You have my sympathy, Les. That uncertainty is the very reason that
I always put it in my implementation contracts that I need root access
until the box is ready to turn over to production. Whenever you see
some odd behavior that you suspect may be related to your userid
or permissions, you will need to check it out with root access before
calling Support, if only so you can tell them that it works one way but
not the other.
It's mostly a question of territory, skills, and schedules. Your best
bet is to make friends with the Unix support team, so they will be
quick to respond when you need something done. Do not make
war, you will not win.
Oh, and if you keep track of all of the little things you have to do to
run that way, you can publish your own white-paper!
Cordially,
Leslie A. Clark
IBM Global Services - Systems Mgmt & Networking
Detroit
lesdickert@nsimail.com@tkg.com on 03/14/2001 09:03:39 AM
Please respond to IBM NetView Discussion <nv-l@tkg.com>
Sent by: owner-nv-l@tkg.com
To: NV-L@tkg.com
cc:
Subject: [NV-L] NetView running non-root
I am consulting with a large company and providing
NetView technical support (NetView 6.0.1 under AIX 4.3.3).
The UNIX group (separate from the group I am working
for) has set up NetView so that I can run it without
root priviledges. Of course there are many NetView
executables owned by root with the SUID bit set.
We are still in test mode and most things seem to
work OK, but we are having a few strange things that
might be related to the non-root mode of operation.
Does anyone know whether or not we will be able to
get Tivoli support for this setup? We have a support
contract, but the UNIX group will be the contact with
Tivoli support, and I don't know if they have told them
of this setup.
BTW, I showed the UNIX group James Shank's "white paper"
on the inadvisability of setting up NetView to run
non-root, but they pursued it anyway.
Thanks,
Les Dickert
Verisign Consulting
-------------------------------------------------
Get personalized e-mail and a web address or your
own free e-mail at http://www.networksolutions.com.
_________________________________________________________________________
NV-L List information and Archives: http://www.tkg.com/nv-l
|