Re: [U2] uniobjects running as?
On 7/24/2012 4:50 PM, Wols Lists wrote: On 24/07/12 20:08, Wjhonson wrote: On nix, when you change users, you are saying it does not set any environment variables ? Yes I am - by default at least. if you do su - then you DO get the users environment, while we are getting a bit off topic (which is ok by me) my main user was that calling subversion I kept getting the same certificate error after accepting the certificate when teh command was run from the commandline. In this case it IS a path issue, so I tried the following: 1. in the shell script manually setting the PATH variable -- no go 2. modifying /etc/profile to add to the path (this SHOULD of worked but did not, I may need to dig deeper into this) I ended up specifying the config dir in the subversion command and this worked. If I write a service that starts off as root, then suids to something else, it is down to MY PROGRAMMING to load that user's environment. If I don't, it runs with the original environment. That's why so many things written by inexperienced users and run from cron keep breaking ... well said or at least it helps explain why so many companies have cron jobs that run as root (and not because its doing system stuff) but rather because root has the right environment or permissions to do "x" instead of taking the time to setup a user to run the cron job. Cheers, Wol again thanks to everyone who chimed in! dougc ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users
Re: [U2] uniobjects running as?
On 24/07/12 22:57, Wjhonson wrote: > > When you say "suid" you mean "su" ? > SU stands for Set User or Switch User if you prefer, most people use it to > try to become root > However when you SU it sets your environment to that to *whom* you have su'ed. > At least it sets Home and Shell and maybe some others. > You can stop it from doing that, but that's the default behaviour > No. I mean *suid*. "su" is the user-level command that calls the suid function. And yes the su program does do all that stuff about setting shell and home and profile. But it's the su program, not the suid function, that does it. Uniobjects doesn't to my knowledge present a command environment to the user (like cron doesn't either) so it seems sensible that it wouldn't bother to set up a command environment! Oh, and if your program calls su, it's a pretty safe bet you don't know what you're doing and you're going to get quite a surprise! Cheers, Wol > > > -----Original Message----- > From: Wols Lists > To: u2-users > Sent: Tue, Jul 24, 2012 2:18 pm > Subject: Re: [U2] uniobjects running as? > > > On 24/07/12 20:08, Wjhonson wrote: > > On nix, when you change users, you are saying it does not set any > environment > ariables ? > > es I am - by default at least. > If I write a service that starts off as root, then suids to something > lse, it is down to MY PROGRAMMING to load that user's environment. If I > on't, it runs with the original environment. > That's why so many things written by inexperienced users and run from > ron keep breaking ... > Cheers, > ol > > > > -Original Message- > From: Wols Lists > To: u2-users > Sent: Tue, Jul 24, 2012 11:59 am > Subject: Re: [U2] uniobjects running as? > > > On 24/07/12 18:57, Wjhonson wrote: > Why would it not use the env settings of the user you log in as in > niobjects? > Why don't you try to log in as that user yourself and check the settings > Why wouldn't it use the env settings? Because if it's on nix, and starts > s root then changes user, it needs to be specially coded to load that > ser's environment. > It may well not have been thus coded - it doesn't happen automagically. > Cheers, > ol ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users
Re: [U2] uniobjects running as?
When you say "suid" you mean "su" ? SU stands for Set User or Switch User if you prefer, most people use it to try to become root However when you SU it sets your environment to that to *whom* you have su'ed. At least it sets Home and Shell and maybe some others. You can stop it from doing that, but that's the default behaviour -Original Message- From: Wols Lists To: u2-users Sent: Tue, Jul 24, 2012 2:18 pm Subject: Re: [U2] uniobjects running as? On 24/07/12 20:08, Wjhonson wrote: On nix, when you change users, you are saying it does not set any environment ariables ? es I am - by default at least. If I write a service that starts off as root, then suids to something lse, it is down to MY PROGRAMMING to load that user's environment. If I on't, it runs with the original environment. That's why so many things written by inexperienced users and run from ron keep breaking ... Cheers, ol -Original Message- From: Wols Lists To: u2-users Sent: Tue, Jul 24, 2012 11:59 am Subject: Re: [U2] uniobjects running as? On 24/07/12 18:57, Wjhonson wrote: Why would it not use the env settings of the user you log in as in niobjects? Why don't you try to log in as that user yourself and check the settings Why wouldn't it use the env settings? Because if it's on nix, and starts s root then changes user, it needs to be specially coded to load that ser's environment. It may well not have been thus coded - it doesn't happen automagically. Cheers, ol __ 2-Users mailing list 2-us...@listserver.u2ug.org ttp://listserver.u2ug.org/mailman/listinfo/u2-users ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users ___ 2-Users mailing list 2-us...@listserver.u2ug.org ttp://listserver.u2ug.org/mailman/listinfo/u2-users ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users
Re: [U2] uniobjects running as?
