IIRC, The SSHd runs as qsecofr, and it forks off jobs that change their
user profile on authentication. However, I think due to a quirk in how
job naming works, it'll show as qsecofr.
On Unix this is achieved through the setuid API, but on i it's QWTSETP:
https://www.ibm.com/support/knowledgecenter/ssw_ibm_i_72/apis/QWTSETP.ht
m
-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of
Richard Schoen
Sent: Tuesday, September 3, 2019 12:19 AM
To: midrange-l@xxxxxxxxxxxxxxxxxx
Subject: Interesting Thing with SSH, bash and Qshell.Pase Calls and
Qsecofr User
I have a bash command line process where I am calling a CL command which
calls several pase commands via STRQSH from the CL command.
Sequence - bash command calls system which calls CL command which calls
qsh/pase. Crash when trying to get environment variable for QSECOFR.
Well ya, it should be using my home directory.
The process appears to spawn several sub-processes that show as running
under QSECOFR instead of my user, even though the job logs end up in my
jobq.
Why would a spawned SSH job by running under QSECOFR instead of my user
ID ?
I did check and my SSH server us running as QSECOFR (which I imagine
should be changed), however the potential problem remains the same in
that the home directory for the SSH server job is picked up on the
spawned jobs instead of my user.
This sounds similar to the old QUSER issue we had with IBM i Access ODBC
and other background processes.
The issue for me is that the pase calls are picking up home directory
info for QSECOFR instead of my user from the home directory.
Very interesting.
Hope this makes sense.
Any thoughts appreciated ?
Thanks
BTW: The CL command process runs fine if I just run from a regular IBM i
job.
Regards,
Richard Schoen
Web:
http://www.richardschoen.net<
http://www.richardschoen.net/>
Email: richard@xxxxxxxxxxxxxxxxx<mailto:richard@xxxxxxxxxxxxxxxxx>
Phn: (612) 315-1745
midrange.com
