How does sdshell extract the uid from UNIX after logging on to UNIX and pass the information to ACE/Server?
Originally Published: 2001-03-23
Article Number
Applies To
NIS+
RSA ACE/Server
sdshell
Issue
A user attempts a login to an ACE/Client but the ACE/Server Activity Log shows someone else trying to log in.
Resolution
When a user logs into an ACE/Client for UNIX via sdshell, the sdshell program performs a UNIX function called "GETUID". The UNIX system responds by providing sdshell with the UID found in the passwd file associated with the username. The sdshell program then performs a "get pwname" which is a process that scans the passwd file for the first instance of a user with that UID. It then returns the username associated with the UID. These processes are designed for user verification purposes and to determine user rights and privileges.
There will be a problem if two users have the same UID. When the user with a lower position in the UNIX passwd file attempts to login, the process "getpwnam" starts at the top of the passwd file and will take the first user with that UID. This, of course, will be the "other user". The ACE/Server will respond by trying to authenticate the wrong user.
Users MUST have unique UIDs on any UNIX system on which an ACE/Client for UNIX is installed.
Windows NT employs a completely different login process where SIDs are used instead of UIDs and no two users can have the same SID.
Related Articles
Why do certificate passed validity period still show active in RCM ? Number of Views FIM error "Cannot find an association based on the EntityID that was passed in" Number of Views Verid - Improve accuracy of displayed pass/fail rate statistics per question type in Question Summary report Number of Views Apache will not start - Error logged : Init: Pass phrase incorrect Number of Views Unauthorized change rule triggered although change request for add access has passed approval phase in RSA Identity Govern… Number of Views
Trending Articles
Downloading RSA Authentication Manager license files or RSA Software token seed records Unable to login to RSA Authentication Manager Security Console as super admin RSA Authentication Manager 8.9 Release Notes (January 2026) How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device Connection fails to Cloud Authentication Service when connecting through a proxy server from RSA Authentication Manager to…
Don't see what you're looking for?
