If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

 
Go Back  dBforums > Database Server Software > DB2 > sysadm auth

Reply
 
LinkBack Thread Tools Search this Thread Display Modes
  #1 (permalink)  
Old 12-09-04, 11:56
luismmch66 luismmch66 is offline
Registered User
 
Join Date: Jul 2004
Posts: 6
sysadm auth

Hi everybody,

I am working with Solaris 5.8 and UDb db2 8.1.6

I've tried to grant authority to one user to execute snapshots on database, but I receive the error DB21034E and SQL0104N.

db2 "get sysadm on database to user xxx"
db2 "get sysctrl on database to user xxx"
db2 "get sysmaint on database to user xxx"

I don't want to add this user to sysadm group


Do you have any idea?

Thanks in advance
Reply With Quote
  #2 (permalink)  
Old 12-09-04, 12:13
Marcus_A Marcus_A is offline
Registered User
 
Join Date: May 2003
Location: USA
Posts: 5,196
Create a group level authorization at the OS level.

Then specify the authorization group in the DBM config:

db2 update dbm cfg using SYSMAINT_GROUP XXXXX

then add the user to the group using OS security.

In DB2 V 8.2 (version 8 fixpak 7 or higher) there is a new group called SYSMON which is even more specific to what you want.
__________________
M. A. Feldman
IBM Certified DBA on DB2 for Linux, UNIX, and Windows
IBM Certified DBA on DB2 for z/OS and OS/390
Reply With Quote
  #3 (permalink)  
Old 12-09-04, 12:13
n_i n_i is offline
:-)
 
Join Date: Jun 2003
Location: Toronto, Canada
Posts: 4,449
1. There's no such command as "get sys... on database..."
2. You can't grant sysadm, sysctrl, sysmaint, or sysmon authorities; they are assigned to the specified OS groups.
3. Add this user to the sysmon group.
Reply With Quote
  #4 (permalink)  
Old 12-09-04, 14:36
luismmch66 luismmch66 is offline
Registered User
 
Join Date: Jul 2004
Posts: 6
Smile

Ok n_i , I made a mistake It's grant, not get.

The problem was resolved creating a SYSCTL_GRP and adding the user to this group.

Thanks a lot
Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On