want to start tomcat from php

[danish]

hi everyone..sorry everyone if ive posted on the wrong group but i
really needed help....

i wan tto start jakarta-tomcat-5.5.3 from the webbrowser using the
sheel scripts...i normally use the shell scripts from the command line
to start and stop the tomcat server.....

i found out that php gives this incredible facility where i can execute
normal bash commands...i tried doing so ..but a simple command like {
system('whoami' ) } from
browser......eg .....http://localhost/startup.php..

prints apache as the user....so technically it executes the tomcat
startup script as apache user..but ive got
jakarta-tomcat-5.5.3 under the tomcat user....can someone please tell
me is there a way in php coding wherein i can execute the command as
another....i know this seems a bit out of place...but i really didnt
know anywhere else to go

danish

[Jerry Stuckle]

Re: want to start tomcat from php

danish wrote:[color=blue]
> hi everyone..sorry everyone if ive posted on the wrong group but i
> really needed help....
>
> i wan tto start jakarta-tomcat-5.5.3 from the webbrowser using the
> sheel scripts...i normally use the shell scripts from the command line
> to start and stop the tomcat server.....
>
> i found out that php gives this incredible facility where i can execute
> normal bash commands...i tried doing so ..but a simple command like {
> system('whoami' ) } from
> browser......eg .....http://localhost/startup.php..
>
> prints apache as the user....so technically it executes the tomcat
> startup script as apache user..but ive got
> jakarta-tomcat-5.5.3 under the tomcat user....can someone please tell
> me is there a way in php coding wherein i can execute the command as
> another....i know this seems a bit out of place...but i really didnt
> know anywhere else to go
>
> danish
>[/color]

Not if the OS won't let you.

You potentially could do a posix_setuid to change the uid, but that has
to be allowed by the OS and most won't because of the potential (huge)
security risk.

You may be able to su to the tomcat user - but again the OS must be set
up to allow it.

You can't do anything the OS won't allow. What you really need is a
Unix Admin to set up the permissions you need.

--
=============== ===
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex@attgl obal.net
=============== ===

[danish]

Re: want to start tomcat from php

Jerry Stuckle wrote:[color=blue]
> danish wrote:[color=green]
> > hi everyone..sorry everyone if ive posted on the wrong group but i
> > really needed help....
> >
> > i wan tto start jakarta-tomcat-5.5.3 from the webbrowser using the
> > sheel scripts...i normally use the shell scripts from the command line
> > to start and stop the tomcat server.....
> >
> > i found out that php gives this incredible facility where i can execute
> > normal bash commands...i tried doing so ..but a simple command like {
> > system('whoami' ) } from
> > browser......eg .....http://localhost/startup.php..
> >
> > prints apache as the user....so technically it executes the tomcat
> > startup script as apache user..but ive got
> > jakarta-tomcat-5.5.3 under the tomcat user....can someone please tell
> > me is there a way in php coding wherein i can execute the command as
> > another....i know this seems a bit out of place...but i really didnt
> > know anywhere else to go
> >
> > danish
> >[/color]
>
> Not if the OS won't let you.
>
> You potentially could do a posix_setuid to change the uid, but that has
> to be allowed by the OS and most won't because of the potential (huge)
> security risk.
>
> You may be able to su to the tomcat user - but again the OS must be set
> up to allow it.
>
> You can't do anything the OS won't allow. What you really need is a
> Unix Admin to set up the permissions you need.
>
> --
> =============== ===
> Remove the "x" from my email address
> Jerry Stuckle
> JDS Computer Training Corp.
> jstucklex@attgl obal.net
> =============== ===[/color]

well..im not very familiar with setuid n stuff...but from what ive
tried....i can sudo to the tomcat user or if i want use a normal user
to start tomcat using sudo.....but basically i dont want that....i
heard that tomcat can be integrated with php..if that is possible maybe
i can execute normal commands as the tomcat user..and as the tomcat
user is allowd to start tomcat..maybe i can start tomcat from the
webpage....what du u think



danish

[Jerry Stuckle]

Re: want to start tomcat from php

danish wrote:[color=blue]
> Jerry Stuckle wrote:
>[color=green]
>>danish wrote:
>>[color=darkred]
>>>hi everyone..sorry everyone if ive posted on the wrong group but i
>>>really needed help....
>>>
>>>i wan tto start jakarta-tomcat-5.5.3 from the webbrowser using the
>>>sheel scripts...i normally use the shell scripts from the command line
>>>to start and stop the tomcat server.....
>>>
>>>i found out that php gives this incredible facility where i can execute
>>>normal bash commands...i tried doing so ..but a simple command like {
>>>system('whoa mi') } from
>>>browser..... .eg.....http://localhost/startup.php..
>>>
>>>prints apache as the user....so technically it executes the tomcat
>>>startup script as apache user..but ive got
>>>jakarta-tomcat-5.5.3 under the tomcat user....can someone please tell
>>>me is there a way in php coding wherein i can execute the command as
>>>another... .i know this seems a bit out of place...but i really didnt
>>>know anywhere else to go
>>>
>>>danish
>>>[/color]
>>
>>Not if the OS won't let you.
>>
>>You potentially could do a posix_setuid to change the uid, but that has
>>to be allowed by the OS and most won't because of the potential (huge)
>>security risk.
>>
>>You may be able to su to the tomcat user - but again the OS must be set
>>up to allow it.
>>
>>You can't do anything the OS won't allow. What you really need is a
>>Unix Admin to set up the permissions you need.
>>
>>--
>>============= =====
>>Remove the "x" from my email address
>>Jerry Stuckle
>>JDS Computer Training Corp.
>>jstucklex@att global.net
>>============= =====[/color]
>
>
> well..im not very familiar with setuid n stuff...but from what ive
> tried....i can sudo to the tomcat user or if i want use a normal user
> to start tomcat using sudo.....but basically i dont want that....i
> heard that tomcat can be integrated with php..if that is possible maybe
> i can execute normal commands as the tomcat user..and as the tomcat
> user is allowd to start tomcat..maybe i can start tomcat from the
> webpage....what du u think
>
>
>
> danish
>[/color]

Yes, Tomcat can be integrated with PHP.

But PHP itself is not a daemon like Tomcat or Apache. Rather it runs
under the current user.

So, to execute a PHP script as Tomcat, you need to either run the script
under Tomcat (or another process using the same ID) or su to the Tomcat id.

If you're going to start fooling with uid's, I highly suggest you get a
book on Linux administration and get familiar with them. You can very
easily leave huge security holes in your system if you do the wrong thing.

--
=============== ===
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex@attgl obal.net
=============== ===