Re: [Fwd: Re: [U2] RedHat, Universe, unlocking]
John Godzina wrote: Hrm ... I dunno ... I installed universe and specified using uvadm as the admin user. My perms on list_readu are different: -rwxr-x--x 1 root uvadm 1289340 May 10 2005 /usr/local/Universe/ibm/bin/list_readu uvadm belongs to: uid=600(uvadm) gid=600(uvadm) groups=600(uvadm) context=user_u:system_r:unconfined_t which implies I _should_ be able to execute this, but I always get Insufficient privileges to perform lock maintenance. I don't have any experience with the SE Linux security settings, but I'll bet chmod u+s list_readu would allow you to do lock maintenance. I'm not sure why there's a difference in permission settings on different systems though. I've got a defunct IRIX box that was running UV 9.6.2.2 installed with root as admin with these suid enabled binaries: -rwsr-x--x1 root daemon1991532 Aug 27 2001 clean -rwsr-x--x1 root daemon2029676 Aug 27 2001 list_readu -rwsr-x--x1 root daemon2006708 Aug 27 2001 sp.edit -rwsr-x--x1 root daemon1991940 Aug 27 2001 upduvtrans -rwsr-x--x1 root daemon 80008 Aug 27 2001 uv -rwsr-x--x1 root daemon4849652 Aug 27 2001 uvadmsh -rwsr-x--x2 root daemon5041216 Aug 27 2001 uvbackup -rwsr-x--x1 root daemon2038864 Aug 27 2001 uvdlockd -rwsr-x--x1 root daemon 78972 Aug 27 2001 uvdls -rwsr-x--x1 root daemon2006604 Aug 27 2001 uvlictool -rwsr-x--x1 root daemon 13152 Aug 27 2001 uvpset -rwsr-x--x2 root daemon5041216 Aug 27 2001 uvrestore -rwsr-x--x1 root daemon 12152 Aug 27 2001 uvsetacc and my current RH AS3 box running UV 10.1.4 installed with uvadm as admin has these suid binaries: -rwsr-x--x1 root bin 1263112 Jul 26 2004 clean -rwsr-x--x1 root bin 2909844 Jul 26 2004 convchar -rwsr-x--x1 root bin 1285180 Jul 26 2004 list_readu -rwsr-x--x1 root bin 1269756 Jul 26 2004 sp.edit -rwsr-x--x1 root bin 1263452 Jul 26 2004 upduvtrans -rwsr-x--x1 root bin 37888 Jul 26 2004 uv -rwsr-x--x1 root bin 2903540 Jul 26 2004 uvadmsh -rwsr-x--x2 root bin 3004036 Jul 26 2004 uvbackup -rwsr-x--x1 root bin 1282588 Jul 26 2004 uvdlockd -rwsr-x--x1 uvadmroot 8673151 Jul 28 2004 uvdlockd.d -rwsr-x--x1 root bin 37760 Jul 26 2004 uvdls -rwsr-x--x1 root bin 1268488 Jul 26 2004 uvlictool -rwsr-x--x1 root bin 3856 Jul 26 2004 uvpset -rwsr-x--x2 root bin 3004036 Jul 26 2004 uvrestore -rwsr-x--x1 root bin 3176 Jul 26 2004 uvsetacc The only one I personally modified on both systems was sp.edit. It seems that the rest were meant to be runnable as root by non-root users by default, but I don't know why other installs wouldn't also be set up this way. -John -- John Hester System & Network Administrator Momentum Group Inc. (949) 833-8886 x623 http://memosamples.com --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
Re: [U2] RedHat, Universe, unlocking
You do NOT have to be root. You can create uvadm as the UniVerse Administrator user when installing. It's possible that you can also change from using root to uvadm as the UniVerse Administrator subsequently (for example they have implemented this in DataStage) but I have not checked whether it's actually possible in UniVerse. But it would not be a problem to re-install (upgrade to exactly the same release) to set uvadm as the UniVerse Administrator. It's all well documented, particularly in the UV904 (Administering UniVerse) class from IBM. - Original Message - From: "Sirulnick, Steve" <[EMAIL PROTECTED]> To: "'Ray Wurlod'" <[EMAIL PROTECTED]>; Sent: Thursday, March 09, 2006 10:06 AM Subject: [SPAM] RE: [U2] RedHat, Universe, unlocking Ray, Because in order to be uvadm on *nix based systems, you must be root. In windows, you need to be a part of the administrator group. Sucky, isn't it? Steve --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
[Fwd: Re: [U2] RedHat, Universe, unlocking]
Hrm ... I dunno ... I installed universe and specified using uvadm as the admin user. My perms on list_readu are different: -rwxr-x--x 1 root uvadm 1289340 May 10 2005 /usr/local/Universe/ibm/bin/list_readu uvadm belongs to: uid=600(uvadm) gid=600(uvadm) groups=600(uvadm) context=user_u:system_r:unconfined_t which implies I _should_ be able to execute this, but I always get Insufficient privileges to perform lock maintenance. Original Message Subject:Re: [U2] RedHat, Universe, unlocking Date: Thu, 09 Mar 2006 12:21:44 -0800 From: John Hester <[EMAIL PROTECTED]> To: U2 User Group List References: <[EMAIL PROTECTED]> Sirulnick, Steve wrote: > Because in order to be uvadm on *nix based systems, you must be root. In > windows, you need to be a part of the administrator