On 24/07/12 20:08, Wjhonson wrote: > > On nix, when you change users, you are saying it does not set any environment > variables ? > Yes I am - by default at least. If I write a service that starts off as root, then suids to something else, it is down to MY PROGRAMMING to load that user's environment. If I don't, it runs with the original environment. That's why so many things written by inexperienced users and run from cron keep breaking ... Cheers, Wol > > > > -Original Message- > From: Wols Lists > To: u2-users > Sent: Tue, Jul 24, 2012 11:59 am > Subject: Re: [U2] uniobjects running as? > > > On 24/07/12 18:57, Wjhonson wrote: > Why would it not use the env settings of the user you log in as in > uniobjects? > Why don't you try to log in as that user yourself and check the settings > Why wouldn't it use the env settings? Because if it's on nix, and starts > s root then changes user, it needs to be specially coded to load that > ser's environment. > It may well not have been thus coded - it doesn't happen automagically. > Cheers, > ol > __ > 2-Users mailing list > 2-us...@listserver.u2ug.org > ttp://listserver.u2ug.org/mailman/listinfo/u2-users > > ___ > U2-Users mailing list > U2-Users@listserver.u2ug.org > http://listserver.u2ug.org/mailman/listinfo/u2-users > ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users
Re: [U2] uniobjects running as?
As a regular user when you login you can have a local .profile (assuming your using ksh which I am) which is sourced after loading the system profile (/etc/profile) when logging in as a uniobjects user you really don't have a home directory and it doesn't execute the .profile in your home directory (I think) I verified this by modifying a c# program I have to return the path and compared it to the path set after I logged in, as I expected (and should of remembered) the path only included what was in /etc/profile (/sbin;/usr/bin;/usr/bin) and not all the other path's that I added in my .profile. I think I found a workaround for my original issue which was that subversion was not "seeing" the fact that I permanently accepted the self signed certificate by including the following in my svn command --config-dir so even though it wasn't in the uniobjects connection path by including it in the svn command it now "sees" that I have accepted the cert (in my configuration) and no longer prompts me. thanks to everyone who responded dougc On Jul 24, 2012, at 2:51 PM, Wols Lists wrote: > On 24/07/12 18:57, Wjhonson wrote: >> Why would it not use the env settings of the user you log in as in >> uniobjects? >> Why don't you try to log in as that user yourself and check the settings > > Why wouldn't it use the env settings? Because if it's on nix, and starts > as root then changes user, it needs to be specially coded to load that > user's environment. > > It may well not have been thus coded - it doesn't happen automagically. > > Cheers, > Wol > ___ > U2-Users mailing list > U2-Users@listserver.u2ug.org > http://listserver.u2ug.org/mailman/listinfo/u2-users ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users
Re: [U2] uniobjects running as?
On nix, when you change users, you are saying it does not set any environment variables ? -Original Message- From: Wols Lists To: u2-users Sent: Tue, Jul 24, 2012 11:59 am Subject: Re: [U2] uniobjects running as? On 24/07/12 18:57, Wjhonson wrote: Why would it not use the env settings of the user you log in as in uniobjects? Why don't you try to log in as that user yourself and check the settings Why wouldn't it use the env settings? Because if it's on nix, and starts s root then changes user, it needs to be specially coded to load that ser's environment. It may well not have been thus coded - it doesn't happen automagically. Cheers, ol __ 2-Users mailing list 2-us...@listserver.u2ug.org ttp://listserver.u2ug.org/mailman/listinfo/u2-users ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users
Re: [U2] uniobjects running as?
On 24/07/12 18:57, Wjhonson wrote: > Why would it not use the env settings of the user you log in as in uniobjects? > Why don't you try to log in as that user yourself and check the settings Why wouldn't it use the env settings? Because if it's on nix, and starts as root then changes user, it needs to be specially coded to load that user's environment. It may well not have been thus coded - it doesn't happen automagically. Cheers, Wol ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users
Re: [U2] uniobjects running as?
