nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

UNIX Question

Ottawa_IWOV

All,
I am trying to achieve something in a script on a Solaris system. First question. What do scripts run as when they are executed from the iw-home/httpd/iw-bin directory?

I want my script to stitch a command line together, then switch users and run as that user, but I don't know how to do it exactly...

vspider - collection......(command line to run)

BUT, I want the user to be vadmin.

If anyone has any thoughts they would be greatly appreciated.

Thanks,

Lucas.

Lucas Cochrane
lcochrane@dc.com

Find more posts tagged with

Comments

nipper

Script's typically run as who the original login is, however scripts can have teh UID set to another user and when it runs, it runs as that user.

something like this:

chown andy test.sh
chmod 4755 test.sh

(makes test.sh run as andy)

then build your script.
BTW, you may want to stay with a shell script rather than
a perl script. Perl's taint mode is very restrictive and a pain
to get going.

Andy

Adam Stoller

If this is a CGI script to be run as part of a cgitask - it will, by default, be run by the owner of the task.

If this is a CGI script to be run as a custom menu, I believe it will run as the logged in user - if not, try changing the URL from foo.cgi or /iw-bin/foo.cgi to /iw-bin/iw_cgi_wrapper.cgi/foo.cgi

If this is for some other context - please elaborate.

--fish
(Interwoven Senior Technical Consultant)

Ottawa_IWOV

I can see that the hidden values in the form show a session id and the user currently logged in (root) in this case. I get an error message in my log that says.

error 256 - I have no IDEA what that means...

Thanks for your help

Lucas Cochrane
lcochrane@dc.com

Ottawa_IWOV

I found the following article that may be what I am looking for

http://devnet.interwoven.com/site.fcgi/odb/001273

Might someone be able to help me with this one?

Thanks,

Lucas.

Lucas Cochrane
lcochrane@dc.com

Adam Stoller

I think I might have missed something in the original post. You are trying to run a script as the user logged into TeamSite, and then have that script invoke a command line *as a different user* - yes?

If so, then you will probably need to invoke a setuid program/script for the final step - and most sysadmins will not take kindly to such things being developed outside their group.

Does the CLT you want to run *require* that it be run as this other user? Or do you just *want* to run it as this other user?

If you're going to try to do this in Perl - you'll have to read up on 'taint' - if you're going to do this in some other scripting language, you'll probably end up creating something that your sysadmins will come down hard on you for (if they find out).
If you can arrange to do this in a binary program, the security issues are diminished but you still may run into issues with your sysadmins.

--fish
(Interwoven Senior Technical Consultant)

jodell

Here is the way I do this:

Create a script that will execute the basic unix commands (ksh, csh, perl)
Install sudo
Set up a command alias in sudoers to allow users to execute that command:

Lets assume that you create /home/joe/bin/cmdtorun.ksh that you want to execute as user joe. Add the following lines to the sudoers file by executing visudo as root (visudo is part of the sudo package)

#Define users to allow
User_Alias ALLOWED_TO_BE_JOE=me,you,user1
#Define command to run (ues full path for security)
Cmnd_Alias RUN_THIS_AS_JOE=/home/joe/bin/cmdtorun.ksh
#No passwd may me considered bad but is needed to automate via cgi
ALLOWED_TO_BE_JOE ALL=(joe) NOPASSWD:RUN_THIS_AS_JOE

Now in your CGI call sudo /home/joe/bin/cmdtorun.ksh and it will be executed as the joe user as long as the EUID of the caller is listed in the user alias.

Let me know if you need any more info.

fuzzy

an alternative way would be to use remote shell to call and run a script as a particular user look at rsh, you would need to setup the rhost file so that password would not be asked for.
let me know if you want to follow this path

Farzam
ffarzanehfar@yahoo.co.uk"> ffarzanehfar@yahoo.co.uk