25.01.2015 Views

Caché System Administration Guide - InterSystems Documentation

Caché System Administration Guide - InterSystems Documentation

Caché System Administration Guide - InterSystems Documentation

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Managing <strong>Caché</strong><br />

service cache start<br />

6.3.2 Running <strong>Caché</strong><br />

From the shell, a user with any user ID and any group ID (anyuser:anygroup in this example),<br />

can run csession, which executes cuxsession in the install-dir/bin directory.<br />

The cuxsession executable switches the group ID to cacheusr and leaves the calling user ID in place<br />

(anyuser:cacheusr). Running with cacheusr as the group ID, this executable has access to all<br />

<strong>Caché</strong> privileges and files in that installation.<br />

Now running as anyuser:cacheusr, <strong>Caché</strong> runs its standard startup logic, including Kerberos<br />

negotiation, to identify a $USERNAME and a set of login roles. In many cases, this $USERNAME<br />

value is associated with the actual user who invoked csession. Thus, while any user may run <strong>Caché</strong>,<br />

the activities of that user once in <strong>Caché</strong> are defined and limited by the security roles assigned to that<br />

user.<br />

CAUTION:<br />

Do not enter <strong>Caché</strong> by invoking its executable (cache.exe) directly from the<br />

install-dir/bin directory.<br />

The <strong>Caché</strong> executable is not itself a setgid-executable. It is the responsibility of the csession wrapper<br />

to set the group properly on behalf of the user entering <strong>Caché</strong>. This is not a problem if you are running<br />

<strong>Caché</strong> from the /usr/bin directory as set up by the ccontrol default function. The ccontrol default sets<br />

up an executable file called cache in the /usr/bin/ directory and is a link to call csession which sets<br />

permissions properly.<br />

6.3.3 Stopping <strong>Caché</strong><br />

Normally you leave your <strong>Caché</strong> system running. However, if your operating system requires a restart,<br />

you should stop <strong>Caché</strong> before you shut down your system. The <strong>Caché</strong> maintenance tasks, such as<br />

backups and database repair utilities, do not require you to stop <strong>Caché</strong>.<br />

To stop <strong>Caché</strong> on UNIX, the same requirements exist as for starting <strong>Caché</strong>. One of the following must<br />

be true:<br />

• You are the superuser.<br />

• You have signed on as the root user. (It is acceptable to su (super user) to root while logged in<br />

from another account.)<br />

• Your UNIX group ID matches the group named during the <strong>Caché</strong> installation as having privileges<br />

to stop and start the system.<br />

To stop <strong>Caché</strong>, from the command line:<br />

1. Use the ccontrol command:<br />

<strong>Caché</strong> <strong>System</strong> <strong>Administration</strong> <strong>Guide</strong> 77

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!