group. Sucky, isn't it? uvadm doesn't need root priviledges, but AFAIK you have to specify that you're going to use uvadm as the admin user rather than root during the UV installation process. This is necessary to set file permissions correctly. This is my uvadm entry in /etc/passwd on RH AS 3: uvadm:x:501:501::/home/uvadm:/bin/bash The list_readu binary is still owned by root, but suid is set: -rwsr-x--x1 root bin 1285180 Jul 26 2004 list_readu I didn't do this myself so it must have been done during the initial install. Almost everything else is owned by uvadm though, so I'd venture to guess that if you've already specified root as admin during install, the only safe way to switch to uvadm is to reinstall. -John -- John Hester System & Network Administrator Momentum Group Inc. (949) 833-8886 x623 http://memosamples.com --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/ [demime 1.01d removed an attachment of type text/x-vcard which had a name of john.vcf] --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
Re: [U2] RedHat, Universe, unlocking
Sirulnick, Steve wrote: Because in order to be uvadm on *nix based systems, you must be root. In windows, you need to be a part of the administrator group. Sucky, isn't it? uvadm doesn't need root priviledges, but AFAIK you have to specify that you're going to use uvadm as the admin user rather than root during the UV installation process. This is necessary to set file permissions correctly. This is my uvadm entry in /etc/passwd on RH AS 3: uvadm:x:501:501::/home/uvadm:/bin/bash The list_readu binary is still owned by root, but suid is set: -rwsr-x--x1 root bin 1285180 Jul 26 2004 list_readu I didn't do this myself so it must have been done during the initial install. Almost everything else is owned by uvadm though, so I'd venture to guess that if you've already specified root as admin during install, the only safe way to switch to uvadm is to reinstall. -John -- John Hester System & Network Administrator Momentum Group Inc. (949) 833-8886 x623 http://memosamples.com --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] RedHat, Universe, unlocking
This may be of some help. At one time, I needed non-root users to be able to do PORT.STATUS to see all that was happening on the system. Anyway, to resolve this I did (Red Hat Linux); cd /usr/bin chmod u=rws ipcs I believe the 'chmod' may have been done to list_readu as well. Anyway, that was the magic that allowed non-root users be able to issue PORT.STATUS and get to see everything going on instead of just their own 'stuff' (default). This may work for you. Anthony --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] RedHat, Universe, unlocking
John, I tried sudo for uv/bin/list_readu does not work as there are other things UV and linux must have permissions to use the UniVerse Administrator and utilities. You still must be root to be able to perform UniVerse administration. sudo bin/uv seems to be the quickest way to allow a user to be an admin. Granted, there are security flaws with this (hopefully you're not going to give root privileges to just anyone), but it's a lot cleaner than mucking with the UID's and I mentioned before. Steve PS if sudo bin/list_readu works for you, then I would like to see how you did it. -Original Message- From: John Godzina [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 08, 2006 7:22 PM To: u2-users@listserver.u2ug.org Subject: Re: [U2] RedHat, Universe, unlocking No, I meant configuring sudo to be able to invoke list_readu (which is what unlock calls) Sirulnick, Steve wrote: > John, > > You can. In order for it to work though, you have to invoke a universe > shell for it to work. For example, you could telnet or ssh into your > account and type sudo /path/to/bin/uv, enter your password... or > however you set up sudo and you're now logged in as root. That > completely avoids having to create more than one user with UID 0. > > Steve > > -Original Message- > From: John Godzina [mailto:[EMAIL PROTECTED] > Sent: Wednesday, March 08, 2006 2:30 PM > To: u2-users@listserver.u2ug.org > Subject: Re: [U2] RedHat, Universe, unlocking > > Could you use sudo to avoid full admin rights but allow the UV admin > commands? > > Sirulnick, Steve wrote: > > >Just as a follow up. This does include using UNLOCK. :) > > > >-Original Message- > >From: Sirulnick, Steve [mailto:[EMAIL PROTECTED] > >Sent: Wednesday, March 08, 2006 11:27 AM > >To: 'Peter Veenhof'; u2-users@listserver.u2ug.org > >Subject: RE: [U2] RedHat, Universe, unlocking > > > >Peter, > > > >I have had to set up an administrator accounts and I'm not > necessarily happy > >with this solution. There may be better ways to go out there. I've > had to > >create a user with UID 0 privileges. Universe requires super-user > function > >to be able to use the admin tools (SYSADM.MENU) and this was the only > >solution. > > > >HTH, > > > >Steve > > > >-Original Message- > >From: Peter Veenhof [mailto:[EMAIL PROTECTED] > >Sent: Wednesday, March 08, 2006 9:25 AM > >To: u2-users@listserver.u2ug.org > >Subject: [U2] RedHat, Universe, unlocking > > > >Hi all, > > > >Running Universe on Redhat, how does one setup a user to be able to > >perform UNLOCK at TCL? > > > >Thanks > >Peter > >--- > >u2-users mailing list > >u2-users@listserver.u2ug.org > >To unsubscribe please visit http://listserver.u2ug.org/ > >--- > >u2-users mailing list > >u2-users@listserver.u2ug.org > >To unsubscribe please visit http://listserver.u2ug.org/ > >--- > >u2-users mailing list > >u2-users@listserver.u2ug.org > >To unsubscribe please visit http://listserver.u2ug.org/ > > [demime 1.01d removed an attachment of type text/x-vcard which had a > name of john.vcf] > --- > u2-users mailing list > u2-users@listserver.u2ug.org > To unsubscribe please visit http://listserver.u2ug.org/ [demime 1.01d removed an attachment of type text/x-vcard which had a name of john.vcf] --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] RedHat, Universe, unlocking
Ray, Because in order to be uvadm on *nix based systems, you must be root. In windows, you need to be a part of the administrator group. Sucky, isn't it? Steve -Original Message- From: Ray Wurlod [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 08, 2006 6:12 PM To: u2-users@listserver.u2ug.org Subject: Re: [U2] RedHat, Universe, unlocking Why not just set up a uvadm user? --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
Re: [U2] RedHat, Universe, unlocking
No, I meant configuring sudo to be able to invoke list_readu (which is what unlock calls) Sirulnick, Steve wrote: > John, > > You can. In order for it to work though, you have to invoke a universe > shell for it to work. For example, you could telnet or ssh into your > account and type sudo /path/to/bin/uv, enter your password... or > however you set up sudo and you're now logged in as root. That > completely avoids having to create more than one user with UID 0. > > Steve > > -Original Message- > From: John Godzina [mailto:[EMAIL PROTECTED] > Sent: Wednesday, March 08, 2006 2:30 PM > To: u2-users@listserver.u2ug.org > Subject: Re: [U2] RedHat, Universe, unlocking > > Could you use sudo to avoid full admin rights but allow the UV admin > commands? > > Sirulnick, Steve wrote: > > >Just as a follow up. This does include using UNLOCK. :) > > > >-Original Message- > >From: Sirulnick, Steve [mailto:[EMAIL PROTECTED] > >Sent: Wednesday, March 08, 2006 11:27 AM > >To: 'Peter Veenhof'; u2-users@listserver.u2ug.org > >Subject: RE: [U2] RedHat, Universe, unlocking > > > >Peter, > > > >I have had to set up an administrator accounts and I'm not > necessarily happy > >with this solution. There may be better ways to go out there. I've > had to > >create a user with UID 0 privileges. Universe requires super-user > function > >to be able to use the admin tools (SYSADM.MENU) and this was the only > >solution. > > > >HTH, > > > >Steve > > > >-Original Message- > >From: Peter Veenhof [mailto:[EMAIL PROTECTED] > >Sent: Wednesday, March 08, 2006 9:25 AM > >To: u2-users@listserver.u2ug.org > >Subject: [U2] RedHat, Universe, unlocking > > > >Hi all, > > > >Running Universe on Redhat, how does one setup a user to be able to > >perform UNLOCK at TCL? > > > >Thanks > >Peter > >--- > >u2-users mailing list > >u2-users@listserver.u2ug.org > >To unsubscribe please visit http://listserver.u2ug.org/ > >--- > >u2-users mailing list > >u2-users@listserver.u2ug.org > >To unsubscribe please visit http://listserver.u2ug.org/ > >--- > >u2-users mailing list > >u2-users@listserver.u2ug.org > >To unsubscribe please visit http://listserver.u2ug.org/ > > [demime 1.01d removed an attachment of type text/x-vcard which had a > name of john.vcf] > --- > u2-users mailing list > u2-users@listserver.u2ug.org > To unsubscribe please visit http://listserver.u2ug.org/ [demime 1.01d removed an attachment of type text/x-vcard which had a name of john.vcf] --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] RedHat, Universe, unlocking
