FormAPI to Perl copy to WA

This is driving me crazy

I have a subdir (test) in a WA. The unix perms are wide open (777). I have a formapi that on a save from a DCR, is to copy a file from /tmp to the WA

I have just tried to hard code it. ALways get perm denied.
iwui is the user running the script, it is part of other and tsadmgp

I have "untainted" the path, verified (by running cat /tmp/ARK.txt) that iwui has read access. I am going crazy

any ideas ?

PERL:

$cmd= "cp /tmp/ARK.txt /iwmnt/default/main/sps/external/public_site/WORKAREA/workarea/files/test/ARK.txt";
print LOG "$cmd \n";
$out = `$cmd 2>&1` ;
print LOG "$out";

Here is what I get:

cp /tmp/ARK.txt /iwmnt/default/main/sps/external/public_site/WORKAREA/workarea/files/test/ARK.txt
cp: cannot create
/iwmnt/default/main/sps/external/public_site/WORKAREA/workarea/files/test/ARK.txt: Permission denied

Is something else running tainted ? Any ideas ?

Andy

Find more posts tagged with

Comments

james1

The permissions of "/default/main/sps/external/public_site/WORKAREA/workarea" and "/iwmnt/default/main/sps/external/public_site/WORKAREA/workarea/files/test/" (or "/iwmnt/default/main/sps/external/public_site/WORKAREA/workarea/files/test/ARK.txt", if it already exists) must allow iwui to write. Have you checked that?

-- James

--
James H Koh
Interwoven Engineering

nipper

>The permissions of
> "/default/main/sps/external/public_site/WORKAREA/workarea"
>and "/iwmnt/default/main/sps/external/public_site/WORKAREA/workarea/files/test/"
>(or "/iwmnt/default/main/sps/external/public_site/WORKAREA/workarea/files/test/ARK.txt"
>, if it already exists) must allow iwui to write. Have you checked that?

The WA is shared with the group tsadmgrp which iwui has has a secondary group. IT will not let up make it the primary group, that would be bad anyway.

The directories files and test have 777 permissions. I tried making the file ARK.txt & assigned 777 to it as well.

Andy

Adam Stoller

Instead of: $cmd= "cp /tmp/ARK.txt /iwmnt/default/main/sps/external/public_site/WORKAREA/workarea/files/test/ARK.txt";
print LOG "$cmd \n";
$out = `$cmd 2>&1` ;
print LOG "$out";
Try:

use File::Copy;
copy("/tmp/ARK.txt", "/iwmnt/default/main/sps/external/public_site/WORKAREA/workarea/files/test/ARK.txt") || die "$!";

Or:

my $in = "/tmp/ARK.txt";
my $out = "/iwmnt/default/main/sps/external/public_site/WORKAREA/workarea/files/test/ARK.txt";
open(IN, "<$in") || die " '$in' ($!)";
open(OUT, ">$out") || die " '$out' ($!)";
while(<IN>){
    print OUT;
}
close(OUT);
close(IN);

If permissions are really a problem - the above won't help - but - they're both probably more efficient than envoking another process to run 'cp'.

--fish
(Interwoven Senior Technical Consultant)

pammi

Hi,

I have below in ipl. when i run this ipl from command prompt it is working fine. If i called from callServer it is running but it is not coping. I am getting alert and log when call from callServer but $cmd is not working

Thanx in advance

#!/usr/iw-home/iw-perl/bin/iwperl
use XML: Smiley Tongue

arser;
use XML: Smiley Very Happy

OM;
use DBI;
use CGI;

my $cmd="cp -r /default/main/ISGRetail/WORKAREA/GMD/repository/DocumentType/MarketingContent/data/test /default/main/ISGRetail/WORKAREA/GMD/repository/DocumentType/MarketingContent/data/test_cp ";
#my $cmd="ls -l /default/main/ISGRetail/WORKAREA/GMD/repository/DocumentType/MarketingContent/data/test ";

my $res = `$cmd`;

my $filename ="/tmp/test.log";

open LOG, ">>$filename" or die "cannot open filename = $filename";
chmod 0777 , $filename;
print LOG " Result = $res \n";
print LOG "---------------$cmd----------\n";
close LOG;

print "Content-type: text/html \n\n";

print '<?xml version="1.0" encoding ="UTF-8"?>';

print <<EOT;
<html>
<body>
<script language='Javascript'>
var api = parent.getScriptFrame();
alert("DCR copy test");
</script>

</body>

</html>

EOT

Adam Stoller

First do not run 'cp' from your script - as I already indicated there are at least two alternatives that use built-in perl functions rather than execing a separate shell process to run a 'cp' command.

