RE: Multiple Residency & Shared Memory

This started when you stated that running the databases as different users made the identification of shared memory easier. It was next stated that shared memory would be owned by the effective user(root) not the real user, and this whole discussion went from there. From what I have seen, on AIX shared memory is owned by the effective user. So without making changes to who the effective user will be when I run IDS I know of no way to make the identify which shared memory segment is owned by an oninit besides calculations based on the SERVERNUM.... Will >===== Original Message From "jim lowry" <lowryjim@hotmail.com> ===== >Well at least you are starting to get >there. Now can anyone remember how this >came up? > >>Real user for oninit is whoever ran it, the effective user is root ... >> >>$ ps -eo "user ruser args" | grep oninit root informix oninit >> USER RUSER COMMAND >> root informix oninit >> root informix oninit >> root informix oninit >> root informix oninit >> root informix oninit >> root informix oninit >> root informix oninit >> root informix oninit >> root informix oninit >> root informix oninit >> root drinfx oninit >> root drinfx oninit >> root informix oninit >> root drinfx oninit >> root drinfx oninit >> root drinfx oninit >> root drinfx oninit >> root drinfx oninit >> root drinfx oninit >> root drinfx oninit>> >>As for what he means by change database ownership, I don't know >>if he means ownership of the executables, the database, the datafiles >>or of his car... >> >>Will >> >===== Original Message From "Richard harnden" <harndr@russelleurope.com> >>===== >> >Now I'm totally confused. >> > >> >Surely all the shared memory is created with the owner/group of whoever >>ran >>oninit. >> > >> >What do you mean "Change database ownership" ? >> >onmode -k >> >su - another_user >> >oninit>> >??? >> > >> >And, why would you want to do that? >> >It means adding another_user to group informix - which is bad for >>security. >> > >> >>> "jim lowry" <lowryjim@hotmail.com> 06/05/00 03:47pm >>> >> >>I could be mistaken, but I thought what Mark was trying to say was that >> >>you couldnt identify the shared memory by the user who started the >> >>database. >> > >> >> >> >>$ ipcs>> >>IPC status from /dev/mem as of Mon Jun 5 08:28:28 CDT 2000 >> >>T ID KEY MODE OWNER GROUP >> >>Message Queues: >> >>q 0 0x4107001c -Rrw-rw---- root printq >> >>q 1 0x001d8828 -Rrw-rw-rw- root dsadmin >> >>q 2 0x001cd3b0 -Rrw-rw-rw- root dsadmin >> >>q 3 0x001c0570 -Rrw-rw-rw- root dsadmin >> >>q 4 0x001d2680 -Rrw-rw-rw- root dsadmin >> >>q 5 0x001a9190 -Rrw-rw-rw- root dsadmin >> >>Shared Memory: >> >>m 1 0x52574801 --rw-rw---- root informix >> >>m 2 0x52574802 --rw-rw---- root informix >> >>m 3 0x52574803 --rw-rw-rw- root informix >> > >> >What you show is correct... why? Because your database >> >wasn't started by another user. Change database ownership >> >to another user id, then start the database as that user. >> >I'll bet if you then run ipcs|grep user_name you'll see it. >> > >> >________________________________________________________________________ >> >Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com >> >>------------------------------------------------------------ >>This e-mail has been sent to you courtesy of OperaMail, as a free >>service from >>Opera Software, makers of the award-winning Web Browser, Opera. Visit us >>at >>http://www.opera.com/ or our portal at: http://www.myopera.com/ Your free >>e-mail >>account is waiting at: http://www.operamail.com/ >>------------------------------------------------------------ >> > >________________________________________________________________________ >Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com ------------------------------------------------------------ This e-mail has been sent to you courtesy of OperaMail, as a free service from Opera Software, makers of the award-winning Web Browser, Opera. Visit us at http://www.opera.com/ or our portal at: http://www.myopera.com/ Your free e-mail account is waiting at: http://www.operamail.com/ ------------------------------------------------------------