Skip Ribbon Commands
Skip to main content
Navigate Up
Sign In

Quick Launch

Average Rating:

facebook Twitter
Email
Print Bookmark Alert me when this article is updated

Feedback

HOW TO: Enable the Operating System Profiles in IDQ for a Data Integration Service
Solution
Operating System (OS) Profiles are used by the Data Integration Service (DIS) to run the mappings/profiles with an additional level of security and to isolate the run time environment for the Users.

By default, the DIS runs all the jobs, mappings, workflows using the permissions of the OS user that starts the Informatica Services.
To Enable the OS Profiles for the DIS, follow the below steps:
  1. Go to Informatica Admin Console -> Manage -> Services and nodes -> Data Integration Service->Execution Options
  2. Set the Property Use Operating System profiles and impersonation to trueOSProfiles.png
  3. Modify below at informatica server
    • $ chown <adminuser>:<informaticagroup> $INFA_HOME/services/shared/bin/pmsuid
    • Example
      • Administrator User is "root"; Informatica Server started by user: "infaabc", my OS profile user is "infaos"
        • [root@informatica ~]# id infaabc
        • uid=9020(infaabc) gid=1020(infaadm) groups=1020(infaadm)
        • [root@informatica ~]# id infaos
        • uid=9021(infaos) gid=9021(infaos) groups=1020(infaadm),9021(infaos)
      • Before making changes on pmsuid: 
        • [root@informatica ~]# ls -ltrh /user/infaabc/10.2.1/services/shared/bin/pmsuid
        • -rwxr-xr-x 1 infaabc infaadm 11K Dec  4 20:42 /user/infaabc/10.2.1/services/shared/bin/pmsuid
      • Modify the ownership and permissions:
        • [root@informatica ~]# chown root:infaadm /user/infaabc/10.2.1/services/shared/bin/pmsuid
        • [root@informatica ~]# chmod +s /user/infaabc/10.2.1/services/shared/bin/pmsuid
        • [root@informatica ~]# ls -ltrh /user/infaabc/10.2.1/services/shared/bin/pmsuid
        • -rwsr-sr-x 1 root infaadm 11K Dec  4 20:42 /user/infaabc/10.2.1/services/shared/bin/pmsuid
  4. Make sure $INFA_HOME is accessiable by OS profile users. Or below exception will be reported when running jobs.
    • "[SecureFileAccess_1005] Internal error. An unknown error occurred while launching the process. Process returned [5]. "
  5. Recycle DIS.
  6. Create an OS profile from Admin Console -> Security -> Operating System Profiles. 
  7. Once the OS profile is created, make sure the below highlighted directory is created on Informatica Server and accessible by OS profile user. Also please create subfolders under disLogs, such as ms, profiling etc. 
    • Document link to create OS profiles: click here, or https://network.informatica.com/onlinehelp/bdm/1021/en/index.htm#page/db-infa-app-service-guide/Operating_System_Profiles_for_the_Data_Integration_Service.htmlosp.png
  8. For Hadoop impersonation, see KB 561734 for impersonation issues.​
More Information
​​It is important to recycle the DIS in order to ensure that the changes have been reflected at the DIS level after enabling the property.
Reference
Applies To
Product(s): Data Quality
Product Version(s): Data Quality 10.1
Database:
Operating System(s):
Other Software:
Attachments
Last Modified Date:1/9/2019 9:44 PMID:516671
People who viewed this also viewed

Feedback

Did this KB document help you?



What can we do to improve this information (2000 or fewer characters)