[stunnel-users] Stunnel Service as other user

Florian Götz f.goetz at hs-mannheim.de
Thu Oct 24 13:30:19 CEST 2013


Hi Stunnel users,

if I use xinetd to start a service I got the possibility to start the
service with a dedicated user. For example:

service fex
{
    socket_type = stream
    wait = no
    type = unlisted
    protocol = tcp
    bind = 123.12.1.12
    port = 80
    cps = 10 2
 * user = fex
    groups = yes
    server = /home/fex/bin/fexsrv
    nice = 0
    disable = no
}


I got some kind of webserver (not apache, nginx etc) that needs to be
started with xinetd (the example above).
This server should get a SSL tunnel.

If I use Stunnel in daemon mode (without jails/chroot) and define a
service like this:


 [https]
 accept  = 123.12.1.12:443
 exec = /home/fex/bin/fexsrv
 execargs = fexsrv stunnel
 TIMEOUTclose = 2

Everything works fine, except that the server now runs as root.
Is there a possibility to set a user for a service?



Best regards
Florian Götz

-- 
Mit freundlichen Grüßen
Florian Götz


-----------------------------------------------------------------

Dipl.-Inf. (FH) Florian Götz
Rechenzentrum Hochschule Mannheim
Paul-Wittsack-Straße 10    
68163 Mannheim
Tel: 0621/292-6232

EMail:     f.goetz at hs-mannheim.de
Internet:     http://www.rz.hs-mannheim.de

-----


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4630 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://www.stunnel.org/pipermail/stunnel-users/attachments/20131024/61c919a8/attachment.bin>


More information about the stunnel-users mailing list