topic group permission problem in Operating System - HP-UX

group permission problem

Joachim Weber_1 — Thu, 05 Feb 2004 09:27:57 GMT

Hi,

We have a directory called /testtt with the following permissions and ownership:
drwxrwxr-x 2 life users 96 Feb 5 14:23 /testtt

For some reason the user oracle which has the primary group "dba" but is also a member of the group "users" isn't allowed to create files in that /testtt directory.
Can someone please tell me what do I have to do to enable oracle to write in that directory.

Thanks,

Joachim

Re: group permission problem

Patrick Wallek — Thu, 05 Feb 2004 09:30:38 GMT

Do you have /etc/logingroup linked to /etc/group? If not then you need to.

# ll /etc/logingroup
lrwxr-xr-x 1 root sys 10 May 30 2003 /etc/logingroup@ -> /etc/group

If it isn't do:

# ln -s /etc/group /etc/logingroup

Re: group permission problem

V. Nyga — Thu, 05 Feb 2004 09:42:41 GMT

Hi Joachim,

you can check the assigned groups with the command 'groups'.
See also 'man groups':
A user is granted the permissions of those groups in /etc/passwd and /etc/logingroup at login time.

So simpliest create a link between /etc/group and /etc/logingroup.

Volkmar

Re: group permission problem

Joachim Weber_1 — Thu, 05 Feb 2004 09:45:50 GMT

Hi Patrick,

That was quick! and it solved my problem. I didn't get the meaning of /etc/logingroup. I hope I do now :)

Thanks very much!

Joachim

Re: group permission problem

Jeff Schussele — Thu, 05 Feb 2004 09:47:22 GMT

Hi Joachim,

Although I agree 100% that linking logingroup to group is THE way to solve this, I just wanted to point out that another solution would be to have the oracle user issue the following command
newgrp users
prior to placing the file(s) in testtt.
They could then
newgrp dba
to get back to their primary group.
That command changes the current GID & can be checked with the
id
command.

Rgds,
Jeff

Re: group permission problem

Joachim Weber_1 — Thu, 05 Feb 2004 10:06:20 GMT

Hi,

Thanks Volkmar, I didn't see your answer in the first place.

Jeff:
I agree that the newgrp command would be another way to do it. Unfortunately this needs to be a permanent setup and not a single one. Therefore I guess it might be better to create the link. Thanks anyway!

Regards,

Joachim