473,722 Members | 2,297 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

Install DB2 on Linux MC/ServiceGuard Cluster

Hi,

We are currently installing a DB2 V9 ESE on a Linux server
(RHEL4U4-x86_64). Installation runs successfully on each node. Database
user environment is OK and the instance is well created. To be sure,
we've started the database with db2start =successfull. And then shut
it down again successfully too.

The tricks appears when we switch the hp MC/ServiceGuard (A.11.16 for
Linux) package to the other node... the database does not want to start
up. It fails with that message:

[root@node2 ~]# su db2r01 -c /db2/R01/sqllib/adm/db2start
SQL1092N "DB2R01 " does not have the authority to perform the
requested command.

[That's the manual issued command but the behaviour is identical within
the hp MC/ServiceGuard Control Script]

For information, each node (the cluster is composed with only 2 nodes)
has its own DB2 binaries+usersp aces. The instance is named db2r01 and
datafiles are stored in /db2/R01 filesystem. This filesystem is on a SAN
device and presented to all cluster nodes (mounted only on active node).

We will appreciate any help and thank you in advance for your spent time
on that problem!!!

To sum up, is there a very detailed cookbook explaining how install DB2
in a ServiceGuard (for Linux) environment?

Best regards,
Bruno LIVERNAIS, Mohamed SALHI
Apr 27 '07 #1
3 5733
If none of you knows something about MC/ServiceGuard, may be someone
could help us about DB2 V9 in a cluster HA environment (HACMP, or
whatever...)

Please help!!!!!

Bruno LIVERNAIS a écrit :
Hi,

We are currently installing a DB2 V9 ESE on a Linux server
(RHEL4U4-x86_64). Installation runs successfully on each node. Database
user environment is OK and the instance is well created. To be sure,
we've started the database with db2start =successfull. And then shut
it down again successfully too.

The tricks appears when we switch the hp MC/ServiceGuard (A.11.16 for
Linux) package to the other node... the database does not want to start
up. It fails with that message:

[root@node2 ~]# su db2r01 -c /db2/R01/sqllib/adm/db2start
SQL1092N "DB2R01 " does not have the authority to perform the
requested command.

[That's the manual issued command but the behaviour is identical within
the hp MC/ServiceGuard Control Script]

For information, each node (the cluster is composed with only 2 nodes)
has its own DB2 binaries+usersp aces. The instance is named db2r01 and
datafiles are stored in /db2/R01 filesystem. This filesystem is on a SAN
device and presented to all cluster nodes (mounted only on active node).

We will appreciate any help and thank you in advance for your spent time
on that problem!!!

To sum up, is there a very detailed cookbook explaining how install DB2
in a ServiceGuard (for Linux) environment?

Best regards,
Bruno LIVERNAIS, Mohamed SALHI

--

DSLAM shm67-1 ligne 10 / 1 / 3
Apr 30 '07 #2
Bruno LIVERNAIS wrote:
Hi,

We are currently installing a DB2 V9 ESE on a Linux server
(RHEL4U4-x86_64). Installation runs successfully on each node. Database
user environment is OK and the instance is well created. To be sure,
we've started the database with db2start =successfull. And then shut
it down again successfully too.

The tricks appears when we switch the hp MC/ServiceGuard (A.11.16 for
Linux) package to the other node... the database does not want to start
up. It fails with that message:

[root@node2 ~]# su db2r01 -c /db2/R01/sqllib/adm/db2start
SQL1092N "DB2R01 " does not have the authority to perform the
requested command.
I dont know anything about MC/ServiceGuard, but have you checked out
what the help suggests?

[lelle@53dbd181 lelle]$ db2 "? SQL1092N"
SQL1092N "<authoriza tion-ID>" does not have the authority to
perform the requested command.

Explanation:

Possible causes are:

1. The user attempted to execute a command or operation without
having the proper authority for that command or operation.

2. You are using Kerberos authentication in a Windows
environment, and have attempted to log on to the machine with
an account which is not a domain account. Only domain users
can use Kerberos authentication in a Windows 2000
environment.

