WV-Astronaut-RPM Package File Access Control Problem

[Jeffrey Fu]

Hi,

      I tried install WV-Astronaut-RPM Package V0.8-2 on an Fedora Core 6 old laptop. But found that the account textEHR can not login.

When I trying to figure out the problem, I found that /opt/lsb-gtm/ directory had different file access controls from the same DEB package.

The /opt/lsb-gtm/ is of 550 access as follows:

lrwxrwxrwx 1 root root   27 Nov 27 23:57 gtm -> /opt/lsb-gtm/V5.3-004A_i686
dr-xr-x--- 4 bin  gtm  4096 Nov 28 00:01 V5.3-004A_i686

 

The debian installation is different for /opt/lsb-gtm/ as 575 which allows others to read and enter the directory

 lrwxrwxrwx 1 root root   27 2009-11-25 21:27 gtm -> /opt/lsb-gtm/V5.3-004A_i686
dr-xrwxr-x 4 bin  bin  4096 2009-11-25 21:30 V5.3-004A_i686

Individual files for GT.M is also different in control access. This caused accounts other than in 'gtm' group from accessing the GT.M infrastructures. But RPM installation had just set all the three accounts in the group of 'worldvistaEHR' (not as DEB version had the three account in 'gtm' group in /etc/group). So this will cause access permission problems when accounts other than 'root' to run /opt/worldvista/EHR/bin/vistarunzu.sh which finally calls the GT.M mumps environment.

 

Is this problem be with my Fedora Core installation only? or is it a problem for the RPM package?

 

Thanks,

Jeffrey Fu

[I, Valdes]

The vexing permissions and rpm deb issue. I will check, advise and
fix. FYI the client communicator ID's text<instance_name> and
client<instance_name> are about to change to something like
text<port_number> and client<port_number> on both server and client
installers for 1) <instance> name co-existence to allow for
<branding>vista/<instance> to be the same name as long as <branding>
is different and 2) a 'universal' client installer.

-- IV

[Jeffrey Fu]

Universal client installer could be great. Look forward for that!

Why change the account as <port_number>? text9260 seems a little bit strange.

 

Jeffrey Fu

--
http://groups.google.com/group/Hardhats
To unsubscribe, send email to Hardhats-u...@googlegroups.com

[I, Valdes]

Jeffrey I've found the problem, I've flailed a little with permissions
in the past on Ubuntu and found after much searching that groups = yes
in the xinetd listener .conf files makes it behave well so the
permissions will be the same as rpm. It is going up to sourceforge now
but will take a few hours. The much improved client installer is up
already and I'll formally announce that and a few other things
probably later today... -- IV

On Nov 27, 7:30 pm, Jeffrey Fu <gsb...@gmail.com> wrote:
> Universal client installer could be great. Look forward for that!
> Why change the account as <port_number>? text9260 seems a little bit
> strange.
>
> Jeffrey Fu
>

[Jeffrey Fu]

Hi, IV

     There a permission problem with the RPM package. Since all the files under /opt/lsb-gtm/ are set to r-xr-x---

and all the three accounts does not belongs to the 'gtm' group. So when they execute the /opt/worldvista/EHR/bin/vistarunzu.sh

which finally calls /opt/lsb-gtm/mumps -r ^ZU will fail(since the textEHR account do not have execute access to the mumps program. Will try the improved client installer a little bit latter.

 

All the best,

Jeffrey Fu

[I, Valdes]

All 3 id's do belong to gtm group. Or at least they should. Otherwise
the whole thing probably would not work. -- IV

On Nov 30, 5:26 am, Jeffrey Fu <gsb...@gmail.com> wrote:
> Hi, IV
>      There a permission problem with the RPM package. Since all the files
> under /opt/lsb-gtm/ are set to r-xr-x---
> and all the three accounts does not belongs to the 'gtm' group. So when they
> execute the /opt/worldvista/EHR/bin/vistarunzu.sh
> which finally calls /opt/lsb-gtm/mumps -r ^ZU will fail(since the textEHR
> account do not have execute access to the mumps program. Will try the
> improved client installer a little bit latter.
>
> All the best,
> Jeffrey Fu
>

[Jeffrey Fu]

I don't know if that is only a problem with my installation. But for my installation on an old Fedora Core 6, all the three ids belongs to a different group 'worldvistaEHR'. I tried 'rpm -e' then reinstall the package, but the problem seems the same. Following is the 3 id records in my /etc/passwd and 2 record in /etc/group

-----------------------------------------------------------

/etc/passwd

..............

worldvistaEHR:x:503:504::/home/worldvistaEHR:/bin/bash
textEHR:x:504:504::/home/textEHR:/opt/worldvista/EHR/bin/vistarunzu.sh
clientEHR:x:505:504::/home/clientEHR:/opt/worldvista/EHR/bin/client.sh

-----------------------------------------------------------

/etc/group

.............

gtm:x:503:
worldvistaEHR:x:504:

 

----------------------------------------------------------

 

Jeffrey Fu

[I, Valdes]

Check /etc/groups file. That distribution is probably 6 years old so
please upgrade to at least Fedora 10. The current version is Fedora
12. Thanks!

-- IV

On Nov 30, 11:08 am, Jeffrey Fu <gsb...@gmail.com> wrote:
> I don't know if that is only a problem with my installation. But for my
> installation on an old Fedora Core 6, all the three ids belongs to a
> different group 'worldvistaEHR'. I tried 'rpm -e' then reinstall the
> package, but the problem seems the same. Following is the 3 id records in my
> /etc/passwd and 2 record in /etc/group
> -----------------------------------------------------------
> /etc/passwd
> ..............
> worldvistaEHR:x:503:504::/home/worldvistaEHR:/bin/bash
> textEHR:x:504:504::/home/textEHR:/opt/worldvista/EHR/bin/vistarunzu.sh
> clientEHR:x:505:504::/home/clientEHR:/opt/worldvista/EHR/bin/client.sh
> -----------------------------------------------------------
>
> /etc/group
> .............
> gtm:x:503:
> worldvistaEHR:x:504:
>
> ----------------------------------------------------------
>
> Jeffrey Fu
>

[I, Valdes]

I see that you checked the groups file. The rpm spec definitely tries
to set those id's to group gtm so I can only conclude that your
distribution is missing something due to age. This is heavily tested
on Fedora 10 so that and more recent ones should probably work. -- IV

On Nov 30, 11:08 am, Jeffrey Fu <gsb...@gmail.com> wrote:
> I don't know if that is only a problem with my installation. But for my
> installation on an old Fedora Core 6, all the three ids belongs to a
> different group 'worldvistaEHR'. I tried 'rpm -e' then reinstall the
> package, but the problem seems the same. Following is the 3 id records in my
> /etc/passwd and 2 record in /etc/group
> -----------------------------------------------------------
> /etc/passwd
> ..............
> worldvistaEHR:x:503:504::/home/worldvistaEHR:/bin/bash
> textEHR:x:504:504::/home/textEHR:/opt/worldvista/EHR/bin/vistarunzu.sh
> clientEHR:x:505:504::/home/clientEHR:/opt/worldvista/EHR/bin/client.sh
> -----------------------------------------------------------
>
> /etc/group
> .............
> gtm:x:503:
> worldvistaEHR:x:504:
>
> ----------------------------------------------------------
>
> Jeffrey Fu
>

[Jeffrey Fu]

OK, so this is only a problem with the historical FC version. I will try FC12 later. Thanks.