authentication #2 - domain lookup not working 
Author Message
 authentication #2 - domain lookup not working

Hi,
Another strange behaviour - appreciate any comments. My questions are
at the bottom.

Environment:
DB2 V7.1 fp1, Win2000 Pro
I'm logged on as domain user DADAM, who is in local admin group.
DADAM is also a member of a domain group DB2Users.

D:\PROGRA~1\SQLLIB\BIN>db2 update dbm cfg using sysadm_group ' '   (1)
DB20000I  The UPDATE DATABASE MANAGER CONFIGURATION command completed
successfully.
DB21025I  Client changes will not be effective until the next time the
application is started or the TERMINATE command has been issued.  Server
changes will not be effective until the next DB2START command.

D:\PROGRA~1\SQLLIB\BIN>db2set db2_grp_lookup=local                 (2)

D:\PROGRA~1\SQLLIB\BIN>db2stop                                     (3)
SQL1064N  DB2STOP processing was successful.

D:\PROGRA~1\SQLLIB\BIN>db2start                                    (4)
SQL1063N  DB2START processing was successful.

D:\PROGRA~1\SQLLIB\BIN>db2 attach to db2                           (5)

   Instance Attachment Information

 Instance server        = DB2/NT 7.1.0
 Authorization ID       = DADAM
 Local instance alias   = DB2

                                                                   (6)
D:\PROGRA~1\SQLLIB\BIN>db2 update dbm cfg using sysadm_group DB2Users
DB20000I  The UPDATE DATABASE MANAGER CONFIGURATION command completed
successfully.
DB21025I  Client changes will not be effective until the next time the
application is started or the TERMINATE command has been issued.  Server
changes will not be effective until the next DB2START command.

D:\PROGRA~1\SQLLIB\BIN>db2set db2_grp_lookup=domain                (7)

D:\PROGRA~1\SQLLIB\BIN>db2stop                                     (8)
SQL1064N  DB2STOP processing was successful.

D:\PROGRA~1\SQLLIB\BIN>db2start                                    (9)
SQL1063N  DB2START processing was successful.

D:\PROGRA~1\SQLLIB\BIN>db2 attach to db2                           (10)
SQL1403N  The username and/or password supplied is incorrect.
SQLSTATE=08004

Questions:
Q1: Why isn't the domain lookup working ?
Q2: How come I can start/stop the instance, but cannot attach to it ?
Q3: When I start DB2 Control Center it comes up with logon dialog-box
for attachment and user DADAM cannot attach here either. I thought the
Control Center in V7 was not asking for uid/pwd anymore ???
Q4: I noticed that my DB2 instance service is running under user
DB2ADMIN, is that correct ? AFAIR, this used to be running under SYSTEM
in V6.

Thanks for any help,
--
Daniel Adam

Sent via Deja.com http://www.***.com/
Before you buy.



Tue, 29 Apr 2003 03:00:00 GMT
 authentication #2 - domain lookup not working

I think (not totally positive) but the AATACH needs an explicit attach as
in:
db2 attach to db2 user dadam using psxxxxx

HTH,  Pierre.

Daniel Adam a crit :

Quote:
> Hi,
> Another strange behaviour - appreciate any comments. My questions are
> at the bottom.

> Environment:
> DB2 V7.1 fp1, Win2000 Pro
> I'm logged on as domain user DADAM, who is in local admin group.
> DADAM is also a member of a domain group DB2Users.

> D:\PROGRA~1\SQLLIB\BIN>db2 update dbm cfg using sysadm_group ' '   (1)
> DB20000I  The UPDATE DATABASE MANAGER CONFIGURATION command completed
> successfully.
> DB21025I  Client changes will not be effective until the next time the
> application is started or the TERMINATE command has been issued.  Server
> changes will not be effective until the next DB2START command.

> D:\PROGRA~1\SQLLIB\BIN>db2set db2_grp_lookup=local                 (2)

> D:\PROGRA~1\SQLLIB\BIN>db2stop                                     (3)
> SQL1064N  DB2STOP processing was successful.

> D:\PROGRA~1\SQLLIB\BIN>db2start                                    (4)
> SQL1063N  DB2START processing was successful.

> D:\PROGRA~1\SQLLIB\BIN>db2 attach to db2                           (5)

>    Instance Attachment Information

>  Instance server        = DB2/NT 7.1.0
>  Authorization ID       = DADAM
>  Local instance alias   = DB2

>                                                                    (6)
> D:\PROGRA~1\SQLLIB\BIN>db2 update dbm cfg using sysadm_group DB2Users
> DB20000I  The UPDATE DATABASE MANAGER CONFIGURATION command completed
> successfully.
> DB21025I  Client changes will not be effective until the next time the
> application is started or the TERMINATE command has been issued.  Server
> changes will not be effective until the next DB2START command.

> D:\PROGRA~1\SQLLIB\BIN>db2set db2_grp_lookup=domain                (7)

> D:\PROGRA~1\SQLLIB\BIN>db2stop                                     (8)
> SQL1064N  DB2STOP processing was successful.

> D:\PROGRA~1\SQLLIB\BIN>db2start                                    (9)
> SQL1063N  DB2START processing was successful.

> D:\PROGRA~1\SQLLIB\BIN>db2 attach to db2                           (10)
> SQL1403N  The username and/or password supplied is incorrect.
> SQLSTATE=08004

> Questions:
> Q1: Why isn't the domain lookup working ?
> Q2: How come I can start/stop the instance, but cannot attach to it ?
> Q3: When I start DB2 Control Center it comes up with logon dialog-box
> for attachment and user DADAM cannot attach here either. I thought the
> Control Center in V7 was not asking for uid/pwd anymore ???
> Q4: I noticed that my DB2 instance service is running under user
> DB2ADMIN, is that correct ? AFAIR, this used to be running under SYSTEM
> in V6.

> Thanks for any help,
> --
> Daniel Adam

> Sent via Deja.com http://www.deja.com/
> Before you buy.

  sescons.vcf
< 1K Download


Tue, 29 Apr 2003 03:00:00 GMT
 
 [ 2 post ] 

 Relevant Pages 

1. Intergrated NT authentication not working when IIS and OLAP on different server

2. NT Authentication Not Working

3. ident authentication not working over loopback adapter

4. Trusted connection not working unless Domain Administrator

5. SYSDBA autologin does not work when using domain users

6. Domain authentication / standalone problem.

7. Register/Connect Servers Across Domains using NT Authentication

8. Cross Domain Authentication for OLAP

9. NT Authentication With Domain Trusts

10. NT Authentication With Domain Trusts

11. NT Domain authentication


 
Powered by phpBB® Forum Software