How does sdshell extract the uid from UNIX after logging on to UNIX and pass the information to ACE/Server?
Originally Published: 2001-03-23
Article Number
Applies To
NIS+
RSA ACE/Server
sdshell
Issue
A user attempts a login to an ACE/Client but the ACE/Server Activity Log shows someone else trying to log in.
Resolution
When a user logs into an ACE/Client for UNIX via sdshell, the sdshell program performs a UNIX function called "GETUID". The UNIX system responds by providing sdshell with the UID found in the passwd file associated with the username. The sdshell program then performs a "get pwname" which is a process that scans the passwd file for the first instance of a user with that UID. It then returns the username associated with the UID. These processes are designed for user verification purposes and to determine user rights and privileges.
There will be a problem if two users have the same UID. When the user with a lower position in the UNIX passwd file attempts to login, the process "getpwnam" starts at the top of the passwd file and will take the first user with that UID. This, of course, will be the "other user". The ACE/Server will respond by trying to authenticate the wrong user.
Users MUST have unique UIDs on any UNIX system on which an ACE/Client for UNIX is installed.
Windows NT employs a completely different login process where SIDs are used instead of UIDs and no two users can have the same SID.
Related Articles
Microsoft Integrated Windows Authentication (IWA) fails with 'no uid mapping' error in RSA Access Manager 6.1 Number of Views User-type user attributes show internal ID values instead of UserID values in RSA Identity Governance & Lifecycle Number of Views CyberArk pass-through authentication stops at the login screen when the RSA Authentication Agent 7.x for Windows is installed Number of Views Performance issues seen when processing Role modifications in RSA Identity Governance & Lifecycle Number of Views When should a Provisioning-Termination Rule delete accounts in RSA Identity Governance & Lifecycle? Number of Views
Trending Articles
RSA Authentication Manager 8.9 Release Notes (January 2026) RSA MFA Agent 2.3.6 for Microsoft Windows Installation and Administration Guide RSA-2026-07: RSA Authentication Manager Security Update for Third-Party Component Vulnerabilities Downloading RSA Authentication Manager license files or RSA Software token seed records RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide
Don't see what you're looking for?
