UDB version 8.1.0 with fix pack 3 on AIX 5L
instance name = db2inst1
userid = db2inst1
password = Db2admin

I login in Unix as db2inst1.
db2inst1 > db2 connect to database user db2inst1 using Db2admin
gives me
SQL30082N Attempt to establish connection failed with security reason "24"
("USERNAME AND/OR PASSWORD INVALID"). SQLSTATE=08001

db2inst1 > db2 connect to database user db2inst1
and then enter the password Db2admin
gives me
SQL30082N Attempt to establish connection failed with security reason "24"
("USERNAME AND/OR PASSWORD INVALID"). SQLSTATE=08001

But
if I do
db2inst1 > db2 connect to database
it work fine and i can work with sample database.

It is the same also if i use another unix/db2 userid:
userid = rbs
password = Rb2admin

I login in Unix as rbs.
rbs > db2 connect to database user rbs using Rb2admin
gives me
SQL30082N Attempt to establish connection failed with security reason "24"
("USERNAME AND/OR PASSWORD INVALID"). SQLSTATE=08001

rbs > db2 connect to database user rbs
and then enter the password Rb2admin
gives me
SQL30082N Attempt to establish connection failed with security reason "24"
("USERNAME AND/OR PASSWORD INVALID"). SQLSTATE=08001

But
if I do
rbs > db2 connect to database
it work fine and i can work with sample database.

Also if i try with:
rbs > db2 connect to database user db2inst1 using Db2admin
gives me
SQL30082N Attempt to establish connection failed with security reason "24"
("USERNAME AND/OR PASSWORD INVALID"). SQLSTATE=08001

I have try also with double o single quotes ! but not work.

db2diag.log error:
------------------------------------------------------------
2004-11-28-18.09.23.362240 Instance:db2inst1 Node:000
PID:24366(db2ckpwd 0) TID:1 Appid:none
oper system services sqlo_validate_pwd Probe:115

loginfailed() failed
0x2FF2160C : 0x0000000D ....
------------------------------------------------------------
I have also manually stop and start both, 'db2admin stop/start'
and 'db2stop/db2start'. Both works fine.

I have also try to grant direct access to rbs, but the result is the same.

what could be the error ?

Urgent Help needed. Thanks.

this means that the password is not correct (case sensitive..)
beacuse if no pw is being used the connect is ok
try to su - db2inst1 and see if the pw is accepted or try telnet with this uid..
connect to sample user xxx using xx
I presume you specify sample instead of database
Best Regards, Guy Przytula

Thanks, i have edited my previous post, to add other information and correct DB2 version number. I have add also the db2diag.log output for my try.
The password is correct. I can enter on userid db2inst1 or in userid rbs with that password, by telnet or by su - <userid>.
Yes, "sample" is the database name.

what is the type of authentication : db2 ghet dbm cfg ...
default is server
this means : uid/pw are passed to db and db2 will call os/macro to verify the both
the diag entry indicates : uid/pw check returns incorrect combination
Best Regards, Guy Przytula

Hi,
from get dbm cfg:

---------------------------------------------------------------------
SYSADM group name (SYSADM_GROUP) = DB2GRP1
SYSCTRL group name (SYSCTRL_GROUP) =
SYSMAINT group name (SYSMAINT_GROUP) =

Database manager authentication (AUTHENTICATION) = SERVER
Cataloging allowed without authority (CATALOG_NOAUTH) = NO
Trust all clients (TRUST_ALLCLNTS) = YES
Trusted client authentication (TRUST_CLNTAUTH) = CLIENT
Bypass federated authentication (FED_NOAUTH) = NO

Default database path (DFTDBPATH) = /home/db2inst1
---------------------------------------------------------------------

from get admin configuration command:
---------------------------------------------------------------------
Admin Server Configuration

Authentication Type DAS (AUTHENTICATION) = SERVER_ENCRYPT

DAS Administration Authority Group Name (DASADM_GROUP) = dasadm1

DAS Discovery Mode (DISCOVER) = SEARCH
Name of the DB2 Server System (DB2SYSTEM) = DDMSTEST
---------------------------------------------------------------------

the instance owner is 'db2inst1',
prim.group db2grp1,
group set db2grp1, staff, dasadm1
the das owner is 'dasusr1' group db2grp1
prim.group dasadm1,
group set 'dasadm1', staff, dasadm1

I can run 'db2srat' and 'db2stop' command only by db2inst1 userid.
I can run 'db2admin start' only by root userid.
I can run ' db2admin stop' only by dasusr1 userid.

If i tray to run the command 'db2 get authorizations' by dasusr1 userid
or by db2inst1 userid
(after connect to 'sample' database) i have this:
---------------------------------------------------------------------
from dasusr1 userid:
db2 => connect to sample
db2 => get authorizations

Administrative Authorizations for Current User

Direct SYSADM authority = NO
Direct SYSCTRL authority = NO
Direct SYSMAINT authority = NO
Direct DBADM authority = NO
Direct CREATETAB authority = NO
Direct BINDADD authority = NO
Direct CONNECT authority = NO
Direct CREATE_NOT_FENC authority = NO
Direct IMPLICIT_SCHEMA authority = NO
Direct LOAD authority = NO
Direct QUIESCE_CONNECT authority = NO
Direct CREATE_EXTERNAL_ROUTINE authority = NO

Indirect SYSADM authority = YES
Indirect SYSCTRL authority = NO
Indirect SYSMAINT authority = NO
Indirect DBADM authority = NO
Indirect CREATETAB authority = YES
Indirect BINDADD authority = YES
Indirect CONNECT authority = YES
Indirect CREATE_NOT_FENC authority = NO
Indirect IMPLICIT_SCHEMA authority = YES
Indirect LOAD authority = NO
Indirect QUIESCE_CONNECT authority = NO
Indirect CREATE_EXTERNAL_ROUTINE authority = NO

from db2inst1 userid:
db2 => connect to sample
db2 => get authorizations

Administrative Authorizations for Current User

Direct SYSADM authority = NO
Direct SYSCTRL authority = NO
Direct SYSMAINT authority = NO
Direct DBADM authority = YES
Direct CREATETAB authority = YES
Direct BINDADD authority = YES
Direct CONNECT authority = YES
Direct CREATE_NOT_FENC authority = YES
Direct IMPLICIT_SCHEMA authority = YES
Direct LOAD authority = YES
Direct QUIESCE_CONNECT authority = YES
Direct CREATE_EXTERNAL_ROUTINE authority = YES

Indirect SYSADM authority = YES
Indirect SYSCTRL authority = NO
Indirect SYSMAINT authority = NO
Indirect DBADM authority = NO
Indirect CREATETAB authority = YES
Indirect BINDADD authority = YES
Indirect CONNECT authority = YES
Indirect CREATE_NOT_FENC authority = NO
Indirect IMPLICIT_SCHEMA authority = YES
Indirect LOAD authority = NO
Indirect QUIESCE_CONNECT authority = NO
Indirect CREATE_EXTERNAL_ROUTINE authority = NO
---------------------------------------------------------------------