X-MimeOLE: Produced By Microsoft Exchange V6.5
Received: by onstor-exch02.onstor.net 
	id <01C883C2.3C83F98E@onstor-exch02.onstor.net>; Tue, 11 Mar 2008 14:52:44 -0700
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----_=_NextPart_001_01C883C2.3C83F98E"
Content-class: urn:content-classes:message
Subject: FW: Defect  TED00021741 [Cougar] user with CLUSTER,SECURITY in clustesr priveleges cannot find or view elog messages
Date: Tue, 11 Mar 2008 14:52:43 -0700
Message-ID: <BB375AF679D4A34E9CA8DFA650E2B04E08D2A078@onstor-exch02.onstor.net>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: Defect  TED00021741 [Cougar] user with CLUSTER,SECURITY in clustesr priveleges cannot find or view elog messages
Thread-Index: AciDR+9EFhkxHNypQt+ex9MkukQnXQAcVZ2A
From: "Kumar Vakacharla (HCL)" <kumarv@onstor.com>
To: "Andy Sharp" <andy.sharp@onstor.com>
Cc: "Tim Gardner" <tim.gardner@onstor.com>

This is a multi-part message in MIME format.

------_=_NextPart_001_01C883C2.3C83F98E
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Andy,=20

=20

      This problem is related to permissions of the elog messages file.=20

      In cougar, "/var/log/onstor/messages" files are being created with
permission 0x640 and as a result any users who logged into to the system
with their local useraccount are ending up with the error "Permission
Denied" when they try to execute "elog show " or "elog find" command.

Only root login can execute these commands.=20

=20

I have found that this is happening because of the savelog program which
is responsible for rotating files.=20

=20

File: /etc/cron.daily/sysklogd

=20

  savelog -g adm -m 640 -u root -c 7 $LOG >/dev/null

=20

So the savelog program is creating new files with 0x640 permissions.

=20

=20

I think this problem should not be present now because you have changed
log rotation mechanism in linux so that it uses logrotate. (change list
:28107)

But in the latest submittals still I see that these files are getting
created with 0x640 even though conf file says files should be created
with=20

0x644.=20

=20

File: /etc/logrotate.d/onstor

=20

/var/log/onstor/messages {

    size 60K

    rotate 5

    weekly

    compress

    delaycompress

    create 644 root root <--------------=20

    sharedscripts

    postrotate

        /usr/bin/killall -HUP syslogd

        /onstor/bin/emrscron -s elog0 &

    endscript

}

=20

Please clarify me whether you have changed log rotation mechanism in
cougar to use logrotate instead of default syslogd rotation  so that I
can proceed further.

=20

Please correct me if I am wrong.=20

=20

Thanks,

Kumar.

=20

=20

-----Original Message-----
From: tim.gardner@onstor.com [mailto:tim.gardner@onstor.com]=20
Sent: Tuesday, March 11, 2008 12:17 AM
To: Kumar Vakacharla (HCL); May Ma
Cc: Sandrine Boulanger; Vikas Saini
Subject: Defect TED00021741 [Cougar] user with CLUSTER,SECURITY in
clustesr priveleges cannot find or view elog messages

=20

id: TED00021741

Headline: [Cougar] user with CLUSTER,SECURITY in clustesr priveleges
cannot find or view elog messages

State: Assigned

Submitter: maym

Severity: 2-Major

Note_Entry:=20

Area_of_problem: SW-Privileges

Release_Project: Cougar

=20

=20


------_=_NextPart_001_01C883C2.3C83F98E
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns=3D"http://www.w3.org/TR/REC-html40">

<head>
<meta http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<meta name=3DGenerator content=3D"Microsoft Word 11 (filtered medium)">
<style>
<!--
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman";}
a:link, span.MsoHyperlink
	{color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{color:purple;
	text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:10.0pt;
	font-family:"Courier New";}
@page Section1
	{size:8.5in 11.0in;
	margin:1.0in 77.95pt 1.0in 77.95pt;}
div.Section1
	{page:Section1;}
-->
</style>

</head>

<body lang=3DEN-US link=3Dblue vlink=3Dpurple>

<div class=3DSection1>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'>Andy, <o:p></o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; This problem is related to =
permissions
of the elog messages file. <o:p></o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; In cougar, =
&quot;/var/log/onstor/messages&quot;
files are being created with permission <b><span =
style=3D'font-weight:bold'>0x640</span></b>
and as a result any users who logged into to the system with their local =
useraccount
are ending up with the error &quot;Permission Denied&quot; when they try =
to
execute &quot;elog show &quot; or &quot;elog find&quot; =
command.<o:p></o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'>Only root login can execute these commands. =
<o:p></o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'>I have found that this is happening because of the savelog =
program
which is responsible for rotating files. <o:p></o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'>File: /etc/cron.daily/sysklogd<o:p></o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoPlainText><i><font size=3D2 face=3D"Courier New"><span
style=3D'font-size:10.0pt;font-style:italic'>&nbsp; savelog -g adm =
<b><span
style=3D'font-weight:bold'>-m 640</span></b> -u root -c 7 $LOG =
&gt;/dev/null<o:p></o:p></span></font></i></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'>So the savelog program is creating new files with 0x640 =
permissions.<o:p></o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'>&nbsp;<o:p></o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'>I think this problem should not be present now because you have =
changed
log rotation mechanism in linux so that it uses <b><span =
style=3D'font-weight:
bold'>logrotate</span></b>. (change list =
:28107)<o:p></o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'>But in the latest submittals still I see that these files are =
getting
created with 0x640 even though conf file says files should be created =
with <o:p></o:p></span></font></p>

