| Author |
Message
|
| Suessli |
 Posted: Tue Dec 16, 2008 5:11 am Post subject: Same userid for same username in HACMP? |
 |
|
Novice
Joined: 29 Jan 2008
Posts: 15
|
Hello everyone,
I am working in a hacmp environment and queue managers are switching from node to node in the cause of a failure. In the manual for supportpac MC91 I found that mqm users and groups on both nodes must have the same userid. My questions is: What about other users and their userids? What about client channels that run with usernames which do not have the same userid on the other side of the hacmp cluster? Would those channels start up after a switch and queue manager start?
_________________
Suessli |
|
| Back to top |
|
 |
| Vitor |
| Posted: Tue Dec 16, 2008 5:18 am Post subject: Re: Same userid for same username in HACMP? |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| Suessli wrote: |
| What about client channels that run with usernames which do not have the same userid on the other side of the hacmp cluster? |
The question is why do they not have the same userid?
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| Suessli |
| Posted: Tue Dec 16, 2008 5:22 am Post subject: Re: Same userid for same username in HACMP? |
|
|
Novice
Joined: 29 Jan 2008
Posts: 15
|
| Vitor wrote: |
| The question is why do they not have the same userid? |
Why should they? You have to distinguish between "user ID" and "user name". If you enter "id mqm" on AIX you get the following output.
uid=203(mqm) gid=204(mqm) groups=1(staff)
The number 203 is the user ID and mqm is the user name. Ok?
_________________
Suessli |
|
| Back to top |
|
|
| exerk |
| Posted: Tue Dec 16, 2008 5:29 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
I think Vitor was asking the question in relation to the MCAUSER userid you should have on the client channels....
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| Suessli |
| Posted: Tue Dec 16, 2008 5:33 am Post subject: |
|
|
Novice
Joined: 29 Jan 2008
Posts: 15
|
| exerk wrote: |
| I think Vitor was asking the question in relation to the MCAUSER userid you should have on the client channels.... |
I think I understood him. We have same user names in the MCAUSER parameter on both machines (it is one queue manager in a cluster ressource switching from node to node) but in the OS the user id, which is the numerical OS parameter, is different.
_________________
Suessli |
|
| Back to top |
|
|
| mqjeff |
| Posted: Tue Dec 16, 2008 5:36 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
It is less important for client/MCAUSER ids, because these typically do not own files on the server.
One should consider the implication on SSL keyrings, however.
It is also a question of administration practice. If it is "the same user", then why would it not have "the same userid" on all unix boxes? |
|
| Back to top |
|
|
| Suessli |
| Posted: Tue Dec 16, 2008 5:43 am Post subject: |
|
|
Novice
Joined: 29 Jan 2008
Posts: 15
|
| mqjeff wrote: |
It is less important for client/MCAUSER ids, because these typically do not own files on the server.
One should consider the implication on SSL keyrings, however.
It is also a question of administration practice. If it is "the same user", then why would it not have "the same userid" on all unix boxes? |
We are giving access to those users for some mq objects. So it is very important. Why consider SSL? Please explain.
I do not get your last point. If I have two different systems and local users with same user names, for example mqm. It is possible that they get different user ids which are just incremental numbers on each of the machines.
_________________
Suessli |
|
| Back to top |
|
|
| SAFraser |
| Posted: Wed Dec 17, 2008 1:46 pm Post subject: |
|
|
Shaman
Joined: 22 Oct 2003
Posts: 742
Location: Austin, Texas, USA
|
UIDs are not by necessity incremental numbers on machines. They can be (and should be) specified by the admin when the account is created.
The UIDs and GIDs are always created with the same value across all systems at our site. This prevents a lot of irritating problems including, for example, file ownership issues when copying between systems. |
|
| Back to top |
|
|
|
|
