Secure Agent Services

Back Next

Setting the OSProfileScriptForTaskExecution

When defining OS_PROFILE properties, you need to define a script that will be used for task execution. This is set in the OSProfileScriptForTaskExecution property in the Data Integration Server service.

Choose one of the following methods to create your OS profile script:

Configure the

pmimpprocess

executable. This is the recommended method because it is more secure.

Use the default script provided by Informatica.

Use the following table to help you decide which method to use:

Method	Advantage	Disadvantage
Use pmimpprocess (recommended)	More secure, with the one time sticky bit set as root.	More difficult to customize, as pmimpprocess is an executable. The sole purpose of this executable is to switch users.
Use default script	Easily customizable. For example, you need to configure Kerberos.	Requires the Secure Agent user to be able to sudo, which means adding the user to /etc/sudoer. Once this is done, the user assumes near root-user privileges, which is less secure.

Configuring the pmimpprocess

To configure the OS profile script using

pmimpprocess

, perform the following steps:

Locate the

pmimpprocess

process in the following location:

<Secure Agent installation directory/downloads/package-ICSAgentRuntime.<latest_version>/package/ICS/main/bin/rdtm

Copy

pmimpprocess

to the Secure Agent.

For example:

<Secure Agent installation directory>/apps/Data_Integration_Server/ext/pmimpprocess

Run the following command to change the permissions of

pmimpprocess

chmod 755 pmimpprocess

Run the following command to change the ownership and access permissions of

pmimpprocess

chown root:root pmimpprocess
chmod u+s pmimpprocess

Enter the location of

pmimpprocess

for the value of the OSProfileScriptForTaskExecution property in Data Integration Server properties.

For example:

<Secure Agent installation directory>/apps/Data_Integration_Server/ext/pmimpprocess

Using the default script

If you prefer to use the script method, locate the script in the following location:

Data_Integration_Server/ext/infa-osprofile-dtm.sh

The script method is intended for advanced technical users only.

The following illustration shows the default script:

#!/bin/sh
input_args="$@"
env_var_file=$(mktemp)
chmod +r "${env_var_file}"
printenv | sed 's/\(^[^=]*\)=\(.*\)/export \1="\2"/'>"${env_var_file}"
echo "sudo su - ${ENV_INFA_DTM_OSPROFILE_USER} -c . ${env_var_file}; cd ${PWD}; ${input_args}" >/tmp/xx
sudo su - ${ENV_INFA_DTM_OSPROFILE_USER} -c ". ${env_var_file}; cd ${PWD}; ${input_args}"
exit_code=$?
rm "${env_var_file}"
exit "${exit_code}"

Rename Saved Search

Table of Contents

Secure Agent Services

Secure Agent Services

Setting the OSProfileScriptForTaskExecution

Setting the OSProfileScriptForTaskExecution

Configuring the pmimpprocess

Using the default script