[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference vaxaxp::vmsnotes

Title:VAX and Alpha VMS
Notice:This is a new VMSnotes, please read note 2.1
Moderator:VAXAXP::BERNARDO
Created:Wed Jan 22 1997
Last Modified:Fri Jun 06 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:703
Total number of notes:3722

450.0. "run/detach/uic/authorize use the same time" by HGOSPS::MASCOTTANG () Fri Apr 11 1997 00:03

    My customer ask that can he use $run/detach command by use of
    /authorize and /UIC at the same. If yes, how can he use it ?
    or Where can I find this material from manual ?

    At the same time, customer would like to know that when he uses
    $run/detach/uic.  What privileges does he need ?

    Any advice should be appreciated.
    
T.RTitleUserPersonal
Name
DateLines
450.1BSS::JILSONWFH in the Chemung River ValleyFri Apr 11 1997 10:1310
/UIC & /AUTHORIZE should not be allowed together but they are.  If you use 
these together and the image you run is LOGINOUT.EXE, the UIC of the 
created process will be the UIC of the username executing the RUN.  The 
code first creates the process with the UIC in /UIC and then sees the 
/AUTHORIZE and modifes the process with the quotas, uic & rights of the 
username executing RUN.  I suspect you need the impersonation services in 
the latest version of VMS.  Unfortunately there is no way to create a 
process with a different username with the DCL RUN command.

Jilly
450.22 steps SUBMIT/USER then RUN/DETACHED/AUTHORIZEGIDDAY::GILLINGSa crucible of informative mistakesSun Apr 13 1997 21:298
  To create a detached process running under a different username, you need
  2 steps. First formulate the RUN/DETACHED/AUTHORIZE command as if executed
  by the target user and place it in a command procedure. Execute the
  procedure as a batch job with SUBMIT/USER=target.

  Privilege required is CMKRNL.

						John Gillings, Sydney CSC
450.3AUSS::GARSONDECcharity Program OfficeSun Apr 13 1997 22:4416
    re .0
    
>    At the same time, customer would like to know that when he uses
>    $run/detach/uic.  What privileges does he need ?
    
    $ RUN/DETACH by itself requires no privileges.
    
    $ RUN/UIC requires DETACH privilege
    
    DETACH privilege is an "all" category privilege.
    
    $ RUN/UIC/DETACH is a redundant form of $ RUN/UIC reflecting historical
    cruft.
    
    See a recent topic regarding the use of /AUTHORIZE with /UIC, which does
    not work as expected.