Permission denied errors occur during the IGX upgrade process when changing the owner from a local user to an LDAP account.

Products

• CA Identity Suite

Issue/Introduction

Upgrade attempts from version 1.1 to 2.0 fail with "Permission denied" errors during the owner change phase. This occurs even when using the --user parameter.

Error visible:

stderr: mkdir: cannot create directory ‘/home/<new igx owner user>/.config/systemd’: Permission denied
cp: failed to access '/home/<new igx owner user>/.config/systemd/user/': Permission denied

This happened even after

./check-systemd-usermode --user=<new igx owner user>

was run.

 

 

Environment

• CA Identity Suite
• IGA Xpress (IGX) 2.0

Cause

systemd directory under /home/<new igx owner user>/.config was owned by root instead of user.

Resolution

Perform these steps as a user with root privileges to ensure the environment is ready for the owner change:

1. Enable user lingering to allow the per-user systemd instance to persist: loginctl enable-linger <new igx owner user>
2. Create the configuration directory manually if not present: mkdir -p /home/<new igx owner user>/.config
3. Apply correct ownership to the home directory recursively: chown -R <new igx owner user>:<proper group> /home/new igx owner user>
4. Set directory permissions to allow the user and group access to 700 or 750: chmod -R 750 /home/new igx owner user>
5. Execute the installation script again using the --user <new igx owner user> and if need be--force parameters.