Discussion:
[Icecast] Problem One: Running Icecast on Port 80..
Ian Andrew Bell
2004-10-01 00:09:54 UTC
Permalink
I've got a redhat linux 9.0 box and I've made sure Apache is out of the
way, so that I can do what I really want to do, which is to run Icecast
on port 80 of the server, so listeners can grab the stream even through
the toughest firewall. I have been wrestling with this for a number
of hours, consulted a few experts, and am coming up zilch.

Theoretically, I should be able to just run Icecast on Port 80 by
specifying Port 80 in the icecast.xml file like so:

<listen-socket>
<port>80</port>
</listen-socket>

...but this is the error I get:

Could not create listener socket on port 80
Server startup failed. Exiting

I was told that I should try running icecast as root. Try doing that,
and you get an error:

WARNING: You should not run icecast2 as root
Use the changeowner directive in the config file

Have googled for any sort of step-by-step instructions for something
even a little bit similar to this, but to no avail.

-Ian.
Karl Heyes
2004-10-01 00:24:35 UTC
Permalink
On Fri, 2004-10-01 at 01:09, Ian Andrew Bell wrote:

...
Post by Ian Andrew Bell
Theoretically, I should be able to just run Icecast on Port 80 by
<listen-socket>
<port>80</port>
</listen-socket>
Could not create listener socket on port 80
Server startup failed. Exiting
I was told that I should try running icecast as root. Try doing that,
listening on ports < 1024 requires root privileges
Post by Ian Andrew Bell
WARNING: You should not run icecast2 as root
Use the changeowner directive in the config file
http://www.icecast.org/docs/icecast-2.0.2/icecast2_config_file.html#security

As with apache, you start as root then it changes to run as another
user, just state the user/group

karl.
Ian Andrew Bell
2004-10-01 00:27:20 UTC
Permalink
Post by Karl Heyes
Post by Ian Andrew Bell
WARNING: You should not run icecast2 as root
Use the changeowner directive in the config file
http://www.icecast.org/docs/icecast-2.0.2/
icecast2_config_file.html#security
As with apache, you start as root then it changes to run as another
user, just state the user/group
Right, so my icecast.xml file says:

<security>
<chroot>0</chroot>

<changeowner>
<user>root</user>
<group>root</group>
</changeowner>

</security>

... and here's what happens when I execute:

[***@pamplona bin]# Changed groupid to 0.
Changed userid to 0.
WARNING: You should not run icecast2 as root
Use the changeowner directive in the config file

-Ian.
Karl Heyes
2004-10-01 00:36:35 UTC
Permalink
Post by Ian Andrew Bell
<security>
<chroot>0</chroot>
<changeowner>
<user>root</user>
<group>root</group>
</changeowner>
</security>
no, you start the icecast app as root so that it can get port 80, then
change to another non-root user (ie <user> and <group) for it's normal
running. Just make sure the user you run as can write to its log files.

Setting changeowner to root doesn't really help

karl.

Loading...