{"id":842,"date":"2008-09-21T13:32:14","date_gmt":"2008-09-21T17:32:14","guid":{"rendered":"http:\/\/onlineappsdba.com\/index.php\/2008\/09\/21\/start-weblogic-server-on-linux-on-port-80-443\/"},"modified":"2015-12-03T09:37:48","modified_gmt":"2015-12-03T13:37:48","slug":"start-weblogic-server-on-linux-on-port-80-443","status":"publish","type":"post","link":"https:\/\/onlineappsdba.com\/index.php\/2008\/09\/21\/start-weblogic-server-on-linux-on-port-80-443\/","title":{"rendered":"Start WebLogic Server on Linux on port 80, 443 <= 1024"},"content":{"rendered":"

On Unix <\/strong>based system (Linux, Solaris ..), only super user (root<\/strong>) can start any process on port <= 1024\u00a0. From security reasons\u00a0its is not desirable\u00a0to\u00a0run WebLogic server as root <\/strong>user.\u00a0 Solution is to start WebLogic process as root<\/strong> (bind on port 80, 443) and then switch process to non privileged<\/strong> user like oraweblogic<\/strong> or nobody<\/strong>.<\/p>\n

This is\u00a0done by setting four properties\u00a0in WebLogic\u00a0\u00a0–<\/p>\n

weblogic.system.enableSetUID<\/strong> (Set User ID)
\nweblogic.system.enableSetGID<\/strong> (Set Group ID)
\nweblogic.system.nonPrivUser<\/strong>(Non privledged user)
\nweblogic.system.nonPrivGroup<\/strong>(Non privledged Group)<\/p>\n

1.<\/strong> By setting value of enableSetUID<\/strong> to true<\/strong>; you are instructing weblogic server to switch from\u00a0ROOT<\/strong>(after starting weblogic server on port 80, 443 or <=1024) to lower privileged user.<\/p>\n

2.<\/strong> Value assigned to nonPrivUser <\/strong>will be used to own weblogic server process, once its been started by superuser in port <= 1024<\/p>\n

3. <\/strong>Ensure that lower privileged user should have proper access (read, write or both depending on type of type) on files (log, classes..) required by weblogic server.<\/p>\n

4. <\/strong>If you wish to start and access weblogic server on both SSL (443) and non SSL (80); you need to define two Listen Port.<\/p>\n

.<\/p>\n

How to start WebLogic Server on port 80 or 443 on Linux\/Unix<\/u><\/strong><\/p>\n

1. <\/strong>Login to Administration Server<\/strong> Console<\/strong> using<\/p>\n

http:\/\/host:admin:port\/console<\/a><\/p>\n

\"\"<\/a><\/p>\n

.<\/p>\n

2.<\/strong>\u00a0Define new Linux machine<\/strong>\u00a0from Administration\u00a0console<\/p>\n

Under Domain<\/strong> Structure<\/strong> >> Environment<\/strong> >> Machines >><\/strong>\u00a0New<\/strong><\/p>\n

\"\"<\/a><\/p>\n

.<\/p>\n

3.<\/strong>\u00a0Enter Name of Machine<\/strong> (Machine1) & Machine OS<\/strong> (Unix) and click on OK<\/p>\n

\"\"<\/a><\/p>\n

.<\/p>\n

4.<\/strong> Click on machine<\/strong> (Machine1)\u00a0which you created above<\/p>\n

\"\"<\/a><\/p>\n

.<\/p>\n

5.<\/strong> Select “Enable Post-Bind UID<\/strong>” and enter Post-Bind UID
\nSelect “Enable Post-Bind GID<\/strong>” and enter Post-Bind GID<\/p>\n

click Save<\/strong><\/p>\n

In my case oraweblogic<\/strong> is operating system user on machine1<\/strong> and dba <\/strong>is group of oraweblogic owning WebLogic installation\/software.<\/p>\n

\"\"<\/a><\/p>\n

.<\/p>\n

6.<\/strong> Set Listen Port<\/p>\n

Domain Structure >> Environment >> Servers >> (Select your Managed Server)<\/p>\n

Set Listen port to 80 or 443 for respective Managed Server\u00a0(Linux\/Unix,\u00a0for which you need to start Server on 443 or 80) and attach Machine<\/strong> (Machine1) you created above<\/p>\n

\"\"<\/a><\/p>\n

.<\/p>\n

7.<\/strong> Depending on setting <\/strong>on Admin Console<\/strong> you may have to activate changes<\/strong> from Change Center<\/strong> (In my case changes take into effect immediately)<\/p>\n

\"\"<\/a><\/p>\n

.<\/p>\n

References<\/u><\/strong><\/p>\n