Oninit cdi / Archive
Talk to an expert →

OAT User Question

Posted in 2015

Topics: Server Administration, Security, Permissions & Auditing, Third-Party Tools & Monitoring

DAN MUELLER — — source: IIUG Forums & Mailing Lists

Morn'n Folks, IDS=11.70.FC8XB8 O/S=AIX 6.1 I am in the predicament of administering Informix on environments that I do not know the informix password on. I do have sudo rights to informix and functions that I need as root. I am setting up OAT and "thought" that by setting ADMIN_USER_MODE_WITH_DBSA=1 and setting ADMIN_MODE_USERS to my userid would allow me to perform Informix only functions - WRONG... I can get around a lot of things my granting myself "dba" in sysadmin and sysmaster but that doesn't get it all. Specifically, I want to administer Storage Provisioning and cannot add devices to the pool. Is there any way around this? I cna administer Storage Provisioning manually as Informix but really want to be able to do this stuff in OAT. Any thoughts? Thanx, Dan

↪ replying to DAN MUELLER
John Miller iii — — source: IIUG Forums & Mailing Lists

The ability to monitor OAT from a non-Informix user was added to version 12. The server provided a mechanism to grant non-informix users permissions on the different admin commands based on functionality. The function groups include you can grant to the non-informix admin user are: admin, bar, file, grant, ha, json, misc, read only, onstat, replication sql, sqltrace, stroage, tenant, warehouse See ( http://www-01.ibm.com/support/knowledgecenter/SSGU8G=5F12.1.0/com.ibm.adref= .doc/ids=5Fsapi=5F147.htm?lang=3Den ) for more information on this. The only other idea would be to add your self into group informix and then grant your self access to sysadmin database. Thisshould provide you with access to all the admin()/task() commands without be user informix. John F. Miller III STSM, Lead Architect miller3@us.ibm.com 503-747-1366 IBM Informix Dynamic Server (IDS) ids-bounces@iiug.org wrote on 10/02/2015 07:00:56 AM: > From: "DAN MUELLER" <ddmueller@intercall.com> > To: ids@iiug.org > Date: 10/02/2015 07:04 AM > Subject: OAT User Question [35820] > Sent by: ids-bounces@iiug.org > > Morn'n Folks, > > IDS=3D11.70.FC8XB8 > O/S=3DAIX 6.1 > > I am in the predicament of administering Informix on environments that I do > not know the informix password on. I do have sudo rights to informix and > functions that I need as root. I am setting up OAT and "thought" that by > setting ADMIN=5FUSER=5FMODE=5FWITH=5FDBSA=3D1 and setting ADMIN=5FMODE=5F= USERS to my userid > would allow me to perform Informix only functions - WRONG... I can get around > a lot of things my granting myself "dba" in sysadmin and sysmaster but that > doesn't get it all. Specifically, I want to administer Storage Provisioning > and cannot add devices to the pool. Is there any way around this? > > I cna administer Storage Provisioning manually as Informix but really want to > be able to do this stuff in OAT. Any thoughts? > > Thanx, > Dan > > > ***************************************************************************= **** > Forum Note: Use "Reply" to post a response in the discussion forum. >

↪ replying to John Miller iii
Mueller, Daniel D. — — source: IIUG Forums & Mailing Lists

Thanx John. Dan -----Original Message----- From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of John Miller iii Sent: Friday, October 02, 2015 2:16 PM To: ids@iiug.org Subject: Re: OAT User Question [35821] The ability to monitor OAT from a non-Informix user was added to version 12. The server provided a mechanism to grant non-informix users permissions on the different admin commands based on functionality. The function groups include you can grant to the non-informix admin user are: admin, bar, file, grant, ha, json, misc, read only, onstat, replication sql, sqltrace, stroage, tenant, warehouse See ( http://www-01.ibm.com/support/knowledgecenter/SSGU8G=5F12.1.0/com.ibm.adref= ..doc/ids=5Fsapi=5F147.htm?lang=3Den ) for more information on this. The only other idea would be to add your self into group informix and then grant your self access to sysadmin database. This should provide you withaccess to all the admin()/task() commands without be user informix. John F. Miller III STSM, Lead Architect miller3@us.ibm.com 503-747-1366 IBM Informix Dynamic Server (IDS) ids-bounces@iiug.org wrote on 10/02/2015 07:00:56 AM: > From: "DAN MUELLER" <ddmueller@intercall.com> > To: ids@iiug.org > Date: 10/02/2015 07:04 AM > Subject: OAT User Question [35820] > Sent by: ids-bounces@iiug.org > > Morn'n Folks, > > IDS=3D11.70.FC8XB8 > O/S=3DAIX 6.1 > > I am in the predicament of administering Informix on environments that > I do > not know the informix password on. I do have sudo rights to informix > and functions that I need as root. I am setting up OAT and "thought" > that by setting ADMIN=5FUSER=5FMODE=5FWITH=5FDBSA=3D1 and setting > ADMIN=5FMODE=5F= USERS to my userid > would allow me to perform Informix only functions - WRONG... I can get around > a lot of things my granting myself "dba" in sysadmin and sysmaster but that > doesn't get it all. Specifically, I want to administer Storage Provisioning > and cannot add devices to the pool. Is there any way around this? > > I cna administer Storage Provisioning manually as Informix but really want to > be able to do this stuff in OAT. Any thoughts? > > Thanx, > Dan > > > ***************************************************************************= **** > Forum Note: Use "Reply" to post a response in the discussion forum. > ******************************************************************************* Forum Note: Use "Reply" to post a response in the discussion forum.

Glossary