<p class=3DMsoPlainText><b><font size=3D2 face=3D"Courier New"><span
style=3D'font-size:10.0pt;font-weight:bold'>0x644. =
<o:p></o:p></span></font></b></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'>File: /etc/logrotate.d/onstor<o:p></o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoPlainText><i><font size=3D2 face=3D"Courier New"><span
style=3D'font-size:10.0pt;font-style:italic'>/var/log/onstor/messages =
{<o:p></o:p></span></font></i></p>

<p class=3DMsoPlainText><i><font size=3D2 face=3D"Courier New"><span
style=3D'font-size:10.0pt;font-style:italic'>&nbsp;&nbsp;&nbsp; size =
60K<o:p></o:p></span></font></i></p>

<p class=3DMsoPlainText><i><font size=3D2 face=3D"Courier New"><span
style=3D'font-size:10.0pt;font-style:italic'>&nbsp;&nbsp;&nbsp; rotate =
5<o:p></o:p></span></font></i></p>

<p class=3DMsoPlainText><i><font size=3D2 face=3D"Courier New"><span
style=3D'font-size:10.0pt;font-style:italic'>&nbsp;&nbsp;&nbsp; =
weekly<o:p></o:p></span></font></i></p>

<p class=3DMsoPlainText><i><font size=3D2 face=3D"Courier New"><span
style=3D'font-size:10.0pt;font-style:italic'>&nbsp;&nbsp;&nbsp; =
compress<o:p></o:p></span></font></i></p>

<p class=3DMsoPlainText><i><font size=3D2 face=3D"Courier New"><span
style=3D'font-size:10.0pt;font-style:italic'>&nbsp;&nbsp;&nbsp; =
delaycompress<o:p></o:p></span></font></i></p>

<p class=3DMsoPlainText><i><font size=3D2 face=3D"Courier New"><span
style=3D'font-size:10.0pt;font-style:italic'>&nbsp;&nbsp;&nbsp; <b><span
style=3D'font-weight:bold'>create 644 root root &lt;-------------- =
<o:p></o:p></span></b></span></font></i></p>

<p class=3DMsoPlainText><i><font size=3D2 face=3D"Courier New"><span
style=3D'font-size:10.0pt;font-style:italic'>&nbsp;&nbsp;&nbsp; =
sharedscripts<o:p></o:p></span></font></i></p>

<p class=3DMsoPlainText><i><font size=3D2 face=3D"Courier New"><span
style=3D'font-size:10.0pt;font-style:italic'>&nbsp;&nbsp;&nbsp; =
postrotate<o:p></o:p></span></font></i></p>

<p class=3DMsoPlainText><i><font size=3D2 face=3D"Courier New"><span
style=3D'font-size:10.0pt;font-style:italic'>&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;
/usr/bin/killall -HUP syslogd<o:p></o:p></span></font></i></p>

<p class=3DMsoPlainText><i><font size=3D2 face=3D"Courier New"><span
style=3D'font-size:10.0pt;font-style:italic'>&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;
/onstor/bin/emrscron -s elog0 &amp;<o:p></o:p></span></font></i></p>

<p class=3DMsoPlainText><i><font size=3D2 face=3D"Courier New"><span
style=3D'font-size:10.0pt;font-style:italic'>&nbsp;&nbsp;&nbsp; =
endscript<o:p></o:p></span></font></i></p>

<p class=3DMsoPlainText><i><font size=3D2 face=3D"Courier New"><span
style=3D'font-size:10.0pt;font-style:italic'>}<o:p></o:p></span></font></=
i></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'>Please clarify me whether you have changed log rotation =
mechanism in cougar
to use logrotate instead of default syslogd rotation &nbsp;so that I can =
proceed
further.<o:p></o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'>Please correct me if I am wrong. <o:p></o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'>Thanks,<o:p></o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'>Kumar.<o:p></o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'>-----Original Message-----<br>
From: tim.gardner@onstor.com [mailto:tim.gardner@onstor.com] <br>
Sent: Tuesday, March 11, 2008 12:17 AM<br>
To: Kumar Vakacharla (HCL); May Ma<br>
Cc: Sandrine Boulanger; Vikas Saini<br>
Subject: Defect TED00021741 [Cougar] user with CLUSTER,SECURITY in =
clustesr
priveleges cannot find or view elog messages</span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'>id: TED00021741<o:p></o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'>Headline: [Cougar] user with CLUSTER,SECURITY in clustesr =
priveleges
cannot find or view elog messages<o:p></o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'>State: Assigned<o:p></o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'>Submitter: maym<o:p></o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'>Severity: 2-Major<o:p></o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'>Note_Entry: <o:p></o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'>Area_of_problem: SW-Privileges<o:p></o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'>Release_Project: Cougar<o:p></o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'><o:p>&nbsp;</o:p></span></font></p>

<p class=3DMsoPlainText><font size=3D2 face=3D"Courier New"><span =
style=3D'font-size:
10.0pt'><o:p>&nbsp;</o:p></span></font></p>

</div>

</body>

</html>

------_=_NextPart_001_01C883C2.3C83F98E--
