Re: (GSKit) Access to the key database is not allowed

hi Doug,

Whether *RX or *RWX is needed depends on whether the user is going to modify the directories or whether s/he is going to only read them.

So a user who needs to create new key databases might need *RWX. A user who needs to add/renew/import certificates might need *RW to the DEFAULT.KDB/RDB files.

Users who only need to read certificates/directories do not need *W (write) authority.



On 10/26/2011 12:52 PM, Douglas Handy wrote:

Scott,

Users need execute authority to directory objects. You said you gave
the users *RW access to the directories -- that won't work, because *RW
only gives them read/write. It doesn't give them execute.

I didn't mention it in my message, but thought I had tried both *RW
and *RX authority to the various folders. Looks like I missed one and
all but one had *RX and the final subfolder (Server) only had *RW.

When we corrected that, it worked as expected. So for the record,
only *RX is needed and not *RWX on the folders.

Sigh ... thought we had looked at all of them ...

DUH-g