Make root DBSA

Posted in 2007

Summary

User on AIX 5.3 with IDS 9.40.FC7 wanted root to have DBSA rights; onspaces failed with "Must be DBSA to run this program", though it worked on another identical server. Suggestions: run onspaces as informix instead, and check onspaces file ownership (which proved identical). The poster found it worked when logging in directly as root but not after 'su - root'. Art suggested onspaces may check the real rather than effective uid (try su twice); Jonathan noted DBSA membership comes from the group owning $INFORMIXDIR/etc and must be registered in /etc/group, and suggested comparing 'id -a' output. No confirmed resolution is recorded.

Auto-generated by DrWatson from the posts below — may be imperfect; read the full thread.

Topics: Server Administration

Nandkishor Singare — Mon, 06 Aug 2007 14:08:53 — source: IIUG Forums & Mailing Lists

Hi, How can I give the DBSA previlages to root user on AIX.(5.3) ? I have added the informix group in "group set" still it throws error as "Must be DBSA to run this program" wheb I run onspaces command. Regards, Nandkishor

↪ replying to Nandkishor Singare

ART KAGEL, BLOOMBERG/ 731 LEXIN — Mon, 06 Aug 2007 14:18:37 — source: IIUG Forums & Mailing Lists

You should be running onspaces as 'informix' not root. How you give DBSA privs to any other user depends on the IDS version which you did not post. Art S. Kagel ----- Original Message ----- From: Nandkishor Singare <ids@iiug.org> At: 8/06 10:09:21 Hi, How can I give the DBSA previlages to root user on AIX.(5.3) ? I have added the informix group in "group set" still it throws error as "Must be DBSA to run this program" wheb I run onspaces command. Regards, Nandkishor ******************************************************************************* Forum Note: Use "Reply" to post a response in the discussion forum.

↪ replying to ART KAGEL, BLOOMBERG/ 731 LEXIN

Nandkishor Singare — Mon, 06 Aug 2007 14:41:55 — source: IIUG Forums & Mailing Lists

Hi Art, Thanks for Reply. I am using IDS 9.40 FC7 on AIX 5.3. I am able to run onspaces as root on another server with IDS 9.40 FC7 on AIX 5.3. Smitty shows same settings for root User on both servers. Is it related to infomix or AIX user previlages? Regards, Nandkishor On 8/6/07, ART KAGEL, BLOOMBERG/ 731 LEXIN <kagel@bloomberg.net> wrote: > > You should be running onspaces as 'informix' not root. How you give DBSA > privs > to any other user depends on the IDS version which you did not post. > > Art S. Kagel > > ----- Original Message ----- > From: Nandkishor Singare <ids@iiug.org> > At: 8/06 10:09:21 > > Hi, > > How can I give the DBSA previlages to root user on AIX.(5.3) ? > > I have added the informix group in "group set" > still it throws error as "Must be DBSA to run this program" wheb I run > onspaces command. > > Regards, > Nandkishor > > > > ******************************************************************************* > Forum Note: Use "Reply" to post a response in the discussion forum. > > > > ******************************************************************************* > Forum Note: Use "Reply" to post a response in the discussion forum. > >

↪ replying to Nandkishor Singare

ART KAGEL, BLOOMBERG/ 731 LEXIN — Mon, 06 Aug 2007 15:00:15 — source: IIUG Forums & Mailing Lists

Check the ownerships of onspaces on both machines. It may be different. Art S. Kagel ----- Original Message ----- From: Nandkishor Singare <ids@iiug.org> At: 8/06 10:42:36 Hi Art, Thanks for Reply. I am using IDS 9.40 FC7 on AIX 5.3. I am able to run onspaces as root on another server with IDS 9.40 FC7 on AIX 5.3. Smitty shows same settings for root User on both servers. Is it related to infomix or AIX user previlages? Regards, Nandkishor On 8/6/07, ART KAGEL, BLOOMBERG/ 731 LEXIN <kagel@bloomberg.net> wrote: > > You should be running onspaces as 'informix' not root. How you give DBSA > privs > to any other user depends on the IDS version which you did not post. > > Art S. Kagel > > ----- Original Message ----- > From: Nandkishor Singare <ids@iiug.org> > At: 8/06 10:09:21 > > Hi, > > How can I give the DBSA previlages to root user on AIX.(5.3) ? > > I have added the informix group in "group set" > still it throws error as "Must be DBSA to run this program" wheb I run > onspaces command. > > Regards, > Nandkishor > > > > ******************************************************************************* > Forum Note: Use "Reply" to post a response in the discussion forum. > > > > ******************************************************************************* > Forum Note: Use "Reply" to post a response in the discussion forum. > > ******************************************************************************* Forum Note: Use "Reply" to post a response in the discussion forum.

