TSM 5.3 client only usable by root

[pfaelzerchen]

Hi,



I have a problem with a client installation on a Red Hat 9 machine (Kernel 2.4.20). The client software installed without any problems and I can do backups, but only with the root user. If I try to start it under a normal user account, dsmc immediatly freezes and can only be killed. dsmj starts normally, but freezes if I try to use a function with CPU-Usage going to 100%.



I checked to file permissions in /opt/tivoli/tsm/client/ba/bin and I think they are sufficient.



Does anybody out there have a clue?



Regards,

Matthias

 

[sgabriel62]

Matthias

TSM operates via Root on all OS verions server and client. It's hard coded and there is nothing more to it than that. What needs to happen in your environment is one of several things. Either your ID joins the Root ID group, which probably wont happen, you can create sudo rules, again security dependent, or you can apply for permanent root access where you can "su" at any time to manage your TSM environment.

What you are experiencing is normaly operations simply because the "dsmc" command itself is hard linked to /usr/sbin or /usr/bin, depending on the OS. And obviously these are owned by Root:sys or bin:bin.

So consider your options and good luck



Steven

 

[chad_small]

We use sudo on our servers....makes our Admin's feel all warm and fuzzy. Truth is that a backup operator is really a subgroup to the admin group so you should have either su or sudo available to manager the TSM client otherwise what good are you?

 

[pfaelzerchen]

Thank you for your help. In fact I'm to administrator for the machine, but I want to allow its user to restore his files himself. Can you give me an example of your sudoers rule for tivoli?

 

[Harry_Redl]

Hi all,



sorry for interruption but I do not think this is true ...

I have just tested (to be sure) that I can run the dsmc on Linux (SLES8) as a common user "tsmuser" I have created right now. This user is memeber of "users" group only



I can make backups and restores - the limitation is that I cannot restore (or even view using "q backup") files belonging to other users - which seems to be reasonable thing



Server: TSM 5.2.4.0

Client: TSM 5.3.2.0

OS: SuSE SLES8 SP3 (kernel 2.4.21-251)



these are rights for client folder files:



<TABLE BORDER=0 ALIGN=CENTER WIDTH=85%><TR><TD><font class="pn-sub">Code:</font><HR></TD></TR><TR><TD><FONT class="pn-sub"><PRE> harry@tsmtest:~> ls -la /opt/tivoli/tsm/client/ba/bin/

total 23852

drwxr-xr-x 4 root root 4096 2005-11-09 15:51 .

drwxr-xr-x 3 root bin 4096 2005-11-07 19:10 ..

-r--r--r-- 1 root bin 1793441 2005-10-12 15:15 dsm.jar

-rw-r--r-- 1 root root 2 2005-11-07 19:27 dsm.opt

-r--r--r-- 1 root bin 782 2005-10-12 15:15 dsm.opt.smp

-rw-r--r-- 1 root root 125 2005-11-09 15:51 dsm.sys

-r--r--r-- 1 root bin 971 2005-10-12 15:15 dsm.sys.smp

-r--r--r-- 1 root bin 530339 2005-10-12 15:15 dsm_pref.jar

-r-xr-xr-x 1 root bin 2380382 2005-09-21 17:40 dsmadmc

-r-xr-xr-x 1 root bin 5635292 2005-09-21 17:40 dsmagent

-r-xr-xr-x 1 root bin 3896702 2005-09-21 17:40 dsmc

-r-xr-xr-x 1 root bin 2422518 2005-09-21 17:40 dsmcad

-rw-r--r-- 1 root root 80 2005-11-07 19:14 dsmerror.log

-r-xr-xr-x 1 root bin 4418 2005-09-21 17:40 dsmj

-r-xr-xr-x 1 root bin 15738 2005-10-12 15:15 dsmswitch

-rwsr-xr-x 1 root bin 2249869 2005-09-21 17:40 dsmtca

-r-xr-xr-x 1 root bin 285988 2005-10-12 15:15 dsmtrace

lrwxrwxrwx 1 root root 16 2005-11-07 19:10 en_US -> ../../lang/en_US

drwxr-xr-x 2 root bin 4096 2005-11-07 19:10 images

-r--r--r-- 1 root bin 108575 2005-10-12 15:15 jdom.jar

-r--r--r-- 1 root bin 402270 2005-10-12 15:15 jh.jar

-r-xr-xr-x 1 root bin 2676675 2005-09-21 17:40 libxerces-c1_6_0.so

-r-xr-xr-x 1 root bin 113654 2005-09-21 17:40 libxmlutil-5.3.2.0.so

drwxr-xr-x 2 root root 4096 2005-11-07 19:11 plugins

-r--r--r-- 1 root bin 850653 2005-10-12 15:15 uil.jar

-r--r--r-- 1 root bin 834852 2005-10-12 15:15 xercesImpl_2_2_1.jar

-r--r--r-- 1 root bin 83089 2005-10-12 15:15 xmlParserAPIs_2_2_1.jar

</PRE></FONT></TD></TR><TR><TD><HR></TD></TR></TABLE>





Hope it helps



Harry

 

[pfaelzerchen]

Strange. I have to exact same rights on my files and am using the same client and server version, but it does not work.

 

[nbs03]

Pfael,

As a regular user you should be able to backup and restore the files that you have ownership of. If your problem is the TSM application hanging or crashing;



- Check your ulimit settings (set them to unlimited)

- Make sure thatyou can write to any log or error files (set the TSM error file [specified in dsm.sys] permissions to 777)

- Ensure your shell environment variables are correctly set (DSM_CONFIG, DSM_DIR and DSM_LOG)



If these things all check out, then start checking the OS related differences between root and the user. Log in as the user and "su" to root and reset your environment to root's environment (su -). If that works, return to the user, and "su" to root and retain the user's environment settings (su) [*no trailing dash]. If TSM does not work this second time, there is probably some difference between root's environment and the user environment that is causing the problem that you will have to track down. Use "env" to display your environment.



Have a nice day,

neil