running iwgroup clt as non-root

slarty

Apparently, when running the

./teamsite/bin/iwgroup

CLT, you need root access per this error reported:

/usr/iw/teamsite/bin/iwgroup listgroups -a
You must have root access to run iwgroup .

In our case, the permissions on

/usr/iw/teamsite/bin/iwgroup

are:

-r-xr-xr-x 1 root daemon 821796 Mar 17 2005 iwgroup

So the I know that everyone has execute access.

And, the file that this command is modifying (

./conf/tsgroups.xml

) is writable by some non-root users (ie. in our case, those in the tsadmin group), per:

-rw-rw---- 1 root tsadmin 131 Aug 8 11:34 tsgroups.xml

Therefore, whilst knowing that I can manually modify the

'tsgroups.xml

' file as a non-root user in the '

tsadmin

' group, does anyone know if it is possible to run the

./bin/iwgroup

command without acutally being root?

Find more posts tagged with

Comments

Adam Stoller

Apparently, when running the
./teamsite/bin/iwgroup
CLT, you need root access per this error reported:
/usr/iw/teamsite/bin/iwgroup listgroups -a
You must have root access to run iwgroup .
In our case, the permissions on
/usr/iw/teamsite/bin/iwgroup
are:
-r-xr-xr-x 1 root daemon 821796 Mar 17 2005 iwgroup
So the I know that everyone has execute access.

And, the file that this command is modifying (
./conf/tsgroups.xml
) is writable by some non-root users (ie. in our case, those in the tsadmin group), per:
-rw-rw---- 1 root tsadmin 131 Aug 8 11:34 tsgroups.xml
Therefore, whilst knowing that I can manually modify the
'tsgroups.xml
' file as a non-root user in the '
tsadmin
' group, does anyone know if it is possible to run the
./bin/iwgroup
command without acutally being root?

If I recall correctly - 6.5's iwgroup CLT required root priv's for everything.
I believe an SP and/or 6.7's iwgroup allows the CLT to be run as non-root for querying operations, but still required root privs for modification operations.

I believe the code for checking whether you are root is built into the CLT - so changing permissions on the executables or files it touches will not have any effect.

brizrobbo

If I recall correctly - 6.5's iwgroup CLT required root priv's for everything.
I believe an SP and/or 6.7's iwgroup allows the CLT to be run as non-root for querying operations, but still required root privs for modification operations.

I believe the code for checking whether you are root is built into the CLT - so changing permissions on the executables or files it touches will not have any effect.

Do you know of any problems editing

tsgroups.xml

by hand, or should you always use the

iwgroup

command?

brizrobbo

Do you know of any problems editing
tsgroups.xml
by hand, or should you always use the
iwgroup
command?

Sorry

...should have the "TS6.5 Administration Guide" more closely before I shot off the last post.

Page 56 says:

"The [FONT=Arial]tsgroups.xml file is created and maintained by the iwgroup CLT. While the file can be modified by administrators, it is recommended that modifications to the file be made through the iwgroup CLT."
[/FONT]