[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference decwet::networker

Title:NetWorker
Notice:kits - 12-14, problem reporting - 41.*, basics 1-100
Moderator:DECWET::RANDALL.com::lenox
Created:Thu Oct 10 1996
Last Modified:Fri Jun 06 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:750
Total number of notes:3361

442.0. "savefs : All Can't startup because my UID is not ROOT" by NETRIX::"[email protected]" ([email protected]) Thu Feb 27 1997 00:45

Hi ,

Curious behaviour between networker and ase :

I can reproduce the customer's problem offsite :

-1- lonesome is the networker server :
        OSF1 lonesome.evt.dec.com V4.0 464 alpha
        Networker V4.2B-12/10

-2- cluone and clutwo are two ase (V1.4) cluster members and are networker
    Cluster host clients of lonesome :
        OSF1 clutwo.evt.dec.com V4.0 564 alpha
        Networker Cluster Host V4.2B-12/10
        OSF1 cluone.evt.dec.com V4.0 564 alpha
        Networker Cluster Host V4.2B-12/10

Here is the problem :

-1- Being root user on lonesome , the following command works :

# savegroup -pnv -c clutwo.evt.dec.com
clutwo.evt.dec.com:All                    level=incr
 2/27/97  9:07:11 savegroup: Run up to 4 clients in parallel
 2/27/97  9:07:11 savegroup: clutwo.evt.dec.com:probe                  
started
savefs -s lonesome.evt.dec.com -g Default -p -n -l full -R -v
 2/27/97  9:07:17 savegroup: clutwo.evt.dec.com:probe succeeded.
rcmd clutwo.evt.dec.com, user root: `savefs -s lonesome.evt.dec.com -g Default
-
p -n -l full -R -v'
asavegrp: authtype nsrexec
type: NSR client description;
pools supported: Yes;
arch: decaxp;
CPU type: alpha;
CPUs: 2;
hosts: 2;
IP address: 16.189.128.99, 10.0.0.2;
kernel arch: OSF1;
License units: 1100;
NAS Client: No;
OS: OSF1 V4.0;
version: V4.2B;
save set: path=/, level=full, diskno=3, max_sessions=1, stype=save,\
path=/usr, level=full, diskno=2, max_sessions=1, stype=save,\
path=/var, level=full, diskno=1, max_sessions=1, stype=save,\
path=/MCS, level=full, diskno=0, max_sessions=1, stype=save ;
parallelism: 8
--- Probe Summary ---
clutwo.evt.dec.com:/                  level=incr, dn=3, mx=1, vers=pools, p=8
clutwo.evt.dec.com:/   level=incr, save as of Thu Feb 27 03:40:38 GMT+0100
1997
clutwo.evt.dec.com:/usr               level=incr, dn=2, mx=1, vers=pools, p=8
clutwo.evt.dec.com:/usr level=incr, save as of Thu Feb 27 03:39:02 GMT+0100
1997
clutwo.evt.dec.com:/var               level=incr, dn=1, mx=1, vers=pools, p=8
clutwo.evt.dec.com:/var level=incr, save as of Thu Feb 27 03:39:01 GMT+0100
1997
clutwo.evt.dec.com:/MCS               level=incr, dn=0, mx=1, vers=pools, p=8
clutwo.evt.dec.com:/MCS level=incr, save as of Thu Feb 27 03:40:37 GMT+0100
1997
clutwo.evt.dec.com:index             level=9, dn=-1, mx=0, vers=pools, p=8
clutwo.evt.dec.com:index  level=9, save as of Sun Feb 23 05:21:21 GMT+0100
1997

-2- Being non-root user on lonesome , the same command fails :

130-lonesome.evt.dec.com % savegroup -pnv -c clutwo.evt.dec.com
clutwo.evt.dec.com:All                    level=incr
 2/27/97  9:08:33 savegroup: Run up to 4 clients in parallel
 2/27/97  9:08:33 savegroup: clutwo.evt.dec.com:probe                  
started
savefs -s lonesome.evt.dec.com -g Default -p -n -l full -R -v
 2/27/97  9:08:39 savegroup: clutwo.evt.dec.com:probe unexpectedly exited.
* clutwo.evt.dec.com:All rcmd clutwo.evt.dec.com, user root: `savefs -s
lonesome
.evt.dec.com -g Default -p -n -l full -R -v'
* clutwo.evt.dec.com:All asavegrp: authtype nsrexec
* clutwo.evt.dec.com:All Can't startup because my UID is not ROOT!
--- Probe Summary ---
clutwo.evt.dec.com:All             level=full, dn=-1, mx=0, vers=unknown, p=1
clutwo.evt.dec.com:All level=full, save as of Thu Jan  1 01:00:00 GMT+0100
1970
clutwo.evt.dec.com:index           level=9, dn=-1, mx=0, vers=unknown, p=1
clutwo.evt.dec.com:index  level=9, save as of Sun Feb 23 05:21:21 GMT+0100
1997

