If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

 
Go Back  dBforums > Database Server Software > DB2 > SQL30082N security reason 24

Reply
 
LinkBack Thread Tools Search this Thread Display Modes
  #1 (permalink)  
Old 11-25-05, 10:18
kevindraper kevindraper is offline
Registered User
 
Join Date: Nov 2005
Posts: 6
SQL30082N security reason 24

Hi,

We have just installed DB2 V8.2 Fix Pak 3 on Solaris 9

When I logon to the server directly I am able to connect to the database using just db2 connect to TESTDB.

However, if I attempt to connect in such a way that I specify the user and password (i.e db2 connect to TESTDB user db2ins01 using XXXXX) I get the following error:

SQL30082N Attempt to establish connection failed with security reason "24"
("USERNAME AND/OR PASSWORD INVALID"). SQLSTATE=08001

Can anyone spread any light on this ?

Thanks
Reply With Quote
  #2 (permalink)  
Old 11-25-05, 10:34
J Petruk J Petruk is offline
Registered User
 
Join Date: Mar 2004
Location: Toronto, ON, Canada
Posts: 513
Try a "su - db2ins01" with that password.

If it works, it could be a db2 problem.
If it doesn't, talk to your sysadmin to get that fixed first.
__________________
--
Jonathan Petruk
DB2 Database Consultant
Reply With Quote
  #3 (permalink)  
Old 11-25-05, 10:36
dbamota dbamota is offline
Registered User
 
Join Date: Sep 2003
Posts: 237
Your USERNAME AND/OR PASSWORD is INVALID. When you connect to the server directly, is it possible you are going as the instance owner. Try
"db2 connect to xyz user USERNAME using PASSWD". If it does not work(what I expect) your USERNAME AND/OR PASSWORD is INVALID.
__________________
mota
Reply With Quote
  #4 (permalink)  
Old 11-25-05, 11:14
kevindraper kevindraper is offline
Registered User
 
Join Date: Nov 2005
Posts: 6
I don't think its a user/password problem.

I can su - db2ins01 (supplying password) and then db2 connect to TESTDB, but if I su - db2ins01 and then db2 connect to TESTDB user db2ins01 (and supply password) I then get the SQL30082N error.
Reply With Quote
  #5 (permalink)  
Old 11-25-05, 11:19
wangzhonnew wangzhonnew is offline
Registered User
 
Join Date: Nov 2005
Location: Toronto
Posts: 65
password longer than 8 char?
you can do trace
__________________
IBM Certified DBA for DB2 UDB
IBM Certified Database Developer for DB2 UDB
DB2 Tech Support, IBM Toronto Software Lab
Reply With Quote
  #6 (permalink)  
Old 11-25-05, 11:26
J Petruk J Petruk is offline
Registered User
 
Join Date: Mar 2004
Location: Toronto, ON, Canada
Posts: 513
Quote:
Originally Posted by kevindraper
I don't think its a user/password problem.

I can su - db2ins01 (supplying password) and then db2 connect to TESTDB, but if I su - db2ins01 and then db2 connect to TESTDB user db2ins01 (and supply password) I then get the SQL30082N error.
After you applied the fixpack, did you run "db2iupdt"?
__________________
--
Jonathan Petruk
DB2 Database Consultant
Reply With Quote
  #7 (permalink)  
Old 11-25-05, 11:36
kevindraper kevindraper is offline
Registered User
 
Join Date: Nov 2005
Posts: 6
no did not run "db2iupdt" - the instance was re-created after the fix pak was applied
Reply With Quote
  #8 (permalink)  
Old 11-25-05, 11:44
J Petruk J Petruk is offline
Registered User
 
Join Date: Mar 2004
Location: Toronto, ON, Canada
Posts: 513
Quote:
Originally Posted by kevindraper
no did not run "db2iupdt" - the instance was re-created after the fix pak was applied
Ah. Just as good.

