Hello. I'm currently running RH 9.0 on a compaq proliant ML370 server. I just installed Lotus Domino Server 6.0 trial version and after executing the "server" console, it reports that it cannot bind the following services - smtp, httpd, pop3, imap.
for 1 of 2 reasons:
1) port already in use, busy
or
2) permission denied, insufficient privileges.

after examining the listening sockets with - netstat -an
and using the "chkconfig" command to verify that these services are shut off in all run levels, I have concluded that the only reason the LD - Lotus Domino - server cannot bind these ports is because of the user account trying to bind them, is not a root account. What is the method for adding a non root account the neccessary privileges to bind to ports less than 1024? Any help will be appreciated, or even if someone knows what reading material I can reference quickly......thanks...

-linuxlouis

linuxlouis,

Search for 'setuid' in the Domino documentation. The standard, somewhat insecure, method for allowing users to start programs with more privileges is to make the file owned by root, and doing a Set UID. The program will be owned by root not the user starting it.

chown root <filename>
chmod +s <filename>

Check the domino documentation to see if this should be done.

Are you sure the dominio server shouldn't be started by root. In the init scripts perhaps?

Good luck,
chris

chris, yeah it says explicitly not to run Lotus Domino as root. While going through the configuration of Lotus Domino, it asks which services you want to LD to run, of which you can select httpd, smtp, and the earlier mentioned. I was under the impression that after the setup, LD's setup program would take care of communicating the neccessary permissions with the operating system. What reinforced this intuition, was when I launched the LD's "server" console, it shows that it starts these services up...but they are not running on the ports. the only one that it fails on, is the httpd. So I have begun to consider alternatives, such as letting httpd being run by the lotus notes account. thanks for your suggestion...

-linuxlouis