No Privilege allowing selects??

[pjwhitney84]

Hey Everyone,

I ran into this odd behavior and I wanted to see if anyone could explain it.

I've defined a new admin on two different 5.5 servers (solaris) called newadmin, for this example.

With NEWADMIN, on one of the servers, I can run selects without ever having to grant authority. With NEWADMIN, on the other server, I get notified that I cannot run that command. There's no difference in the admins (shown below), so whats the difference between the servers? I haven't been able to think of a setting which would cause this.

Any insight? a bug?

-Patrick

--------------
tsm: BACKUP-1>select count(*) from stgpools
ANR2035E SELECT: Administrator NEWADMIN is not authorized to issue this
command.
ANS8001I Return code 9.

tsm: BACKUP-1>

/* below run from a different account for obvious reasons */
ADMIN_NAME: NEWADMIN
LASTACC_TIME: 2008-07-29 14:09:26.000000
PWSET_TIME: 2008-07-29 14:09:26.000000
CONTACT:
LOCKED: NO
INVALID_PW_COUNT: 0
SYSTEM_PRIV: No
POLICY_PRIV: No
STORAGE_PRIV: No
ANALYST_PRIV: No
OPERATOR_PRIV: No
CLIENT_ACCESS: No
CLIENT_OWNER: No
REG_TIME: 2008-07-29 14:09:26.000000
REG_ADMIN: PWHITNEY
PROFILE:
PAS***P:
EMAIL_ADDRESS:

--------- I WAS ABLE TO RUN BOTH COMMANDS ON THIS SERVER-------
IBM Tivoli Storage Manager
Command Line Administrative Interface - Version 5, Release 4, Level 1.2
(c) Copyright by IBM Corporation and other(s) 1990, 2007. All Rights Reserved.

Enter your user id: newadmin

Enter your password: *******

Session established with server BACKUP-2: Solaris SPARC
Server Version 5, Release 5, Level 0.0
Server date/time: 07/29/2008 14:09:55 Last access: 07/29/2008 14:09:46


tsm: BACKUP-2>select count(*) from stgpools

Unnamed[1]
-----------
4

tsm: BACKUP-2>select * from admins where admin_name='NEWADMIN'

ADMIN_NAME: NEWADMIN
LASTACC_TIME: 2008-07-29 14:09:46.000000
PWSET_TIME: 2008-07-29 14:09:46.000000
CONTACT:
LOCKED: NO
INVALID_PW_COUNT: 0
SYSTEM_PRIV: No
POLICY_PRIV: No
STORAGE_PRIV: No
ANALYST_PRIV: No
OPERATOR_PRIV: No
CLIENT_ACCESS: No
CLIENT_OWNER: No
REG_TIME: 2008-07-29 14:09:46.000000
REG_ADMIN: PWHITNEY
PROFILE:
PAS***P:
EMAIL_ADDRESS:


tsm: BACKUP-2>

 

[mateinone]

you need to add the QUERYAUTH parameter to your server options file. This will not be updated until TSM is restarted.

 

[pjwhitney84]

Thank you!

Excellent! Thank you!

-P