Results 1 to 5 of 5
  1. #1
    Join Date
    Nov 2004
    Posts
    9

    Question Unanswered: db2 connect error - bat only if specify the userid and password

    UDB version 8.1.0 with fix pack 3 on AIX 5L
    instance name = db2inst1
    userid = db2inst1
    password = Db2admin

    I login in Unix as db2inst1.
    db2inst1 > db2 connect to database user db2inst1 using Db2admin
    gives me
    SQL30082N Attempt to establish connection failed with security reason "24"
    ("USERNAME AND/OR PASSWORD INVALID"). SQLSTATE=08001

    db2inst1 > db2 connect to database user db2inst1
    and then enter the password Db2admin
    gives me
    SQL30082N Attempt to establish connection failed with security reason "24"
    ("USERNAME AND/OR PASSWORD INVALID"). SQLSTATE=08001

    But
    if I do
    db2inst1 > db2 connect to database
    it work fine and i can work with sample database.

    It is the same also if i use another unix/db2 userid:
    userid = rbs
    password = Rb2admin

    I login in Unix as rbs.
    rbs > db2 connect to database user rbs using Rb2admin
    gives me
    SQL30082N Attempt to establish connection failed with security reason "24"
    ("USERNAME AND/OR PASSWORD INVALID"). SQLSTATE=08001

    rbs > db2 connect to database user rbs
    and then enter the password Rb2admin
    gives me
    SQL30082N Attempt to establish connection failed with security reason "24"
    ("USERNAME AND/OR PASSWORD INVALID"). SQLSTATE=08001

    But
    if I do
    rbs > db2 connect to database
    it work fine and i can work with sample database.

    Also if i try with:
    rbs > db2 connect to database user db2inst1 using Db2admin
    gives me
    SQL30082N Attempt to establish connection failed with security reason "24"
    ("USERNAME AND/OR PASSWORD INVALID"). SQLSTATE=08001

    I have try also with double o single quotes ! but not work.

    db2diag.log error:
    ------------------------------------------------------------
    2004-11-28-18.09.23.362240 Instance:db2inst1 Node:000
    PID:24366(db2ckpwd 0) TID:1 Appid:none
    oper system services sqlo_validate_pwd Probe:115

    loginfailed() failed
    0x2FF2160C : 0x0000000D ....
    ------------------------------------------------------------
    I have also manually stop and start both, 'db2admin stop/start'
    and 'db2stop/db2start'. Both works fine.

    I have also try to grant direct access to rbs, but the result is the same.

    what could be the error ?

    Urgent Help needed. Thanks.
    Last edited by domenico.vinci; 11-29-04 at 09:08. Reason: correct DB2 version and add log information

  2. #2
    Join Date
    Nov 2004
    Posts
    374

    connect error

    this means that the password is not correct (case sensitive..)
    beacuse if no pw is being used the connect is ok
    try to su - db2inst1 and see if the pw is accepted or try telnet with this uid..
    connect to sample user xxx using xx
    I presume you specify sample instead of database
    Best Regards, Guy Przytula
    Best Regards, Guy Przytula
    DB2/ORA/SQL Services
    DB2 DBA & Advanced DBA Certified
    DB2 Dprop Certified
    http://users.skynet.be/przytula/dbss.html

  3. #3
    Join Date
    Nov 2004
    Posts
    9

    Question

    Thanks, i have edited my previous post, to add other information and correct DB2 version number. I have add also the db2diag.log output for my try.
    The password is correct. I can enter on userid db2inst1 or in userid rbs with that password, by telnet or by su - <userid>.
    Yes, "sample" is the database name.

  4. #4
    Join Date
    Nov 2004
    Posts
    374

    logon error

    what is the type of authentication : db2 ghet dbm cfg ...
    default is server
    this means : uid/pw are passed to db and db2 will call os/macro to verify the both
    the diag entry indicates : uid/pw check returns incorrect combination
    Best Regards, Guy Przytula
    Best Regards, Guy Przytula
    DB2/ORA/SQL Services
    DB2 DBA & Advanced DBA Certified
    DB2 Dprop Certified
    http://users.skynet.be/przytula/dbss.html

  5. #5
    Join Date
    Nov 2004
    Posts
    9

    Exclamation dbm cfg

    Hi,
    from get dbm cfg:

