im under non root user

Hi,

what are the recommendation to run IM with AM in the same webcontainer,

because i cannot choose non root user to get warning less IM server startup.

See bellow..

WARNING: The server will not not be able to perform authentication as it

does not have access to the local Access Manager configuration. Either

run server as root by changing iim.user and iim.group, or stop using

access manager for authentication or single-sign-on, by setting

iim.policy.modules to "ldap" and/or iim_server.usesso to "0".

Exception in thread "main" java.lang.ExceptionInInitializerError

at com.sun.identity.security.AdminDNAction.run(AdminDNAction.java:86)

at java.security.AccessController.doPrivileged(Native Method)

at com.sun.im.identity.util.Auth.getAdminDN(Auth.java:134)

at com.iplanet.im.server.LDAPPool.getDefault(LDAPPool.java:66)

at com.iplanet.im.server.LDAPPool.<clinit>(LDAPPool.java:46)

at com.iplanet.im.server.LDAPRealm.<init>(LDAPRealm.java:250)

at com.iplanet.im.server.IdentityRealm.<init>(IdentityRealm.java:142)

at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)

at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessor Impl.java:39)

at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructor AccessorImpl.java:27)

at java.lang.reflect.Constructor.newInstance(Constructor.java:494)

at java.lang.Class.newInstance0(Class.java:350)

at java.lang.Class.newInstance(Class.java:303)

at com.iplanet.im.server.RealmManager.get(RealmManager.java:602)

at com.iplanet.im.server.RealmManager.init(RealmManager.java:572)

at com.iplanet.im.server.NMS.loadConfig(NMS.java:518)

at com.iplanet.im.server.NMS.init(NMS.java:386)

at com.iplanet.im.server.NMS.create(NMS.java:189)

at com.iplanet.im.server.NMS.main(NMS.java:955)

Caused by: java.lang.NullPointerException

at com.iplanet.am.util.AdminUtils.<clinit>(AdminUtils.java:84)

... 19 more

Starting Multiplexor[OK]

Starting agent-calendar[OK]

Thanks,

Stefan

[2211 byte] By [varga_steana] at [2007-11-27 7:51:54]
# 1

Hi,

IM is a server in itself, does not run in the webcontainer, but uses the sdk provided by AM for communicating with it.

AM requires that we run as root, and that am sdk is installed & configured on the IM server box. (If you have AM server on same box as IM server, this sdk step can be omitted).

Regards,

Mridul

MridulMa at 2007-7-12 19:33:06 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Instant Messaging...
# 2

Hi,

thanks, but does it mean that it is best practice to run IM server components under

root user, or under the same user which owns AMconfig.Properties file.

Beacause the non-root user needs to have write access to /var/opt/SUNWam/debug,/var/opt/SUNim and so on.

Thanks,

Stefan

varga_steana at 2007-7-12 19:33:06 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Instant Messaging...
# 3
Best practice is to run IM under the same user which owns AMconfig.Properties file, and usually if you install AM it will/should be installed as root only.So if your installing AM + IM then it has to be root.Hope i am clear.
Amit.Bakhrua at 2007-7-12 19:33:06 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Instant Messaging...