Talk About Network

Google


Register and Login
Nick
Password
Register create new account Sign up is FREE and you can post replies, new topics, bookmark posts and more!
Recover lost password


Data Bases > Informix > Bug? Role Separ...
Latest [ Topics | Posts ] Archive Post A New Topic Post a Reply
<< Topic < Post Post 1 of 2 Topic 14062 of 15119
Post > Topic >>

Bug? Role Separation ... informix can't access...

by Cesar Inacio Martins <cesar_inacio_martins@[EMAIL PROTECTED] > May 16, 2008 at 01:28 PM

--0-261172828-1210969683=:86981
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

IDS 11.10 UC1de=0ALinux - OpenSuSE 10.2 =0A=0AThis is not a big problem, I
=
already got a simple work around, but the situation don't sense for me...
=
=0AIf anyone have a explanation for this... =0AI don't found anything on
th=
e manuals....=0AI had configured a database with full role separation
:=0A=
=0A      USER / GROUP=0A    - ix_aao / ix_aao=0A        configured at
group=
 of $INFORMIXDIR/aaodir=0A    - ix_dbsa / ix_dbsa=0A        configured at
g=
roup of $INFORMIXDIR/etc=0A    - ix_dbsso / ix_dbsso=0A        configured
a=
t group of $INFORMIXDIR/dbssodir=0A    - * / ix_user=0A=0A        
configur=
ed in file $INFORMIXDIR/dbssodir/seccfg=0A=0AAll works fine, except with
us=
er informix.=0AIt is the unique user what can not open a session . If need
=
execute any command on sysadmin I can't. But just add informix to
"ix_user"=
 and works... =0AMy question, if ix_aao , ix_dbsa and ix_dbsso can access
,=
 why informix don't ???=0A=0A=0ALook the commands bellow, executed with
sup=
er user (root) :=0A=0Acodsrv222:~ # id ix_dbsa=0Auid=3D1007(ix_dbsa)
gid=3D=
1007(ix_dbsa) groups=3D1007(ix_dbsa)=0Acodsrv222:~ # id
ix_dbsso=0Auid=3D10=
05(ix_dbsso) gid=3D1005(ix_dbsso)
groups=3D1005(ix_dbsso),16(dialout),33(vi=
deo)=0Acodsrv222:~ # id ix_aao=0Auid=3D1006(ix_aao) gid=3D1004(ix_aao)
grou=
ps=3D1004(ix_aao),16(dialout),33(video)=0Acodsrv222:~ # id cmartins=0Auid=
=3D1004(cmartins) gid=3D1006(ix_user)
groups=3D1006(ix_user),16(dialout),33=
(video)=0Acodsrv222:~ # id informix=0Auid=3D1000(informix)
gid=3D1000(infor=
mix) groups=3D1000(informix)=0Acodsrv222:~ #=0Acodsrv222:~ #=0Acodsrv222:~
=
# su - cmartins  -c " echo \"select * from sysdual\" |dbaccess sysmaster"=
=0ADatabase selected.=0A=0Adummy=0A=0AX=0A=0A1 row(s)
retrieved.=0A=0ADatab=
ase closed.=0Acodsrv222:~ #   =0Acodsrv222:~ # su - ix_aao  -c " echo
\"sel=
ect * from sysdual\" |dbaccess sysmaster"=0ADatabase selected.=0A=0Adummy=
=0A=0AX=0A=0A1 row(s) retrieved.=0A=0ADatabase closed.=0Acodsrv222:~ # su
-=
 ix_dbsso  -c "echo \"select * from sysdual\" |dbaccess
sysmaster"=0ADataba=
se selected.=0A=0Adummy=0A=0AX=0A=0A1 row(s) retrieved.=0A=0ADatabase
close=
d.=0Acodsrv222:~ # su - informix  -c "echo \"select * from sysdual\"
|dbacc=
ess sysmaster"=0A25571: Cannot create a user thread.=0A=0AInterrupted
syste=
m call=0Acodsrv222:~ #=0Acodsrv222:~ # usermod -G ix_user
informix=0Acodsrv=
222:~ # id informix=0Auid=3D1000(informix) gid=3D1000(informix)
groups=3D10=
00(informix),1006(ix_user)=0Acodsrv222:~ #=0Acodsrv222:~ # su - informix 
-=
c ". ./ids11.sh; echo \"select * from sysdual\" |dbaccess
sysmaster"=0AData=
base selected.=0A=0Adummy=0A=0AX=0A=0A1 row(s) retrieved.=0A=0ADatabase
clo=
sed.=0Acodsrv222:~ #    =0A=0A=0A      Abra sua conta no Yahoo! Mail, o
=C3=
=BAnico sem limite de espa=C3=A7o para
armazenamento!=0Ahttp://br.mail.yaho=
o.com/
--0-261172828-1210969683=:86981
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head><style type=3D"text/css"><!-- DIV {margin:0px;}
--></style></he=
ad><body><div
style=3D"font-family:arial,helvetica,sans-serif;font-size:10p=
t">IDS 11.10 UC1de<br>Linux - OpenSuSE 10.2 <br><br>This is not a big
probl=
