Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

RBAC and EMC SymCLI : Access denied - you are not an authorized base daemon user

1,374 views
Skip to first unread message

awl9w0h...@mail.htl22.at

unread,
Jul 9, 2008, 5:03:31 AM7/9/08
to

Hi,

I am trying to allow a user run the EMC SymCli command,
/usr/symcli/bin/symclone
as a profile in RBAC.

The set-up is this:

prof_attr:
SymCLI:suser:cmd:::/usr/symcli/bin/symclone:uid=0;gid=0

exec_attr:
SymCLI:::SymCLI

user_attr:
dba::::type=role;profiles=Administrator,SymCLI;roles=store

However, executing the command "/usr/symcli/bin/symclone list" gives
this:

/usr/symcli/bin/symclone list

Symmetrix ID: 000290101145

Access denied - you are not an authorized base daemon user

Any ideas whether this is an RBAC problem or SymCli problem and how I
might be able to mend it?

Regards, z.

Message has been deleted

Daniel Rock

unread,
Jul 9, 2008, 6:59:23 PM7/9/08
to
awl9w0h...@mail.htl22.at <awl9w0h...@mail.htl22.at> wrote:
> However, executing the command "/usr/symcli/bin/symclone list" gives
> this:
>
> /usr/symcli/bin/symclone list
>
> Symmetrix ID: 000290101145
>
> Access denied - you are not an authorized base daemon user

What is the user's shell? It has to be one of the profiling shells
(/bin/pf*sh). Otherwise you have to call the command through pfexec:

pfexec /usr/symcli/bin/symclone list

--
Daniel

0 new messages