. [root@tomcat jsvc-src]# make
    
18. 
    
19. [root@tomcat jsvc-src]# cp /opt/tomcat/bin/jsvc-src/native/Tomcat5.sh /etc/rc.d/init.d/
    
20. 
    
21. [root@tomcat jsvc-src]# cd /etc/rc.d/init.d/
    
22. 
    
23. [root@tomcat init.d]# chmod +x Tomcat5.sh
    
24. 
    
25. [root@tomcat init.d]# ln -s /etc/init.d/tomcat5.sh /etc/rc0.d/K90tomcat5.sh
    
26. 
    
27. [root@tomcat init.d]# ln -s /etc/init.d/tomcat5.sh /etc/rc1.d/K90tomcat5.sh
    
28. 
    
29. [root@tomcat init.d]# ln -s /etc/init.d/tomcat5.sh /etc/rc2.d/S90tomcat5.sh
    
30. 
    
31. [root@tomcat init.d]# ln -s /etc/init.d/tomcat5.sh /etc/rc3.d/S90tomcat5.sh
    
32. 
    
33. [root@tomcat init.d]# ln -s /etc/init.d/tomcat5.sh /etc/rc4.d/S90tomcat5.sh
    
34. 
    
35. [root@tomcat init.d]# ln -s /etc/init.d/tomcat5.sh /etc/rc5.d/S90tomcat5.sh
    
36. 
    
37. [root@tomcat init.d]# ln -s /etc/init.d/tomcat5.sh /etc/rc6.d/K95tomcat5.sh
    
38. 
    
39. [root@tomcat init.d]# more Tomcat5.sh
    
40. 
    
41. #!/bin/sh
    
42. 
    
43. ##############################################################################
    
44. 
    
45. #
    
46. 
    
47. # Copyright 2004 The Apache Software Foundation.
    
48. 
    
49. #
    
50. 
    
51. # Licensed under the Apache License, Version 2.0 (the "License");
    
52. 
    
53. # you may not use this file except in compliance with the License.
    
54. 
    
55. # You may obtain a copy of the License at
    
56. 
    
57. #
    
58. 
    
59. # [url]http://www.apache.org/licenses/LICENSE-2.0[/url]
    
60. 
    
61. #
    
62. 
    
63. # Unless required by applicable law or agreed to in writing, software
    
64. 
    
65. # distributed under the License is distributed on an "AS IS" BASIS,
    
66. 
    
67. # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    
68. 
    
69. # See the License for the specific language governing permissions and
    
70. 
    
71. # limitations under the License.
    
72. 
    
73. ##############################################################################
    
74. 
    
75. #
    
76. 
    
77. # Small shell script to show how to start/stop Tomcat using jsvc
    
78. 
    
79. # If you want to have Tomcat running on port 80 please modify the server.xml
    
80. 
    
81. # file:
    
82. 
    
83. #
    
84. 
    
85. # <!-- Define a non-SSL HTTP/1.1 Connector on port 80 -->
    
86. 
    
87. # <Connector className="org.apache.catalina.connector.http.HttpConnector"
    
88. 
    
89. # port="80" minProcessors="5" maxProcessors="75"
    
90. 
    
91. # enableLookups="true" redirectPort="8443"
    
92. 
    
93. # acceptCount="10" debug="0" connectionTimeout="60000"/>
    
94. 
    
95. #
    
96. 
    
97. # That is for Tomcat-5.0.x (Apache Tomcat/5.0)
    
98. 
    
99. #
    
100. 
     
101. # Adapt the following lines to your configuration
     
102. 
     
103. JAVA_HOME=/opt/java
     
104. CATALINA_HOME=/opt/tomcat
     
105. DAEMON_HOME=/opt/tomcat
     
106. TOMCAT_USER=root
     
107. 
     
108. # for multi instances adapt those lines.
     
109. 
     
110. TMP_DIR=/var/tmp
     
111. PID_FILE=/var/run/jsvc.pid
     
112. CATALINA_BASE=/opt/tomcat
     
113. 
     
114. CATALINA_OPTS="-Djava.library.path=/home/jfclere/jakarta-tomcat-connectors/jni/native/.libs"
     
115. CLASSPATH=\
     
116. $JAVA_HOME/lib/tools.jar:\
     
117. $CATALINA_HOME/bin/commons-daemon.jar:\
     
118. $CATALINA_HOME/bin/bootstrap.jar
     
119. 
     
120. case "$1" in
     
121.   start)
     
122.     #
     
123. 
     
124.     # Start Tomcat
     
125. 
     
126.     #
     
127. 
     
