Jw:MAT/AIX/v123: PSMs do not open for non-root user
ITEM: RTA000157877
Q:
7025 f50 432
NWAYS CAMPUS MANAGER ISSUE/UNABLE TO GET HUFFS TO EXCUTE BY ANY USER
OTHER THAN ROOT USER
A:
customer rep: no contact made (answering machine). left a message.
problem: non-root user cannot display hubs (?)
product: nways campus manager lan, v3 (?)
action taken: possible fix by entering the following statement, then
re-trying the step: chmod 777 /usr/CML/conf
action plan: make another attempt to contact the customer and suggest
trying the above fix.
A:
customer rep: no contact made (left another message).
action taken: this time i left a message that he try the statement
chmod 777 /usr/CML/conf then have the non-root user
make another attempt to display the hubs.
> the above may not necessarily be a fix, but it's
a good possibility.
action plan: try to reach the customer tomorrow, 07/14.
A:
Contact Failed - Rang, no answer...
customer still not available.
requeue for later call back
still not available
CUSTOMER (RICK) IS REQUESTING CALL BACK @T/L 347-3228). STATING
SUGGESTIONS DID NOT WORK. REQUESTING AN EMAIL ADDRESS OR PHONE NUMBER
TO GIVE A RETURN CALL. CUSTOMERS EMAIL ADDRESS VALHALLA@US.IBM.COM..
customer rep: Phone Mail
problem: non root user unable to display hubs.
action taken: unable to contact customer by phone. send Email to
VALHALLA@US.IBM.COM
was not able to find a solution in networking.ibm.com
action plan: sending call to L2 for support.
A:
-HAYS, DO -FORMAT 0973-L10R/-------P3S3-99/01/01-01:01--FI
Support Line: _60__ mins.
Called and left message for customer to callback directly to me and
also left email indicating same.
Researching problem on test machine.
Q:
A:
I received email from customer with more detail of problem.
I called and left message to call back at my number with login info
to facilitate quick resolution of problem.
Q:
A:
-HAYS, DO -FORMAT 0973-L10R/-------P3S3-99/01/01-01:01--FI
Support Line: _45__ mins.
CUstomer running AIX432, NV511, NWays123.
Also, no root user operation...more secure server(I don't think TCB
level but some other permission differences.)
The customer cannot(as normal user) get the Nways maps to bring up
PSMs. The nv6000.log file indicates a OStore cache mgr failure.
The /tmp is drwxrwxrwt bin bin(sticky bit).
There were 2 files in /tmp that indicated attempted start of OStore DB.
I removed the sticky bit from /tmp and also updated ed.conf to proper
ordering of PSMs.
Had customer try EUI again...message left indicates still failing.
Customer will call again after clearing MAT DB.
Q:
A:
-HAYS, DO -FORMAT 0973-L10R/-------P3S3-99/01/01-01:01--FI
Support Line: _15__ mins.
Checking customer system using login.
The PSMs seem to be running with no further messages in nv6000.log.
I called and left message to call back with status.
Q:
A:
-HAYS, DO -FORMAT 0973-L10R/-------P3S3-99/01/01-01:01--FI
Support Line: _30__ mins.
Continuing to monitor system as MAT DB rebuilds. Paged customer who
called back. Customer started nv6000 EUI and waiting for syncing to
finish to know if MAT operation is fixed.
The /usr/lpp/ODI/OS5.0/cset/bin/oscmstat command lists 1 client as
being active....good news. It seems to be operating properly now.
Customer will call back before end of day.
We discussed the fact that the users run with umask 077 and wondered
if that might cause a problem in NWays operation....to be researched.
Q:
A:
Paged customer and left message on phonemail to get back with status
update on Nways operation. Waiting for response.
Q:
A:
-HAYS, DO -FORMAT 0973-L10R/-------P3S3-99/01/01-01:01--FI
Support Line: _90__ mins.
Researching security-based failures on PSMs. On our test system, the
non-root user can bring up a PSM if the previously running root NV
session had started before it which started OStore cache manager
process.
Sent email to customer with update.
Asked customer to call back with any status update.
Logged into customer machine.
Q:
A:
-HAYS, DO -FORMAT 0973-L10R/-------P3S3-99/01/01-01:01--FI
Support Line: _150_ mins.
Continuing to work with customer to isolate/resolve the non-root user
MAT bringup problem. The nv6000.log file indicates an ipmapBailout
error as well as PSM errors (DB_VISTA DB errors).
