File ownership changes on deploy changes

In my web server 7.0 environment everything installed with owner:group of webservd:webservd. This is fine.
I am using Cgistub and executing all cgi scripts by a different system user. I need to do this to execute ssh, because I don't want to give webservd ssh access.
All cgi scripts must be owned and executed by sshuser:other. This work great.
However, each time I deploy [any] changes (from the Web Server Console) to the configuration, every file and directory is reset back to webservd:webservd.
Is there a way to turn off this behavior? I need to keep ownership from changing when I deploy changes (which is very often these days.)
Thanks,
Mike

Applying my new understanding I created a new Document Root for everything served up that is completely outside the instance directory structure.
Configurations > configuration > Virtual Servers > virtualserver
Document Root (enter new doc root)
Save
Deploy
Everything works as I expect it to and no code changes we needed. And deploying changes do not reset ownership back to webservd in the new doc root.
So if the user running the web server is NOT the user you want running cgi scripts, etc., create a separate area for them.
I like this setup a lot better. Not only does it make a cleaner install, but it keeps users out of the installation directories.
Thanks for the help.
Mike

Similar Messages

Word file ownership changes after edit/save.

This may be a server issue more than Office, but I've come across some articles relating to this problem in Samba, and thought it might be similar.
I'm the Network Admin for a school district. We have a file server that is setup with a file and folder structure that allows students and teachers to access and share documents. One teacher came to me with a problem. Students are able
to create and save Word documents to an assignment folder. The teacher then goes into the document, makes changes and enters notes, then saves the document back to the folder, overwriting the original. The problem is that once she has done so,
the student can no longer access the document.
After investigation and testing, I've found that ownership of the file is changing from the student to the teacher. This is a problem based on the way that the ACL is set on the folder. The students' access is based in the creator/owner attribute.
The fact that the ownership is changing once the teacher opens and edits the document is causing the student to no longer have access to the file.
My question is, is there a setting or other change that can be made to Office so that ownership is not transferred to the teacher? Giving each user explicit rights to each file and/or folder isn't really an option when I have 3000 students to
deal with. Again, this may be a server side issue, but I've not seen this problem with other programs.

I'm picking this up because I have the exact same problem.
Students are given Write access to a folder (So they can save their work)
Teachers are given Modify acccess to a folder (so they can add comments, etc)
CREATOR/OWNER is given Read/Execute so students could read teacher comments, but not make changes to the document once it has been saved.
When I test it with my admin account, it works great. I can update the document and the student can open it to see my comments, but not change the document anymore without saving to a different location.
When I test it with a teacher account, the document changes ownership as soon as the teacher saves. Once the ownership changes, the student no longer has permissions through CREATOR/OWNER and they can't open the document to see the comments anymore.
I can't see why this works when my account makes the changes, but not when a teacher account does. We are doing the exact same things in Word.
Here is an example of the permsions as they exist on a sample document. In the example, my admin account (which works fine) gets it's permissions through BUILTIN\Administrators:
PS H:\> $acl = get-acl "L:\TeacherShare\S2 3(A) Study Hall - Half Year\Submissions\StudentWork.docx
PS H:\> $acl.access
FileSystemRights : ReadAndExecute, Synchronize
AccessControlType : Allow
IdentityReference : SCHOOL\StudentAccount
IsInherited : True
InheritanceFlags : None
PropagationFlags : None
FileSystemRights : Modify, Synchronize
AccessControlType : Allow
IdentityReference : LPS\TeacherAccount
IsInherited : True
InheritanceFlags : None
PropagationFlags : None
FileSystemRights : ReadAndExecute, Synchronize
AccessControlType : Allow
IdentityReference : LPS\School Principals
IsInherited : True
InheritanceFlags : None
PropagationFlags : None
FileSystemRights : ReadAndExecute, Synchronize
AccessControlType : Allow
IdentityReference : LPS\School Document Administrators
IsInherited : True
InheritanceFlags : None
PropagationFlags : None
FileSystemRights : FullControl
AccessControlType : Allow
IdentityReference : BUILTIN\Administrators
IsInherited : True
InheritanceFlags : None
PropagationFlags : None

NFS file ownership changes when someone connects?

Hi,
I have Users accounts on a network mounted volume. The path is something like
/Network/Servers/my.host.com/Volumes/VolName/Users/username
If I'm on a system that nfs mounts this volume and do "ls -l" while in the VolName directory
I see a few directories including the "Users" one...
owned by root
group is nobody
When someone tries to log into that system (sys pat) then the owner ship looks like
pat and nobody (for the Users directory and all others directories)
When another users tries to log in all the directories are then owned by him/her? Even though neither users actually fully logs in. I get a
nfs automount not respoding message
Any ideas why the ownership is changing?
Thanks.
Pat.

Any chance the volume on the server has "Ignore ownership on this volume" checked?
HTH
--macko

Task or script to monitor file ownership, permissions and change as needed

I'm using a Mac OS X Tiger (10.4.9) computer as a file server for a group of people who are (1) individually non-administrative users and (2) members of Groups. The hard drive is partitioned into 2 volumes: Vol1 has no non-admin access, Vol2 has a Shared folder containing folders with files intended for either Public or Private access. I'm admin with UID=501 and trying not to be a danger. Each other user has a unique UID. Each Group has a unique GID. The folder that all users have access to is named Pub_shares. Every user allowed to access Pub_shares is a member of PubGroup (GID=505).
Now when a user accesses a file nested in Pub_shares, that file usually becomes owned by that user and the group membership may change from PubGroup and may undergo a change to "Read only" or "No Access." Since all members of PubGroup should have Read & Write access to files in Pub_shares, this is a problem. All files in Pub_shares, regardless of who last touched them, should remain:
Owner = chris / Access Read & Write
Group = PubGroup / Access Read & Write
Others = No Access
I've read some about Ownership & Permissions. I've seen it suggested that an admin set up an automated task, say to run every 3 minutes; that task checks file ownership and permissions and, if different, changes the values recursively to those shown above, such that:
Owner = 501 / Access = rwx
Group = 505 / Access = rwx
What do I need here? An Automator workflow? A shell script? AppleScript? Cron? launchd? How do I put this together? I don't know the syntax or the expressions to use. Any help is much much appreciated. [Note again: My "server" runs Tiger 10.4.9.] Thanks.

..."I have some Windows users (trying) to access shared files. Will the afp inheritance options stand up to a Windows user?"...
No the afp inherit settings won't apply to windows sharing, but I think there are equivalent settings that can be applied to smb.
..."I thought, too, I'd read somewhere that inheritance options use the topmost volume folder to set inheritance patterns."...
I am not able to double-check this for Tiger, but I don't think that is the case. As far as I know, with those settings enabled (and it doesn't work reliably if only one is enabled) permissions and ownership should be inherited from the folder that the items are added to.
..."My topmost folder on vol2 is "Shared" but it contains both Pub_shares (accessible by members of PubGroup) and a few Private_shares (folders accessible by members of various private groups)."...
Sorry I missed that point in your earlier post. The above would cause complications if a user were to move items from the private area to the public area. The inheritance only applies to when files are created, so something moved from the private area to the public area would retain its original permissions. To make it work, the public and private areas would have to be set up as separate shares, rather sharing the whole volume.

Why can't I change file ownership in the Finder when logged in as root?

Why can't I change file ownership in the Finder when logged in as root?
I can change it in the Finder if logged in as admin or via the terminal as root.
Xserve Other OS

N8 Thomas wrote:
I then went into my finder preference section and changed my "New finder window show" to my computer's name. At that point I could view and find anything within it. this part got the job done.
"You don't, they only appear in open file dialogs and in tool panels like in iMovie, iPhoto.
To view your media, you open the app that you use to manage that type of media." this on the other hand was zero help
What you did doesn't show the Media Browser. It just shows the folders where your media is stored. You may be correct that was all that cobacc wanted.
The Media Browser shows the actual media in thumbnails so that you can preview the media.
However, neither requires any Sharing services to be enabled.

After upgrade file/app. ownership changed to "unknown"

My G5 would not shut down so Apple support told me to do an archive and install without retaining settings. As a result of the archive and install many of my files and applications had the ownership changed to "unknown". Is this normal? What is the easy and safe way to fix this problem.
Thanks

I am pretty sure this is normal, but try calling Apple back on the same case to verify. To fix it, open a terminal window and type
whoami
this will tell you who you are logged in as. Say you are logged in as "bob" then type
chown -R bob ~bob

File Bundle - File Version Changes

Now that I have the file bundle issue fixed, I have come across another issue:
I have a file Bundle with two files. One of which is a Perl script that changes every now and then. I tried to remove the file from the Bundle, add the new file, apply, and then deploy the new Bundle. The Bundle installs as planned, but the new version of the Perl script is not distributed.
Do I need to create a new Bundle for each version of the Perl script?

On Thu, 18 Oct 2007 15:46:10 +0000, skeplin wrote:
>
> Just re-read the TID again -- I didn't have a secondary server so I
> should be OK.
>
> Still have the problem with the file versions though...
I tried this right now on my testserver and after correcting some
directory permission problems it worked.
Can you see that the filesize has changed in the file bundle details
after you upload the new version ?
Also check that whenever a modification to that bundle is made (files
uploaded or someting like that, not when changing assignments) a new
version has to be created and to be deployed.
After you upload the file do not forget to press apply at the bottom, that
will generate a new version that has to be deployed on top of that screen.
After it has been deployed it should be delivered to the device after the
refresh interval or you send it a refresh command.
If you still expect some problems, check the tomcat logfile on your zlm
server when you upload a new file for some errors:
/var/opt/novell/log/zenworks/tomcat/catalina.out
Rainer

Crystal Reports XI Pro About 25% of DLL File attributes changed on install

Post Author: sakelly
CA Forum: Deployment
I am having problems preparing an installation of Crystal Reports XI Pro in a Sanctuary Application Controlled environment where the unique file hashes of DLLs and EXEs need to be recorded and pre-authorised before they can execute. This is because when Crystal Reports XI Pro installs it changes the content of a large number of dlls (for examples chartui.dll and CEReportSource.dll) which all have new file create and modify dates. Hence the file hashes of a previous installation which are authorised for use are different and the application fails to run.Are these changes necessary? It is quite rare to see any application change files this way (sometimes except for licensing reasons).Is there anyway of customising the install to stop the files from changing on install?Will it be safe to overwrite files that are installed with previously installed files (which have been authorised?) I've done some basic testing and it appears ok but a lot of these files are only accessed when producing reports.Thanks,Shaun KellyFurther details on Sanctuary product http://www.lumension.com/Sanctuary_AC_Endpoint_Security.jsp?rpMenuId=118466

The closest to a solution I came up with was to try installing Crystal Reports XI from the cds. When the error occurs click to ignore the error and proceed with the install. After the install is finished, the installer will check for updates which gives a link to Crystal Reports XI Release 2 Service pack 4. This is a complete install file of around 1.7 GB in size. Using this install removes the old Crystal Reports XI Release 1 which is where this issue springs from, and installs Release 2 with no errors. Dll versions will change from 11 to 11_5 and the Crystal Viewer will have updated features, like their calendar no longer loads externally within a small internet explorer window, but rather it loads an internal calendar control. After you have installed the updated install file that is the Release 2 version, you can go to this link and install the Service Pack 5 update that Business Objects came out with. Try here: [http://resources.businessobjects.com/support/additional_downloads/runtime.asp#04]

Minority Interest on Ownership Change

Dear All,
How to achieve Minority Interest on Ownership Change in the same financial Year.
For Example: For April Ownership and Minority interest is 60% and 40% respectively and PROFIT is YTD 1000.
On that period, Minority will be calculated at 40% and value would be 400.
Next Period, May month - ownership has been changed to 80% and 20% and profit value is YTD 2000.
In this period, Minority should be calculated on two values, which 40% is on 1000 (april's value) and 20% on 1000 which May's value.
Total would be 400 + 200 = 600
How to achieve this in HFM. If we uncheck ConsolidateYTD in scenario view, then system will calculate minority as per the requirement. But, if we uncheck this, then ZeroviewforAdj and ZeroviewfornonAdj has to be periodic and any adjustment requiered, then only periodic value needs to be inputed. But, data load is happening with YTD values (TB values been loaded with YTD value). Any impact on Flow(P&L) / Balance (Balancesheet) accounts if we use periodic values for adjustment.
If we check ConsolidateYTD, then minority interest will be calculated at that month's minority interest % on YTD value.
If month is april then, 40% on 1000 and if month is may then 20% on 2000 = 400 ( which is not right on profit value).
Also, if we uncheck ConsolidateYTD, and having ZeroviewforAdj and ZeroviewfornonAdj with YTD will not give right figure.
Is any other way to approach or achieve minority interest calculation as shown above.
Kindly share your ideas and approach.
Regards,
Raj-

Hi Raj,
Although the manual mentions that ZeroView and ConsolidateYTD should be aligned, I don't think that Oracle should impose this. The reason is that the combination ConsolidateYTD = No with ZeroView = YTD works alright provided you keep some precautions. To make it clear lets consider this: ZeroView can impact two things:
1. future periods, not having and real data loaded (we can just ignore these periods - why bother consolidating them? so this is no problem).
2. intermediate empty periods, which is the case, when we keep both quarterly and monthly data in the same scenario, then periods intermediate to the quarters are left empty.
In any case, ZeroView impacts periods that you don't want to load data, if data is loaded to the period, there is no issue with calculating the consolidated numbers.
So, our discussion is limited to the second case, where we have quarterly data, intermediate months are zero ConsolidateYTD = No and ZeroView = YTD. Then as soon as you set the right consolidation options, your numbers will consolidate correctly in quarters. Lets say that we have numbers in March with 60% and June 40%. Provided that you also make April and May Active and apply the 40% from April through June, then everything calculates correctly. However, if you apply 60% to April and May and 40% to June or leave Active = No for April and May, then numbers will not calculate correctly.
In fact this is my preferred configuration, and it has never let me down.
-- Kostas

I have two graphics workers on osx 8. They are both complaining that their files are changing label colors on it own. Any idea what could cause this?

I have two graphics workers on osx 8. They are both complaining that their files are changing label colors on it own. Any idea what could cause this?

and there were and have been problems with any two nvidia cards which was the main part of my question.
To provie details try pasting all but serial number from system profile. Sorry but Mac Pro tells me nothing, not model, year, or what graphic card it came with or updated with.

Why do I need to restart Apache and Tomcat every time a java file is change

If a java file is changed and complied the changes are not reflected if Tomcat is not restarted.
The settings in server.xml are as:

<Context path="/manager" docBase="manager" debug="0" privileged="true"/>
<Context path="/cf" docBase="cf" debug="0" reloadable="false"/>
Here "cf" is my Application folder under webapps. The reloadable property when set to "true" for standalone Tomcat on Windows98 reflects the changes for compiled java files without restarting Tomcat. But on Linux 7.1 with Apache 1.3.19 and Tomcat 4.0.3 this is not working.
Also tried out with Manager Application of tomcat-users.xml with reloadable="false" as well as reloadable="true",
But when I reload the application using the command
http://servername:8080/manager/reload?path=/appli.name
It tells me that the application is reloaded but changes in the java file are still not reflected.
Also when reloaded through Manager Servlet, Only my load-on-startup servlet is reloaded, but other java classes are not.
Is it neccessary to execute this reload command from the server itself. I m executing it from a remote m/c. and have mapped the application with a domain name virtually.
Is it the case with Tomcat on Linux with Apache. Or is something going wrong on my part.
Can someone Help out plz.
Regards,
Rupali

or you can "touch" your web.xml file.
touch web.xmlor that command is for *nix systems, not sure what the Windows command is. But basically, when you edit the web.xml, even if it means updating the last modified time, it will restart only your application and you should see the changes.

Use of xsdconfig file to change doc. elmt. name?

I've got the following simple xsd file:
<?xml version="1.0"?>
<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
targetNamespace="/my/ns"
elementFormDefault="qualified" attributeFormDefault="unqualified">
<xs:element name="Outer">
<xs:complexType>
<xs:sequence>
<xs:element name="Inner1" type="xs:string" />
<xs:element name="Inner2" type="xs:string" />
</xs:sequence>
</xs:complexType>
</xs:element>
</xs:schema>
Which produces a "document" class named OuterDocument with a member "element"
class named Outer.
But let's say I need a different name, so I use the xsdconfig capabilitiy to direct
the name change. Here's the xsdconfig file:
<?xml version="1.0"?>
<xb:config xmlns:xb="http://www.bea.com/2002/09/xbean/config"
xmlns:xai="/my/ns">
<xb:qname name="xai:Outer"
javaname="NotInner"/>
</xb:config>
I now get a document class named NotInner with an element class not very elegantly
named NotInner2. Ideally I'd either like a NotInnerDocument with element NoInner,
or I'd like to specify name transformations for both. Is there any way to do
this?
Thanks in advance for any advise.

Hi,
Letting an application edit files to change names and terms looks like an ugly solution, apart from any difficulties that arise (such as rights on directories and files). I think it's best to create a separate output (one project, multiple webhelp outputs) each specified for the client.
To do this, I can come up with three usefull features:
1. CBT's: look into conditional build tags. With these, you can keep topics/text/etc out of certain outputs.
2. Variables. In RH8, you can create multiple sets of those (same variable, different value) and use the separate sets for separate outputs.
3. Multiple style sheets. In RH8, you can select which style sheet you want to use for your topics when you create the webhelp. You can create a separate style sheet for every different brand and use those style sheets when you output your files.
Hope this helps,
Willam
This e-mail is personal. For our full disclaimer, please visit www.centric.eu/disclaimer.

File type changing during "Save As" - Help!

Good Morning! I have a set of tif files converted from RAW that I'm resizing for an order for a client and every time I do a "Save As", the file gets changes to an extension of $CB, then Adobe and nothing else will recognize it.
The history;
Converted RAW to Tif in Bridge CS3
Opened in PSCS3 extended - cropped to size - do the Save As, still shows the file as a Tif in file type - reopened the original to make another size and noticed that file I just created is not there. No, I didn't save the file with the same name, thus Save As.
My normal file naming, I just add a designated letter at the end of my file name to indicate the finished size ie.. legion post 576_001D.tif (D = 8 x 10) The original file would be legion post 576_013.tif. I did this on 3 different computers, using PS 7.01, CS2, CS3 and CS4, all the same results.
Also, I can view the original tif in Windows Picture and Fax Viewer - as I normally am able to, however, this new one comes up with the error and unrecognizable file.
Now I'm wondering did the RAW conversion did something.
Help, I need to get these off to my printing service!
thanks,
Jan

Never mind! Found the problem!
For some reason, there was a check on the “Hide Extensions for Known file Types”.
I had to Go to Tools – Folder Options – View and uncheck “Hide Extensions for Known file Types”. Would have never guessed that one!
You know one of those places your always changing things in!!!!! NOT!
Anyway, it works!

Whenever I close down Photoshop CS5 I get the message: "Could not save Preferences because the file is locked or you do not have the necessary access privileges. Use the get info command in Finder to unlock the file or change permission on the file or enc

Whenever I close down Photoshop CS5 I get the message: "Could not save Preferences because the file is locked or you do not have the necessary access privileges. Use the get info command in Finder to unlock the file or change permission on the file or enclosing folders." What on earth does it mean? How can I stop this message from appearing?

See here:
I cannot save recent images.

Hello, in former Versions it was available to mark text in a pdf file and change it. How do I have

Hello, in further Versions it was available to mark text in a pdf file and change it. How do I have to act, to do the same in Acrobat XI? Also I need to now, how can I import a graphic file into a pdf to add my handwrote signature or a picture of mine? Please help me soon. It is urgent.

Moving the discussion to Acrobat Forums

File ownership changes on deploy changes

Similar Messages

Maybe you are looking for