[DUAS] Using Submission account is not possible when "NOSUID" is set on the File system (Unix) - Error : o_dqm_is_user_allowed - fobidden (non privileged mode)

Products

• CA Automic Dollar Universe

Issue/Introduction

Dollar Universe needs the SUID on uxdqmlan (in bin folder) to run the jobs with a specific submission account (only true when the node owner is different than root).

When trying to execute a Job with a specific account (different than administrator), you will see the error below :

 2021-04-01 11:30:00 |WARN |X|DQL|pid=24553.4159825600| o_dqm_is_user_allowed     | testaccount forbidden (non-privileged mode)

Environment

Release : 6.10

Component : DOLLAR UNIVERSE

Cause

The "NOSUID" option is set on the FS where the node is installed : there won't be any way to use any Submission account different than the default one (administrator).

Resolution

Never use the "NOSUID" option.
Dollar Universe is meant to switch the user using "su - <LOGIN>" and the SUID on uxdqmlan.