Join IIUG
 for   
 

Informix News
18 Nov 13 - ZDNet - Top 20 mobile skills in demand... Read
09 Sep 13 - telecompaper - Shaspa and Tatung have shown a new smart home platform at Ifa in Berlin. Powered by the IBM Informix software... Read
06 Sep 13 - IBM data magazine - Mission Accomplished - Miami, Florida will be the backdrop for the 2014 IIUG Informix Conference... Read
01 Feb 13 - IBM Data Magazine - Are your database backups safe? Lester Knutsen (IBM Champion) writes about database back up safety using "archecker"... Read
14 Nov 12 - IBM - IBM's Big Data For Smart Grid Goes Live In Texas... Read
3 Oct 12 - The Financial - IBM and TransWorks Collaborate to Help Louisiana-Pacific Corporation Achieve Supply Chain Efficiency... Read
28 Aug 12 - techCLOUD9 - Splunk kicks up a SaaS Storm... Read
10 Aug 12 - businessCLOUD9 - Is this the other half of Cloud monitoring?... Read
3 Aug 12 - IBM data management - Supercharging the data warehouse while keeping costs down IBM Informix Warehouse Accelerator (IWA) delivers superior performance for in-memory analytics processing... Read
2 Aug 12 - channelbiz - Oninit Group launches Pay Per Pulse cloud-based service... Read
28 May 12 - Bloor - David Norfolk on the recent Informix benchmark "pretty impressive results"... Read
23 May 12 - DBTA - Informix Genero: A Way to Modernize Informix 4GL Applications... Read
9 Apr 12 - Mastering Data Management - Upping the Informix Ante: Advanced Data Tools... Read
22 Mar 12 - developerWorks - Optimizing Informix database access... Read
14 Mar 12 - BernieSpang.com - International Informix User Group set to meet in San Diego... Read
1 Mar 12 - IBM Data Management - IIUG Heads West for 2012 - Get ready for sun and sand in San Diego... Read
1 Mar 12 - IBM Data Management - Running Informix on Solid-State Drives.Speed Up Database Access... Read
26 Feb 12 - BernieSpan.com - Better results, lower cost for a broad set of new IBM clients and partners... Read
24 Feb 12 - developerWorks - Informix Warehouse Accelerator: Continuous Acceleration during Data Refresh... Read
6 Feb 12 - PRLOG - Informix port delivers unlimited database scalability for popular SaaS application ... Read
2 Feb 12 - developerWorks - Loading data with the IBM Informix TimeSeries Plug-in for Data Studio... Read
1 Feb 12 - developerWorks - 100 Tech Tips, #47: Log-in to Fix Central... Read
13 Jan 12 - MC Press online - Informix Dynamic Server Entices New Users with Free Production Edition ... Read
11 Jan 12 - Computerworld - Ecologic Analytics and Landis+Gyr -- Suitors Decide to Tie the Knot... Read
9 Jan 12 - planetIDS.com - DNS impact on Informix / Impacto do DNS no Informix... Read
8 Sep 11 - TMCnet.com - IBM Offers Database Solution to Enable Smart Meter Data Capture... Read
1 Aug 11 - IBM Data Management Magazine - IIUG user view: Happy 10th anniversary to IBM and Informix... Read
8 Jul 11 - Database Trends and Applications - Managing Time Series Data with Informix... Read
31 May 11 - Smart Grid - The meter data management pitfall utilities are overlooking... Read
27 May 11 - IBM Data Management Magazine - IIUG user view: Big data, big time ( Series data, warehouse acceleration, and 4GLs )... Read
16 May 11 - Business Wire - HiT Software Announces DBMoto for Enterprise Integration, Adds Informix. Log-based Change Data Capture... Read
21 Mar 11 - Yahoo! Finance - IBM and Cable&Wireless Worldwide Announce UK Smart Energy Cloud... Read
14 Mar 11 - MarketWatch - Fuzzy Logix and IBM Unveil In-Database Analytics for IBM Informix... Read
11 Mar 11 - InvestorPlace - It's Time to Give IBM Props: How many tech stocks are up 53% since the dot-com boom?... Read
9 Mar 11 - DBTA - Database Administration and the Goal of Diminishing Downtime... Read
2 Feb 11 - DBTAs - Informix 11.7 Flexible Grid Provides a Different Way of Looking at Database Servers... Read
27 Jan 11 - exactsolutions - Exact to Add Informix Support to Database Replay, SQL Monitoring Solutions... Read
25 Jan 11 - PR Newswire - Bank of China in the UK Works With IBM to Become a Smarter, Greener Bank... Read
12 Oct 10 - Database Trends and Applications - Informix 11.7: The Beginning of the Next Decade of IBM Informix... Read
20 Sep 10 - planetIDS.com - ITG analyst paper: Cost/Benefit case for IBM Informix as compared to Microsoft SQL Server... Read
20 Jul 10 - IBM Announcements - IBM Informix Choice Edition V11.50 helps deploy low-cost scalable and reliable solutions for Apple Macintosh and Microsoft Windows... Read
20 Jul 10 - IBM Announcements - Software withdrawal: Elite Support for Informix Ultimate-C Edition... Read
24 May 10 - eWeek Europe - IBM Supplies Database Tech For EU Smart Grid... Read
23 May 10 - SiliconIndia - IBM's smart metering system allows wise use of energy... Read
21 May 10 - CNET - IBM to help people monitor energy use... Read
20 May 10 - ebiz - IBM Teams With Hildebrand To Bring Smart Metering To Homes Across Britain... Read
19 May 10 - The New Blog Times - Misurare il consumo energetico: DEHEMS è pronto... Read
19 May 10 - ZDNet - IBM software in your home? Pact enables five-city smart meter pilot in Europe... Read
17 March 10 - ZDNet (blog) David Morgenstern - TCO: New research finds Macs in the enterprise easier, cheaper to manage than... Read
17 March 2010 - Virtualization Review - ...key components of Big Blue's platform to the commercial cloud such as its WebSphere suite of application ser vers and its DB2 and Informix databases... Read
10 February 2010 - The Wall Street Journal - International Business Machines is expanding an initiative to win over students and professors on its products. How do they lure the college crowd?... Read


End of Support Dates

IIUG on Facebook IIUG on Twitter

[ View Thread ] [ Post Response ] [ Return to Index ] [ Read Prev Msg ] [ Read Next Msg ]

IDS Forum

Re: Different users on different instances?

Posted By: Jonathan Leffler
Date: Friday, 4 May 2007, at 8:49 p.m.

In Response To: Re: Different users on different instances? (ART KAGEL, BLOOMBERG/ 731 LEXIN)

Jose De Jesus Obregon Rizo <ids@iiug.org> asked:
> I have multiple IDS instances on the same server. Is it possible to install
> each instance using a different user (ifxinst1 or ifxinst2, instead of
> informix)? If so, what procedure should i follow to make it?

ART KAGEL <kagel@bloomberg.net> responded:
> No. The server has to be owned by user informix. But you do not have to have a
> separate installation for each server instance. They can all share the same
> INFORMIXDIR, you just need a different ONCONFIG file for each instance with a
> different SERVERNUM and DBSERVERNAME/DBSERVERALIASES settings.

What Art says is accurate, but may not address the fundamental problem
that I suspect Jose faces - having multiple instances on a single
machine administered by different people.

If the requirement is to have different people managing different
instances on the same machine, you can achieve the effect, but
everything still has to be installed by user informix. That means you
have to as careful of user informix (and group informix) as you are
with root. (If you aren't careful with root, you are hosed,
regardless of what you do.) FWIW: I'm assuming a Unix environment -
I'm not sure whether you can achieve this on Windows.

OK - how do we go about this. First of all, ensure that no-one who
must be constrained to a single instance of IDS has access to user
informix or group informix privileges. Second, recognize that you
will need multiple INFORMIXDIRs - one for each distinct set of
administrators. If you are careful, you do not need separate copies
of the basic software, but it is easiest if the INFORMIXDIRs are in
fact completely separate. Third, note that if you enable role
separation for the DBSA in each INFORMIXDIR, as long as your sets of
admins are disjoint, you will have achieved the desired effect.

How do you enable role separation for the DBSA? You change the group
that owns $INFORMIXDIR/etc. That group is the DBSA group; as such
they can administer the system via onmode, onstat, oncheck, onspaces,
onparams, and so on. With one small change, they can start the server
too; that change is to make the oninit executable 6755 (or 6711 or
6511 or 6111 mode - add public execute permission. (This is the only
time I'm likely to tell you to relax the standard permissions - the
default mode is 6754, no public execute permission. The change is
safe; if you are not a DBSA, you will not be permitted to start IDS.

So, if you want user ifxinst1 to administer instance1 and user
ifxinst2 to administer instance2, then you will do:

1. Install software for instance1 in a suitable INFORMIXDIR
(/usr/instance1, which might be a symlink to somewhere else).
2. Install software for instance2 in a second suitable INFORMIXDIR
(/usr/instance2).
3. Create your administrator for instance1 - user name ifxinst1,
group name ifxinst1 (for convenience).
4. Create your administrator for instance2 - user name ifxinst2,
group name ifxinst2.
5. Change the group ownership of /usr/instance1/etc to (group) ifxinst1.
6. Change the group ownership of /usr/instance2/etc to (group) ifxinst2.
7. Consider setting the SGID bit on the two directories: 2775. This
ensures that files created in the directory belong to the group that
owns the directory (and hence, any files created in $INFORMIXDIR/etc
will belong to the administrative group).
8. Prevent anyone su-ing to user informix (or sudo-ing, or logging in
directl) and ensure no-one except user informix belongs to group
informix. Anyone given access to those has control over all the
instances.
9. Have root create the chunk files for the two teams; the files will
be owned by user informix and group informix with 660 permissions.
10. The administrator ifxinst1 can now bring up their server(s) in
their INFORMIXDIR (/usr/instance1); similarly, ifxinst2 can bring up
the server(s) in /usr/instance2. Neither is able to control the other
at all.

Things to watch out for:
1. The sqlhosts files must be coordinated - and server numbers
(server names also, but that is part of sqlhosts), etc.
2. If you don't want two lots of disk space for the software (it
isn't that big; it is usually trivial by comparison with the disk
being managed for the data in the databases), then check out the
ixcreate script that is part of utils_jl from the IIUG Software
Archive (http://www.iiug.org/software).

* Install the IDS software once, in /opt/informix/10.00.UC5 (or
somewhere else similarly appropriate)

* Use "ixcreate -R /opt/informix/10.00.UC5 -L /usr/instance1 -lvd"
to create /usr/instance2 with symlinks for all files but real
directories under /usr/instance1.

* Remove the symlink to sqlhosts; replace it with the appropriate
alternative.

* Set the permissions on /usr/instance1/etc as before.

* Repeat (mutatis mutandis) for instance2.

This gives you a reference copy of the software in
/opt/informix/10.00.UC5, and two parallel setups which point to the
reference software. Any configuration files that you might alter on a
per-instance basis (which would be primarily sqlhosts - but you might
need to worry about aaodir/adtcfg and dbssodir/seccfg, and maybe a few
others) should also be created as separate files - break the symlink
and copy the original from under /opt/informix/10.00.UC5 to the
specific $INFORMIXDIR. Thereafter, the admins can work on their own
instances and not on each others. Users root and informix are still
largely unfettered - but they should not be administering the
individual servers anyway. One of them has to be involved each time
new storage is needed - but that was likely true anyway.

--
Jonathan Leffler #include <disclaimer.h>
Email: jleffler@earthlink.net, jleffler@us.ibm.com
Guardian of DBD::Informix v2007.0226 -- http://dbi.perl.org/
NB: Please do not use this email for correspondence.
I don't necessarily read it every week, even.

Messages In This Thread

[ View Thread ] [ Post Response ] [ Return to Index ] [ Read Prev Msg ] [ Read Next Msg ]

IDS Forum is maintained by Administrator with WebBBS 5.12.