-3- Stopping ASE on clutwo , the previous command works being non-root user:

# uname -a
OSF1 clutwo.evt.dec.com V4.0 564 alpha
# /sbin/init.d/asemember stop
Stopping ASE ...
        Shutting down the Cluster subsystem monitor daemon (/usr/sbin/submon)
        Shutting down the TRACT server (/usr/sbin/tractd)
        Shutting down the ASE agent (/usr/sbin/aseagent)
        Shutting down the ASE logger (/usr/sbin/aselogger)
        Deinitializing the ASE Availability Manager

131-lonesome.evt.dec.com % savegroup -pnv -c clutwo.evt.dec.com
clutwo.evt.dec.com:All                    level=incr
 2/27/97  9:12:20 savegroup: Run up to 4 clients in parallel
 2/27/97  9:12:20 savegroup: clutwo.evt.dec.com:probe                  
started
savefs -s lonesome.evt.dec.com -g Default -p -n -l full -R -v
 2/27/97  9:12:26 savegroup: clutwo.evt.dec.com:probe succeeded.
rcmd clutwo.evt.dec.com, user root: `savefs -s lonesome.evt.dec.com -g Default
-
p -n -l full -R -v'
asavegrp: authtype nsrexec
type: NSR client description;
pools supported: Yes;
arch: decaxp;
CPU type: alpha;
CPUs: 2;
hosts: 1;
IP address: 16.189.128.99, 10.0.0.2;
kernel arch: OSF1;
License units: 1100;
NAS Client: No;
OS: OSF1 V4.0;
version: V4.2B;save set: path=/, level=full, diskno=3, max_sessions=1,
stype=save,\
path=/usr, level=full, diskno=2, max_sessions=1, stype=save,\
path=/var, level=full, diskno=1, max_sessions=1, stype=save,\
path=/MCS, level=full, diskno=0, max_sessions=1, stype=save ;
parallelism: 8
--- Probe Summary ---

clutwo.evt.dec.com:/                  level=incr, dn=3, mx=1, vers=pools, p=8
clutwo.evt.dec.com:/   level=incr, save as of Thu Feb 27 03:40:38 GMT+0100
1997
clutwo.evt.dec.com:/usr               level=incr, dn=2, mx=1, vers=pools, p=8
clutwo.evt.dec.com:/usr level=incr, save as of Thu Feb 27 03:39:02 GMT+0100
1997
clutwo.evt.dec.com:/var               level=incr, dn=1, mx=1, vers=pools, p=8
clutwo.evt.dec.com:/var level=incr, save as of Thu Feb 27 03:39:01 GMT+0100
1997
clutwo.evt.dec.com:/MCS               level=incr, dn=0, mx=1, vers=pools, p=8
clutwo.evt.dec.com:/MCS level=incr, save as of Thu Feb 27 03:40:37 GMT+0100
1997
clutwo.evt.dec.com:index             level=9, dn=-1, mx=0, vers=pools, p=8
clutwo.evt.dec.com:index  level=9, save as of Sun Feb 23 05:21:21 GMT+0100
1997

-4- Restarting ASE and stopping nsrexecd on clutwo , the command works:

# uname -a
OSF1 clutwo.evt.dec.com V4.0 564 alpha
# /sbin/init.d/asemember start
Trigger action daemon (TRACT server) started
Starting ASE ...
        Loading cluster map
        Initializing the ASE Availability Manager
        ASE logger started (/usr/sbin/aselogger)
        ASE agent started (/usr/sbin/aseagent)
ASE member started
Cluster subsystem monitor daemon (Cluster subsystem monitor daemon) started

# /sbin/init.d/networker stop

134-lonesome.evt.dec.com % savegroup -pnv -c clutwo.evt.dec.com

clutwo.evt.dec.com:All                    level=incr
 2/27/97  9:20:31 savegroup: Run up to 4 clients in parallel
 2/27/97  9:20:31 savegroup: clutwo.evt.dec.com:probe                  
started
savefs -s lonesome.evt.dec.com -g Default -p -n -l full -R -v
 2/27/97  9:20:32 savegroup: clutwo.evt.dec.com:probe succeeded.
rcmd clutwo.evt.dec.com, user root: `savefs -s lonesome.evt.dec.com -g Default
-
p -n -l full -R -v'
 2/27/97  9:20:31 asavegrp: RPC exec on clutwo.evt.dec.com is unavailable. 
Tryi
ng RSH.
asavegrp: authtype rsh
type: NSR client description;
pools supported: Yes;
arch: decaxp;
CPU type: alpha;
CPUs: 2;
hosts: 2;
IP address: 16.189.128.99, 10.0.0.2;
kernel arch: OSF1;
License units: 1100;
NAS Client: No;
OS: OSF1 V4.0;
version: V4.2B;
save set: path=/, level=full, diskno=3, max_sessions=1, stype=save,\
path=/usr, level=full, diskno=2, max_sessions=1, stype=save,\
path=/var, level=full, diskno=1, max_sessions=1, stype=save,\
path=/MCS, level=full, diskno=0, max_sessions=1, stype=save ;
parallelism: 8
--- Probe Summary ---
clutwo.evt.dec.com:/                  level=incr, dn=3, mx=1, vers=pools, p=8
clutwo.evt.dec.com:/   level=incr, save as of Thu Feb 27 03:40:38 GMT+0100
1997
clutwo.evt.dec.com:/usr               level=incr, dn=2, mx=1, vers=pools, p=8
clutwo.evt.dec.com:/usr level=incr, save as of Thu Feb 27 03:39:02 GMT+0100
1997
clutwo.evt.dec.com:/var               level=incr, dn=1, mx=1, vers=pools, p=8
clutwo.evt.dec.com:/var level=incr, save as of Thu Feb 27 03:39:01 GMT+0100
1997
clutwo.evt.dec.com:/MCS               level=incr, dn=0, mx=1, vers=pools, p=8
clutwo.evt.dec.com:/MCS level=incr, save as of Thu Feb 27 03:40:37 GMT+0100
1997
clutwo.evt.dec.com:index             level=9, dn=-1, mx=0, vers=pools, p=8
clutwo.evt.dec.com:index  level=9, save as of Sun Feb 23 05:21:21 GMT+0100
1997

So , what's happening ?

Thanks for help .

Christian .




[Posted by WWW Notes gateway]
T.RTitleUserPersonal
Name
DateLines
442.1DECWET::FARLEEInsufficient Virtual um...er....Thu Feb 27 1997 14:3019
Very good job of isolating the problem! Thanks.

I believe that the problem is that savefs is installed on clutwo
without the SUID root protection that it needs.

When ASE is shut down, we don't attempt to access the ASE configuration
database.  Since those routines require root access, they cause the
failure if you do not have root privs.

On the cluster hosts (cluone and clutwo), please do this:

ls -l /usr/bin/savefs

If it is a link, repeat on the path pointed to by the link.

Then please report the findings here.

Thanks,
Kevin
442.2DECWET::ONOSoftware doesn't break-it comes brokenThu Feb 27 1997 16:0410
The suid bit can be turned off if the client kit is unpacked 
incorrectly.  If you used tar to unpack a client kit, you must 
have the "p" option in the tar command (tar xvpf <file>),
otherwise the file protections in the distribution will not be
propagated. 

If the savefs file does not have the suid bit set, I would 
suggest reinstalling the client kit.

Wes
442.3Both savefs have suid bit set ...NETRIX::&quot;[email protected]&quot;[email protected]Fri Feb 28 1997 01:5799
Both savefs on cluone and clutwo have suid bit set :

# uname -a
OSF1 clutwo.evt.dec.com V4.0 564 alpha

# ls -l /usr/bin/savefs
lrwxrwxrwx   1 root     system        48 Feb 11 19:22 /usr/bin/savefs ->
/usr/opt/BRX422/BRXP3CKIT422/decaxp/decpt/savefs

# ls -l /usr/opt/BRX422/BRXP3CKIT422/decaxp/decpt/savefs
-rws--x--x   1 root     system    696320 Feb  4 00:28 
/usr/opt/BRX422/BRXP3CKIT422/decaxp/decpt/savefs

