RE: Running Utilities as anothe
The problem I have with this solution is that either the password will be
exposed, or the user will be able to su to informix at any time. The
user of this tool is able to log on to unix and has just enough knowledge
to do some damage by su'ing to informix. Thanks for the suggestion, but
I"m looking for a different way.
JP
-----Original Message-----
From: Collins, Mark [SMTP:MCOLLINS@iahnbcis.attmail.com]
Sent: Wednesday, September 03, 1997 2:24 PM
To: Viegas, John Paul; informix-list
Subject: Re: Running Utilities as anothe
John,
I had a similar problem with letting others run ontape - I didn't want to
give out the informix password. I wrote a program which does an "su
informix" and then executes whichever informix utility, passing on the
command-line parms. The user does not have to know the informix
password. In fact, they don't even have to know that they are becoming
"informix". The su only affects the process executing the command, thus
the user does not get the chance to do anything dangerous with the
more-powerful id. Check it out in the software archives of IIUG
(http://www.iiug.org). It is stored there as "suontape". I have
modified it at various times to run oncheck and onmode, so I know it
works for them.
Mark Collins
mcollins@us.dhl.com
==============================================
We are trying to implement Maestro, which is a scheduling package which
is supposed to run all of our batch, scripts, etc.. We currently have it
running our backups through onarchive, but our next step is to be able to
run onchecks and update statistics through the tool. I believe to be
able to run these commands, the user has to be INFORMIX, but if some one
has a way around this, so that another user can run them, I would
appreciate their input.
One way which I don't want to implement is to " su - informix" then
provide the password, this would mean having the password hardcoded, and
against our policy.
Thanks in advance
JP
------ Message Header Follows ------
>Received: from mh1.panasonic.com by mecamail.panasonic.com
> (PostalUnion/SMTP(tm) v2.1.8d for Windows NT(tm))
> id AA-1997Sep03.142019.1486.695700; Wed, 03 Sep 1997 14:20:19 -0400
>Received: from gatekeeper.panasonic.com (mecanet.panasonic.com
>[140.212.2.65])
>by PANASONIC-MAILHUB1 with SMTP id OAA25896 for
><viegasjp@panasonic.com>;
>Wed,
>3 Sep 1997 14:21:36 -0400
>Received: from cobu.co.br.np.els-gms.att.net by gatekeeper.panasonic.com
>(AIX
>4.1/UCB 5.64/Xinu)
> id AA39048; Wed, 3 Sep 1997 13:54:07 -0400
>Date: Wed, 03 Sep 1997 13:16:01 +0000
>From: MCOLLINS@iahnbcis.attmail.com (Collins, Mark)
>Received: from iahnbcis by attmail; Wed Sep 3 18:15 GMT 1997
>Received: by iahnbcis (ATT-MHS-XtcN) Wed Sep 03 13:16:09 1997
>Subject: Re: Running Utilities as anothe
>In-Reply-To: F1A10D34815742D9
>To: informix-list@rmy.emory.edu, viegasjp@panasonic.com (Viegas, John
>Paul)
>Mime-Version: 1.0
>Content-Type: Text/Plain; charset=us-ascii
>Content-Transfer-Encoding: 7bit
>Message-Id: <NW-AM2.0-PROMO-MCOLLINS-4A6C0D34015742D9>
>
>