Is there a way to change a privileged TCP port (say 80) to a nonprivileged one..

I believe that Solaris will only let you adjust the range, not specify on a per port basis. You can see the smallest (default 1024) using:

ndd -get /dev/tcp tcp_smallest_nonpriv_port

You can change it using:

ndd -set /dev/tcp tcp_smallest_nonpriv_port some#

I found a nice treatise on the subject at:

http://www.ncftpd.com/ncftpd/doc/misc/ephemeral_ports.html#Solaris

Cheers,

Keith

I have already tried to use ndd to set the smallest non privileged port, but it wont accept any thing below 1024.

From Sunsolve:You mention port 80 - are you trying to change where http will be going? If so, you can change to port inside (example Apache) the httpd.conf. If not, give more information on what you are trying to accomplish.

sssow,

Maybe you should elaborate on the problem you are trying to solve, rather than the solution you are trying to use. Why do you want to have port 80 be non-privliged?

Keith

Sorry for not giving much details..We were trying to install Iplanet webserver as a non root user and it wont let us use standard port 80 as it is privileged one. I could install it with a different port like 8080.

If you want to install I-planet as a non-root user, you need to specify a port above 1024.

Well, since you are on a Solaris system, you can use the built-in RBAC facility to allow a non-privilged user to have rights to bind the port. I believe that the privilges that whatever role you use would need to include 35, 53, 68 and 70.

Are you familiar with the Solaris RBAC facility?

Cheers,

Keith

dangral is correct though - the easiest way would be to simply use a different port. Do you have a load balancer or proxy in front of your webservers?

Keith

For now we have installed using port 8080. There is no proxy or external load balancer used. We are trying this to evaluate a portal software. I am familiar with RBAC also..Thanks for all the information..