Page 1 of 2 12 LastLast
Results 1 to 15 of 18
  1. #1
    Join Date
    Nov 2005
    Posts
    6

    Unanswered: SQL30082N security reason 24

    Hi,

    We have just installed DB2 V8.2 Fix Pak 3 on Solaris 9

    When I logon to the server directly I am able to connect to the database using just db2 connect to TESTDB.

    However, if I attempt to connect in such a way that I specify the user and password (i.e db2 connect to TESTDB user db2ins01 using XXXXX) I get the following error:

    SQL30082N Attempt to establish connection failed with security reason "24"
    ("USERNAME AND/OR PASSWORD INVALID"). SQLSTATE=08001

    Can anyone spread any light on this ?

    Thanks

  2. #2
    Join Date
    Mar 2004
    Location
    Toronto, ON, Canada
    Posts
    513
    Try a "su - db2ins01" with that password.

    If it works, it could be a db2 problem.
    If it doesn't, talk to your sysadmin to get that fixed first.
    --
    Jonathan Petruk
    DB2 Database Consultant

  3. #3
    Join Date
    Sep 2003
    Posts
    237
    Your USERNAME AND/OR PASSWORD is INVALID. When you connect to the server directly, is it possible you are going as the instance owner. Try
    "db2 connect to xyz user USERNAME using PASSWD". If it does not work(what I expect) your USERNAME AND/OR PASSWORD is INVALID.
    mota

  4. #4
    Join Date
    Nov 2005
    Posts
    6
    I don't think its a user/password problem.

    I can su - db2ins01 (supplying password) and then db2 connect to TESTDB, but if I su - db2ins01 and then db2 connect to TESTDB user db2ins01 (and supply password) I then get the SQL30082N error.

  5. #5
    Join Date
    Nov 2005
    Location
    Toronto
    Posts
    65
    password longer than 8 char?
    you can do trace
    IBM Certified DBA for DB2 UDB
    IBM Certified Database Developer for DB2 UDB
    DB2 Tech Support, IBM Toronto Software Lab

  6. #6
    Join Date
    Mar 2004
    Location
    Toronto, ON, Canada
    Posts
    513
    Quote Originally Posted by kevindraper
    I don't think its a user/password problem.

    I can su - db2ins01 (supplying password) and then db2 connect to TESTDB, but if I su - db2ins01 and then db2 connect to TESTDB user db2ins01 (and supply password) I then get the SQL30082N error.
    After you applied the fixpack, did you run "db2iupdt"?
    --
    Jonathan Petruk
    DB2 Database Consultant

  7. #7
    Join Date
    Nov 2005
    Posts
    6
    no did not run "db2iupdt" - the instance was re-created after the fix pak was applied

  8. #8
    Join Date
    Mar 2004
    Location
    Toronto, ON, Canada
    Posts
    513
    Quote Originally Posted by kevindraper
    no did not run "db2iupdt" - the instance was re-created after the fix pak was applied
    Ah. Just as good.

    Anything in the db2diag.log? Sounds a lot like an error in a system call.

    jono
    --
    Jonathan Petruk
    DB2 Database Consultant

  9. #9
    Join Date
    Nov 2005
    Posts
    6
    Yes - getting the following in the diag log

    PID : 13750 TID : 1
    FUNCTION: DB2 Common, Security, Users and Groups, secLoadClientAuthPlugin, probe:10
    DATA #1 : String, 94 bytes
    Loaded plugin library /db2home/db2ins01/sqllib/security32/plugin/IBM/client/IBMOSauthclient.so

    2005-11-25-11.55.09.100019-300 I293658C240 LEVEL: Info
    PID : 13750 TID : 1
    FUNCTION: DB2 Common, Security, Users and Groups, secLogMessage, probe:20
    DATA #1 : String, 37 bytes
    db2secClientAuthPluginInit successful

    2005-11-25-11.55.09.180650-300 I293899C247 LEVEL: Info
    PID : 17338 TID : 1
    FUNCTION: DB2 Common, Security, Users and Groups, secLogMessage, probe:20
    DATA #1 : String, 44 bytes
    check password failed with rc = -2146500507

  10. #10
    Join Date
    Nov 2005
    Location
    Toronto
    Posts
    65
    Input ZRC string '-2146500507' parsed as 0x800F0065 (-2146500507).

    ZRC value to map: 0x800F0065 (-2146500507)
    V7 Equivalent ZRC value: 0xFFFF8665 (-31131)

    ZRC class :
    SQL Error, User Error,... (Class Index: 0)
    Component:
    SQLO ; oper system services (Component Index: 15)
    Reason Code:
    101 (0x0065)

    Identifer:
    SQLO_BAD_PSW
    Identifer (without component):
    SQLZ_RC_BADPSW

    Description:
    Password does not belong with specified user id

    Associated information:
    Sqlcode -30082
    SQL30082N Attempt to establish connection failed with security reason "" ("").

    Number of sqlca tokens : 2
    Diaglog message number: 8111


    rc = -2146500507=SQLO_BAD_PSW.
    check up password length, if still not solved you need to do trace
    IBM Certified DBA for DB2 UDB
    IBM Certified Database Developer for DB2 UDB
    DB2 Tech Support, IBM Toronto Software Lab

  11. #11
    Join Date
    Nov 2005
    Location
    Toronto
    Posts
    65
    and looks like APAR IY52515, but you are already on FP10

    http://www-1.ibm.com/support/docview...=utf-8&lang=en

    try: "db2set DB2_NUM_CKPW_DAEMONS=0 , db2stop, db2start " anyway thou...
    Last edited by wangzhonnew; 11-25-05 at 13:19.
    IBM Certified DBA for DB2 UDB
    IBM Certified Database Developer for DB2 UDB
    DB2 Tech Support, IBM Toronto Software Lab

  12. #12
    Join Date
    Mar 2004
    Location
    Toronto, ON, Canada
    Posts
    513
    Quote Originally Posted by wangzhonnew
    and looks like APAR IY52515, but you are already on FP10
    He's on FP3. Looks like a match.
    --
    Jonathan Petruk
    DB2 Database Consultant

  13. #13
    Join Date
    Nov 2005
    Location
    Toronto
    Posts
    65
    he's on 8.2 fp3,= 8.1 fp10
    IBM Certified DBA for DB2 UDB
    IBM Certified Database Developer for DB2 UDB
    DB2 Tech Support, IBM Toronto Software Lab

  14. #14
    Join Date
    Jun 2003
    Location
    Toronto, Canada
    Posts
    5,516
    Provided Answers: 1
    Any special characters in the password string? Like slashes, asterisks, punctuation?

    Try changing the user's password to something alphanumeric, if only for a test.

  15. #15
    Join Date
    Nov 2005
    Posts
    6
    Have tried all different combinations of passwords - to no avail !

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •