Installation Guide › Installing the Packages › Installing on UNIX › Allow CA Directory To Use Ports 1-1024

Allow CA Directory To Use Ports 1-1024

During installation, you chose whether to allow DXserver and DXadmind to listen on ports 1 to 1024, using the SUID option. The default for this option is No, which restricts the ports that can be used, to improve security.

If you want DXserver and DXadmind to able to listen on these ports, the owner of the binaries must be root and the setuid flag must be set. If you need to allow DXserver and DXadmind to use the ports <= 1024, change the SUID bit manually.

Follow these steps:

1. Log in as root.
2. Change to $DXHOME/bin.
3. Use the following commands to change the owner and SUID bit for the binary with ports <= 1024:

   chown root binary
   chmod 4750 binary
   

   where binary can be dxadmind, dxserver, dxserver32, or dxserver64

Example: Attempting to use port 389 without SUID bit set

When you attempt to start a DSA with port 389 and the SUID bit is not set, then an error message is displayed that the port cannot start the DSA, and the following message is written to the alarm log file:

** ALARM **: DSA_E1990 Cannot register SNMP address