Operating System - OpenVMS
1748181 Members
3991 Online
108759 Solutions
New Discussion

Re: Privileges required for the NFS client under OpenVMS V8.4

 
SOLVED
Go to solution
Brian Reiter
Valued Contributor

Re: Privileges required for the NFS client under OpenVMS V8.4

Volker,

 

I had a quick look into TCPIP$STARTUP just to verify which privileges it was installed with, definitely CMKRNL and PHY_IO. The TCPIP$DNFS_MOUNT_SHR.EXE just seems to be installed with no privs (according to install list).

 

Security audit (SECURITY) on RCC01, system id: 1025
Auditable event:          Privilege failure
Event information:        CMKRNL not used to execute $CMKRNL(_64) system service ($CMKRNL or $CMKRNL_64)
Event time:               15-SEP-2011 14:11:37.80
PID:                      29202F35
Process name:             _TNA17:
Username:                 SIG_070_SYS
Process owner:            [RCC_070_SIG,SIG_070_SYS]
Terminal name:            TNA17:
Image name:               $20$DKA100:[SYS0.SYSCOMMON.][SYSEXE]TCPIP$UCP.EXE
Privileges missing:       CMKRNL
Posix UID:                -2
Posix GID:                -2 (%XFFFFFFFE)

From ANALYSE/AUDIT I get the above entry which seems odd given that it should be installed with CMKRNL.

 

(The forum has a censor? FFS! ).

 

Anyway, to answer your other question /SHARE doesn't work either, and I haven't got the later NFS images. Ah well, a call to HP when I am in a position to do so - i.e. if we buy any OpenVMS 8-4 systems I'll log the call on the back of the suppplied warranty.

Volker Halle
Honored Contributor

Re: Privileges required for the NFS client under OpenVMS V8.4

Brian,

 

you' re getting this event if the non-prived user tries to mount that NFS share, right ?

 

This would indicate, that some code in the TCPIP mount code path disabled CMKRNL and failed to re-enable it....

 

Raise a call to HP.

 

Volker.

Brian Reiter
Valued Contributor

Re: Privileges required for the NFS client under OpenVMS V8.4

Hi Volker,

 

Thanks for the help. I will log a call when I get a chance to. We don't generally have a support contract but we should be buying some OpenVMS 8-4 boxes soon so I may have a short warranty period to raise any calls.

 

And for those looking for the answer, for what its worth under OpenVMS 8-4, TCPIP 5-7 ECO2 you need CMKRNL in order to issue a TCPIP MOUNT

 

cheers

 

Brian

Brian Reiter
Valued Contributor

Re: Privileges required for the NFS client under OpenVMS V8.4

I have been told by HP that this issue has been fixed with TCPIP 5-7 ECO3 which waas released in December.

 

I will add an update once I have had a chance to repeat the experiment.

 

cheers

 

Brian

John_Malmberg
Occasional Advisor

Re: Privileges required for the NFS client under OpenVMS V8.4

I installed TCPIP 5.7 ECO 3. The problem is still present.

I had to reinstall TCPIP 5.7 with no ECO in order to mount NFS disks.
Brian Reiter
Valued Contributor

Re: Privileges required for the NFS client under OpenVMS V8.4

Figures, I'll badger the Office of OpenVMS Programs and see if I can get a definitive response for when I may see a fix. Although I won't hold much hope of a response.

 

cheers

 

Brian