Carlos, Yes, I have set the following: - PATH=$PATH:/opt/CPshared/5.0/bin - CPDIR=/opt/CPshared/5.0 - FWDIR=/opt/CPfw1-50
When I tried to run: $cpconfig I got error: bash: cpconfig: command not found When I tried $/opt/CPshared/5.0/bin/cpconfig I got the following error: bash: /opt/CPshared/5.0/bin/cpconfig: Permission denied The main thing seems to be permission problem. The /opt/CPshared/5.0/bin is owned by root. Thanks Changguan -----Original Message----- From: Carlos Santos [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 03, 2002 3:38 AM To: [EMAIL PROTECTED] Subject: Re: [FW-1] Administrator's permission required for the management server (on Linix 7.2) Importance: High Hi Changguan, Have you set the full bin PATH's of the FW on the user's profile? Regards, Carlos Santos -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED]] On Behalf Of Fan, Changguan Sent: segunda-feira, 2 de Dezembro de 2002 20:58 To: [EMAIL PROTECTED] Subject: [FW-1] Administrator's permission required for the management server (on Linix 7.2) I have a question about the administrator's permission on a management server installed on a Linux 7.2 platform. We have CP NG distributed installation. The management server is installed on Linux 7.2. I have two questions. 1. Can we set up the management server so that a non-superuser can run the utilities, such as cpconfig, on the management server? 2. When I run cpconfig, I can set a group permission. The document says: "Normally a VPN/FireWall Module is given group permission for access and execution. You can name such a group or instruct the installation procedure to give no group permissions to the VPN/FireWall Module. In the latter case, only the Super-User will be able to access and execute the VPN/FireWall Module." It looks like setting the group permission will allow the group to run utilities, such as cpconfig, without the root permission. I tried and it did not work. I did the following: a. logon as root and run cpconfig b. set group permission to the "Firewall" group. c. create a user account in the Firewall group. d. logout root and logon as the new user e. try to run cpconfig and it failed. Does the group permission affect anything I do on the management server? _____________________________ Changguan Fan, (480) 554-1284 IT Flex Services, Intel Corp., Chandler, AZ 85226-3699 <mailto:[EMAIL PROTECTED]> ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= WhatEverNet Computing, S.A. http://www.whatevernet.com Pra�a de Alvalade, n.� 6 - 6.� piso Tel: +351 217994200 1700-036 Lisboa, PORTUGAL Fax: +351 217994242 _____________________________________________________________________ INTERNET MAIL FOOTER A presente mensagem pode conter informa��o considerada confidencial. Se o receptor desta mensagem n�o for o destinat�rio indicado, fica expressamente proibido de copiar ou endere�ar a mensagem a terceiros. Em tal situa��o, o receptor dever� destruir a presente mensagem e por gentileza informar o emissor de tal facto. --------------------------------------------------------------------- Privileged or confidential information may be contained in this message. If you are not the addressee indicated in this message, you may not copy or deliver this message to anyone. In such case, you should destroy this message and kindly notify the sender by reply email. --------------------------------------------------------------------- ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
