topic Re: setuid in Operating System - HP-UX

setuid

YOGI_3 — Tue, 08 Nov 2005 02:17:08 GMT

Hi all..
I am getting following error while i am ruuning one application ...application is price maker..
where i need to check for this error

UNIX login module failed to authenticate a user: 'wa
rning: unixuserinfo is not setuid to root'

Re: setuid

RAC_1 — Tue, 08 Nov 2005 02:23:30 GMT

Looks like your apps depends upon the setuid script. you will have to set suid on it.
ll "script"
chmod 4755 will set setuid on it.

Re: setuid

Orhan Biyiklioglu — Tue, 08 Nov 2005 02:25:03 GMT

The following command

find / -name "unixuserinfo" -exec chmod u+s '{}' \;

will find all the files named unixuserinfo on the system an make them setuid.

However this is very dangerous because of the obvious security concerns about setuid programs. Only try it if you know what you are doing.

hth

Re: setuid

AwadheshPandey — Tue, 08 Nov 2005 02:26:10 GMT

try to run this application as root, may be this is the application only run by root user.

Awadhesh

Re: setuid

Muthukumar_5 — Tue, 08 Nov 2005 02:39:34 GMT

check the permission of that application as ls -l . You have to set set uset ID bit as,

# chmod 4755

so that it will use setuid for specific user.

hth.

Re: setuid

YOGI_3 — Tue, 08 Nov 2005 02:42:47 GMT

hi orhan and RAC, info provide by u is very very useful....
i find the files names unixuserinfo having the permissions as follows..

# ll /jvpc/ops/PriceMaker/Product/lib/unixuserinfo
-r-sr-sr-x 1 jvpc users 28924 Mar 1 2005 /jvpc/ops/PriceMaker/Product/lib/unixuserinfo
# ll /jvpc/ops/PriceMaker_513/Product/lib/unixuserinfo
-r-sr-sr-x 1 jvpc users 69544 Jul 13 2004 /jvpc/ops/PriceMaker_513/Product/lib/unixuserinfo
# ll /jvpc/ops/PriceMaker.error/Product/lib/unixuserinfo
-r-sr-sr-x 1 jvpc users 69544 Jul 23 2004 /jvpc/ops/PriceMaker.error/Product/lib/unixuserinfo
#

Re: setuid

Orhan Biyiklioglu — Tue, 08 Nov 2005 02:49:42 GMT

So the problem was the file ownership than not the permissions.

Use this

find / -name "unixuserinfo" -exec chown root '{}' \;

this will solve the problem.

PS: please assign points.

hth

Re: setuid

Muthukumar_5 — Tue, 08 Nov 2005 02:54:25 GMT

Permission of,

-r-sr-sr-x 1 jvpc users

says that,

you have setuid and setgid to jvpc user and users group. It will make problem to root user so that change ownership as like /usr/bin/passwd tool as,

-r-sr-x-r-x (4555) root:bin group.

#chmod 4555
#chown root:bin

Do this. It will work.

hth.

Re: setuid

Arunvijai_4 — Tue, 08 Nov 2005 03:00:04 GMT

#chmod 4555 /jvpc/ops/PriceMaker/Product/lib/unixuserinfo and other files, also # chown root:bin /jvpc/ops/PriceMaker/Product/lib/unixuserinfo

-Arun