Changing the Superuser SettingsChapter 3 Setting Administration Preferences 51You do not need to specify a server user if you chose a port number greater than1024 and are not running as the root user (in this case, you do not need to belogged on as root to start the server). If you do not specify a user account here, theserver runs with the user account you start it with. Make sure that when you startthe server, you use the correct user account.Even if you start the server as root, you should not run the server as root all thetime. You want the server to have restricted access to your system resources andrun as a non-privileged user. The user name you enter as the server user shouldalready exist as a normal UNIX/Linux user account. After the server starts, it runsas this user.If you want to avoid creating a new user account, you can choose the user nobodyor an account used by another HTTP server running on the same host. On somesystems, however, the user nobody can own files but not run programs.To access the Server Settings page, perform the following steps:1. Access the Administration Server and choose the Preferences tab.2. Click the Server Settings link.3. Make the desired changes and click OK.Changing the Superuser SettingsYou can configure superuser access for your Administration Server. These settingsaffect only the superuser account. That is, if your Administration Server usesdistributed administration, you need to set up additional access controls for theadministrators you allow.NOTE If you do not know how to create a new user on your system, contact yoursystem administrator or consult your system documentation.CAUTION If you use Directory Server to manage users and groups, you need to updatethe superuser entry in the directory before you change the superuser username or password. If you don’t update the directory first, you won’t be ableto access the Users & Groups forms in the Administration Server. To fix this,you’ll need to either access the Administration Server with an administratoraccount that does have access to the directory, or you’ll need to update thedirectory using the Directory Server’s Console or configuration files.
