Results 1 to 7 of 7
  1. #1
    Join Date
    Jan 2010
    Posts
    207

    Unanswered: DB2 Security Plugins Problem with activation...

    Hello friends,

    I am trying to synchronise my AIX machine with a Microsoft Active Diretory.
    At first of all I edited my ~/sqllib/cfg/IBMLDAPSecurity.ini with the necessary things it needs to have, then I configured my DBM CFG with this parameters;

    update dbm cfg using srvcon_pw_plugin IBMLDAPauthserver;
    update dbm cfg using clnt_pw_plugin IBMLDAPauthclient;
    update dbm cfg using group_plugin IBMLDAPgroups;

    after that, the IBM Information Center says to restart the Instance but there comes this error up:

    db2stop
    SQL1093N The user is not logged on. SQLSTATE=51017

    db2start
    SQL1093N The user is not logged on. SQLSTATE=51017

    Does anyone have experience with this?

  2. #2
    Join Date
    Aug 2001
    Location
    UK
    Posts
    4,650
    Have you checked db2diag.log file?

    You may have some pointers there.
    Visit the new-look IDUG Website , register to gain access to the excellent content.

  3. #3
    Join Date
    Jan 2010
    Posts
    207
    Hmm yes, I checked it but it doesnt say much ...

    2012-01-30-08.54.06.923572+060 I134185A500 LEVEL: Error
    PID : 1810514 TID : 1 PROC : db2flacc
    INSTANCE: db2inst6 NODE : 000
    EDUID : 1
    FUNCTION: DB2 UDB, bsu security, sqlexLogPluginMessage, probe:20
    DATA #1 : String with size, 213 bytes
    LDAP WhoAmI: can't determine LDAP user associated with
    OS user 'db2inst6': LDAP error while searching for AuthID.
    Userid attribute='uid' AuthID attribute='uid'
    user objectClass='SVCaixLDAPReader' user base DN=''


    2012-01-30-08.54.06.923733+060 E134686A690 LEVEL: Severe
    PID : 1810514 TID : 1 PROC : db2flacc
    INSTANCE: db2inst6 NODE : 000
    EDUID : 1
    FUNCTION: DB2 UDB, bsu security, sqlexGetDefaultLoginContext, probe:150
    MESSAGE : ADM13001E Plug-in "IBMLDAPauthclient" received error code
    "-1" from the DB2 security plug-in API "db2secGetDefaultLoginContext"
    with the error message "LDAP WhoAmI: can't determine LDAP user
    associated with OS user 'db2inst6': LDAP error while searching for
    AuthID. Userid
    attribute='uid' AuthID attribute='uid' user
    objectClass='SVCaixLDAPReader' user base DN=''".

  4. #4
    Join Date
    Jan 2010
    Posts
    207
    the db2inst6 is the user on my AIX Machine and its existing in my AD (Windows 2003)

  5. #5
    Join Date
    Apr 2006
    Location
    Belgium
    Posts
    2,514
    Provided Answers: 11
    it means something is not correctly defined as the lookup of this user can not be found in ldap
    Best Regards, Guy Przytula
    Database Software Consultant
    Good DBAs are not formed in a week or a month. They are created little by little, day by day. Protracted and patient effort is needed to develop good DBAs.
    Spoon feeding : To treat (another) in a way that discourages independent thought or action, as by overindulgence.
    DB2 UDB LUW Certified V7-V8-V9-V9.7-V10.1-V10.5 DB Admin - Advanced DBA -Dprop..
    Information Server Datastage Certified
    http://www.infocura.be

  6. #6
    Join Date
    Jun 2003
    Location
    Toronto, Canada
    Posts
    5,516
    Provided Answers: 1
    May be the base DN is misconfigured; it shows empty in your log, which is rarely the case.

  7. #7
    Join Date
    Jan 2010
    Posts
    207
    Mmm the documentary says that this is optional

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •