| Hello,
after long hacking around on the system, the solution is 'privileges'
The scenario:
(everything happens on the same node...)
1/ PC-WEB-page ---//---> execute 'LOG_CHOPS_CALL' program on 'SAMENODE'
2/ LOG_CHOPS_CALL-program ---> mail to SAMENODE::ECL_ACCOUNT
3/ ECL_COUNT ---> forward to SAMENODE::CHOPS%ECL_ACCOUNT
4/ CHOPS_MAILSHR.EXE ----> CHOPS system.
We noticed that:
- removing the forward, then the mail is send OK to ECL_ACCOUNT.
- adding SYSPRV to WEBUSER, then the mail-forward is succesful,
but an error is generated by CHOPS (thus, error about SYSUAF is eliminated)
- adding CMKRNL to WEBUSER, then CHOPS accepts the request OK.
===> hence, we relinked the image with NOTRACEBACK and installed it with the 2
privileges and removed the privs from WEBUSER.
=== It s working now !!!
Exploination:
Somehow we wanted to figure out what was happening:
1/ When using mail-forward to different system, then the MAIL_SERVER image is
used by the MAIL$SERVER account.
This image is installed with privileges. Hence it can read the SYUAF file.
2/ When using mail-forward to the same node, then mail must somehow eliminate
the usage of DECnet and use the 'sending' account. If this account (or the
image doing the send) does not have the SYSPRV & CMKRNL privs, then the
SYSUAF cannot be read nor can CHOPS be accessed.
It was fun solving this issue.
Regards, Willy L.
|