# sum /usr/opt/BRX422/BRXP3CKIT422/decaxp/decpt/savefs
33742    680 /usr/opt/BRX422/BRXP3CKIT422/decaxp/decpt/savefs

# uname -a
OSF1 cluone.evt.dec.com V4.0 564 alpha

# ls -l /usr/bin/savefs
lrwxrwxrwx   1 root     system        48 Feb 11 19:07 /usr/bin/savefs -> 
/usr/opt/BRX422/BRXP3CKIT422/decaxp/decpt/savefs

# ls -l /usr/opt/BRX422/BRXP3CKIT422/decaxp/decpt/savefs
-rws--x--x   1 root     system    696320 Feb  4 00:28 
/usr/opt/BRX422/BRXP3CKIT422/decaxp/decpt/savefs

# sum /usr/opt/BRX422/BRXP3CKIT422/decaxp/decpt/savefs
33742    680 /usr/opt/BRX422/BRXP3CKIT422/decaxp/decpt/savefs

# uname -a
OSF1 clutwo.evt.dec.com V4.0 564 alpha

# pwd
/usr/opt/BRX422

# ls -lR
total 17
drwxr-xr-x   3 root     system      8192 Feb 11 19:20 BRXP1CKIT422
drwxr-xr-x   3 root     system      8192 Feb 11 19:21 BRXP3CKIT422
-rwxr-x---   1 root     system       411 Feb 11 19:20 patch1.sh

./BRXP1CKIT422:
total 18808
-rw-r--r--   1 root     system   19251200 Jan 15 22:58 clientkit.tar
drwxrwxr-x   4 root     bin          8192 Jan 15 22:57 decaxp

./BRXP1CKIT422/decaxp:
total 16
drwxrwxr-x   2 root     bin         8192 Jan 15 22:58 decaxp
drwxrwxr-x   2 root     bin         8192 Jan 15 22:58 decpt

./BRXP1CKIT422/decaxp/decaxp:
total 9800
-rws--x--x   1 root     system   1171456 Jan 14 20:54 nsrarchive
-r-xr-xr-x   1 root     system   1302528 Jan 14 20:54 nwbackup
-rws--x--x   1 root     system   1581056 Jan 14 20:54 nwrecover
-rws--x--x   1 root     system   1261568 Jan 14 20:54 nwretrieve
-rws--x--x   1 root     system   1261568 Jan 14 20:54 recover
-rws--x--x   1 root     system   1089536 Jan 14 20:54 save
-rws--x--x   1 root     system    811008 Jan 14 20:54 savefs
-rws--x--x   1 root     system   1556480 Jan 14 20:54 srecover

./BRXP1CKIT422/decaxp/decpt:
total 8984
-rws--x--x   1 root     system   1032192 Jan 14 20:54 nsrarchive
-r-xr-xr-x   1 root     system   1155072 Jan 14 20:54 nwbackup
-rws--x--x   1 root     system   1441792 Jan 14 20:54 nwrecover
-rws--x--x   1 root     system   1114112 Jan 14 20:54 nwretrieve
-rws--x--x   1 root     system   1114112 Jan 14 20:54 recover
-rws--x--x   1 root     system    942080 Jan 14 20:54 save
-rws--x--x   1 root     system    696320 Jan 14 20:54 savefs
-rws--x--x   1 root     system   1703936 Jan 14 20:54 srecover

./BRXP3CKIT422:
total 2240
-rw-r--r--   1 root     system   2283520 Feb  4 02:46 clientkit.tar
drwxrwxr-x   4 root     bin         8192 Feb  4 02:46 decaxp

./BRXP3CKIT422/decaxp:
total 16
drwxrwxr-x   2 root     bin         8192 Feb  4 02:46 decaxp
drwxrwxr-x   2 root     bin         8192 Feb  4 02:46 decpt

./BRXP3CKIT422/decaxp/decaxp:
total 0

./BRXP3CKIT422/decaxp/decpt:
total 2224
-rws--x--x   1 root     system    942080 Feb  4 00:28 save
-rws--x--x   1 root     system    696320 Feb  4 00:28 savefs
-rws--x--x   1 root     system    638976 Feb  4 00:29 uasm





[Posted by WWW Notes gateway]
442.4set NOREPLY, IPMT CFS.49379DECWET::EVANSNSR EngineeringTue Mar 04 1997 09:420