How does sdshell extract the uid from UNIX after logging on to UNIX and pass the information to ACE/Server?
Originally Published: 2001-03-23
Article Number
Applies To
NIS+
RSA ACE/Server
sdshell
Issue
A user attempts a login to an ACE/Client but the ACE/Server Activity Log shows someone else trying to log in.
Resolution
When a user logs into an ACE/Client for UNIX via sdshell, the sdshell program performs a UNIX function called "GETUID". The UNIX system responds by providing sdshell with the UID found in the passwd file associated with the username. The sdshell program then performs a "get pwname" which is a process that scans the passwd file for the first instance of a user with that UID. It then returns the username associated with the UID. These processes are designed for user verification purposes and to determine user rights and privileges.
There will be a problem if two users have the same UID. When the user with a lower position in the UNIX passwd file attempts to login, the process "getpwnam" starts at the top of the passwd file and will take the first user with that UID. This, of course, will be the "other user". The ACE/Server will respond by trying to authenticate the wrong user.
Users MUST have unique UIDs on any UNIX system on which an ACE/Client for UNIX is installed.
Windows NT employs a completely different login process where SIDs are used instead of UIDs and no two users can have the same SID.
Related Articles
RSA & ID Dataweb - Identity Verification Number of Views Access Policy 2.0: Easily Rollout Passwordless to the Masses Number of Views How to manage database growth in RSA Identity Governance & Lifecycle Number of Views Account collection failing with ORA-12899: value too large for column "AVUSER"."STX_ACC_122_266"."CAS17" in RSA Via Lifecy… Number of Views RSA MFA Agent for Microsoft Windows failing to function correctly; error "Currently offline. Unable to connect to the netw… Number of Views
Don't see what you're looking for?
