I have a federated database (7.2 FP11, AIX 4.3) that seems to work
fine in most aspects. Today I'm trying to add a new user mapping with
the following statement:
create user mapping for mngdrq01 server opencases options
(remote_authid 'mngdrq01', remote_password 'xxxxx')
Querying the federated database works fine as long as the user
mentioned above is part of the sysadm group or has dbadm authority. As
soon as those authorities are removed, the federated database gives me
an error that said user ID has no select permissions.
As the remote database is also a UDB database on the same physical
machine, I have validated that the user ID does have select
permissions when logging directly into the remote database.
The documentation for CREATE USER MAPPING mentions that if the auth
name and the auth ID are different, then SYSADM or DBADM is required,
but if they are the same, then no privileges are required. Am I
misinterpreting this statement?
I don't want this particular user to have either DBADM or SYSADM, just
select privileges. Has anyone else been able to get this to work
without either of the admin privileges?
Thanks,
Evan 3 3341
Perhaps you need to grant select to the non-sysadm/non-dbadm user on the
nickname itself in the federated database.
-Harold
Evan Smith wrote: I have a federated database (7.2 FP11, AIX 4.3) that seems to work fine in most aspects. Today I'm trying to add a new user mapping with the following statement:
create user mapping for mngdrq01 server opencases options (remote_authid 'mngdrq01', remote_password 'xxxxx')
Querying the federated database works fine as long as the user mentioned above is part of the sysadm group or has dbadm authority. As soon as those authorities are removed, the federated database gives me an error that said user ID has no select permissions.
As the remote database is also a UDB database on the same physical machine, I have validated that the user ID does have select permissions when logging directly into the remote database.
The documentation for CREATE USER MAPPING mentions that if the auth name and the auth ID are different, then SYSADM or DBADM is required, but if they are the same, then no privileges are required. Am I misinterpreting this statement?
I don't want this particular user to have either DBADM or SYSADM, just select privileges. Has anyone else been able to get this to work without either of the admin privileges?
Thanks, Evan
You, sir, were correct. I had never granted permissions on a nickname
before. But this is all it took.
Thanks,
Evan
"Harold Lee" <ha*****@nospam please.us.ibm.c om> wrote in message
news:c4******** ***@gazette.alm aden.ibm.com... Perhaps you need to grant select to the non-sysadm/non-dbadm user on the nickname itself in the federated database.
-Harold
Evan Smith wrote: I have a federated database (7.2 FP11, AIX 4.3) that seems to work fine in most aspects. Today I'm trying to add a new user mapping with the following statement:
create user mapping for mngdrq01 server opencases options (remote_authid 'mngdrq01', remote_password 'xxxxx')
Querying the federated database works fine as long as the user mentioned above is part of the sysadm group or has dbadm authority. As soon as those authorities are removed, the federated database gives me an error that said user ID has no select permissions.
As the remote database is also a UDB database on the same physical machine, I have validated that the user ID does have select permissions when logging directly into the remote database.
The documentation for CREATE USER MAPPING mentions that if the auth name and the auth ID are different, then SYSADM or DBADM is required, but if they are the same, then no privileges are required. Am I misinterpreting this statement?
I don't want this particular user to have either DBADM or SYSADM, just select privileges. Has anyone else been able to get this to work without either of the admin privileges?
Thanks, Evan
Evan Smith wrote: You, sir, were correct. I had never granted permissions on a nickname before. But this is all it took.
Perhaps you need to grant select to the non-sysadm/non-dbadm user on the nickname itself in the federated database.
Some of the 7.x documentation was a bit confused on this point, as I
recall. To make matters worse, the db2cc from that period of time had
no way to set privileges on nicknames either.
My head still has a flat spot from banging it against the wall... This thread has been closed and replies have been disabled. Please start a new discussion. Similar topics |
by: pintihar |
last post by:
Hi,
As a follow on from an earlier post I have another question about
xslt.
Is it possible to create the stylsheet programatically? Is this
sensible? In the first phase I needed to map element name from inbound
xml to my internal elements to standardize disparate input.
