IBM Support

Generate core file of webseald on Linux

Troubleshooting


Problem

With the default settings, Linux will prevent webseald to core by default.

Cause

Linux will prevent webseald to generate a core file due to some reasons mentioned below.

Resolving The Problem

When you have problem generating a webseald core file in RedHat Linux, make sure you have done all of the following..

Following the steps below will enable webseald to core in RHEL3.

1. add root user to ivmgr group.

2. chmod g+w /opt/pdweb/www-default/docs (this directory is the doc-root of the instance.)

3. echo 1 > /proc/sys/kernel/core_setuid_ok

4. ulimit -c unlimited

5. /etc/init.d/pdweb start

By setting the above, WebSEAL was able to generate a core by reproducing the problem mentioned in IY55001 in RedHat Linux...(despite the fact that using kill -6 still did not create a core for WebSEAL) .

The above is for RedHat Enterprise Linux only.

The current (as of 04/07/09) SuSE Linux kernel and RHEL 2.1 kernel does not have the core_setuid_ok functionality.

Update(2007/04/18): The step 3 above is for RHEL3.0. If you are using RHEL4.0, use this instead:

3. echo 1 > /proc/sys/kernel/suid_dumpable

Update(2009/03/23,2013/03/05): For RHEL5.0+ or 6.0+, use this instead:

3. echo 1 > /proc/sys/fs/suid_dumpable

If you hesitate to set these operating system-wide parameter, you can use this way instead:

1). setting these parameters in webseald-<instance>.conf to avoid setuid() to another uid


[server]
unix-user = root
unix-group = root

2). restart webseald.

Do not forget 'ulimit -c unlimited' before restarting webseald.

Please restore the previous values after generating cores. These changes should be done just for generating core files.

Update(2015/07/30): For SuSE 11, there are both /proc/sys/fs/suid_dumpable and /proc/sys/kernel/suid_dumpable. You just need to use one of them for step #3. See below example.



# cat /proc/sys/fs/suid_dumpable /proc/sys/kernel/suid_dumpable
0
0
# echo 1 > /proc/sys/fs/suid_dumpable
# cat /proc/sys/fs/suid_dumpable /proc/sys/kernel/suid_dumpable
1
1

[{"Product":{"code":"SSPREK","label":"Tivoli Access Manager for e-business"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"WebSEAL","Platform":[{"code":"PF016","label":"Linux"}],"Version":"All versions","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg21258654