3. If you are using LDAP support, the userid you are using or
the DB2 Connect gateway might not have the authority to
perform the CATALOG DATABASE, NODE and DCS DATABASE
commands.

4. If in a Windows environment, the DB2 Server logon userid,
DB2_GRP_LOOKUP setting, and other group enumeration settings
might not be configured properly, preventing you from gaining
access using "<authoriza tion-ID>". The following is a
very common sample scenario:

- You are attempting to connect to the DB2 Server using a
domain userid.

- The logon userid for the DB2 Server instance is LocalSystem
or a local account.

- Groups (SYSCTRL, SYSADM, SYSMAINT) are defined to be domain
groups.

- DB2_GRP_LOOKUP is not set. As a result, an attempt is made
to enumerate the groups at the location where
"<authoriza tion-ID>" is defined. This fails
because the DB2 Server instance is running under the
context of LocalSystem or the local account, and so
cannot access the network resources required to do so.

- To fix this problem change the logon userid for the DB2
Server instance to be a domain account and add this
domain account to the local Administrators group. If DB2
Extended Security is enabled, then the domain account
must also be added to the DB2ADMNS group or its
equivalent.

5. If in a Windows environment running with DB2 Extended
Security enabled, the userid "<authoriza tion-ID>" might
be attempting to use or modify a database resource, while not
a member of the local DB2USERS or DB2ADMNS group. This is
not allowed. The command cannot be processed.

The command cannot be processed.

Federated system users: this situation can also be detected by
the data source.

User Response:

Solutions to problem causes described above are:

1. Log on as a user with the correct authority and retry the
failed command or operation. Correct authorities may include
SYSADM, SYSCTRL, SYSMAINT, and DBADM. DBADM is granted on
databases and all other authorities are determined by
membership in the groups defined in the database manager
configuration (eg. if sysctrl_group in the database manager
configuration file is defined as 'beatles', then you must
belong to the group 'beatles' to have SYSCTRL authority).
Refer to the Command Reference or the SQL Reference for the
listing of required authorities for the attempted command or
operation.

2. Log on to the machine with an account which is a domain
account.

3. Invoke the command "UPDATE DBM CFG USING CATALOG_NOAUTH YES"
at the client or the gateway to correct the problem.

4. Make appropriate configuration settings changes. For more
information on Windows OS security and groups, search the DB2
Information Center
(http://publib.boulder.ibm.com/infocenter/db2luw/v9) using
phrases such as "db2_grp_lookup " and "Windows authentication"
Apr 30 '07 #3
I've installed my instance on each Linux node in exactly the same way.
/etc/passwd and /etc/group are identical on each node.

Lennart a écrit :
Bruno LIVERNAIS wrote:
>Hi,

We are currently installing a DB2 V9 ESE on a Linux server
(RHEL4U4-x86_64). Installation runs successfully on each node.
Database user environment is OK and the instance is well created. To
be sure, we've started the database with db2start =successfull. And
then shut it down again successfully too.

The tricks appears when we switch the hp MC/ServiceGuard (A.11.16 for
Linux) package to the other node... the database does not want to
start up. It fails with that message:

[root@node2 ~]# su db2r01 -c /db2/R01/sqllib/adm/db2start
SQL1092N "DB2R01 " does not have the authority to perform the
requested command.

I dont know anything about MC/ServiceGuard, but have you checked out
what the help suggests?

[lelle@53dbd181 lelle]$ db2 "? SQL1092N"
SQL1092N "<authoriza tion-ID>" does not have the authority to
perform the requested command.

Explanation:

Possible causes are:

1. The user attempted to execute a command or operation without
having the proper authority for that command or operation.

2. You are using Kerberos authentication in a Windows
environment, and have attempted to log on to the machine with
an account which is not a domain account. Only domain users
can use Kerberos authentication in a Windows 2000
environment.

