Teamsite groups and iw_cgi_wrapper

thatfish

Hi,

I've a file upload utility from a datacapture.cfg.

The cgi is 'wrapped' in the iw_cgi_wrapper to impersonate the user.

The upload functionality works fine under OS groups. However, when used under TS groups I cannot get the impersonation to work and the file upload tool fails.

A 'hack' seems to be to add the 'iwui' user to the relevant TeamSite groups everything seems to work OK(ish)
- well nearly ...
- the uploaded file is owned by iwui and any subsequent commands like chown,chmod fail because the wrapper is acting again as the user. Whilst I cannot see an issue in adding the iwui user to all the TS groups surely this is unnecessary and the behaviour is incorrect because uploaded files are owned by iwui.

Bottom line is it seems to me to be an impersonation issue or a bug with TeamSite groups implementation in TS. Has anyone had issues with impersonation (iw_cgi_wrapper) with TeamSite groups ?

Steve.
6.7.1 | Solaris

Adam Stoller

Hi, I've a file upload utility from a datacapture.cfg. The cgi is 'wrapped' in the iw_cgi_wrapper to impersonate the user. The upload functionality works fine under OS groups. However, when used under TS groups I cannot get the impersonation to work and the file upload tool fails. A 'hack' seems to be to add the 'iwui' user to the relevant TeamSite groups everything seems to work OK(ish) - well nearly ... - the uploaded file is owned by iwui and any subsequent commands like chown,chmod fail because the wrapper is acting again as the user. Whilst I cannot see an issue in adding the iwui user to all the TS groups surely this is unnecessary and the behaviour is incorrect because uploaded files are owned by iwui. Bottom line is it seems to me to be an impersonation issue or a bug with TeamSite groups implementation in TS. Has anyone had issues with impersonation (iw_cgi_wrapper) with TeamSite groups ? Steve. 6.7.1 | Solaris

My guess - and that's all it is - is that the problem lies in the fact that TS groups don't really exist on the local OS - from whence you're uploading the file. I'm not sure what, if anything can be done about it - though it does make a potentially interesting caveat to using TS groups.

You should probably open a case with Support to see if they / IWOV Engineering can figure out a way to make it work -- you'll have to provide them the code and configuration changes needed to make it work along with step-by-step instructions for setting up the users and running it -- but I think it's worth the effort to try that route.