    ---------------------------------------------------------------------
    SYSADM group name (SYSADM_GROUP) = DB2GRP1
    SYSCTRL group name (SYSCTRL_GROUP) =
    SYSMAINT group name (SYSMAINT_GROUP) =

    Database manager authentication (AUTHENTICATION) = SERVER
    Cataloging allowed without authority (CATALOG_NOAUTH) = NO
    Trust all clients (TRUST_ALLCLNTS) = YES
    Trusted client authentication (TRUST_CLNTAUTH) = CLIENT
    Bypass federated authentication (FED_NOAUTH) = NO

    Default database path (DFTDBPATH) = /home/db2inst1
    ---------------------------------------------------------------------

    from get admin configuration command:
    ---------------------------------------------------------------------
    Admin Server Configuration

    Authentication Type DAS (AUTHENTICATION) = SERVER_ENCRYPT

    DAS Administration Authority Group Name (DASADM_GROUP) = dasadm1

    DAS Discovery Mode (DISCOVER) = SEARCH
    Name of the DB2 Server System (DB2SYSTEM) = DDMSTEST
    ---------------------------------------------------------------------

    the instance owner is 'db2inst1',
    prim.group db2grp1,
    group set db2grp1, staff, dasadm1
    the das owner is 'dasusr1' group db2grp1
    prim.group dasadm1,
    group set 'dasadm1', staff, dasadm1

    I can run 'db2srat' and 'db2stop' command only by db2inst1 userid.
    I can run 'db2admin start' only by root userid.
    I can run ' db2admin stop' only by dasusr1 userid.

    If i tray to run the command 'db2 get authorizations' by dasusr1 userid
    or by db2inst1 userid
    (after connect to 'sample' database) i have this:
    ---------------------------------------------------------------------
    from dasusr1 userid:
    db2 => connect to sample
    db2 => get authorizations

    Administrative Authorizations for Current User

    Direct SYSADM authority = NO
    Direct SYSCTRL authority = NO
    Direct SYSMAINT authority = NO
    Direct DBADM authority = NO
    Direct CREATETAB authority = NO
    Direct BINDADD authority = NO
    Direct CONNECT authority = NO
    Direct CREATE_NOT_FENC authority = NO
    Direct IMPLICIT_SCHEMA authority = NO
    Direct LOAD authority = NO
    Direct QUIESCE_CONNECT authority = NO
    Direct CREATE_EXTERNAL_ROUTINE authority = NO

    Indirect SYSADM authority = YES
    Indirect SYSCTRL authority = NO
    Indirect SYSMAINT authority = NO
    Indirect DBADM authority = NO
    Indirect CREATETAB authority = YES
    Indirect BINDADD authority = YES
    Indirect CONNECT authority = YES
    Indirect CREATE_NOT_FENC authority = NO
    Indirect IMPLICIT_SCHEMA authority = YES
    Indirect LOAD authority = NO
    Indirect QUIESCE_CONNECT authority = NO
    Indirect CREATE_EXTERNAL_ROUTINE authority = NO

    from db2inst1 userid:
    db2 => connect to sample
    db2 => get authorizations

    Administrative Authorizations for Current User

    Direct SYSADM authority = NO
    Direct SYSCTRL authority = NO
    Direct SYSMAINT authority = NO
    Direct DBADM authority = YES
    Direct CREATETAB authority = YES
    Direct BINDADD authority = YES
    Direct CONNECT authority = YES
    Direct CREATE_NOT_FENC authority = YES
    Direct IMPLICIT_SCHEMA authority = YES
    Direct LOAD authority = YES
    Direct QUIESCE_CONNECT authority = YES
    Direct CREATE_EXTERNAL_ROUTINE authority = YES

    Indirect SYSADM authority = YES
    Indirect SYSCTRL authority = NO
    Indirect SYSMAINT authority = NO
    Indirect DBADM authority = NO
    Indirect CREATETAB authority = YES
    Indirect BINDADD authority = YES
    Indirect CONNECT authority = YES
    Indirect CREATE_NOT_FENC authority = NO
    Indirect IMPLICIT_SCHEMA authority = YES
    Indirect LOAD authority = NO
    Indirect QUIESCE_CONNECT authority = NO
    Indirect CREATE_EXTERNAL_ROUTINE authority = NO
    ---------------------------------------------------------------------
    Last edited by domenico.vinci; 11-29-04 at 05:43. Reason: get authorizations output

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •