WWW account password.

Discussion in 'Mac OS X Server, Xserve, and Networking' started by Kenrik, Apr 6, 2011.

  1. Kenrik macrumors 6502

    Dec 21, 2004
    For some reason my WWW account will not let me login with my root password. Is there a way to set/reset the password for the WWW user so that I can modify files on my server from a remote computer (logged in as WWW)
  2. Kenrik thread starter macrumors 6502

    Dec 21, 2004
    The web server in OSX Server runs under the user _www or WWW.. the folders are owned by the WWW user. I was asking how to reset the password for the WWW user as it's a special kind of user.
  3. YanniDepp macrumors 6502


    Dec 10, 2008
    By default it won't have a password.

    On Mac OS X server (and a lot of linux systems) the web server is set up to run as a special user called www. This protects your server, since (as you've figured out) www is a special user without a password and with no permission to log on to the machine (graphically or via ssh). This means that if your web server is ever compromised, any attacker will have very limited ability to damage the server. I heavily recommend that you leave it this way, especially if you're running live sites on your server. Of course, if it's just your own personal server with nothing important (i.e. clients sites) on it, it's not so important.

    If you want to FTP files, your best bet is to:

    - Create a user group called 'www' if one doesn't already exist
    - Create a normal user that you'll use to FTP, and add it to the 'www' group
    - Set your webroot (and all files in it) to be owned by the www group with write privileges.

    This doesn't help you if you have no physical access to the machine. If this is the case, you can always ssh into the server as an administrator, type sudo -s to get a root terminal, then change the files as you see fit. Just make sure the permissions are set correctly for any files or folders you create, or www won't be able to modify them (important for things like WordPress's upload folder).

    chown -R www /path/to/web/folder

Share This Page