3. If you are using LDAP support, the userid you are using or
the DB2 Connect gateway might not have the authority to
perform the CATALOG DATABASE, NODE and DCS DATABASE
commands.

4. If in a Windows environment, the DB2 Server logon userid,
DB2_GRP_LOOKUP setting, and other group enumeration settings
might not be configured properly, preventing you from gaining
access using "<authoriza tion-ID>". The following is a
very common sample scenario:

- You are attempting to connect to the DB2 Server using a
domain userid.

- The logon userid for the DB2 Server instance is LocalSystem
or a local account.

- Groups (SYSCTRL, SYSADM, SYSMAINT) are defined to be domain
groups.

- DB2_GRP_LOOKUP is not set. As a result, an attempt is made
to enumerate the groups at the location where
"<authoriza tion-ID>" is defined. This fails
because the DB2 Server instance is running under the
context of LocalSystem or the local account, and so
cannot access the network resources required to do so.

- To fix this problem change the logon userid for the DB2
Server instance to be a domain account and add this
domain account to the local Administrators group. If DB2
Extended Security is enabled, then the domain account
must also be added to the DB2ADMNS group or its
equivalent.

5. If in a Windows environment running with DB2 Extended
Security enabled, the userid "<authoriza tion-ID>" might
be attempting to use or modify a database resource, while not
a member of the local DB2USERS or DB2ADMNS group. This is
not allowed. The command cannot be processed.

The command cannot be processed.

Federated system users: this situation can also be detected by
the data source.

User Response:

Solutions to problem causes described above are:

1. Log on as a user with the correct authority and retry the
failed command or operation. Correct authorities may include
SYSADM, SYSCTRL, SYSMAINT, and DBADM. DBADM is granted on
databases and all other authorities are determined by
membership in the groups defined in the database manager
configuration (eg. if sysctrl_group in the database manager
configuration file is defined as 'beatles', then you must
belong to the group 'beatles' to have SYSCTRL authority).
Refer to the Command Reference or the SQL Reference for the
listing of required authorities for the attempted command or
operation.

2. Log on to the machine with an account which is a domain
account.

3. Invoke the command "UPDATE DBM CFG USING CATALOG_NOAUTH YES"
at the client or the gateway to correct the problem.

4. Make appropriate configuration settings changes. For more
information on Windows OS security and groups, search the DB2
Information Center
(http://publib.boulder.ibm.com/infocenter/db2luw/v9) using
phrases such as "db2_grp_lookup " and "Windows authentication"
.

5. Add the userid "<authoriza tion-ID>" to the local windows
security groups DB2USERS or DB2ADMNS using the Windows Computer
Management tool. A workaround is to disable Extended Security but
this is not recommended.

Federated system users: if necessary isolate the problem to the
data source rejecting the request (see the problem determination
guide for procedures to follow to identify the failing data
source) and ensure that the authorization id specified has the
proper authority on that data source.

Contact the System Administrator for authority request
assistance. Do not attempt to execute the command without
appropriate authorization.

>>
[That's the manual issued command but the behaviour is identical
within the hp MC/ServiceGuard Control Script]

For information, each node (the cluster is composed with only 2 nodes)
has its own DB2 binaries+usersp aces. The instance is named db2r01 and
datafiles are stored in /db2/R01 filesystem. This filesystem is on a
SAN device and presented to all cluster nodes (mounted only on active
node).

We will appreciate any help and thank you in advance for your spent
time on that problem!!!

To sum up, is there a very detailed cookbook explaining how install
DB2 in a ServiceGuard (for Linux) environment?

Best regards,
Bruno LIVERNAIS, Mohamed SALHI
Bruno LIVERNAIS wrote:
>Hi,

We are currently installing a DB2 V9 ESE on a Linux server
(RHEL4U4-x86_64). Installation runs successfully on each node.
Database user environment is OK and the instance is well created. To
be sure, we've started the database with db2start =successfull. And
then shut it down again successfully too.

The tricks appears when we switch the hp MC/ServiceGuard (A.11.16 for
Linux) package to the other node... the database does not want to
start up. It fails with that message:

[root@node2 ~]# su db2r01 -c /db2/R01/sqllib/adm/db2start
SQL1092N "DB2R01 " does not have the authority to perform the
requested command.

I dont know anything about MC/ServiceGuard, but have you checked out
what the help suggests?

[lelle@53dbd181 lelle]$ db2 "? SQL1092N"
SQL1092N "<authoriza tion-ID>" does not have the authority to
perform the requested command.

Explanation:

Possible causes are:

1. The user attempted to execute a command or operation without
having the proper authority for that command or operation.

2. You are using Kerberos authentication in a Windows
environment, and have attempted to log on to the machine with
an account which is not a domain account. Only domain users
can use Kerberos authentication in a Windows 2000
environment.

3. If you are using LDAP support, the userid you are using or
the DB2 Connect gateway might not have the authority to
perform the CATALOG DATABASE, NODE and DCS DATABASE
commands.

4. If in a Windows environment, the DB2 Server logon userid,
DB2_GRP_LOOKUP setting, and other group enumeration settings
might not be configured properly, preventing you from gaining
access using "<authoriza tion-ID>". The following is a
very common sample scenario:

- You are attempting to connect to the DB2 Server using a
domain userid.

- The logon userid for the DB2 Server instance is LocalSystem
or a local account.

- Groups (SYSCTRL, SYSADM, SYSMAINT) are defined to be domain
groups.

- DB2_GRP_LOOKUP is not set. As a result, an attempt is made
to enumerate the groups at the location where
"<authoriza tion-ID>" is defined. This fails
because the DB2 Server instance is running under the
context of LocalSystem or the local account, and so
cannot access the network resources required to do so.

- To fix this problem change the logon userid for the DB2
Server instance to be a domain account and add this
domain account to the local Administrators group. If DB2
Extended Security is enabled, then the domain account
must also be added to the DB2ADMNS group or its
equivalent.

5. If in a Windows environment running with DB2 Extended
Security enabled, the userid "<authoriza tion-ID>" might
be attempting to use or modify a database resource, while not
a member of the local DB2USERS or DB2ADMNS group. This is
not allowed. The command cannot be processed.

The command cannot be processed.

Federated system users: this situation can also be detected by
the data source.

User Response:

Solutions to problem causes described above are:

1. Log on as a user with the correct authority and retry the
failed command or operation. Correct authorities may include
SYSADM, SYSCTRL, SYSMAINT, and DBADM. DBADM is granted on
databases and all other authorities are determined by
membership in the groups defined in the database manager
configuration (eg. if sysctrl_group in the database manager
configuration file is defined as 'beatles', then you must
belong to the group 'beatles' to have SYSCTRL authority).
Refer to the Command Reference or the SQL Reference for the
listing of required authorities for the attempted command or
operation.

2. Log on to the machine with an account which is a domain
account.

3. Invoke the command "UPDATE DBM CFG USING CATALOG_NOAUTH YES"
at the client or the gateway to correct the problem.

4. Make appropriate configuration settings changes. For more
information on Windows OS security and groups, search the DB2
Information Center
(http://publib.boulder.ibm.com/infocenter/db2luw/v9) using
phrases such as "db2_grp_lookup " and "Windows authentication"
.

5. Add the userid "<authoriza tion-ID>" to the local windows
security groups DB2USERS or DB2ADMNS using the Windows Computer
Management tool. A workaround is to disable Extended Security but
this is not recommended.

Federated system users: if necessary isolate the problem to the
data source rejecting the request (see the problem determination
guide for procedures to follow to identify the failing data
source) and ensure that the authorization id specified has the
proper authority on that data source.

Contact the System Administrator for authority request
assistance. Do not attempt to execute the command without
appropriate authorization.

