nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Would setgid work on teamsite groups?

kajjubee

I am thinking of implementing TeamSite groups on solaris. If I set the group for sharing to be a teamsite group, can I set the setgid for that workarea to the teamsite group? If yes, how do I...

Thanks
K

Find more posts tagged with

Comments

ravio

I am thinking of implementing TeamSite groups on solaris. If I set the group for sharing to be a teamsite group, can I set the setgid for that workarea to the teamsite group? If yes, how do I...
K

I can understand turning on the gid for a cgi or an ipl, however I dont know why you want to set gid on a workarea.

However, since workareas are virtualized from nothing more than actual directories on the file system it will be like turning on the gid bit for a directory.

And I dont know if you already tried this?
$ chmod g+s WorkareaName

I suspect it should work.

Migrateduser

I tried this on TS 6.1 on AIX and at least on that OS, setgid was not reliable. There would be instances where the gid would work and other times when it wouldn't; for instance, creating a file via templating versus the system creating a file from an externaltask in workflow.

Adam Stoller

I am thinking of implementing TeamSite groups on solaris. If I set the group for sharing to be a teamsite group, can I set the setgid for that workarea to the teamsite group? If yes, how do I...

Thanks
K

It is unclear if doing a chmod g+s (setgid) on the workarea will work with TeamSite groups. I *think* it *might* - but that's about as far as I'd be willing to go without doing some trial runs at it (and I don't have the environment in which to do so at this time).

With OS groups this does work - with TS groups it *might* work.

Migrateduser

Uhh, geez... thanks for the definitive and conclusive post, fish.

Adam Stoller

Uhh, geez... thanks for the definitive and conclusive post, fish.

Uhh, geez Dave - you're welcome ;-)

kajjubee

We have a controlled environment here with no root access. So was wondering if anyone has tried this. I know it works with normal OS groups.

Thanks Fish.

K

beez

Yes. sgid works with TeamSite groups:

downloads: iwgroup addgroup sgid
WORKAREA: iwmkwa main sgidTest '' INITIAL root sgid
WORKAREA: ls -l
drwxrwxr-x 2 root iwglobal 512 Mar 30 15:44 sgidTest/
WORKAREA: chmod g+s sgidTest/
WORKAREA: ls -l
drwxrwsr-x 2 root iwglobal 512 Mar 30 15:44 sgidTest/
WORKAREA: cd sg*
sgidTest: touch foo
sgidTest: ls -l
total 0
-rw-r--r-- 1 root iwglobal 0 Mar 30 15:44 foo
sgidTest: iwattrib main/WORKAREA/sgidTest/foo group
sgid
sgidTest:

Migrateduser

beez,

Thanks for doing that but that's not the entire picture. You've touched a file -- okay, fine, so we know that it works when we create a file on the command line. What about when you create the file via workflow? ... and what user(s) should own that task? What happens when you create the file with "New File" from the TeamSite GUI? What happens when you generate a file in a sgid directory from a DCR? Does it inherit the group ownership of the containing directory?

beez

The sgid only works when a file is created through the filesystem. The filesystem interface is only used to create files when going though the iwserver mount (commandline, WF external scripts).
The UI creates files via an RPC call to the server. The CLTs, such as iwcp, also use the RPC interface and thus ignore the setgid bit.

hope this helps,
beez

Migrateduser

Yeah, I think I've observed the same behaviour but, of course, didn't phrase it as eloquently as you Smiley Very Happy

So, it sounds like the bottom line is that this isn't a consistent way to set the gid on documents in TS.