em, I already got a simple work around, but the situation don't sense for
m=
e... <br>If anyone have a explanation for this... <br>I don't found
anythin=
g on the manuals....<br>I had configured a database with full role
separati=
on :<br><br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; USER /
GROUP<br>&nbsp;&nbsp;&nbs=
p; - ix_aao / ix_aao<br>&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;  configured at
grou=
p of $INFORMIXDIR/aaodir<br>&nbsp;&nbsp;&nbsp; - ix_dbsa /
ix_dbsa<br>&nbsp=
;&nbsp;&nbsp; &nbsp;&nbsp;  configured at group of
$INFORMIXDIR/etc<br>=0A&=
nbsp;&nbsp;&nbsp; - ix_dbsso / ix_dbsso<br>&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;
=
 configured at group of $INFORMIXDIR/dbssodir<br>=0A&nbsp;&nbsp;&nbsp; - *
=
/ ix_user<br><div>&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;  configured in
file=
 $INFORMIXDIR/dbssodir/seccfg<br><br>All works fine, except with user
infor=
mix.<br>It is the unique user what can not open a session . If need
execute=
 any command on sysadmin I can't. But just add informix to "ix_user" and
wo=
rks... <br>My question, if ix_aao , ix_dbsa and ix_dbsso can access , why
i=
nformix don't ???<br><br><br>Look the commands bellow, executed with super
=
user (root) :<br><br>codsrv222:~ # id ix_dbsa<br>uid=3D1007(ix_dbsa)
gid=3D=
1007(ix_dbsa) groups=3D1007(ix_dbsa)<br>codsrv222:~ # id
ix_dbsso<br>uid=3D=
1005(ix_dbsso) gid=3D1005(ix_dbsso)
groups=3D1005(ix_dbsso),16(dialout),33(=
video)<br>codsrv222:~ # id ix_aao<br>uid=3D1006(ix_aao) gid=3D1004(ix_aao)
=
groups=3D1004(ix_aao),16(dialout),33(video)<br>codsrv222:~ # id
cmartins<br=
>uid=3D1004(cmartins) gid=3D1006(ix_user)
groups=3D1006(ix_user),16(dialout=
),33(video)<br>codsrv222:~ # id informix<br>uid=3D1000(informix)
 gid=3D1000(informix) groups=3D1000(informix)<br>codsrv222:~
#<br>codsrv222=
:~ #<br></div>codsrv222:~ # su - cmartins&nbsp; -c " echo \"select * from
s=
ysdual\" |dbaccess sysmaster"<br>=0ADatabase
selected.<br><br>=0Adummy<br><=
br>=0AX<br><br>=0A1 row(s) retrieved.<br><br>=0ADatabase
closed.<br>=0Acods=
rv222:~ #&nbsp;&nbsp; <br>codsrv222:~ # su - ix_aao&nbsp; -c " echo
\"selec=
t * from sysdual\" |dbaccess sysmaster"<br>Database
selected.<br><br>dummy<=
br><br>X<br><br>1 row(s) retrieved.<br><br>Database closed.<br>codsrv222:~
=
# su - ix_dbsso&nbsp; -c "echo \"select * from sysdual\" |dbaccess
sysmaste=
r"<br>Database selected.<br><br>dummy<br><br>X<br><br>1 row(s)
retrieved.<b=
r><br>Database closed.<br>codsrv222:~ # su - informix&nbsp; -c "echo
\"sele=
ct * from sysdual\" |dbaccess sysmaster"<br>25571: Cannot create a user
thr=
ead.<br><br>Interrupted system call<br>codsrv222:~ #<br>codsrv222:~ #
userm=
od -G ix_user informix<br>codsrv222:~ # id
informix<br>=0Auid=3D1000(inform=
ix) gid=3D1000(informix)
groups=3D1000(informix),1006(ix_user)<br>=0Acodsrv=
222:~ #<br>codsrv222:~ # su - informix&nbsp; -c ". ./ids11.sh; echo
\"selec=
t * from sysdual\" |dbaccess sysmaster"<br>Database
selected.<br><br>dummy<=
br><br>X<br><br>1 row(s) retrieved.<br><br>Database closed.<br>codsrv222:~
=
#&nbsp;&nbsp;&nbsp; <br><br><br></div><br>=0A=0A=0A      <hr size=3D1>Abra
=
sua conta no <a
href=3D"http://br.rd.yahoo.com/mail/taglines/mail/*http://b=
r.mail.yahoo.com/">Yahoo! Mail</a>, o =C3=BAnico sem limite de espa=C3=A7o
=
para armazenamento! =0A</body></html>
--0-261172828-1210969683=:86981--
 




 2 Posts in Topic:
Bug? Role Separation ... informix can't access...
Cesar Inacio Martins <  2008-05-16 13:28:03 
Re: Bug? Role Separation ... informix can't access...
Jonathan Leffler <jlef  2008-05-16 21:53:23 

Post A Reply:
  Go here to Signup

AddThis Feed Button


About - Advertising - Contact - Frequently Asked Questions - Privacy Policy - Terms of Use - Signup

Contact
tan12V112 Tue Dec 2 23:39:30 CST 2008.