128.     $DAEMON_HOME/bin/jsvc-src/jsvc \
     
129.     -user $TOMCAT_USER \
     
130.     -home $JAVA_HOME \
     
131.     -Dcatalina.home=$CATALINA_HOME \
     
132.     -Dcatalina.base=$CATALINA_BASE \
     
133.     -Djava.io.tmpdir=$TMP_DIR \
     
134.     -wait 10 \
     
135.     -pidfile $PID_FILE \
     
136.     -outfile $CATALINA_HOME/logs/catalina.out \
     
137.     -errfile '&1' \
     
138.     $CATALINA_OPTS \
     
139.     -cp $CLASSPATH \
     
140.     org.apache.catalina.startup.Bootstrap
     
141.     #
     
142. 
     
143.     # To get a verbose JVM
     
144. 
     
145.     #-verbose \
     
146. 
     
147.     # To get a debug of jsvc.
     
148. 
     
149.     #-debug \
     
150. 
     
151.     exit $?
     
152.     ;;
     
153. 
     
154.   stop)
     
155.     #
     
156. 
     
157.     # Stop Tomcat
     
158. 
     
159.     #
     
160. 
     
161.     $DAEMON_HOME/bin/jsvc-src/jsvc \
     
162.     -stop \
     
163.     -pidfile $PID_FILE \
     
164.     org.apache.catalina.startup.Bootstrap
     
165.     exit $?
     
166.     ;;
     
167. 
     
168.   *)
     
169.     echo "Usage tomcat.sh start/stop"
     
170.     exit 1;;
     
171. esac
     
172. [root@tomcat init.d]# /etc/rc.d/init.d/Tomcat5.sh start
     
173. 
     
174. [root@tomcat init.d]# netstat -tnl
     
175. 
     
176. Active Internet connections (only servers)
     
177. Proto Recv-Q Send-Q Local Address Foreign Address State
     
178. tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN
     
179. tcp 0 0 :::8009 :::* LISTEN
     
180. tcp 0 0 :::8080 :::* LISTEN
     
181. tcp 0 0 :::80 :::* LISTEN
     
182. tcp 0 0 :::22 :::* LISTEN
     
183. [root@tomcat init.d]# /etc/rc.d/init.d/Tomcat5.sh stop
     
184. 
     
185. [root@tomcat init.d]# netstat -tnl
     
186. 
     
187. Active Internet connections (only servers)
     
188. Proto Recv-Q Send-Q Local Address Foreign Address State
     
189. tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN
     
190. tcp 0 0 :::80 :::* LISTEN
     
191. tcp 0 0 :::22 :::* LISTEN
     
192. [root@tomcat init.d]# useradd tomcatadmin
     
193. 
     
194. [root@tomcat init.d]# vi Tomcat5.sh
     
195. 
     
196. TOMCAT_USER=tomcatadmin 改为这样
     
197. [root@tomcat /]# chown -R tomcatadmin:tomcatadmin /opt/tomcat
     
198. 
     
199. [root@tomcat /]# netstat -tnl
     
200. 
     
201. Active Internet connections (only servers)
     
202. Proto Recv-Q Send-Q Local Address Foreign Address State
     
203. tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN
     
204. tcp 0 0 :::80 :::* LISTEN
     
205. tcp 0 0 :::22 :::* LISTEN
     
206. [root@tomcat /]# /etc/rc.d/init.d/Tomcat5.sh start
     
207. 
     
208. [root@tomcat /]# netstat -tnl
     
209. 
     
210. Active Internet connections (only servers)
     
211. Proto Recv-Q Send-Q Local Address Foreign Address State
     
212. tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN
     
213. tcp 0 0 :::8009 :::* LISTEN
     
214. tcp 0 0 :::8080 :::* LISTEN
     
215. tcp 0 0 :::80 :::* LISTEN
     
216. tcp 0 0 :::22 :::* LISTEN
     
217. [root@tomcat /]# /etc/rc.d/init.d/Tomcat5.sh stop
     
218. 
     
219. [root@tomcat /]# netstat -tnl
     
220. 
     
221. Active Internet connections (only servers)
     
222. Proto Recv-Q Send-Q Local Address Foreign Address State
     
223. tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN
     
224. tcp 0 0 :::80 :::* LISTEN
     
225. tcp 0 0 :::22 :::* LISTEN
     
226. [root@tomcat /]# vi /etc/rc.d/init.d/Tomcat5.sh
     
227. 
     
228. 在#!/bin/sh下面加入
     
229. 
     
230. #chkconfig: 2345 85 15
     
231. 
     
232. #description: 任意内容
     
233. 
     
234. [root@tomcat /]# chkconfig --level 345 Tomcat5.sh on
     
235. 
     
236. [root@tomcat /]# init 6
     

复制代码

jhsea3do

用nginx proxy吧，很方便

加一个serveletwrapper,重载getRemoteAddr方法

gilet

原帖由 jhsea3do 于 2009-9-29 10:17 发表
用nginx proxy吧，很方便

加一个serveletwrapper,重载getRemoteAddr方法

nginx和tomcat比apache和tomcat怎么样，给讲讲吧，谢谢！