AIX

AIX

Connect with fellow AIX users and experts to gain knowledge, share insights, and solve problems.


#Power
 View Only

RBAC for non-root User can run httpd

  • 1.  RBAC for non-root User can run httpd

    Posted Sat October 08, 2016 08:06 AM

    Originally posted by: Chuong


    Hi all,

    i'm on the way configuring rbac for non-root user can start/stop http.

     

    Below is some steps i have done

    setsecattr -c authprivs=aixtools.httpd.operate=PV_DAC_R+PV_DAC_W+PV_DAC_X+PV_DAC_O+PV_KER_RAC+PV_NET_CNTL+PV_NET_PORT+PV_PROC_SIG accessauths=aixtools.httpd.operate secflags=FSF_EPS /oradata/HTTPServer02/bin/httpd

     

    mkrole authorizations="aixtools.httpd.operate" dfltmsg="APACHE HTTPD Control" apacheops
    setkst
    chuser roles=apacheops wasadm

     

    After Rbac configure i try to start Apachectl but not success. After export LIBPATH, i can load the linking-library for httpd but the error still there.

     

    wasadm@newlms:/oradata/HTTPServer02/bin>ldd httpd
    httpd needs:
    Cannot find libaprutil-1.so
             /usr/lib/libpthread.a(shr_xpg5_64.o)
    Cannot find libapr-1.so
             /usr/lib/libc.a(shr_64.o)
             /unix
             /usr/lib/libcrypt.a(shr_64.o)

    wasadm@newlms:/oradata/HTTPServer02/bin>export LIBPATH=/oradata/HTTPServer02/lib

    wasadm@newlms:/oradata/HTTPServer02/bin>ldd httpd
    httpd needs:
             /oradata/HTTPServer02/lib/libaprutil-1.so
             /usr/lib/libpthread.a(shr_xpg5_64.o)
             /oradata/HTTPServer02/lib/libapr-1.so
             /usr/lib/libc.a(shr_64.o)
             /oradata/HTTPServer02/lib/libexpat.a(libexpat.so.0)
             /usr/lib/libiconv.a(shr4_64.o)
             /unix
             /usr/lib/libcrypt.a(shr_64.o)

     

    wasadm@newlms:/oradata/HTTPServer02/bin>./apachectl start
    Could not load program /oradata/HTTPServer02/bin/httpd:
            Dependent module libaprutil-1.so could not be loaded.
    Could not load module libaprutil-1.so.
    System error: No such file or directory

     

    So, what is missing here. Can anyone help .

     

    So thanks and best regards

    Chuong

     

     


    #AIX-Forum