[JIRA] Commented: (SSPCPP-389) Add option to shibd to set uid and gid at startup

[Kaspar Brand (JIRA)]

    [ https://issues.shibboleth.net/jira/browse/SSPCPP-389?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13516#comment-13516 ] 

Kaspar Brand commented on SSPCPP-389:
-------------------------------------

I think you need to swap the order of setuid and setgid calls - because once you've dropped privileges with setuid, you're no longer allowed to setgid to a group other than your real one.

> Add option to shibd to set uid and gid at startup
> -------------------------------------------------
>
>                 Key: SSPCPP-389
>                 URL: https://issues.shibboleth.net/jira/browse/SSPCPP-389
>             Project: Shibboleth SP - C++
>          Issue Type: New Feature
>          Components: Other
>            Reporter: Scott Cantor
>            Assignee: Scott Cantor
>            Priority: Minor
>             Fix For: 2.5
>
>   Original Estimate: 1 day
>          Time Spent: 1 hour
>  Remaining Estimate: 0 minutes
>
> Getting the Macport to handle non-root startup will be much cleaner if we can set the user to run shibd with on the command line.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira