Visit Our UNIX and Linux User Community


Cannot create user using SMITTY


 
Thread Tools Search this Thread
Operating Systems AIX Cannot create user using SMITTY
# 8  
Old 06-07-2011
Have you auditing turned on? (Check with audit query as root.)

If so, could you please expand about its configuration?

bakunin
# 9  
Old 06-07-2011
Code:
 
audit>audit on
** auditing enabled already
A system call received a parameter that is not valid.

Code:
audit query
auditing on
bin processing off
audit events:
        realsecure - ACCT_Disable,ACCT_Enable
        general - USER_SU,PASSWORD_Change,FILE_Unlink,FILE_Link,FILE_Rename,FS_Chdir,FS_Chroot,PORT_Locked,PORT_Change,FS_Mkdir,FS_Rmdir,USER_Login,USER_Logout,USER_Change,USER_Remove,USER_Create,USER_Locked,USER_Unlocked,GROUP_Create,GROUP_Remove
        objects - AUD_CONFIG_WR,S_USER_WRITE,S_PASSWD_READ,S_PASSWD_WRITE,S_LOGIN_WRITE,S_LIMITS_WRITE,S_GROUP_WRITE,S_ENVIRON_WRITE
        SRC - SRC_Start,SRC_Stop,SRC_Addssys,SRC_Chssys,SRC_Delssys,SRC_Addserver,SRC_Chserver,SRC_Delserver
        ALL - AUD_CONFIG_WR,S_USER_WRITE,S_PASSWD_READ,S_PASSWD_WRITE,S_LOGIN_WRITE,S_LIMITS_WRITE,S_GROUP_WRITE,S_ENVIRON_WRITE,ACCT_Disable,ACCT_Enable,USER_SU,PASSWORD_Change,FILE_Unlink,FILE_Link,FILE_Rename,FS_Chdir,FS_Chroot,PORT_Locked,PORT_Change,FS_Mkdir,FS_Rmdir,USER_Login,USER_Logout,USER_Change,USER_Remove,USER_Create,USER_Locked,USER_Unlocked,GROUP_Create,GROUP_Remove,SRC_Start,SRC_Stop,SRC_Addssys,SRC_Chssys,SRC_Delssys,SRC_Addserver,SRC_Chserver,SRC_Delserver,AUD_It,FILE_Write,PROC_Delete,SHM_Detach,SHM_Open,FILE_Close,FILE_Open,FILE_Stat,FILE_Dupfd,FILE_Read,FILE_Owner,FILE_Accessx,PROC_SetGroups,PROC_RealGID,PROC_Limits,PROC_SetUserIDs,WLM_assign,AUD_Proc,PROC_Privilege,TCP_ksocket,TCP_kconnect,TCP_kclose,PROC_Execute,FILE_Pipe,PROC_Create,TCB_Exec,PROC_LoadMember,PROC_LoadError,TCP_ksetopt,TCP_kbind,PROC_Load,WLM_set,TCP_klisten,FILE_Mknod,FILE_Mode,PROC_Sysconfig,PROC_Setpgid,SEM_Create,PROC_Environ,TCP_kaccept,TCP_kshutdown,INIT_Start,FILE_Utimes,MSG_Create,SHM_Create,SEM_Op,FILE_Fchmod,RTSEM_Init,SEM_Delete,RTSEM_Destroy,PROC_Setpri,FILE_Symlink,INIT_End,FILE_ReadXacl,FILE_WriteXacl,PROC_Kill,RTSEM_Post,RTSEM_Wait,RTSEM_TryWait,TCP_ksocketpair,MSG_Write,MSG_Read,MSG_Mode,FILE_Fchown,PROC_SetPri,CRON_Start,CRON_Finish,FILE_StatAcl,SHM_Mode,SHM_Close,FS_Fchdir,PROC_Adjtime,SENDMAIL_Config,MAIL_ToUser,USER_Chpass,PASSWORD_Flags,PROC_SysParm,DEV_Configure,DEV_Create,DEV_Change,FILE_StatPriv,FILE_FReadXacl,FILE_FWriteXacl,TCPIP_connect,TCPIP_access,TCPIP_data_out,TCP_kreceive,TCPIP_data_in,FILE_Acl,USER_Check,PASSWORD_Check,GROUP_User
audit objects:
        /etc/security/audit/config:
                 w = AUD_CONFIG_WR
        /etc/security/group:
                 w = S_GROUP_WRITE
        /etc/security/environ:
                 w = S_ENVIRON_WRITE
        /etc/security/limits:
                 w = S_LIMITS_WRITE
        /etc/security/passwd:
                 r = S_PASSWD_READ
                 w = S_PASSWD_WRITE
        /etc/security/login.cfg:
                 w = S_LOGIN_WRITE
        /etc/security/user:
                 w = S_USER_WRITE

# 10  
Old 06-07-2011
Ok, there is no "out-of-the-book" solution so the only way to solve the problem is methodical exclusion of possible culprits. Some *possible* reasons:

1. Usually "/usr/lib/security/mkuser.sys" is a link to "/etc/security/mkuser.sys". Are the two files different? What about their permissions? What is the content of the file(s)?

2. in "/etc/security/login.cfg" is a "usw:" stanza with a line "shells = [...]". This is a list of allowed login shells - do the entries in "mkuser.sys" maybe contradict this? (like in: defining a shell as login shell which is not in the allowed login shells)

3. Maybe the auditing is causing the troubles. Try shutting down auditing (audit shutdown) and then try to create the user.

I hope this helps.

bakunin
# 11  
Old 06-07-2011
Quote:
Originally Posted by bakunin
Ok, there is no "out-of-the-book" solution so the only way to solve the problem is methodical exclusion of possible culprits. Some *possible* reasons:

1. Usually " /usr/lib/security/mkuser.sys" is a link to " /etc/security/mkuser.sys". Are the two files different? What about their permissions? What is the content of the file(s)?

in AIX 5.3 the /usr/lib/security/mkuser.sys
is not linked to /etc/security/mkuser.sys and i double check with other AIX 5.3 machin and its not linked too but the audit works fine there .

ls -lrt /usr/lib/security/mkuser.sys
-rwxrwxrwx 1 root security 1947 Jun 23 2007 /usr/lib/security/mkuser.sys

more /etc/security/mkuser.sys
/etc/security/mkuser.sys: A file or directory in the path name does not exist.


2. in "/etc/security/login.cfg" is a "usw:" stanza with a line "shells = [...]". This is a list of allowed login shells - do the entries in "mkuser.sys" maybe contradict this? (like in: defining a shell as login shell which is not in the allowed login shells)

usw:
shells = /bin/sh,/bin/bsh,/bin/csh,/bin/ksh,/bin/tsh,/bin/ksh93,/usr/bin/sh,/usr/bin/bsh,/usr/bin/csh,/usr/bin/ksh,/us
r/bin/tsh,/usr/bin/ksh93,/usr/bin/rksh,/usr/bin/rksh93,/usr/sbin/uucp/uucico,/usr/sbin/sliplogin,/usr/sbin/snappd,/usr/bin/fal
se,/home/bin/security,/usr/bin/smitty
maxlogins = 32767
logintimeout = 30
auth_type = STD_AUTH

3. Maybe the auditing is causing the troubles. Try shutting down auditing (audit shutdown) and then try to create the user.

even i shutdown the audit and i can't create the user .

I hope this helps.

bakunin

Last edited by thecobra151; 06-07-2011 at 08:24 AM..
# 12  
Old 06-20-2011
Let's see your "/etc/security/login.cfg" file and check if anything's wrong with it.
# 13  
Old 06-21-2011
can u attach output of "truss mkuser khaled"? if there is a permission problem we can see.
# 14  
Old 06-22-2011
dears i solve the problem by copying the config file from node b to node a and ist works fine

thanks all

Previous Thread | Next Thread
Test Your Knowledge in Computers #654
Difficulty: Easy
DOS was initially released on the IBM System/360.
True or False?

10 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

Smitty

Hi All, Im new in aix, anyone can advice is there any way to understand smitty ?:confused: Thanks. TCP. (4 Replies)
Discussion started by: tcp01315
4 Replies

2. Shell Programming and Scripting

Find if a User exist if not create user

What I'm trying to do is write a script in Perl to find a user and if that user exist it would print "User Exist, Pls Try Again". If The user doesn't exist I'm able to create a user with a password. Any suggestions? (3 Replies)
Discussion started by: GoBoyGo
3 Replies

3. AIX

Usage of smitty alt_mksysb

Hello, in which situations should I use smitty alt_mksysb ? What is the general purpose of this tool. Thanks for help, p (1 Reply)
Discussion started by: pitmod
1 Replies

4. Homework & Coursework Questions

Create script to add user and create directory

first off let me introduce myself. My name is Eric and I am new to linux, I am taking an advanced linux administration class and we are tasked with creating a script to add new users that anyone can run, has to check for the existence of a directory. if the directory does not exist then it has... (12 Replies)
Discussion started by: pbhound
12 Replies

5. Ubuntu

Create New User with the same group nd privileges of the other user

Hi, Anyone can help me on how to duplicate privileges and group for useroradb01 to userrootdb01. I have currently using "useroradb01" and create a newly user "userrootdb01". I want both in the sames privileges and group. Please see the existing users list below; drwxr-xr-x 53 useroradb01... (0 Replies)
Discussion started by: fspalero
0 Replies

6. AIX

Sudo and smitty

Hello everyone I have a question. Its possible to type smitty mksysb using sudo ? I have a partition and install sudo I create a user for use sudo. I make a test with sudo and command line for the mksysb and its ok sudo mksysb -i /dev/rmt0 and I can make my mksysb. My question... (1 Reply)
Discussion started by: lo-lp-kl
1 Replies

7. AIX

mksysb with smitty

Hello I need to make a mksysb, I try with smitty but I get the next message 0512-017 mksysb: Cannot write to the device /dev/rmt3. Either write protected or in use. My tape are ready to write ( dont get protection) I use the clean tape and I try with other tapes but I... (6 Replies)
Discussion started by: lo-lp-kl
6 Replies

8. UNIX for Dummies Questions & Answers

I create user but i cant login the user i created.

I created a user, i login as a root. I add him in the group where he can access and login as a root! I checked it in users' list and in group's list, he is there. My problem is this, I cant login using the username/account I just created! What should i do to use and login the user/account i've just... (5 Replies)
Discussion started by: jerome
5 Replies

9. UNIX for Advanced & Expert Users

Other than root user .Normal user is unable to create files

Hi all, I am using Sun Solaris 9 .In this system normal users unable to create files from the command line.I added these users in bin,adm and even root group i found them unable to create a file. (1 Reply)
Discussion started by: mallesh
1 Replies

10. UNIX for Dummies Questions & Answers

smitty, remove user, remove directory as well..

hi, i am on aix. i used smitty to remove a user.. but then found that its directory still exists.... so i have to remove the directory manually... am i doing it the right way? (2 Replies)
Discussion started by: yls177
2 Replies

Featured Tech Videos