Interactive I/O Server

• Java server started at boot time, chroot to webserver directory

• Runs as root, spawns new thread for each client

• Verifies ticket, runs program as the user

• Run subprocess sets userid, groupid, resource limits, etc.