Question
· Mar 26

irisowner getting in the way of irisusr when using $ZF(-100)

Hi!

I have installed IRIS 2024.1 in RHEL 9.5, using the following 

sudo ISC_PACKAGE_INSTANCENAME="IRISTEST01" ISC_PACKAGE_INSTALLDIR="/iris" \
ISC_PACKAGE_UNICODE="N"  ISC_PACKAGE_INITIAL_SECURITY="Normal" \
ISC_PACKAGE_INSTALL_INTEGRATEDML="N" ISC_PACKAGE_MGRUSER="irisowner" \
ISC_PACKAGE_MGRGROUP="irismgr" ISC_PACKAGE_USER_PASSWORD="**************"  \
ISC_PACKAGE_IRISUSER="irisusr" ISC_PACKAGE_IRISGROUP="irisgrp" \
ISC_PACKAGE_CSPSYSTEM_PASSWORD="**************" ISC_PACKAGE_WEB_CONFIGURE="Y" \
ISC_PACKAGE_WEB_SERVERTYPE="Apache" ISC_PACKAGE_WEB_APACHE_VERSION="2.4" \
ISC_PACKAGE_WEB_APACHE_USER="apache" \
ISC_PACKAGE_WEB_APACHE_CONF="/etc/httpd/conf.d/iris.conf" \
ISC_PACKAGE_SUPERSERVER_PORT="51773" ISC_PACKAGE_STARTIRIS="Y" ./irisinstall_silent

I noticed some strange behaviour running $ZF, when the user appears to be "irisusr" but I can see the environment variables of "irisowner". I configured a RunLegacyTask scheduled task, with the following code

do $zf(-1, "id > /tmp/output.task.log && env >> /tmp/output.task.log")

it happens the same if I use $ZF(-100)

do $zf(-100, "/shell /stdout=""/tmp/output.task.log""", "id", "&&", "env")

and this is the content of the file
 

uid=5003(irisusr) gid=5003(irisgrp) groups=5003(irisgrp) context=system_u:system_r:unconfined_service_t:s0
SHELL=/bin/bash
PWD=/iris/mgr
LOGNAME=irisowner
SYSTEMD_EXEC_PID=2690
HOME=/home/irisowner
CACHELIBPATH=
LANG=en_AU.UTF-8
INVOCATION_ID=8f6c359d14cf45b68ad1cec687cc4188
ODBCINI=/iris/mgr/irisodbc.ini
USER=irisowner
COMLIB=/iris/bin
SHLVL=2
JOURNAL_STREAM=8:25453
PATH=/usr/bin:/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:
_=/usr/bin/env


Is this behaviour expected?

The linux "gpg" command causes problems, since is trying to access the ".gnupg" directory of the "irisowner" user while executing the task as "irisusr", resulting in permissions error. I was able to fix it by explicitly setting the "$HOME" environment variable before running "gpg", but I didn't like it.

Thanks for your help!

Product version: IRIS 2024.1
$ZV: IRIS for UNIX (Red Hat Enterprise Linux 9 for x86-64) 2024.1.2 (Build 398) Thu Oct 3 2024 13:36:19 EDT
Discussion (0)1
Log in or sign up to continue