Revoke /id VMS$MEM_RESIDENT_USER

[Bert_22]

When i want to revoke the identifier VMS$MEM_RESIDENT_USER in uaf, i get the message %UAF-W-IDOUTRNG, identifier value is not within legal range.
I grant it to a test account, that works OK but i can't revoke it from that test account either.
Can someone help me?

Thanks in advance.

[Volker Halle]

Bert,

this works fine for me on OpenVMS Alpha V8.2:

UAF> show/id VMS$MEM_RESIDENT_USER
Name Value Attributes
VMS$MEM_RESIDENT_USER %X80000009

UAF> grant/id VMS$MEM_RESIDENT_USER user
%UAF-I-GRANTMSG, identifier VMS$MEM_RESIDENT_USER granted to user
UAF> revoke/id VMS$MEM_RESIDENT_USER user
%UAF-I-REVOKEMSG, identifier VMS$MEM_RESIDENT_USER revoked from user

What's the identifier value on your system ? Which version of OpenVMS ?

Volker.

[David Jones_21]

I'd guess your rightslist database is inconsitent.

$ help/message idoutrng
IDOUTRNG, identifier value is not within legal range

Facility: UAF, Authorize Utility

Explanation: The specified value for an identifier is not within the
permissible range. A general identifier can have an integer
value between 65,536 and 268,435,455. A UIC identifier takes a
value in standard UIC format.

User Action: Reenter your command with an identifier value that is within
the permissible range.

[VEL_1]

Hi,

Please look at the following link.

Thanks.

[Bert_22]

VMS version 7.3-2 with latest patches. 5 node cluster, all Alpha's.
UAF> show/id VMS$MEM_RESIDENT_USER
Name Value Attributes
VMS$MEM_RESIDENT_USER %X80000009

[Volker Halle]

Bert,

looks like I can confirm this on V7.3-2:

UAF> show/id vms$mem_resident_user
Name Value Attributes
VMS$MEM_RESIDENT_USER %X80000009
UAF> grant/id VMS$MEM_RESIDENT_USER user
%UAF-I-GRANTMSG, identifier VMS$MEM_RESIDENT_USER granted to user
UAF> revoke/id VMS$MEM_RESIDENT_USER user
%UAF-W-IDOUTRNG, identifier value is not within legal range

So it's either something configuration-dependant (less likely) or a bug in OpenVMS (and fixed in V8.2). Can anyone do this operation successfully on V7.3-2 ?

Volker.

[Ian Miller.]

Curious. What version of VMS?
Whats the result of
show/id/full VMS$MEM_RESIDENT_USER
in authorize?

[Ian Miller.]

Interestingly on cluster with V7.3-2 and V8.2 (which has common SYSUAF, RIGHTSLIST etc) I can grant and revoke successfully on V8.2 but not on V7.3-2 and on VAX V7.3 in the same cluster I get that error when trying to grant the identifier.

Looks like a bug - report to hp.

[Thomas Ritter]

Basic RDB operations like "open" require the user to have been granted this identifier. Removing it may cause a problem.

Why do you want to remove the id ?

[Peter Quodling]

It's also of relevance in "NUMA" Mode, in allowing control of RAD (Resource Affinity Domains) (THis stuff cam in at around 7.2-1H1)

What flavour of hardware is this, and what is it's O/S History...

q