Caché System Administration Guide - InterSystems Documentation
Caché System Administration Guide - InterSystems Documentation
Caché System Administration Guide - InterSystems Documentation
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
Managing <strong>Caché</strong><br />
service cache start<br />
6.3.2 Running <strong>Caché</strong><br />
From the shell, a user with any user ID and any group ID (anyuser:anygroup in this example),<br />
can run csession, which executes cuxsession in the install-dir/bin directory.<br />
The cuxsession executable switches the group ID to cacheusr and leaves the calling user ID in place<br />
(anyuser:cacheusr). Running with cacheusr as the group ID, this executable has access to all<br />
<strong>Caché</strong> privileges and files in that installation.<br />
Now running as anyuser:cacheusr, <strong>Caché</strong> runs its standard startup logic, including Kerberos<br />
negotiation, to identify a $USERNAME and a set of login roles. In many cases, this $USERNAME<br />
value is associated with the actual user who invoked csession. Thus, while any user may run <strong>Caché</strong>,<br />
the activities of that user once in <strong>Caché</strong> are defined and limited by the security roles assigned to that<br />
user.<br />
CAUTION:<br />
Do not enter <strong>Caché</strong> by invoking its executable (cache.exe) directly from the<br />
install-dir/bin directory.<br />
The <strong>Caché</strong> executable is not itself a setgid-executable. It is the responsibility of the csession wrapper<br />
to set the group properly on behalf of the user entering <strong>Caché</strong>. This is not a problem if you are running<br />
<strong>Caché</strong> from the /usr/bin directory as set up by the ccontrol default function. The ccontrol default sets<br />
up an executable file called cache in the /usr/bin/ directory and is a link to call csession which sets<br />
permissions properly.<br />
6.3.3 Stopping <strong>Caché</strong><br />
Normally you leave your <strong>Caché</strong> system running. However, if your operating system requires a restart,<br />
you should stop <strong>Caché</strong> before you shut down your system. The <strong>Caché</strong> maintenance tasks, such as<br />
backups and database repair utilities, do not require you to stop <strong>Caché</strong>.<br />
To stop <strong>Caché</strong> on UNIX, the same requirements exist as for starting <strong>Caché</strong>. One of the following must<br />
be true:<br />
• You are the superuser.<br />
• You have signed on as the root user. (It is acceptable to su (super user) to root while logged in<br />
from another account.)<br />
• Your UNIX group ID matches the group named during the <strong>Caché</strong> installation as having privileges<br />
to stop and start the system.<br />
To stop <strong>Caché</strong>, from the command line:<br />
1. Use the ccontrol command:<br />
<strong>Caché</strong> <strong>System</strong> <strong>Administration</strong> <strong>Guide</strong> 77