IJ26664: NON-ROOT USERS CANNOT USE ADDSERVERACCESS, LISTSERVERACCESS, AND REMOVESERVERACCESS

IBM Tivoli Monitoring 6.3.0 Fix Pack 7 Service Pack 6 (6.3.0.7-TIV-ITM-SP0006)

APAR status

• Closed as program error.

Error description

• A non-root user using the command addserveraccess can only add
  one user to the server access list. Thereafter no additional
  users may be added. Additionally listing, or removing the
  current server access list results in the errors displayed to
  the user,
  
  KUIC00021E: Error 13 processing file
  /home/ray/Tacmd/tems_ray.sec.
  
  File I/O operations on the file
  failed.
  
  Check file permissions granted to the login user.
  

Local fix

• Until the problem is fixed, use the root user only.
  

Problem summary

• Non-root users cannot list, remove or add additional users to
  the server access list.  Executing the command addserveraccess,
  listserveraccess or removeserveraccess will result in the
  following error reported to the user
  KUIC00021E: Error 13 processing file
  /home/<username>/Tacmd/tems_<username>.sec.
  
  File I/O operations on the file failed.
  
  Check file permissions granted to the login user.
  
  
  the addserveraccess command incorrectly sets the permissions of
  the access list file.  As a result non-root users will be
  returned the following error message when they attempt the
  addserveraccess, listserveraccess, or removeserveraccess
  functions.
  

Problem conclusion

• Correctly set the file permissions on the access list file upon
  creating the file using the addserveraccess command.
  
  
  The fix for this APAR is contained in the following maintenance
  packages:
  
     | service pack | 6.3.0.7-TIV-ITM-SP0006
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TEMS

• Fixed component ID

  5724C04MS

Applicable component levels