Unix Security and Job Compilation
Moderators: chulett, rschirm, roy
Put into the S99ds.rc script a umask entry, 002 works the best. Do not try to put it into the dsenv file, as that file is parsed and only environment settings are pulled. Umask will allows users in the same group to share access to jobs, logs, and output files. You should not split groups in the same project, the results you have already seen. Ultimately,
In addition, your production environment should probably run all jobs under a single user, preferably a system account. There you can tighten umask to 002. Your librarian should import and compile jobs under that user id as well.
Kenneth Bland
In addition, your production environment should probably run all jobs under a single user, preferably a system account. There you can tighten umask to 002. Your librarian should import and compile jobs under that user id as well.
Kenneth Bland
Support has a nice little one-page document on setting up a Unix-based DataStage server for multiple users, they should be able to send it to you if you ask. Basically, it is a matter of setting the umask in the .rc script as Ken suggests and setting the 'sticky bit' of the projects directory.
-craig
ps. Was that a recursive 'chmod'?
-craig
ps. Was that a recursive 'chmod'?
Louise
I always set umask 002 in the dsenv as well. Craig is correct. You need to set the group id so anyone in the group can delete files created by other users in that group. All users including dsuser1 and dsadm need to be in the same group. So the correct chmod is:
chmod -R 4770 projectdir
Kim.
Kim Duke
DsWebMon - Monitor DataStage over the web
www.Duke-Consulting.com
I always set umask 002 in the dsenv as well. Craig is correct. You need to set the group id so anyone in the group can delete files created by other users in that group. All users including dsuser1 and dsadm need to be in the same group. So the correct chmod is:
chmod -R 4770 projectdir
Kim.
Kim Duke
DsWebMon - Monitor DataStage over the web
www.Duke-Consulting.com
You must be root to do this.
Go to this file:
$dshome/sample
Edit this file:
ds.rc
Remove the "#" on this line: (Line #9)
#umask 002
Save file.
Restart DataStage: (make sure nobody's online, and no CLOSE_WAIT sessions are remaining, blah blah blah)
$dshome/bin/uv -admin -stop (wait 2 minutes)
$dshome/bin/uv -admin -start
Problem solved for any future import/creation. You will need to go to the Projects folder and chmod 775 on everything within it.
-T.J.
* * *
... now if this can make breakfast, my life is complete.
Go to this file:
$dshome/sample
Edit this file:
ds.rc
Remove the "#" on this line: (Line #9)
#umask 002
Save file.
Restart DataStage: (make sure nobody's online, and no CLOSE_WAIT sessions are remaining, blah blah blah)
$dshome/bin/uv -admin -stop (wait 2 minutes)
$dshome/bin/uv -admin -start
Problem solved for any future import/creation. You will need to go to the Projects folder and chmod 775 on everything within it.
-T.J.
* * *
... now if this can make breakfast, my life is complete.
TJ
Getting caught up. Some of these replys are on week old topics. How long does it take you to eat breakfast anyway?
Kim.
Kim Duke
DsWebMon - Monitor DataStage over the web
www.Duke-Consulting.com
Getting caught up. Some of these replys are on week old topics. How long does it take you to eat breakfast anyway?
Kim.
Kim Duke
DsWebMon - Monitor DataStage over the web
www.Duke-Consulting.com
Well, when your company is eating up all of your time in many wild schemes that somehow is coming together in one piece...kduke wrote:
Getting caught up. Some of these replys are on week old topics. How long does it take you to eat breakfast anyway?
It's a mess here.
BTW, are you going to be at AscentialWorld?
-T.J.
Developer of DataStage Parallel Engine (Orchestrate).
-
- Participant
- Posts: 54607
- Joined: Wed Oct 23, 2002 10:52 pm
- Location: Sydney, Australia
- Contact:
-
- Participant
- Posts: 54607
- Joined: Wed Oct 23, 2002 10:52 pm
- Location: Sydney, Australia
- Contact:
-
- Participant
- Posts: 24
- Joined: Wed Apr 02, 2003 7:09 am
- Location: United Kingdom