Re: Adding users

From: Peter Weaver (newsgroup_at_weaverconsulting.ca)
Date: 09/01/05 

Date: Thu, 1 Sep 2005 12:46:23 -0400

Dave Froble wrote:
>...
> From what you're saying it sounds like AUTHORIZE doesn't display the
> rights correctly. Support or not, I'd think that VMS engineering
> would like to know the specifics of the problem.

Not only does AUTHORIZE not show it, new processes did not get the right
granted to them. The problem appeared when the main programmer asked me
to grant an identifier to 3 or 4 users, I did it and a week or two later
he called to tell me that I missed one user but the other users were
fine.

When I grant the id I get the GRANTMSG returned, but SHOW USERNAME does
not show the ID I just granted. A second grant gives me a GRANTERR
message, so AUTHORIZE thinks it is there, but will not display it.

UAF> grant/id id_name1 username
%UAF-I-GRANTMSG, identifier ID_NAME1 granted to USERNAME
UAF> show username
...
Identifier Value Attributes
  id_name2 %X80010002
UAF> grant/id id_name1 username
%UAF-E-GRANTERR, unable to grant identifier ID_NAME1 to USERNAME
-SYSTEM-F-DUPIDENT, duplicate identifier

I granted the same right to other users (including a copy of this
username) with no problems. I tried to grant 2 other rights to this
particular username but they caused the same problem. TNT was able to
grant the ID and this user was then able to run the program.

When I have a chance I will try to rebuild the SYSAUF and RIGHTLIST
files to see if this is just a problem that has built up over the
decades that this system has been running. 

-- 
Peter Weaver
Weaver Consulting Services Inc.
Canadian VAR for CHARON-VAX
www.weaverconsulting.ca

Relevant Pages

  • Re: Basic UIC Question and Watcher Question
    ... >If I create a new UIC in MCR Authorize, can I put users in this UIC ... poster pointed out, are really more like Access Control List Identifiers, ... On VMS, each username can only be associated with one UIC, which is divided ... into [Group-number, member-number]; therefore, each username can only be ...
    (comp.os.vms)
  • Re: Group policy software install & directory access rights
    ... Grant "Authenticated Users" read/execute access. ... > the install files if it does not have a username and password? ... > So I log into the local workstation as the local admin which is not a ... > So I'm thinking that the reason my GPO install is failing is because the ...
    (microsoft.public.windows.server.active_directory)
  • Re: Logon failed for user ". but only for membership tables in same database that other request wor
    ... OK to login SQL Server on Computer B. ... I would like you to do a test that on ComputerB, log on using the Username ... You may use the GRANT statement to grant the EXECUTE permission for a user: ... GRANT System Object Permissions (Transact-SQL) ...
    (microsoft.public.sqlserver.security)
  • Re: editing /etc/sudoers
    ... Otherwise, to grant your ... limited root privileges to username, ... Bob Holtzman ...
    (Ubuntu)
  • RE: ERROR 1045: Access denied for user:
    ... When you select user from users what does the username say? ... mysql> GRANT ALL PRIVILEGES ON *.* TO 'mikesd'@'localhost' ... unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe ...
    (RedHat)