[DUAS] Using Submission account is not possible when "NOSUID" is set on the File system (Unix) - Error : o_dqm_is_user_allowed - fobidden (non privileged mode)

book

Article ID: 198110

calendar_today

Updated On:

Products

CA Automic Dollar Universe

Issue/Introduction

Dollar Universe needs the SUID on uxdqmlan (in bin folder) to run the jobs with a specific submission account (only true when the node owner is different than root).

When trying to execute a Job with a specific account (different than administrator), you will see the error below :

 2021-04-01 11:30:00 |WARN |X|DQL|pid=24553.4159825600| o_dqm_is_user_allowed     | testaccount forbidden (non-privileged mode)


Cause

The "NOSUID" option is set on the FS where the node is installed : there won't be any way to use any Submission account different than the default one (administrator).

Environment

Release : 6.10

Component : DOLLAR UNIVERSE

Resolution

Never use the "NOSUID" option.
Dollar Universe is meant to switch the user using "su - <LOGIN>" and the SUID on uxdqmlan.