Second, the environment context within which the perl script is running is significantly different when run from a command line as opposed to run from a CallServer (I'm assuming you're doing this from FormAPI in your DCT - yes?)

If you feel you *must* use 'cp' - make sure you use an explicit path (e.g. "/usr/bin/cp" and not just "cp") as there's a reasonable chance that the PATH environment is one of those items that is significantly different when running a script from CallServer.

--fish
Senior Consultant, Quotient Inc.
http://www.quotient-inc.com

Dwayne

My guess is that it's a permission problem, and the user who's running the web server doesn't have read and/or write access into the workarea.

Try changing the source and destinations in your "cp" command to point to world readable/writable files, to verify the basic functionality. You might also run 'id' and put it into your logs, so that you can see who is running the code.

--

Current project: TS 5.5.2/6.1 W2K

pammi

Thanx for your reply...

You are right i am using formAPI . If i use ls -l command it is working and it is not doing any thing when i use cp command even i tried with /usr/bin/cp

is there any other way to do ?

Is it permissions issue for cp command actually i am using same teamsite id on command prompt it is working from formAPI it is not working

Thanx once again for ur quick reply

Dwayne

I wasn't referring to permission problems in accessing the cp command, but in access to the workarea. I know you said you're using the same id from the command line that the callServer is using, but sometimes the user running a given script isn't really who you expected.

I would suggest the following for debug:

Change your 'cp' command to be something like 'cp /tmp/test.log /tmp/test2.log' to get permission problems out of the way. Obviously it can't stay that way, but it will help to verify that the code is working as you expect it to.

Add a block of code like this to your LOG section, so that there's more info available:

print LOG "------- id ---------\n";
print LOG `id`;
print LOG "-------- env -------\n";
foreach my $key (keys %ENV) {
    print LOG "$key=$ENV{$key}\n";
}

Current project: TS 5.5.2/6.1 W2K

pammi

Thanx for your reply

It is working when i use /tmp/test.txt directory .It is permissions problem

when i used your script i go the following result

SERVER_SOFTWARE=Apache/1.3.27 (Unix) mod_ssl/2.8.9 OpenSSL/0.9.6e
GATEWAY_INTERFACE=CGI/1.1
HTTP_NOVINET=v1.2
DOCUMENT_ROOT=/opt/iw-home/iw-webd/htdocs
SCRIPT_URI=http://edpss022/iw-bin/retail_copydcr.ipl
REMOTE_ADDR=10.64.216.63
SCRIPT_URL=/iw-bin/retail_copydcr.ipl
SERVER_PROTOCOL=HTTP/1.1
SERVER_SIGNATURE=<ADDRESS>Apache/1.3.27 Server at edpss022 Port 80</ADDRESS>

REQUEST_METHOD=POST
HTTP_REFERER=http://edpss022/iw/webdesk/framework/lib/utf8form.jsp
QUERY_STRING=
HTTP_USER_AGENT=Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)
PATH=/usr/bin:/opt/iw-home/bin:/usr/sbin:/sbin:/usr/bin
TZ=US/Eastern
HTTP_CONNECTION=Keep-Alive
HTTP_ACCEPT=image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-powerpoint, application/vnd.ms-excel, application/msword, application/x-shockwave-flash, */*
REMOTE_PORT=2183
SERVER_ADDR=146.184.119.28
HTTP_ACCEPT_LANGUAGE=en-us
HTTP_CACHE_CONTROL=no-cache
SCRIPT_NAME=/iw-bin/retail_copydcr.ipl
SCRIPT_FILENAME=/opt/iw-home/httpd/iw-bin/retail_copydcr.ipl
HTTP_ACCEPT_ENCODING=gzip, deflate
SERVER_NAME=edpss022
REQUEST_URI=/iw-bin/retail_copydcr.ipl
HTTP_COOKIE=iw_user=ntmp67; iw_role=admin; IWAUTH=52616e646f6d4956a93c2ea1d909428d6adb60be340e36234a14b22290fc4bc80797c2039dac0a0399c4408c68119746d275a2c9a51b027f
SERVER_PORT=80
CONTENT_TYPE=application/x-www-form-urlencoded
CONTENT_LENGTH=0
HTTP_HOST=edpss022
SERVER_ADMIN=

Could you please suggest what i need to change on my workarea to copy

Thanx in advance

Dwayne

I suggest you change your URL in your callServer from /iw-bin/retail_copydcr.ipl to /iw-bin/iw_cgi_wrapper.cgi/retail_copydcr.ipl. That should allow the script to run with the permissions of the user invoking it (ntmp67 in this case)

--

Current project: TS 5.5.2/6.1 W2K

pammi

Thanx that works

Thanx once again for your suggestion