John, You can. In order for it to work though, you have to invoke a universe shell for it to work. For example, you could telnet or ssh into your account and type sudo /path/to/bin/uv, enter your password... or however you set up sudo and you're now logged in as root. That completely avoids having to create more than one user with UID 0. Steve -Original Message- From: John Godzina [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 08, 2006 2:30 PM To: u2-users@listserver.u2ug.org Subject: Re: [U2] RedHat, Universe, unlocking Could you use sudo to avoid full admin rights but allow the UV admin commands? Sirulnick, Steve wrote: >Just as a follow up. This does include using UNLOCK. :) > >-Original Message- >From: Sirulnick, Steve [mailto:[EMAIL PROTECTED] >Sent: Wednesday, March 08, 2006 11:27 AM >To: 'Peter Veenhof'; u2-users@listserver.u2ug.org >Subject: RE: [U2] RedHat, Universe, unlocking > >Peter, > >I have had to set up an administrator accounts and I'm not necessarily happy >with this solution. There may be better ways to go out there. I've had to >create a user with UID 0 privileges. Universe requires super-user function >to be able to use the admin tools (SYSADM.MENU) and this was the only >solution. > >HTH, > >Steve > >-Original Message- >From: Peter Veenhof [mailto:[EMAIL PROTECTED] >Sent: Wednesday, March 08, 2006 9:25 AM >To: u2-users@listserver.u2ug.org >Subject: [U2] RedHat, Universe, unlocking > >Hi all, > >Running Universe on Redhat, how does one setup a user to be able to >perform UNLOCK at TCL? > >Thanks >Peter >--- >u2-users mailing list >u2-users@listserver.u2ug.org >To unsubscribe please visit http://listserver.u2ug.org/ >--- >u2-users mailing list >u2-users@listserver.u2ug.org >To unsubscribe please visit http://listserver.u2ug.org/ >--- >u2-users mailing list >u2-users@listserver.u2ug.org >To unsubscribe please visit http://listserver.u2ug.org/ [demime 1.01d removed an attachment of type text/x-vcard which had a name of john.vcf] --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] RedHat, Universe, unlocking
Sure, but be EXTREMELY careful as you could REALLY screw things up. You must be signed on as root to do this and have a terminal session open. 1. Type in vipw. This utility will open up the password file without inappropriately locking it. You should see lines that look like: someuser:x:10236:501::/ibm/data/account:/bin/bash 2. Scroll to the user account. Select "i" (for insert) to begin editing. Replace the line in the third position where each position is terminated by a ":" with a "0" In this case, the third position is "10236". 3. After you have completed this, hit and enter ":","w","q". This should write the file and quit the first part of the program. NOTE: when you type ":","w","q" you will see those characters at the bottom of your screen only. Not within the body of the file you're trying to edit!!! 4. You should then be prompted to edit the shadow file. Would you like to edit /etc/shadow now [y/n]? Answer "y" This will take you to the shadow file. 5. It's not necessary to edit anything here, so just enter ":wq". This should take you out of the program. 6. BIG FAT NOTE: If at any time you think you've errored editing, type ,"q","!" This will escape the file without saving. 7. If you run into any problems, type man vipw from the terminal. If you're unsure about this, don't attempt it on your production box. Try it on a test system. Steve -Original Message----- From: Peter Veenhof [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 08, 2006 1:52 PM To: Sirulnick, Steve; u2-users@listserver.u2ug.org Subject: RE: [U2] RedHat, Universe, unlocking Thanks Steve! Bit of a newbie in Redhat here, do you have steps or the exact command on how to create one of these users?? Thanks again, Peter _ From: Sirulnick, Steve [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 08, 2006 11:27 AM To: Peter Veenhof; u2-users@listserver.u2ug.org Subject: RE: [U2] RedHat, Universe, unlocking Peter, I have had to set up an administrator accounts and I'm not necessarily happy with this solution. There may be better ways to go out there. I've had to create a user with UID 0 privileges. Universe requires super-user function to be able to use the admin tools (SYSADM.MENU) and this was the only solution. HTH, Steve -Original Message- From: Peter Veenhof [mailto:[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> ] Sent: Wednesday, March 08, 2006 9:25 AM To: u2-users@listserver.u2ug.org Subject: [U2] RedHat, Universe, unlocking Hi all, Running Universe on Redhat, how does one setup a user to be able to perform UNLOCK at TCL? Thanks Peter --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/ <http://listserver.u2ug.org/> --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