>>
[That's the manual issued command but the behaviour is identical
within the hp MC/ServiceGuard Control Script]

For information, each node (the cluster is composed with only 2 nodes)
has its own DB2 binaries+usersp aces. The instance is named db2r01 and
datafiles are stored in /db2/R01 filesystem. This filesystem is on a
SAN device and presented to all cluster nodes (mounted only on active
node).

We will appreciate any help and thank you in advance for your spent
time on that problem!!!

To sum up, is there a very detailed cookbook explaining how install
DB2 in a ServiceGuard (for Linux) environment?

Best regards,
Bruno LIVERNAIS, Mohamed SALHI
Apr 30 '07 #4

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

0
3609
by: Tony Barker | last post by:
Helpful associates, We are going to acquire and new database server that is intel based and we want to have some failover capabilities. Our question now is should we go with Linux based cluster solution or Windows based? We have systems people who are supporting a Linux database server with Oracle RAC. Due to RAC's expense and the fact that we really do not need load balancing with our new database server, we are looking at using a...
30
7429
by: aka | last post by:
Hi I have a DB2 v8.1 on AIX and DB2 Connect EE on Solaris wich is connected to OS/390 DB2 subsystems via APPC / SNA. I have cataloged the DB2 Connect instance as tcpip node and then the Host DB cataloged on that node...this works from v7.2 Fixpack 11 clients and servers, but with v8.1 server I get SQL1334N. Does anyone has an idea? Thanks
3
5124
by: mairhtin o'feannag | last post by:
Hello, Since DB2 Cluster Certification Guide is out of print and I cannot seem to get my hands on a copy, is there a publication that would give me a "cookbook" approach to setting up a cluster using Linux and multiple machines? I came across a couple of things, but they all assume one honking great AIX box with multiple SPs and that sort of thing.
0
1200
by: Nick Barr | last post by:
Heya, Does anyone have any experience of Linux Labs "Clusgres" (A Linux cluster hosting a PostgreSQL database server)? It seems to be a shared memory architecture for a clutser of linux boxes which as far as understand should be ok for PG. We are currently considering hardware upgrades and are either considering a cluster of some form or a meatier box to replace our current main DB. The meaty box would more than likely be a Quad Opteron...
0
1147
by: ciccio | last post by:
Dear python users, I have an account on a Linux Cluster. I installed python version 2.3.5 on my account. I need to install the module MySQL-python to interact with a MySQL server already installed on the cluster. However, I read the README file but running python setup.py build the system fails to build the module and gives me the following error:
1
3460
by: Sorin Schwimmer | last post by:
Hi All, After a disaster in which I lost my whole harddrive, I decided to install the newest everything that I use. I put the latest Gentoo Linux, with gcc 4.1.1, installed tcl/tk 8.4.14 and tried Python 2.5. I tried with and without the suggested -fwrapv compiler option, and make gave me the same:
0
1564
by: he59 | last post by:
Hi, We are currently installing a DB2 V9 ESE on a Linux server (RHEL4U4-x86_64). Installation runs successfully on each node. Database user environment is OK and the instance is well created. To be sure, we've started the database with db2start => successfull. And then shut it down again successfully too. The tricks appears when we switch the hp MC/ServiceGuard (A.11.16 for Linux) package to the other node... the database does...
13
5378
by: Bruno LIVERNAIS | last post by:
Hi, Is there someone on earth (or elsewhere ;-)) who knows how to install a DB2 V9.1 database engine in a High Availability cluster environment? I need help on that particular point. Best regards, Bruno LIVERNAIS
1
2316
by: irvg | last post by:
I have a "for" loop to do something over a number of files in a directory. In particular I need to send a command line job that uses each file in thar directory as an input to node in a linux cluster. Here is how the "for" loop looks like: path = '/mypath/' for file in os.listdir(path): node_name = 'name' + ('%02d' % node) comand = 'ssh ' + node_name + 'external program path and options' node = node + 1 os.system(command) My problem...
0
8860
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...
0
8739
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
0
9382
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
0
9236
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
1
9154
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
0
9087
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
0
8043
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...
1
3207
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
2
2601
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.