Question: How to change the dzdo setting so that default permissions on new directories are different than 077 ?

Answer: In Centrify Access Manager, the default settings are to create directories with 0077 permissions (read, write, execute to group and other). You can set the default umask value using Access Manager command definitions.

Steps to take:

1) Open Access Manager console, expand the zone > Authorization > Unix Right Definitions > Commands







2) Right-click the command > Properties

For this example, we are using the ‘All Permissions” properties so that anyone with this command right can use the mkdir command to create the directories. If you want to add this attribute to the mkdir command, that will work as well.







3) Click the Attributes tab. Here you can set the umask value by selecting the read (R), write (W), and execute (X) permissions for the owner, group or other users.





4) To have the changes take effect immediately please flush the adclient cache:
Run "adflush" as root or DZDO