8.11.2.1.1 Permission Settings When Enabling User Substitution

When you set the privilege mode to either USER_IDENTICAL or USER_MAPPING, the following permission settings are made automatically by Resource Broker:

• UBBCONFIG permission settings
  • The PERM value in the RESOURCES section is set to 0666. The RQPERM and RPPERM value in all JES servers entries in the *SERVERS section is set to 0666. Therefore, all job users have full permissions to JES system IPC resources.
  • The UID and GID parameters of the machine where JES servers are located is set to root user UID and GID.

The following listing shows a UBBCONFIG file example.

UBBCONFIG Example

*RESOURCES
IPCKEY <IPCKEY> # for example 132770
DOMAINID jessample
MASTER SITE1
MODEL SHM
MAXACCESSERS 200
MAXSERVERS 50
NOTIFY SIGNAL
PERM 0666 #Adding "PERM=0666" in RESOURCES section
SECURITY USER_AUTH
AUTHSVC "AUTHSVC"
 
*MACHINES
#
<uname -n>
LMID = SITE1
TUXDIR ="<full path of TUXEDO software>"
TUXCONFIG = "<full path of APPDIR>/tuxconfig"
TLOGDEVICE ="<full path of APPDIR>/TLOG"
TLOGSIZE=10
APPDIR = "<full path of APPDIR>"
ULOGPFX = "<full path of APPDIR>/ULOG"
 
*GROUPS
 
ARTGRP
LMID = SITE1 GRPNO = 1
QUEGRP
LMID = SITE1 GRPNO = 2
TMSNAME = TMS_QM TMSCOUNT = 2
OPENINFO = "TUXEDO/QM:<full path of APPDIR>/QUE:JES2QSPACE"
 
EVTGRP
LMID= SITE1 GRPNO=3
 
#
*SERVERS
# Adding RQPERM=0666 RPPERM=0666 in all JES servers entry in SERVERS section
DEFAULT: CLOPT="-A"
 
TMUSREVT SRVGRP=EVTGRP SRVID=1 CLOPT="-A"
RQPERM=0666 RPPERM=0666
 
TMQUEUE
SRVGRP = QUEGRP SRVID = 1
GRACE = 0 RESTART = Y CONV = N MAXGEN=10
CLOPT = "-s JES2QSPACE:TMQUEUE -- -t 5 "
RQPERM=0666 RPPERM=0666
 
ARTJESADM SRVGRP =ARTGRP SRVID = 1 MIN=1 MAX=1
CLOPT = "-A -- -i jesconfig"
RQPERM=0666 RPPERM=0666
 
ARTJESCONV SRVGRP =ARTGRP SRVID = 20 MIN=1 MAX=1
CLOPT = "-A --"
RQPERM=0666 RPPERM=0666
 
ARTJESINITIATOR SRVGRP =ARTGRP SRVID =30
CLOPT = "-A -- -n 20 -d"
RQPERM=0666 RPPERM=0666
 
ARTJESPURGE SRVGRP =ARTGRP SRVID = 100
CLOPT = "-A --"
 
AUTHSVR SRVGRP=ARTGRP SRVID=104 CLOPT="-A"
RQPERM=0666 RPPERM=0666
 
*SERVICES

• Permission settings for file system
  • File permission for the following folders is set to 777 under $JES_BASE_DIR:
    • $DATA_SOURCE
    • $DATA
    • $MT_LOG
    • $SPOOL
    • $MT_TMP
    • $JESROOT
  • The following empty files are created under $JES_BASE_DIR with file permission 666:
    • $MT_ACC_FILEPATH/AccWait
    • $MT_ACC_FILEPATH/AccLock
  • File permission for TUXCONFIG is set to 644 under $APPDIR: