Strange authentication, when account is disabled

[Mark Barinstein]

Hello.

windows environment.

When I disable a user account, a see next:

1. w2k, fp4; db2 v7.2, FP10a: I can connect to database with this userid and
ANY password!!!
2. w2003; db2 v8.1.4: I can connect to database with this userid and its
password!

Is this a feature (if so, this is a very strange feature I think) or a bug?

Best regards,
Barinstein Mark.

[Garfield Lewis]

Hi Mark,

Could you send us a trace of both situations?

--
Garfield A. Lewis
DB2 UDB Development,
IBM Canada Laboratory
"Mark Barinstein" <ma**@crk.vsi.ru> wrote in message
news:bq**********@serv.vrn.ru...

Hello.

windows environment.

When I disable a user account, a see next:

1. w2k, fp4; db2 v7.2, FP10a: I can connect to database with this userid and ANY password!!!
2. w2003; db2 v8.1.4: I can connect to database with this userid and its
password!

Is this a feature (if so, this is a very strange feature I think) or a bug?
Best regards,
Barinstein Mark.

[Mark Barinstein]

Hi.

I don't sure I understood this question.
What does it mean "trace"? Should I send db2audit output?

Could you send us a trace of both situations?

[Blair Adamache]

He wants db2trc output. Turn the trace on, replicate the problem, dump
the trace to a file, and turn db2trc off.

Mark Barinstein wrote:

Hi.

I don't sure I understood this question.
What does it mean "trace"? Should I send db2audit output?

Could you send us a trace of both situations?

[Garfield Lewis]

If you are still unclear, this is what I want you to do:

db2start
db2trc on
db2 connect to <db> user <user> using <pw>
db2trc dmp trc.dmp
db2trc off
db2trc flw trc.dmp trc.flw
db2trc fmt trc.dmp trc.fmt

also run db2level and send it's output.

send me the db2level output, trc.flw and trc.fmt

However, before doing all that let's be clear about one thing. Is this all
being done from the same machine? Because if you have a client machine and a
server machine and you disable the userid on the server but you are doing
client authentication then the authentication will be done on the client
side and the server will not re-authenticate. In that case you need to
disable the user on the client machine.

--
Garfield A. Lewis
DB2 UDB Development,
IBM Canada Laboratory
"Blair Adamache" <ba*******@2muchspam.yahoo.com> wrote in message
news:bq**********@hanover.torolab.ibm.com...

He wants db2trc output. Turn the trace on, replicate the problem, dump
the trace to a file, and turn db2trc off.

Mark Barinstein wrote:

Hi.

I don't sure I understood this question.
What does it mean "trace"? Should I send db2audit output?

Could you send us a trace of both situations?