It seems to have been pulled from
http://www.ibm.com/software/data/inf...hitepapers.jsp.
There's some information at
http://publib-b.boulder.ibm.com/redb...f/portals/Data
Otherwise just search the IBM sites.
"nek" <nekiv90@hotmail.com> wrote in message
news:1a2c246f.0409232001.49baa9bd@posting.google.c om...[color=blue]
> Thank you for this resourceful reply. I'll go down this path and look
> into it further.
>
> Meanwhile, may I ask which particular white paper you come cross for
> Windows Security?
>
>
>
> "Mark Yudkin" <myudkinATcompuserveDOTcom@nospam.org> wrote in message[/color]
news:<cir42s$8s0$1@ngspool-d02.news.aol.com>...[color=blue][color=green]
> > As I said, you also need to check the DB2 service account's privileges,[/color][/color]
not[color=blue][color=green]
> > just your own logon account, as well as security settings. Just because
> > you're a local administrator doesn't mean you can do everything - unlike
> > Unix (root), local administrators are not part of the system TCB.
> >
> > If you're using a domain account in the local Administrators group,[/color][/color]
you'll[color=blue][color=green]
> > need to enable this (db2 variable DB2_GRP_LOOKUP=LOCAL). You may need to
> > redirect the DB2TEMPDIR environment variable, the default is generally[/color][/color]
not[color=blue][color=green]
> > what you want. On locked-down systems, it points into a read-only[/color][/color]
directory,[color=blue][color=green]
> > which will also cause access denied failures.
> >
> > Your DB2 may well (in fact most probably) be running using a domain[/color][/color]
account[color=blue][color=green]
> > (especially if you're using Kerberos authorization), so you will have to
> > validate these security aspects too. Also DB2 requires privileges that[/color][/color]
it[color=blue][color=green]
> > won't have merely by being a member of the local Administrators group;[/color][/color]
these[color=blue][color=green]
> > are listed in the DB2 documentation.
> >
> > Consider too that a group policy may be limiting tape access, so check[/color][/color]
that.[color=blue][color=green]
> >
> > There's a very good "white paper" on DB2 and Windows Security on the IBM[/color][/color]
DB2[color=blue][color=green]
> > web site.
> >
> > "nek" <nekiv90@hotmail.com> wrote in message
> > news:1a2c246f.0409201536.4f6ad20@posting.google.co m...[color=darkred]
> > > Hi Mark,
> > >
> > > I logged on as local admin account. So this may rule out the access
> > > problem.
> > >
> > > However, I'm checking with Sys admin guy to see if the access to tape
> > > device is healthy. This is the first attempt to make use of the tape
> > > backup.
> > >
> > > Thanks for the suggestion.
> > >
> > >
> > > "Mark Yudkin" <myudkinATcompuserveDOTcom@nospam.org> wrote in message[/color]
> > news:<cijd1b$rp7$1@ngspool-d02.news.aol.com>...[color=darkred]
> > > > Sounds to me like it might be security settings ("device and file[/color][/color][/color]
access[color=blue][color=green][color=darkred]
> > > > denied: 0x870f0002"). Check the privileges on your backup and DB2[/color]
> > accounts,[color=darkred]
> > > > as well as the security settings for both the device and the source.
> > > >
> > > > "nek" <nekiv90@hotmail.com> wrote in message
> > > > news:1a2c246f.0409151510.47b08c74@posting.google.c om...
> > > > > Hi Mark,
> > > > >
> > > > > Looks like media access problem (see below with level 4 setting).
> > > > > Anything more can I do before getting the 'system admin' guy to[/color][/color][/color]
look[color=blue][color=green][color=darkred]
> > > > > into the problem?
> > > > >
> > > > > Thanks!