Why would it not use the env settings of the user you log in as in uniobjects? Why don't you try to log in as that user yourself and check the settings -Original Message- From: douglas chanco To: U2 Users List Sent: Tue, Jul 24, 2012 10:51 am Subject: Re: [U2] uniobjects running as? thanks Dan, I am a bit confused as to why when I accept the certificate issue and run he program from TCL it works fine but if I run it from my c# app (logging in as he same user) I get the message to accept the certificate again (when I already ccepted it permanently from tcl) I bet it a path issue, which begs another question, how does it (uniobjects) get ts env (in particular PATH) I will add logging of the env tonight and compare t to the env of my regular user when logged in I bet they are different and niobjects doesn't "see" that I already permanently accepted the certificate even though its self signed) thanks again dougc On Jul 24, 2012, at 12:22 PM, Daniel McGrath wrote: > The UniRPC/UniObjects process starts of running as root. Once you log in, it hanges user to whoever you log in as (the credentials supply to UniObjects). Regards, Dan -Original Message- From: u2-users-boun...@listserver.u2ug.org [mailto:u2-users-boun...@listserver.u2ug.org] n Behalf Of douglas chanco Sent: Tuesday, July 24, 2012 8:25 AM To: U2 Users List Subject: [U2] uniobjects running as? hey everyone, does anyone happen to know what user the uniobjects connection is unning as? I would think root, but that doesn't seem to be correct as when I un a subversion command as root it works fine but when I run it from a niobjects connection (via c# calling a pick subroutine) I get prompted to ccept a self signed certificate (yeah yeah I know..) anyway I accepted it rom the command line (so I don't get prompted anymore) as a specific user and s root (this is all proof of concept test, so if it pans out I will get a valid ertificate). I am going to modify the pick subroutine to try and "figure out" what user is alling the pick subroutine as well as modify my shell script with expect so hat it {A}ccepts the certificate but I thought I would ask the "guru's" on ere (you know who you are!) in case expect gives me fits thanks dougc ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users ___ 2-Users mailing list 2-us...@listserver.u2ug.org ttp://listserver.u2ug.org/mailman/listinfo/u2-users ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users
Re: [U2] uniobjects running as?
thanks Dan, I am a bit confused as to why when I accept the certificate issue and run the program from TCL it works fine but if I run it from my c# app (logging in as the same user) I get the message to accept the certificate again (when I already accepted it permanently from tcl) I bet it a path issue, which begs another question, how does it (uniobjects) get its env (in particular PATH) I will add logging of the env tonight and compare it to the env of my regular user when logged in I bet they are different and uniobjects doesn't "see" that I already permanently accepted the certificate (even though its self signed) thanks again dougc On Jul 24, 2012, at 12:22 PM, Daniel McGrath wrote: > The UniRPC/UniObjects process starts of running as root. Once you log in, it > changes user to whoever you log in as (the credentials supply to UniObjects). > > Regards, > Dan > > -Original Message- > From: u2-users-boun...@listserver.u2ug.org > [mailto:u2-users-boun...@listserver.u2ug.org] On Behalf Of douglas chanco > Sent: Tuesday, July 24, 2012 8:25 AM > To: U2 Users List > Subject: [U2] uniobjects running as? > > > hey everyone, > does anyone happen to know what user the uniobjects connection is > running as? I would think root, but that doesn't seem to be correct as when > I run a subversion command as root it works fine but when I run it from a > uniobjects connection (via c# calling a pick subroutine) I get prompted to > accept a self signed certificate (yeah yeah I know..) anyway I accepted > it from the command line (so I don't get prompted anymore) as a specific user > and as root (this is all proof of concept test, so if it pans out I will get > a valid certificate). > > I am going to modify the pick subroutine to try and "figure out" what user is > calling the pick subroutine as well as modify my shell script with expect so > that it {A}ccepts the certificate but I thought I would ask the "guru's" on > here (you know who you are!) in case expect gives me fits > > > thanks > > dougc > > > > ___ > U2-Users mailing list > U2-Users@listserver.u2ug.org > http://listserver.u2ug.org/mailman/listinfo/u2-users > ___ > U2-Users mailing list > U2-Users@listserver.u2ug.org > http://listserver.u2ug.org/mailman/listinfo/u2-users ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users
Re: [U2] uniobjects running as?
The rpc deamon will run as root, but when it spawns a udt process to fulfil your uniobjects process it will spawn it as the user you use in the uniobjects session. -Original Message- From: u2-users-boun...@listserver.u2ug.org [mailto:u2-users-boun...@listserver.u2ug.org] On Behalf Of douglas chanco Sent: 24 July 2012 15:25 To: U2 Users List Subject: [U2] uniobjects running as? hey everyone, does anyone happen to know what user the uniobjects connection is running as? I would think root, but that doesn't seem to be correct as when I run a subversion command as root it works fine but when I run it from a uniobjects connection (via c# calling a pick subroutine) I get prompted to accept a self signed certificate (yeah yeah I know..) anyway I accepted it from the command line (so I don't get prompted anymore) as a specific user and as root (this is all proof of concept test, so if it pans out I will get a valid certificate). I am going to modify the pick subroutine to try and "figure out" what user is calling the pick subroutine as well as modify my shell script with expect so that it {A}ccepts the certificate but I thought I would ask the "guru's" on here (you know who you are!) in case expect gives me fits thanks dougc ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users - No virus found in this message. Checked by AVG - www.avg.com Version: 2012.0.2197 / Virus Database: 2437/5150 - Release Date: 07/23/12 ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users
Re: [U2] uniobjects running as?
You setup the namefor the uniobjects user. It's not set by the system, it's set by your routines that open connections as... so-and-so. -Original Message- From: douglas chanco To: U2 Users List Sent: Tue, Jul 24, 2012 8:26 am Subject: [U2] uniobjects running as? ey everyone, does anyone happen to know what user the uniobjects connection is running s? I would think root, but that doesn't seem to be correct as when I run a ubversion command as root it works fine but when I run it from a uniobjects onnection (via c# calling a pick subroutine) I get prompted to accept a self igned certificate (yeah yeah I know..) anyway I accepted it from the ommand line (so I don't get prompted anymore) as a specific user and as root this is all proof of concept test, so if it pans out I will get a valid ertificate). I am going to modify the pick subroutine to try and "figure out" what user is alling the pick subroutine as well as modify my shell script with expect so hat it {A}ccepts the certificate but I thought I would ask the "guru's" on ere (you know who you are!) in case expect gives me fits hanks dougc __ 2-Users mailing list 2-us...@listserver.u2ug.org ttp://listserver.u2ug.org/mailman/listinfo/u2-users ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users
Re: [U2] uniobjects running as?
Hi Doug (Great Name): UniObjects has two components. First the unirpc process runs as you have setup on startup: Windows usually as the administrator user while on UNIX it can be root but should not be for obvious reasons.. You connection, however, is what user you have setup when you open your U2 account Regards, Doug www.u2logic.com ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users
Re: [U2] uniobjects running as?
The UniRPC/UniObjects process starts of running as root. Once you log in, it changes user to whoever you log in as (the credentials supply to UniObjects). Regards, Dan -Original Message- From: u2-users-boun...@listserver.u2ug.org [mailto:u2-users-boun...@listserver.u2ug.org] On Behalf Of douglas chanco Sent: Tuesday, July 24, 2012 8:25 AM To: U2 Users List Subject: [U2] uniobjects running as? hey everyone, does anyone happen to know what user the uniobjects connection is running as? I would think root, but that doesn't seem to be correct as when I run a subversion command as root it works fine but when I run it from a uniobjects connection (via c# calling a pick subroutine) I get prompted to accept a self signed certificate (yeah yeah I know..) anyway I accepted it from the command line (so I don't get prompted anymore) as a specific user and as root (this is all proof of concept test, so if it pans out I will get a valid certificate). I am going to modify the pick subroutine to try and "figure out" what user is calling the pick subroutine as well as modify my shell script with expect so that it {A}ccepts the certificate but I thought I would ask the "guru's" on here (you know who you are!) in case expect gives me fits thanks dougc ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users
[U2] uniobjects running as?
hey everyone, does anyone happen to know what user the uniobjects connection is running as? I would think root, but that doesn't seem to be correct as when I run a subversion command as root it works fine but when I run it from a uniobjects connection (via c# calling a pick subroutine) I get prompted to accept a self signed certificate (yeah yeah I know..) anyway I accepted it from the command line (so I don't get prompted anymore) as a specific user and as root (this is all proof of concept test, so if it pans out I will get a valid certificate). I am going to modify the pick subroutine to try and "figure out" what user is calling the pick subroutine as well as modify my shell script with expect so that it {A}ccepts the certificate but I thought I would ask the "guru's" on here (you know who you are!) in case expect gives me fits thanks dougc ___ U2-Users mailing list U2-Users@listserver.u2ug.org http://listserver.u2ug.org/mailman/listinfo/u2-users