Now I could just create an xslt stylesheet for each possible inbound
format and be done, but I think it would be powerful to be able store
this mapping in a database and...
|
by: Melissa |
last post by:
I have a frontend file named CustomerApp and backend file named CustomerData.
CustomerApp is at C:\Customer Database and CustomerData is at S:\Customer
Database. Could someone help me with the code to do the following:
1. Create a new table named TblCustomerContact in CustomerData
2. Add a field named CustomerContactID (autonumber) in TblCustomerContact
3. Add a field named CustomerID (Number-Long) in TblCustomerContact
4. Add a field...
|
by: Michael Tissington |
last post by:
I'm trying to add some extensions to IIS on the properties, home directory,
config screen.
I must be missing something because the OK button is always disabled ...
Any ideas please ?
--
Michael Tissington
http://www.oaklodge.com
|
by: Agnes |
last post by:
In textbox, I know I can set e.handled = false in keypressevent , So I can
restrict the user to input some invalid character or disallow the user to
input any thing
Now, in datagrid, there are 3 columns one is account code, 2nd is debit, 3rd
is credit
for some account code, (e.g bank) I want to allow the user to input both
debit and credit column/
BUT for some account code( E.g salary) I want to disallow the user type
anything in...
|
by: jakobsgaard |
last post by:
It is possible to Map a certificate to a Active Directory User Account from
DotNet?
Please provide an example.
Best regards,
Ejnar Jakobsgaard
-------------------------------------------------
To map a certificate to a user account
Open Active Directory Users and Computers.
| |
by: DotDidIt |
last post by:
Hi Everybody!
I developed a Web service with IBM RAD v 6.0.1.
After creating the WSDL file i have tried to develop a .Net client.
But by using wsdl.exe (1.1.4322) to create a .net c# proxy i get the
following error message:
Schema parsing error Namespace 'http://session.ejbs.cac.commerce.com'
is not available to be referenced in this schema.
Schema parsing error Namespace 'http://session.ejbs.cac.commerce.com'
|
by: ThunderMusic |
last post by:
Hi,
I'd need to find (or develop) a control of a map (worldwide if possible)
where a user can click and drag to select an area by distance from the click
point or using a square area (user's choice)... This control would return
the postal/zip codes of the selected rectangle or the clicked point
postal/zip code and the wanted distance range. Is it something that can be
done in a web control? it's absolutely something easy (well, fairly...
|
by: MuZZy |
last post by:
Hi,
I am looking to find a way to get currently logged in user's object GUID
without querying ActiveDirectory. For example, when i log in to my
laptop from home, I'm not on the office network so i can't reach AD but
I'm sure i still can get my AD's objectGUID, as the profile is cached
locally.
Any ideas?
|
by: zgh1970 |
last post by:
Hi, All,
We have a database on db2 udb aix.
The database has federated server to db2 mainframe.
Now We have already catalog database of db2/400 on the db2 UDB aix
server.
I tried to create new federation server for db2as/400.
It seam has problem.
1. can the db2 mainframe and db/400 have the same wrapper?
Our existing db2 mainframe uses the wrapper with library libdb2drda.a
This wrapper is used by db2 mainframe
|
by: Oralloy |
last post by:
Hello folks,
I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>".
The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed.
This is as boiled down as I can make it.
Here is my compilation command:
g++-12 -std=c++20 -Wnarrowing bit_field.cpp
Here is the code in...
|
by: jinu1996 |
last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth.
The Art of Business Website Design
Your website is...
| |
by: Hystou |
last post by:
Overview:
Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
|
by: agi2029 |
last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own....
Now, this would greatly impact the work of software developers. The idea...
|
by: isladogs |
last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM).
In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules.
He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms.
Adolph will...
|
by: TSSRALBI |
last post by:
Hello
I'm a network technician in training and I need your help.
I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs.
The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols.
I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
|
by: 6302768590 |
last post by:
Hai team
i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
|
by: muto222 |
last post by:
How can i add a mobile payment intergratation into php mysql website.
| |
by: bsmnconsultancy |
last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...
| |