nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

iwts

mart2001

Hi,

Env:
Redhat Linux 5.6
TeamSite 7.2.1
OpenDeploy 7.2.1

This company has an active directory user and group called iwts. Installation was done without a local user and group iwts. Installation went well, it all started working.

Now, added iwts local user and group with a specific uid and gid (to match uid and gid iwts on prod system).

When trying to start up TeamSite, getting this error:
iwserver.linux Permission denied
Check iwtrace.log
Not a lot of useful information besides messages saying Shut down store at 0x65 /iw-store

Tried to change permission on iw-store recursively with new local uid and gid (chown -R xxxxx:xxxxx /iw-store)

Tried to run iwcfgbin on iwserver.linux

Now getting error: iwserver.linux -h returned 127
Failed to start

Has anyone else experience this scenario?

Thanks,

Find more posts tagged with

Comments

nipper

Hi,

Env:
Redhat Linux 5.6
TeamSite 7.2.1
OpenDeploy 7.2.1

This company has an active directory user and group called iwts. Installation was done without a local user and group iwts. Installation went well, it all started working.

Now, added iwts local user and group with a specific uid and gid (to match uid and gid iwts on prod system).

When trying to start up TeamSite, getting this error:
iwserver.linux Permission denied
Check iwtrace.log
Not a lot of useful information besides messages saying Shut down store at 0x65 /iw-store

Tried to change permission on iw-store recursively with new local uid and gid (chown -R xxxxx:xxxxx /iw-store)

Tried to run iwcfgbin on iwserver.linux

Now getting error: iwserver.linux -h returned 127
Failed to start

Has anyone else experience this scenario?

Thanks,

The ownership/permissions in .../TeamSite/bin/iwserver.linux is incorrect

It is typically owned by iwts/iwts with 755 permissions.

do an ls -l

mart2001

Hi,

I changed iwserver.linux to have permission 755 with iwts:iwts ownership.

Still same error.

nipper

OK, there are a couple files that are setuid, do not know all of them off hand. Perhaps one of those is supposed to be setuid to iwts

You may need to go through the installation process again to get the permissions fixed. I do not remember which script fixes all the persmissions. It used to be tspostreboot, tsconfig looks like the correct script, but I have never run it.

From looking at the script, you *may* be able to kick off TeamSite/install/tsconfig as root

Of course you could really screw things up and have to run install again anyway

Adam Stoller

I'm surprised TS would work with "iwts" as a non-local account. "iwts" and "iwui" are accounts used to own the iwserver process - and should both be immutable 'master' accounts.

Perhaps when you changed from the AD account to the local disk account you neglected to change the entries the TeamSite user / roles configuration file?

Once changed, I'd suggest completely stopping / restarting the server processes (if not rebooting).

nipper

I'm surprised TS would work with "iwts" as a non-local account. "iwts" and "iwui" are accounts used to own the iwserver process - and should both be immutable 'master' accounts.

Perhaps when you changed from the AD account to the local disk account you neglected to change the entries the TeamSite user / roles configuration file?

Once changed, I'd suggest completely stopping / restarting the server processes (if not rebooting).

That is probably needed but the error indicates the the server could not even start, which implies file access/permissions.

mart2001

Thanks nipper,

I ran the tsconfig (this resets the iwserver.linux permission to 600).
I then changed it to 755 and it seems to go further, but still does not bring up the iwserver.linux.

in iwserver.linux -- getting segmentation fault with iwserver.linux
, in iwtrace -- something about error in opening trg clnp dir :13

Maybe a new install would be better....

One other note is that this is the patch 1 iwserver.linux and not the original iwserver.linux program.

Migrateduser

Our data center is fairly strict about adding users, so on our 7.2.1 Linux installation, we had them add iwts, iwui & iwguser before the installation. The installation seemed to go OK, but there were all sorts of problems with running the system.

We ended up fully uninstalling and letting the installation create the users. Everything worked that time.

Wally Box
Nike, Inc.

mart2001

An update:

So I had to change the permission of
iw-home/conf/iwatjobsdir to be owned by the new local iwts:iwts and have drwx------ permission.

The UI came up, but when I try to login, it says server disconnected.

Tried to run
iw-home/private/bin/iwutildstop
then
iw-home/private/bin/iwutildstart

Still got same error.

Then tried
iw-home/private/bin/iwauthdstop TS
then
iw-home/private/bin/iwauthdstart TS

Still got the same server disconnected error message when trying to log into the system.

Adam Stoller

My recommendation - wipe and restart. You've gone through a rabbit hole and done lots of twists and turns after having made a mistake (IMO) near the very beginning.

Completely uninstall TS (or plan to use a new box and then wipe this one when you're done reinstalling) - Remove "iwts" and "iwui" from AD and create them at the OS level - either manually or via the installer.

I've worked on projects where the accounts were created manually prior to doing the installation to ensure that they had the correct UID and GID values for the given environment and the same value across multiple environments (e.g.: DEV, STAGE, PROD) and it worked just fine - but you need to make sure you create both the UID and GID entries beforehand -or- just let the installer do what it wants.

I would not attempt to make these accounts AD / LDAP accounts - I believe that is a sure path to failure.

Migrateduser

I agree with Fish - wipe and try again.

However, fully uninstalling isn't simple either. Smiley Happy

When I tried this (on Linux), the doco wasn't complete and I ended up opening case #893761 with Support to get a complete list of steps needed to uninstall. That info may be available elsewhere as well, but the steps laid out in that support case worked for us.

mart2001

Hi,

Thanks for all the info. If I could, I would of wipe and reinstall, but it's a pain at this client. They won't turn on ipv6 which the installer requires, creating local user and groups a pain having to go high and low finding the right person to give access to the person that can do it, etc...

What seem to work so far is to run a recursive permission on the entities/Data directory and the iw-home/local/config/ssl/iwserver/private directory on the local uid and gid.

stop and started iwserver
then ran iwreset -a.

Now I am able to login.