IBM Support

IV49303: RCP RETURNS RCMD2: SOCKET: PERMISSIONS DENIED IN AIX 6.1 APPLIES TO AIX 7100-01

A fix is available

Obtain the fix for this APAR.

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • When Role Based Access Control (RBAC) is enabled on AIX
6.1,
rcp returns the following error for kerberos non-root
user.

# rcp <remote system>:file localfile
rcmd2: socket: The file access permissions do not allow
the specified action.

Permission denied.

This problem does not occur for local users.

Local fix

  • Comment rcp entry in /etc/security/privcmds file and run
the command setkst.

*/usr/bin/rcp:
*        accessauths = ALLOW_ALL
*        innateprivs =
PV_DAC_X,PV_DAC_O,PV_PROC_SIG,PV_NET_CNTL,PV_NET_PORT

# setkst

Note: The above changes removes the restrictions placed
on
rcp by RBAC.

Problem summary

  • When Role Based Access Control (RBAC) is enabled on, running
rcp to copy file from remote machine returns the following
error for kerberos non-root user, if the authentication method
is set to KRB5:

# rcp <remote system>:file localfile
rcmd2: socket: The file access permissions do not allow
the specified action.

Permission denied.

This problem does not occur for local users.

Problem conclusion

  • Added code in rcp to acqire appropriate privilege.

Temporary fix

  • 



Comments


    

  • 



APAR Information




    

  • APAR number
    IV49303
    • 

  • Reported component name
    AIX V7.1
    • 

  • Reported component ID
    5765H4000
    • 

  • Reported release
    710
    • 

  • Status
    CLOSED  PER
    • 

  • PE
    NoPE
    • 

  • HIPER
    NoHIPER
    • 

  • Submitted date
    2013-09-18
    • 

  • Closed date
    2013-09-18
    • 

  • Last modified date
    2014-02-17
    • 





    

  • APAR is sysrouted FROM one or more of the following:
    

    
IV44285
    

    • 

  • APAR is sysrouted TO one or more of the following:
    

    • 



Fix information


    

  • Fixed component name
    AIX V7.1
    • 

  • Fixed component ID
    5765H4000
    • 



Applicable component levels


    

  • R710  PSY  U861227
       UP14/02/14  I  1000
    • 



PTF to Fileset Mapping








      
              
                            

              

              [{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SSMV87","label":"AIX 6.1 Enterprise Edition"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"710","Edition":"","Line of Business":{"code":"LOB08","label":"Cognitive Systems"}},{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSMVAX","label":"AIX Express Edition"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"710","Edition":"","Line of Business":{"code":"LOB08","label":"Cognitive Systems"}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG11R","label":"AIX 7.1 HIPERS, APARs and Fixes"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"710","Edition":"","Line of Business":{"code":"","label":""}}]
              

                                                                    

          
 
        

      

    

      

        

          

            
Document Information


            

            


                        

            Modified date:
            

            17 February 2014
            

            
                      

        


        

        


      

    

  



    

  

  
    
            

          
Page Feedback