We have got a solaris server farm that runs lavastorm application.
Each server on the form runs a lavastorm instance, and that instance takes care of creating subprocesses to run various work tasks.
The lavastorm user has secondary group rights to another group.
However, it seems sometimes some instances do not effectively apply the secondary group rights--i.e. when they write/read a file they get bounced even if the file is open to the secondary group they already belong in.
If I login interactively as the lavastorm user, i have no problem with reading/writing to the files in question.
I know that it is possible to run
newgrp to change the process' primary group but the lavastorm process is not able to execute this in the context of certain tasks.
And since the behavior is inconsistent across the server farm it seems possible there is an OS setting that influences the cascade or effect of secondary groups.
Is there such a setting in solaris?
OS version from
5.10 Generic_150400-12 sun4u sparc SUNW
FS type: NFS vers 3 (using Netapp NAS filer)
Authentication: from file
The output of
/data01 from 10.1.11.160:/vol/data_vol1/shared_data_prod Flags: vers=3,proto=tcp,sec=sys,hard,intr,link,symlink,rsize=32768,wsize=32768,retrans=5,timeo=600 Attr cache: acregmin=3,acregmax=60,acdirmin=30,acdirmax=60