Results 1 to 5 of 5

Thread: DBA access

  1. #1
    Join Date
    Aug 2008
    Location
    Toronto, Canada
    Posts
    2,368

    Unanswered: DBA access

    As a DBA:

    To perform tasks that require sysadm/dbadm: do you login using db2 instance owner id or using your personal id and then sudo to db2 instance owner id?

    To perform tasks that require root: do you have full root privilege or privilege to only execute certain commands?

  2. #2
    Join Date
    Jan 2003
    Posts
    4,292
    Provided Answers: 5
    I think it is going to depend on the company and it policies.

    Here we are supposed to sign in with our personal account, then su/sudo to either the instance owner or root depending on what we have to do. This way the OS security system logs who is using root or the instance.

    Andy

  3. #3
    Join Date
    Aug 2008
    Location
    Toronto, Canada
    Posts
    2,368
    Same here - sudo to instance owner or root. Do you get full root access or access to certain commands? Do you have root access all the time or only when you need to upgrade db2?

    sudo gives me full root access. I find it very useful, but I don't think this is the right way to do it. I can limit myself to only execute certain commands in /etc/sudoers or request root access when I need to upgrade db2 and then remove it.

  4. #4
    Join Date
    May 2003
    Location
    USA
    Posts
    5,737
    Many places only give DBA's sudo root on programs in directory /opt/ibm/db2/V9.7x/instance
    M. A. Feldman
    IBM Certified DBA on DB2 for Linux, UNIX, and Windows
    IBM Certified DBA on DB2 for z/OS and OS/390

  5. #5
    Join Date
    Aug 2008
    Location
    Toronto, Canada
    Posts
    2,368
    Makes sense. If I were SA, I would not want DBA's to have full root access.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •