NPRao
15th January 2002, 22:43
Hi,

We have recently created new users and they are not able to login. create runtime, database users etc are done.

any clues will be helpful.

Thanks!

NPRao
15th January 2002, 22:47
full screen

Han Brinkman
16th January 2002, 09:30
Could it be that your BSE_REM variable is set? In case of NT check the registry.

victor_cleto
16th January 2002, 11:18
Hi see that you are creating remote users?
How did you create them and from where are you trying to login?

NPRao
16th January 2002, 20:37
Hi,

we found the problem and the fix to it.

We are on the HP-Unix. I didnt create any remote user they are just normal user.

the problem is we set 755 file permissions on the $BSE/tools directories and all the subdirectories and files under it. We change to 775 and then the users were able to login. I guess there is some bug with the tools that they are expecting a write authorization. We logged a case with baan support. We feel it is a security issue.

victor_cleto
17th January 2002, 12:19
I don't think it's a security issue, just think about the following:
A super user can install PMC Tools patches and write into tools (patch objects, etc.), and a super user can be any user, not only bsp.
If you restrict the write access to the tools directory, then the only super user that can do such tasks related to tools would be 'bsp'.
Baan installs all directories with 770, and objects as well (except some related to the portingset), so I think that internally they do a few checks, at least to the directories (I usually have problems is with objects installed by super users that use a umask without write for the bsp group, but that's another history...).

NPRao
18th January 2002, 22:14
Hi Hans,

Can you please explain me the purpose and usage of
BSE_REM variable ??

Thanks!