hauser -addpriv does not give syntax error when "-" in "-group" is not specified

book

Article ID: 100009568

calendar_today

Updated On:

Description

Error Message

As above

Cause

When adding a privilege to a user for a specific group the "-group" option is omitted, instead of displaying a syntax error, hauser assigns clusterwide rights to the user for the given privilege:

With -group option "as designed":

# hauser -addpriv username Administrator -group grpname
username : GroupAdministrator for group(s) ( grpname )

Without -group option:

# hauser -addpriv username Administrator grpname
username : ClusterAdministrator


The -group argument in -addpriv is optional.

If -group is not mentioned in -addpriv, then the rest of the strings are ignored by the CLI.

Due to an error in validating the arguments in the command line interface (CLI), it does not error out with syntax error when "-" in "-group" is not specified. Instead it adds Cluster wide privileges for the user.
 

Resolution

This issue is tracked via Veritas internal incident # 3207663 and is planned to be fixed in upcoming releases:  

-           VCS 5.1SP1RP4
-           VCS 6.0.4
-           VCS 6.1
 
 
Until the fix is released / installed, please ensure that “-group “ is specified when adding privileges to the user.
 

 


Applies To

This issue is applicable to all versions of VCS on all UNIX/Linux platforms.

Issue/Introduction

Veritas Cluster Server (VCS) command to add privileges to a VCS user, hauser –addpriv does not error out with syntax error when: 1) "-" in "-group" is not specified Eg: hauser -addpriv username Administrator group grpname 2) "-group" is not specified, but the group name is specified. Eg: hauser -addpriv username Administrator grpname
The actual syntax of the command is: hauser -addpriv <name> <Administrator|Operator|Guest> [-group <group(s)>]

Additional Information

ETrack: 3207663