Authorization Error executing a task on an UNIX Agent

Document ID : KB000090242
Last Modified Date : 14/04/2018
Show Technical Document Details
Issue:
Authorization Error executing a task on an UNIX Agent
Resolution:
Detailed Description and Symptoms

When attempting to execute a job or a FileTransfer on a UNIX Agent or Executor, the following messages appear in the log file:

U02003043 Invalid 'PasswordCheck()' call. Error code: ('fsdbatch' - 'geteuid()-call, authorization error, 'Success'')
U02001007 User 'XXXXXXX' is unknown or invalid.....

Investigation

Check for messages similar to these at the start of the Agent log:

U02003034 File attribute: '-rwsr-xr-x 1 uc4 uc4 1259.../uc4/Agents/bin/UCXJLI3'
U02003033 The Agent does not have the necessary file access authorization. It may only be used for tests.
U02003034 File attribute: '-rw-rw-r-- 1 uc4 uc4 2998 .../uc4/Agents/bin/UCXJLI3.ini'


Solution
The reason you are getting these error messages:

U02003043 Invalid 'PasswordCheck()' call. Error code: ('fsdbatch' - 'geteuid()-call, authorization error, 'Success'')
U02001007 User 'XXXXXXX' is unknown or invalid.....

 

is likely due to step "1." in the install procedure not being completed.  

The 'geteuid()' call is a UNIX/Linux system call that returns the real user ID of the calling process. Since the agent executable was not owned by root, the call failed with an "authorization error". This issue should be corrected by issuing the "chown root UCXJLI3" command. The Agent has to be run as root with the sticky bit on the have full functionality.

The Automic UNIX Agent always needs to be run as root and the sticky bit set - if this is not the case, the Agent can not do a "switch user" which is done for certain tasks (ex.: to create temp files for JOBF this authorization is needed...).

Please complete this step from the installation documentation - "Installing the Agent for UNIX">"1. Transferring the tar files to the host and setting up the system environment":

[For actual operation, the program UCXJ??? can be given the appropriate privilege (privileged user - e.g. root).

Change owner to root

chown root UCXJ???....]


This message from the start of the Agent should look similar to this:

U02003034 File attribute : '-rwsr-xr-x 1 root uc4 1259701 .../home/uc4sadmn/Agents/bin/UCXJLI3'
U02003034 File attribute : '-rw-rw-r-- 1 uc4 uc4 2998 .../home/uc4sadmn/Agents/bin/UCXJLI3.ini'