Anything in the db2diag.log? Sounds a lot like an error in a system call.

jono
__________________
--
Jonathan Petruk
DB2 Database Consultant
Reply With Quote
  #9 (permalink)  
Old 11-25-05, 11:56
kevindraper kevindraper is offline
Registered User
 
Join Date: Nov 2005
Posts: 6
Yes - getting the following in the diag log

PID : 13750 TID : 1
FUNCTION: DB2 Common, Security, Users and Groups, secLoadClientAuthPlugin, probe:10
DATA #1 : String, 94 bytes
Loaded plugin library /db2home/db2ins01/sqllib/security32/plugin/IBM/client/IBMOSauthclient.so

2005-11-25-11.55.09.100019-300 I293658C240 LEVEL: Info
PID : 13750 TID : 1
FUNCTION: DB2 Common, Security, Users and Groups, secLogMessage, probe:20
DATA #1 : String, 37 bytes
db2secClientAuthPluginInit successful

2005-11-25-11.55.09.180650-300 I293899C247 LEVEL: Info
PID : 17338 TID : 1
FUNCTION: DB2 Common, Security, Users and Groups, secLogMessage, probe:20
DATA #1 : String, 44 bytes
check password failed with rc = -2146500507
Reply With Quote
  #10 (permalink)  
Old 11-25-05, 12:12
wangzhonnew wangzhonnew is offline
Registered User
 
Join Date: Nov 2005
Location: Toronto
Posts: 65
Input ZRC string '-2146500507' parsed as 0x800F0065 (-2146500507).

ZRC value to map: 0x800F0065 (-2146500507)
V7 Equivalent ZRC value: 0xFFFF8665 (-31131)

ZRC class :
SQL Error, User Error,... (Class Index: 0)
Component:
SQLO ; oper system services (Component Index: 15)
Reason Code:
101 (0x0065)

Identifer:
SQLO_BAD_PSW
Identifer (without component):
SQLZ_RC_BADPSW

Description:
Password does not belong with specified user id

Associated information:
Sqlcode -30082
SQL30082N Attempt to establish connection failed with security reason "" ("").

Number of sqlca tokens : 2
Diaglog message number: 8111


rc = -2146500507=SQLO_BAD_PSW.
check up password length, if still not solved you need to do trace
__________________
IBM Certified DBA for DB2 UDB
IBM Certified Database Developer for DB2 UDB
DB2 Tech Support, IBM Toronto Software Lab
Reply With Quote
  #11 (permalink)  
Old 11-25-05, 12:16
wangzhonnew wangzhonnew is offline
Registered User
 
Join Date: Nov 2005
Location: Toronto
Posts: 65
and looks like APAR IY52515, but you are already on FP10

http://www-1.ibm.com/support/docview...=utf-8&lang=en

try: "db2set DB2_NUM_CKPW_DAEMONS=0 , db2stop, db2start " anyway thou...
__________________
IBM Certified DBA for DB2 UDB
IBM Certified Database Developer for DB2 UDB
DB2 Tech Support, IBM Toronto Software Lab

Last edited by wangzhonnew; 11-25-05 at 12:19.
Reply With Quote
  #12 (permalink)  
Old 11-25-05, 13:07
J Petruk J Petruk is offline
Registered User
 
Join Date: Mar 2004
Location: Toronto, ON, Canada
Posts: 513
Quote:
Originally Posted by wangzhonnew
and looks like APAR IY52515, but you are already on FP10
He's on FP3. Looks like a match.
__________________
--
Jonathan Petruk
DB2 Database Consultant
Reply With Quote
  #13 (permalink)  
Old 11-25-05, 13:10
wangzhonnew wangzhonnew is offline
Registered User
 
Join Date: Nov 2005
Location: Toronto
Posts: 65
he's on 8.2 fp3,= 8.1 fp10
__________________
IBM Certified DBA for DB2 UDB
IBM Certified Database Developer for DB2 UDB
DB2 Tech Support, IBM Toronto Software Lab
Reply With Quote
  #14 (permalink)  
Old 11-25-05, 13:19
n_i n_i is offline
:-)
 
Join Date: Jun 2003
Location: Toronto, Canada
Posts: 4,449
Any special characters in the password string? Like slashes, asterisks, punctuation?

Try changing the user's password to something alphanumeric, if only for a test.
Reply With Quote
  #15 (permalink)  
Old 11-28-05, 03:55
kevindraper kevindraper is offline
Registered User
 
Join Date: Nov 2005
Posts: 6
Have tried all different combinations of passwords - to no avail !
Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On