Hi,

I am trying to allow a user run the EMC SymCli command,
   /usr/symcli/bin/symclone
as a profile in RBAC.

The set-up is this:

prof_attr:
SymCLI:suser:cmd:::/usr/symcli/bin/symclone:uid=0;gid=0

exec_attr:
SymCLI:::SymCLI

user_attr:
dba::::type=role;profiles=Administrator,SymCLI;roles=store

However, executing the command "/usr/symcli/bin/symclone list" gives
this:

 /usr/symcli/bin/symclone list

Symmetrix ID: 000290101145

Access denied - you are not an authorized base daemon user

Any ideas whether this is an RBAC problem or SymCli problem and how I
might be able to mend it?

Regards, z.

In article 
<f6ada3b0-60c3-4ba0-a7d3-9e20bf9647e2@c58g2000hsc.googlegroups.com>,
 "awl9w0hv5fuexg1@mail.htl22.at" <awl9w0hv5fuexg1@mail.htl22.at> wrote:

> Hi,
> 
> I am trying to allow a user run the EMC SymCli command,
>    /usr/symcli/bin/symclone
> as a profile in RBAC.
> 
> The set-up is this:
> 
> prof_attr:
> SymCLI:suser:cmd:::/usr/symcli/bin/symclone:uid=0;gid=0
> 
> exec_attr:
> SymCLI:::SymCLI
> 
> user_attr:
> dba::::type=role;profiles=Administrator,SymCLI;roles=store
> 
> However, executing the command "/usr/symcli/bin/symclone list" gives
> this:
> 
>  /usr/symcli/bin/symclone list
> 
> Symmetrix ID: 000290101145
> 
> Access denied - you are not an authorized base daemon user
> 
> Any ideas whether this is an RBAC problem or SymCli problem and how I
> might be able to mend it?
> 
> Regards, z.

Have you logged a call with EMC?  Their big selling point seems to be 
service.  Why not try asking the vendor?

-- 
DeeDee, don't press that button!  DeeDee!  NO!  Dee...
[I filter all Goggle Groups posts, so any reply may be automatically by ignored]

awl9w0hv5fuexg1@mail.htl22.at <awl9w0hv5fuexg1@mail.htl22.at> wrote:
> However, executing the command "/usr/symcli/bin/symclone list" gives
> this:
> 
> /usr/symcli/bin/symclone list
> 
> Symmetrix ID: 000290101145
> 
> Access denied - you are not an authorized base daemon user

What is the user's shell? It has to be one of the profiling shells
(/bin/pf*sh). Otherwise you have to call the command through pfexec:

	pfexec /usr/symcli/bin/symclone list

-- 
Daniel