Exception when starting tomcat with user account

Question

I'm using Centos6 64bit. I start tomcat and using SSL with root account => OK, no problem. Now I need to start tomcat with User (not root) account. With non SSL => OK. With SSL, some exceptions occurs after starting tomcat. ``` 14-Jul-2014 10:43:28.123 INFO [main] org.apache.coyote.AbstractProtocol.init Initializing ProtocolHandler ["http-nio-443"] 14-Jul-2014 10:43:28.138 SEVERE [main] org.apache.coyote.AbstractProtocol.init Failed to initialize end point associated with ProtocolHandler ["http-nio-443"] java.net.SocketException: Permission denied at sun.nio.ch.Net.bind0(Native Method) at sun.nio.ch.Net.bind(Net.java:414) at sun.nio.ch.Net.bind(Net.java:406) at sun.nio.ch.ServerSocketChannelImpl.bind(ServerSocketChannelImpl.java:214) at sun.nio.ch.ServerSocketAdaptor.bind(ServerSocketAdaptor.java:74) at org.apache.tomcat.util.net.NioEndpoint.bind(NioEndpoint.java:343) at org.apache.tomcat.util.net.AbstractEndpoint.init(AbstractEndpoint.java:727) at org.apache.coyote.AbstractProtocol.i…

Accepted Answer

I found the steps here to be perfect.

If using Linux 2.6.24 or later, you can set up a file capability on the java executable, to give elevated privileges to allow opening privileged ports only, and no other superuser privileges:

```
# setcap cap_net_bind_service+ep /path/to/bin/java
```

After setting this you may notice errors when starting Java like this, for example:

```
$ java -version
/path/to/bin/java: error while loading shared libraries: libjli.so: cannot open shared object file: No such file or directory
```

This means that the library is being imported from a dynamic path, and not in the trusted ld.so path. See https://bugs.java.com/bugdatabase/view_bug?bug_id=7157699 for details. To fix this, you need to locate the library, and add its path to the ld.so configuration. Note that the below is an example, and this may differ depending on Linux distribution. Replace JAVA_HOME with the correct location:

```
$ find JAVA_HOME -name 'libjli.so'
JAVA_HOME/lib/amd64/jli/libjli.so

# echo "JAVA_HOME/lib/amd64/jli" > /etc/ld.so.conf.d/java-libjli.conf
# ldconfig -v
```

Exception when starting tomcat with user account

Solution

Problem