Bill;

Normally our phantoms here return a user = "system." We haven't tried firing
phantoms from phantoms or starting UniData as another user. I have seen some
strange security related things with phantoms - it's like the user isn't
quite logged in.

You can try looking at @LOGNAME in UniData and see what it reports (I think
there is another one for group or administrator) or setting up a .bat file
in windows to run that does an echo %USERNAME% and capturing the output or
redirecting it to a file.

hth
Colin Alfke
Calgary, Canada 

-----Original Message-----
From: Bill Haskett

As a follow up (remember we're on Windows 2K3)...

If I login to the Windows server as administrator "A" then run a 3rd party
"sftpc"
command in a DOS window, it works.  If I login to UniData as the same
administrator "A" and run the same "sftpc" command, from ECL, it works fine.
However, if I login to UniData as administrator "B" then run the same
"sftpc" command from ECL (!sftpc -profile=... -cmdFile=...), it fails.  Now,
if I login to the Windows server as administrator "B" then run the "sftpc"
command in a DOS window, it works; and if I rerun the command in UniData,
while still logged in as administrator "B", it works.
However, when I log off UniData and log back in as administrator "A" the
"sftpc"
command fails.  In order to make this work for administrator "A" I need to
login to the Windows server, as admministrator "A", and execute the "sftpc"
command from a DOS prompt.  However, once done for administrator "A",
administrator "B" can't run this command successfully from UniData.  And
around we go.

This seems to imply that O/S commands from UniData execute in a different
security context than on the Windows server, in a DOS window (using the same
Windows user).

Does the UniData Database service need to start under something other than
the "Local System account"?  What Windows security changes from within UD vs
from within a DOS window?

Thanks,

Bill

>-----Original Message-----
>From: Bill Haskett
>
>I've been trying to set up a script to sftp a file to someone else on 
>the internet
on
>a regular, unattended, basis.  They're using Windows and WinSSHD.  I'm 
>using Windows
>2K3 with Tunnelier and UD v7.1.9.  I'm having some problems figuring 
>out the
security
>context of the phantomed job that runs an O/S command.
> 
>If I start a phantom process, that phantoms other processes when the 
>time is right, what user does the phantom'd phantom use when processing O/S
commands?
> 
>Thanks,
>
>Bill Haskett
>Advantos Systems, Inc.
-------
u2-users mailing list
[email protected]
To unsubscribe please visit http://listserver.u2ug.org/

Reply via email to