↪ replying to ART KAGEL, BLOOMBERG/ 731 LEXIN

Nandkishor Singare — Tue, 07 Aug 2007 07:46:43 — source: IIUG Forums & Mailing Lists

Hi, The ownership is identical on both machines.... :) I found one new thing. If I directly login as root then I am able to run onspaces command BUT... If I login as different user and then su to root (su - root) then I am not able to run onspaces.... Thanks and regards, Nandkishor On 8/6/07, ART KAGEL, BLOOMBERG/ 731 LEXIN <kagel@bloomberg.net> wrote: > > Check the ownerships of onspaces on both machines. It may be different. > > Art S. Kagel > > ----- Original Message ----- > From: Nandkishor Singare <ids@iiug.org> > At: 8/06 10:42:36 > > Hi Art, > > Thanks for Reply. > > I am using IDS 9.40 FC7 on AIX 5.3. > I am able to run onspaces as root on another server with IDS 9.40 FC7 on > AIX > 5.3. > Smitty shows same settings for root User on both servers. > Is it related to infomix or AIX user previlages? > > Regards, > Nandkishor > > On 8/6/07, ART KAGEL, BLOOMBERG/ 731 LEXIN <kagel@bloomberg.net> wrote: > > > > You should be running onspaces as 'informix' not root. How you give DBSA > > privs > > to any other user depends on the IDS version which you did not post. > > > > Art S. Kagel > > > > ----- Original Message ----- > > From: Nandkishor Singare <ids@iiug.org> > > At: 8/06 10:09:21 > > > > Hi, > > > > How can I give the DBSA previlages to root user on AIX.(5.3) ? > > > > I have added the informix group in "group set" > > still it throws error as "Must be DBSA to run this program" wheb I run > > onspaces command. > > > > Regards, > > Nandkishor > > > > > > > > > > > ******************************************************************************* > > Forum Note: Use "Reply" to post a response in the discussion forum. > > > > > > > > > > > ******************************************************************************* > > Forum Note: Use "Reply" to post a response in the discussion forum. > > > > > > > > ******************************************************************************* > Forum Note: Use "Reply" to post a response in the discussion forum. > > > > ******************************************************************************* > Forum Note: Use "Reply" to post a response in the discussion forum. > >

↪ replying to Nandkishor Singare

ART KAGEL, BLOOMBERG/ 731 LEXIN — Tue, 07 Aug 2007 13:05:19 — source: IIUG Forums & Mailing Lists

I suspect that onspaces is checking the 'real' userid rather than the effective userid. If you su - root twice and it works that's it. Art S. Kagel ----- Original Message ----- From: Nandkishor Singare <ids@iiug.org> At: 8/07 3:47:00 Hi, The ownership is identical on both machines.... :) I found one new thing. If I directly login as root then I am able to run onspaces command BUT... If I login as different user and then su to root (su - root) then I am not able to run onspaces.... Thanks and regards, Nandkishor On 8/6/07, ART KAGEL, BLOOMBERG/ 731 LEXIN <kagel@bloomberg.net> wrote: > > Check the ownerships of onspaces on both machines. It may be different. > > Art S. Kagel > > ----- Original Message ----- > From: Nandkishor Singare <ids@iiug.org> > At: 8/06 10:42:36 > > Hi Art, > > Thanks for Reply. > > I am using IDS 9.40 FC7 on AIX 5.3. > I am able to run onspaces as root on another server with IDS 9.40 FC7 on > AIX > 5.3. > Smitty shows same settings for root User on both servers. > Is it related to infomix or AIX user previlages? > > Regards, > Nandkishor > > On 8/6/07, ART KAGEL, BLOOMBERG/ 731 LEXIN <kagel@bloomberg.net> wrote: > > > > You should be running onspaces as 'informix' not root. How you give DBSA > > privs > > to any other user depends on the IDS version which you did not post. > > > > Art S. Kagel > > > > ----- Original Message ----- > > From: Nandkishor Singare <ids@iiug.org> > > At: 8/06 10:09:21 > > > > Hi, > > > > How can I give the DBSA previlages to root user on AIX.(5.3) ? > > > > I have added the informix group in "group set" > > still it throws error as "Must be DBSA to run this program" wheb I run > > onspaces command. > > > > Regards, > > Nandkishor > > > > > > > > > > > ******************************************************************************* > > Forum Note: Use "Reply" to post a response in the discussion forum. > > > > > > > > > > > ******************************************************************************* > > Forum Note: Use "Reply" to post a response in the discussion forum. > > > > > > > > ******************************************************************************* > Forum Note: Use "Reply" to post a response in the discussion forum. > > > > ******************************************************************************* > Forum Note: Use "Reply" to post a response in the discussion forum. > > ******************************************************************************* Forum Note: Use "Reply" to post a response in the discussion forum.

↪ replying to Nandkishor Singare

Jonathan Leffler — Thu, 09 Aug 2007 05:24:19 — source: IIUG Forums & Mailing Lists

A: Because it messes up the order in which people normally read text. Q: Why is it such a bad thing? A: Top-posting. Q: What is the most annoying thing on usenet and in e-mail? On 8/7/07, Nandkishor Singare <ns.singare@gmail.com> wrote: > The ownership is identical on both machines.... :) > > I found one new thing. > If I directly login as root then I am able to run onspaces command BUT... > If I login as different user and then su to root (su - root) then I am not > able to run onspaces.... The DBSA group is controlled by the group that owns $INFORMIXDIR/etc. So, for root to be a DBSA, it must be a member of the DBSA group. Further, it must be registered as such in either /etc/passwd (implausible for rooot) or in /etc/group. AFAIK, IDS does not pay much if any attention to the groups associated with the process that ends up running onspaces - that is, the root shell. However, you may be able to prove by counter-example that this is in fact incorrect. As to why there might be a difference between 'su' and 'login', I am not sure, but I'd hazard a guess that 'id' or 'id -a' might help show some difference (but said difference might indicate that my previous assertion is not correct). -- Jonathan Leffler #include <disclaimer.h> Email: jleffler@earthlink.net, jleffler@us.ibm.com Guardian of DBD::Informix v2007.0226 -- http://dbi.perl.org/ NB: Please do not use this email for correspondence. I don't necessarily read it every week, even.