The ROOT user works OK including PSMs.(Nways123)
Customer does now have the JMAs working with non-root but had to change
the application association with the device to Java thtough manual
change.
--->Customer wants raise priority to 1 to get a resolution.
---> The system uses more than usual security measures.
The NV ovwperms are set to 775 bin bin on the default map.
AIX is 432. Other system running Nways123 is AIX421 and does not
seem to have this problem.
We have been through MAT DB clears, Reorgs, etc. with no success.
The system takes a long time to rebuild the MAT DB so don't do this
unless it seems the thing to do again.
---> CUstomer wants to raise to sev 1.
Customer pager is 888-641-9279.
A:
-HAYS, DO -FORMAT 0973-L10R/-------P3S3-99/01/01-01:01--FI
Support Line: _40__ mins.
Contacted Defect Support(Jason) to work on a plan to proceed toward
resolution. Discussed failure and messages. Defect support machine
with same code levels will be built to emulate failure.
Discussed ipmapBailout message with NetView support(John) and got
some insight into environment setup problems that could be involved
although no strong reason to think NetView is the root cause at this
point.
Called customer and left message regarding our efforts to resolve
problem.
Research further and call customer again.
--> Customer pager number: 888-641-9279 (Rick Key, Boulder)
Q:
A:
ACTION TAKEN: Discussed with Dan (sent note w/ login info)
ACTION PLAN: Build machine in our lab w/ AIX 4.3.2, NV 5.1.1, and
Nways 1.2.3. Follow up with L3 Bill R.
A:
-HAYS, DO -FORMAT 0973-L10R/-------P3S3-99/01/01-01:01--FI
Support Line: _200_ mins.
Logged into customer machine checking files, permissions, logs, etc.
Noted several permission differences between this machine and another
customer machine that seems to work. The differences were in MAT
(/usr/CML/PSM....). This did not seem to change the results.
I suggested to customer a removal of MAT and PSMs and a reinstall.
Customer agreed so I performed the removal and reinstall of mgtapptran,
psms6000.lan and jma.image filesets.
The system seemed to come up OK and the NV EUI came up again OK for the
root user. Customer will get MAT DB resync'd and try the non-root user
again with a status call back asap.
Waiting for customer callback.
Q:
A:
ACTION TAKEN: Installed lab machine with same versions of code as
customer. Installed logged in as root. May be useful in comparison to
customer machine.
ACTION TAKEN: Requeued to AXLAN pending reinstall of Nways.
A:
-HAYS, DO -FORMAT 0973-L10R/-------P3S3-99/01/01-01:01--FI
Support Line: _120_ mins.
Duplicated customer platform environment with Defect support assistance
(Jason).
On the test machine, cleared all DBs in Nways and NV. We did see at
least 2 times the failure of the MAT to stop processes when the NV EUI
was stopped in a proper way.(mgtapptrannv, Red, etc.).
The test environment otherwise seemed to work to allow the non-root
user to bring up PSM views.
The customer environment did continue to allow the root user to bring
up PSMs but not the non-root user.
I suggested that the customer remove the Nways product completely and
reinstall to eliminate any of the install problems that may have
occurred. The customer will remove the product and other remaining
components(MAT, etc.) and then reinstall. Customer will consult with
me before installing anew.
Waiting for customer callback.
Q:
A:
I called and left message with customer to try to change the application
for the PSM-type devices to Application Transporter instead of JMA and
see if they would come up.
Waiting for callback from customer.
Q:
A:
Received message from customer on Friday indicating that the final
recommendation to clear MAT DB and re-sync seemed to clear up the
basic problem of PSM apps starting the JMA instead of the PSM view.
Customer not yet completed with MAT discovery so he will call and
give status update.
Waiting for customer callback.
Q:
A:
Called and left message to callback with status update or for further
assistance.
Q:
A:
-HAYS, DO -FORMAT 0973-L10R/-------P3S3-99/01/01-01:01--FI
Support Line: _15__ mins.
Customer replied that the problem is resolved following the clear of
the MAT DB and removal of the JMA config directory. The rediscovery
completed with the PSMs now working as well as JMAs.
Customer is satisfied and appreciative of our support and indicates that
PMR can be closed.
(second install was with NV security OFF).
S e a r c h - k e y w o r d s:
nways 8224 JMA security
WWQA: ITEM: RTA000157877 ITEM: RTA000157877
Dated: 07/1999 Category: NWAYSAIX
This HTML file was generated 2000/11/30~13:34:11
Comments or suggestions?
Contact us