dscc on unix filesystem ownership

i installed the DSCC on a Solaris 10 server. I am able to login with a non-root ID by changing the filesystem ownership of /opt/SUNWdsee. However, when i try to change the file system ownership of /var/opt/SUNWdsee where the registry ldap instance is located, i get configuration errors logging into the DSCC. Is there a proper way to change the file ownership of that registry and, is there a method to move the instance t o a different location?

[454 byte] By [cagarcia] at [2007-11-27 8:46:14]
# 1

The Directory Instance used privately by DSCC cannot be relocated.

And changing the files ownership of this instance is not recommended (the owner must be able to start the instance, but also to connect and start remote instances of DS).

Moreover changing the owner of /opt/SUNWdsee is definitely wrong and likely to break a lot of things including the package system of Solaris.

Regards,

Ludovic.

ludovicpa at 2007-7-12 20:48:09 > top of Java-index,Web & Directory Servers,Directory Servers...
# 2
If i can't change the file ownership of /opt/SUNWdsee and leave it as root, then I can only login to the Web Console as root. That will never be allowed in our organization. What other options do I have then?
cagarcia at 2007-7-12 20:48:09 > top of Java-index,Web & Directory Servers,Directory Servers...
# 3

I would disagree with these statements.

When installing DSEE packages, you must be root or have the privileges to install packages.

The owner of /opt/SUNWdsee is different from who has the permissions to use its content.

It is possible to log to the Web Console as someone else than root. This user must have sufficient access rights to create the administration directory server instance in /var/opt/SUNWdsee...

This user should be the same for all instances of Directory Server and Directory Proxy Server that are managed through DSCC.

An alternative is to upgrade to DSEE 6.1 and deploy DSCC war file in Sun App Server or Tomcat. This removes the need to first log as root. But the console may ask you later for a Unix user and password access when required.

Ludovic.

ludovicpa at 2007-7-12 20:48:09 > top of Java-index,Web & Directory Servers,Directory Servers...
# 4
Thanks, good to know. I had misunderstood the login requirements for the DSCC. I thought I was told I had to login as root because it was owned by root.
cagarcia at 2007-7-12 20:48:09 > top of Java-index,Web & Directory Servers,Directory Servers...