Re: [U2] RedHat, Universe, unlocking
Why not just set up a uvadm user? --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
Re: [U2] RedHat, Universe, unlocking
Could you use sudo to avoid full admin rights but allow the UV admin commands? Sirulnick, Steve wrote: >Just as a follow up. This does include using UNLOCK. :) > >-Original Message- >From: Sirulnick, Steve [mailto:[EMAIL PROTECTED] >Sent: Wednesday, March 08, 2006 11:27 AM >To: 'Peter Veenhof'; u2-users@listserver.u2ug.org >Subject: RE: [U2] RedHat, Universe, unlocking > >Peter, > >I have had to set up an administrator accounts and I'm not necessarily happy >with this solution. There may be better ways to go out there. I've had to >create a user with UID 0 privileges. Universe requires super-user function >to be able to use the admin tools (SYSADM.MENU) and this was the only >solution. > >HTH, > >Steve > >-Original Message- >From: Peter Veenhof [mailto:[EMAIL PROTECTED] >Sent: Wednesday, March 08, 2006 9:25 AM >To: u2-users@listserver.u2ug.org >Subject: [U2] RedHat, Universe, unlocking > >Hi all, > >Running Universe on Redhat, how does one setup a user to be able to >perform UNLOCK at TCL? > >Thanks >Peter >--- >u2-users mailing list >u2-users@listserver.u2ug.org >To unsubscribe please visit http://listserver.u2ug.org/ >--- >u2-users mailing list >u2-users@listserver.u2ug.org >To unsubscribe please visit http://listserver.u2ug.org/ >--- >u2-users mailing list >u2-users@listserver.u2ug.org >To unsubscribe please visit http://listserver.u2ug.org/ [demime 1.01d removed an attachment of type text/x-vcard which had a name of john.vcf] --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] RedHat, Universe, unlocking
Thanks Steve! Bit of a newbie in Redhat here, do you have steps or the exact command on how to create one of these users?? Thanks again, Peter From: Sirulnick, Steve [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 08, 2006 11:27 AM To: Peter Veenhof; u2-users@listserver.u2ug.org Subject: RE: [U2] RedHat, Universe, unlocking Peter, I have had to set up an administrator accounts and I'm not necessarily happy with this solution. There may be better ways to go out there. I've had to create a user with UID 0 privileges. Universe requires super-user function to be able to use the admin tools (SYSADM.MENU) and this was the only solution. HTH, Steve -Original Message- From: Peter Veenhof [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 08, 2006 9:25 AM To: u2-users@listserver.u2ug.org Subject: [U2] RedHat, Universe, unlocking Hi all, Running Universe on Redhat, how does one setup a user to be able to perform UNLOCK at TCL? Thanks Peter --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] RedHat, Universe, unlocking
Just as a follow up. This does include using UNLOCK. :) -Original Message- From: Sirulnick, Steve [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 08, 2006 11:27 AM To: 'Peter Veenhof'; u2-users@listserver.u2ug.org Subject: RE: [U2] RedHat, Universe, unlocking Peter, I have had to set up an administrator accounts and I'm not necessarily happy with this solution. There may be better ways to go out there. I've had to create a user with UID 0 privileges. Universe requires super-user function to be able to use the admin tools (SYSADM.MENU) and this was the only solution. HTH, Steve -Original Message- From: Peter Veenhof [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 08, 2006 9:25 AM To: u2-users@listserver.u2ug.org Subject: [U2] RedHat, Universe, unlocking Hi all, Running Universe on Redhat, how does one setup a user to be able to perform UNLOCK at TCL? Thanks Peter --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] RedHat, Universe, unlocking
Peter, I have had to set up an administrator accounts and I'm not necessarily happy with this solution. There may be better ways to go out there. I've had to create a user with UID 0 privileges. Universe requires super-user function to be able to use the admin tools (SYSADM.MENU) and this was the only solution. HTH, Steve -Original Message- From: Peter Veenhof [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 08, 2006 9:25 AM To: u2-users@listserver.u2ug.org Subject: [U2] RedHat, Universe, unlocking Hi all, Running Universe on Redhat, how does one setup a user to be able to perform UNLOCK at TCL? Thanks Peter --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/