Re: (GSKit) Access to the key database is not allowed

[Scott Klement <midrange-l@xxxxxxxxxxxxxxxx>]

hi Doug,

Whether *RX or *RWX is needed depends on whether the user is going to 
modify the directories or whether s/he is going to only read them.

So a user who needs to create new key databases might need *RWX.  A user 
who needs to add/renew/import certificates might need *RW to the 
DEFAULT.KDB/RDB files.

Users who only need to read certificates/directories do not need *W 
(write) authority.



On 10/26/2011 12:52 PM, Douglas Handy wrote:
> Scott,
>
> > Users need execute authority to directory objects.  You said you gave
> > the users *RW access to the directories -- that won't work, because *RW
> > only gives them read/write.  It doesn't give them execute.
>
> I didn't mention it in my message, but thought I had tried both *RW
> and *RX authority to the various folders.  Looks like I missed one and
> all but one had *RX and the final subfolder (Server) only had *RW.
>
> When we corrected that, it worked as expected.  So for the record,
> only *RX is needed and not *RWX on the folders.
>
> Sigh ... thought we had looked at all of them ...
>
> DUH-g