| Author |
Message
|
| ghoshly |
 Posted: Thu Jun 22, 2017 6:03 pm Post subject: BROKER/Integration Node IGNORES USERS UMASK |
 |
|
Partisan
Joined: 10 Jan 2008
Posts: 333
|
Hello,
There were multiple thread on this subject but mostly they are quite old and using previous WMB versions. I am having similar problem of files being created by IIB without honoring OS umask. However files created manually by the user is as per the umask.
IIB version 10.0.0.7 on AIX 7.1
| Quote: |
mqm@sdxbf-m23n6$
mqm@sdxbf-m23n6$ lsuser mqm
mqm id=230 pgrp=mqm groups=mqm,staff,appslog,mqbrkrs home=/home/mqm shell=/usr/bin/ksh gecos=8990230|ESB Account roles=
mqm@sdxbf-m23n6$ ls -l EDI
total 8
-rw-rw---- 1 mqm mqm 690 Jun 22 19:11 EDI_PO_SO103.ord
-rw-r--r-- 1 mqm mqm 0 Jun 22 17:28 abc*.txt
drwxrws--x 2 mqm mqm 256 Jun 22 19:11 mqsitransit
mqm@sdxbf-m23n6$ umask
022
mqm@sdxbf-m23n6$ echo $MQSI_UMASK_COPY
1
mqm@sdxbf-m23n6$ oslevel -s
7100-04-03-1642
mqm@sdxbf-m23n6$
|
File abc*.txt was created manually using touch command where as the other file and mqsitransit directory is created by integration node itself.
What I am missing here? Please help. |
|
| Back to top |
|
 |
| zpat |
| Posted: Thu Jun 22, 2017 10:44 pm Post subject: |
|
|
Jedi Council
Joined: 19 May 2001
Posts: 5866
Location: UK
|
It's not normally recommended to run the broker under the mqm id.
On AIX try setting the g+s bit on the directory.
_________________
Well, I don't think there is any question about it. It can only be attributable to human error. This sort of thing has cropped up before, and it has always been due to human error. |
|
| Back to top |
|
|
| ghoshly |
| Posted: Fri Jun 23, 2017 5:14 am Post subject: Directory permission |
|
|
Partisan
Joined: 10 Jan 2008
Posts: 333
|
Mentioned below is the directory permission currently. Do I still need to execute the command?
| Quote: |
drwxrwsrwx 4 mqm mqm 256 Jun 22 22:15 EDI
|
Thanks for helping me out. |
|
| Back to top |
|
|
| zpat |
| Posted: Sun Jun 25, 2017 10:49 pm Post subject: |
|
|
Jedi Council
Joined: 19 May 2001
Posts: 5866
Location: UK
|
Global write access is a bad idea, don't even think of doing it...
Too often I see this being done (and left) as opposed to fixing the cause.
I like to create mqsitransit directories by hand to ensure the correct group ownership, or change the group owner to the correct one with chown.
_________________
Well, I don't think there is any question about it. It can only be attributable to human error. This sort of thing has cropped up before, and it has always been due to human error. |
|
| Back to top |
|
|
| gbaddeley |
| Posted: Mon Jun 26, 2017 5:06 pm Post subject: |
|
|
Jedi Knight
Joined: 25 Mar 2003
Posts: 2538
Location: Melbourne, Australia
|
| Quote: |
| I am having similar problem of files being created by IIB without honoring OS umask. |
Check the logon profile for the userid that the IIB processes run under, to see if it has a umask command that overrides the OS default umask.
_________________
Glenn |
|
| Back to top |
|
|
| Armageddon123 |
| Posted: Mon Jul 03, 2017 10:08 am Post subject: |
|
|
Acolyte
Joined: 11 Feb 2014
Posts: 61
|
i actually never really understood how to play with umask!, in that case, it is a relif that a new LocalEnv variable is provided in IIB10 to mention the output permissions, it may be only applicable for File nodes.
checkout how to set OutputLocalEvironment.Destination.File.PosixPermissions |
|
| Back to top |
|
|
|
|
