SUMMARY: perl, oracle, sendmail and Solaris 10

Thank you to all who sent responses. Vladimir Terziev pointed out an
oracle bug 4516865 that implies a problem with permissions for
everything under ORACLE_HOME. A few other people suggested that
changing the permissions on the ORACLE_HOME files to 755 shouldn't be a
problem.

After discussing with our Oracle admins, we decided that since Oracle
made the file permissions more restrictive for security, and their
install directions say to only run the changePerm.sh script if you have
to, that we would just determine which files or directories need to have
more permissive rights for what we are doing, and only change the
permissions on those.

Thanks again.
Nicole

-----Original Message-----
Hello,



We have a perl (v 5.8.4) script that gets executed when users send email
to an email alias on a Solaris 10 machine. This script uses Oracle
modules (dbd-oracle 1.19) to access an Oracle 10 database. We are
having problems getting this script to work with the alias.

The user who I'm helping said that the script ran ok as root from the
command line, but not with the alias.



The alias for it in /etc/aliases is as follows:

eg: "|/apps/syrApps/egate/bin/eg.pl"



To test, I did a truss on the sendmail process and the processes it
forks, and sent email to the alias. Right after the call to the
DBD:Oracle module, I saw an error "

Err#13 EACCES [file_dac_search]" for the files
/apps/oracle/product/10.2.0/lib/libclntsh.so.10.1 and
/apps/oracle/product/10.2.0/lib32/libclntsh.so.10.1.



The "file_dac_search" indicates a permission problem. Both of these lib
directories have permissions 750. So, I temporarily changed
/apps/oracle/product/10.2.0/lib/ to 755, ran another test, and saw
different output for that call in truss, but still an error for the
lib32 directory. If we change the permissions of all of the files in
the the Oracle client install directory to 775, sending email to the
alias works.



Obviously that is not a good solution. I tried putting the sendmail
"smmsp" user in the "oinstall" group, but that did not help. I think the
problem might have to do with the Solaris 10 principle of least
privileges or role based access control, but I'm not sure. I just
started reading about these and am not familiar with them.



Does anyone have any suggestions on how to fix this?



Thanks,

Nicole
_______________________________________________
sunmanagers mailing list
sunmanagers@xxxxxxxxxxxxxxx
http://www.sunmanagers.org/mailman/listinfo/sunmanagers
_______________________________________________
sunmanagers mailing list
sunmanagers@xxxxxxxxxxxxxxx
http://www.sunmanagers.org/mailman/listinfo/sunmanagers

Relevant Pages

  • Re: Startup Script create files on network
    ... Permissions weren't the problem at all. ... Apparently startup scripts either don't like the alias, ... > My advice here is to give the SYSTEM account Full Control at the Share ... >> script redirected so that I can make changes whenever I want. ...
    (microsoft.public.win2000.group_policy)
  • Re: ORA-27369: job of type EXECUTABLE failed with exit code: Permission denied
    ... Which exact version of Oracle are you on, ... change the permissions on the extjob executable. ... Note:732963.1 points out the script must exist on all nodes of the ... PL/SQL Release 10.2.0.3.0 - Production ...
    (comp.databases.oracle.misc)
  • Re: Required permissions cannot be acquired?
    ... Changing the file permissions was one of the things I tried. ... >¤ I have forms authentication in SQL RS working like a charm. ... I am now trying to do some authentication against an Oracle ... >Any application that is using the Authenticated User privilege will not work. ...
    (microsoft.public.dotnet.security)
  • Re: Mounted volume, different permissions
    ... > some other stuff we were going to be installing, ... > Oracle software, and, using Veritas Volume manager, we created a 30GB ... > What exactly is going on between the permissions of the underlying mount ...
    (comp.sys.sun.admin)
  • 10gR2 tru64 permissions
    ... I have some problems on a TRU64 box running a 10gR2 database. ... found some notes from oracle saying the owner group of Oracle_home ... Seems there are a lot of permissions problems on this box. ... cluster if I restart the computer an another node will restart the ...
    (comp.databases.oracle.server)