> > > > >
> > > > >
> > > > > 2004-09-16-08.42.39.625000 Instance:DB2 Node:000
> > > > > PID:5720(db2syscs.exe) TID:3192 Appid:none
> > > > > database utilities sqluWriteToFileDevice Probe:86
> > > > >
> > > > > Media controller -- device and file access denied: 0x870f0002
> > > > >
> > > > > 2004-09-16-08.42.39.640000 Instance:DB2 Node:000
> > > > > PID:5720(db2syscs.exe) TID:3192 Appid:none
> > > > > database utilities sqluMCWriteToDevice Probe:41
> > > > >
> > > > > Media controller -- Problem writing header to local device[/color][/color][/color]
\\.\tape0[color=blue][color=green][color=darkred]
> > > > > (zrc = 0x870f0002)
> > > > >
> > > > > 2004-09-16-08.42.39.656000 Instance:DB2 Node:000
> > > > > PID:5720(db2syscs.exe) TID:4436 Appid:*LOCAL.DB2.016DC5224234
> > > > > database utilities sqlubMWResponse Probe:5 Database:SAMPLE
> > > > >
> > > > > DiagData
> > > > > 0x057F8838 : FD07 0000 32FF 5C5C 2E5C 7461 7065 3000
> > > > > ý...2ÿ\\.\tape0.
> > > > >
> > > > > 2004-09-16-08.42.39.656001 Instance:DB2 Node:000
> > > > > PID:5720(db2syscs.exe) TID:3192 Appid:none
> > > > > oper system services sqlodelete Probe:100
> > > > >
> > > > > Unexpected system error 0x1 has occurred.
> > > > > This has been mapped to ZRC 0x83000001.
> > > > >
> > > > > PID:5720 TID:3192 Node:000 Title: SYSTEM ERROR DESCRIPTION
> > > > > Incorrect function.
> > > > >
> > > > >
> > > > > 2004-09-16-08.42.39.687001 Instance:DB2 Node:000
> > > > > PID:5720(db2syscs.exe) TID:3192 Appid:none
> > > > > oper system services sqlodelete Probe:100
> > > > >
> > > > > GetLastError:
> > > > > 0x0190FCC0 : 0x00000001 ....
> > > > >
> > > > > PID:5720 TID:3192 Node:000 Title: Path/Filename
> > > > > \\.\tape0
> > > > >
> > > > >
> > > > >
> > > > > "Mark Yudkin" <myudkinATcompuserveDOTcom@nospam.org> wrote in[/color][/color][/color]
message[color=blue][color=green]
> > news:<ci8pmc$1iv$1@ngspool-d02.news.aol.com>...[color=darkred]
> > > > > > \\localhost\tape0 is a file share name, not a device name, and[/color]
> > therefore[color=darkred]
> > > > > > won't work. However, \\.\tape0 should work. Please post the[/color][/color][/color]
content[color=blue][color=green]
> > of
> > your[color=darkred]
> > > > > > dbdiag.log when running with level 4 messages enabled and/or[/color]
> > (better!)
> > open[color=darkred]
> > > > > > a PMR.
> > > > > >
> > > > > > "nek" <nekiv90@hotmail.com> wrote in message
> > > > > > news:1a2c246f.0409132319.70affa73@posting.google.c om...
> > > > > > > Greetings,
> > > > > > >
> > > > > > > Has anyone got the latest progress on this?
> > > > > > >
> > > > > > > It hit me this time on W2K running DB2 V8.1.5.
> > > > > > >
> > > > > > > It returned the following warning:
> > > > > > >
> > > > > > > D:\Temp>db2 backup db sample to \\localhost\tape0
> > > > > > > SQL2031W Warning! Please mount the target or source media on[/color]
> > device[color=darkred]
> > > > > > > "\\localhost\tape0".
> > > > > > > Do you want to continue(c), terminate this device only(d),[/color][/color][/color]
abort[color=blue][color=green]
> > the[color=darkred]
> > > > > > > utility(t)
> > > > > > > ? (c/d/t)
> > > > > > >
> > > > > > > The tape is already in place, entering 'c' to the above query[/color]
> > returned[color=darkred]
> > > > > > > the same warning message.
> > > > > > >
> > > > > > > Changing \\localhost\tape0 to \\.\tape0 would not help either.
> > > > > > >
> > > > > > > I was able to run 'db2 initialize tape on \\.\tape0' though.
> > > > > > >
> > > > > > > Thank you for any hints or suggestions.[/color][/color][/color]
