Cannot create sample database

[ibm_97]

Hi, all

I'm new to DB2 world.

DB2 8.1 enterprise on Win XP. Installation (typical method) is fine. I
log in as 'abc' user (admin user) to do the installation. Now I have
'db2admin' user.

As 'abc' user I am able to open 'control center'. But when I try to
create sample database from 'First Steps', I get the error which is
'ABC is not valid authorization ID. SQLSTATE=42602'.

Questions:

1. Do I have to log in as 'db2admin' user to create database or
additional instance?

2. If so, what do I have to configure in order to do the FULL DBA job
as 'abc' user?

Thanks a lot!

[Mark A]

<ib****@yahoo.com> wrote in message
news:11*********************@g44g2000cwa.googlegro ups.com...

Hi, all

I'm new to DB2 world.

DB2 8.1 enterprise on Win XP. Installation (typical method) is fine. I
log in as 'abc' user (admin user) to do the installation. Now I have
'db2admin' user.

As 'abc' user I am able to open 'control center'. But when I try to
create sample database from 'First Steps', I get the error which is
'ABC is not valid authorization ID. SQLSTATE=42602'.

Questions:

1. Do I have to log in as 'db2admin' user to create database or
additional instance?

2. If so, what do I have to configure in order to do the FULL DBA job
as 'abc' user?

Thanks a lot!

You can create a security group in Windows, and user ids to it (new or
existing), and then define that group in the
sysadm_group database manager configuration parm.

See "Security issues when installing DB2 Universal Database" in the
Administration: Implementation Guide

[ibm_97]

Thanks a lot.

I know this is not about DB2, but how can I create a security group
under windows XP?

Thnx again.

Mark A wrote:

<ib****@yahoo.com> wrote in message
news:11*********************@g44g2000cwa.googlegro ups.com...

Hi, all

I'm new to DB2 world.

DB2 8.1 enterprise on Win XP. Installation (typical method) is fine. I
log in as 'abc' user (admin user) to do the installation. Now I have
'db2admin' user.

As 'abc' user I am able to open 'control center'. But when I try to
create sample database from 'First Steps', I get the error which is
'ABC is not valid authorization ID. SQLSTATE=42602'.

Questions:

1. Do I have to log in as 'db2admin' user to create database or
additional instance?

2. If so, what do I have to configure in order to do the FULL DBA job
as 'abc' user?

Thanks a lot!

You can create a security group in Windows, and user ids to it (new or
existing), and then define that group in the
sysadm_group database manager configuration parm.

See "Security issues when installing DB2 Universal Database" in the
Administration: Implementation Guide

[Pierre Saint-Jacques]

In XP, got to Start=>Control Panel=>User Acounts=> Select the user you want
and modify it to make it an Administrator.
I don't think uou can create user groups in XP as this is not an OS that
has server capability so the usage of groups would not be very sensible.

HTH, Pierre.
--
Pierre Saint-Jacques
SES Consultants Inc.
514-737-4515
<ib****@yahoo.com> a écrit dans le message de news:
11*********************@g49g2000cwa.googlegroups.c om...

Thanks a lot.

I know this is not about DB2, but how can I create a security group
under windows XP?

Thnx again.

Mark A wrote:

<ib****@yahoo.com> wrote in message
news:11*********************@g44g2000cwa.googlegro ups.com...

> Hi, all
>
> I'm new to DB2 world.
>
> DB2 8.1 enterprise on Win XP. Installation (typical method) is fine. I
> log in as 'abc' user (admin user) to do the installation. Now I have
> 'db2admin' user.
>
> As 'abc' user I am able to open 'control center'. But when I try to
> create sample database from 'First Steps', I get the error which is
> 'ABC is not valid authorization ID. SQLSTATE=42602'.
>
> Questions:
>
> 1. Do I have to log in as 'db2admin' user to create database or
> additional instance?
>
> 2. If so, what do I have to configure in order to do the FULL DBA job
> as 'abc' user?
>
> Thanks a lot!
>

You can create a security group in Windows, and user ids to it (new or
existing), and then define that group in the
sysadm_group database manager configuration parm.

See "Security issues when installing DB2 Universal Database" in the
Administration: Implementation Guide

[Mark A]

"Pierre Saint-Jacques" <se*****@invalid.net> wrote in message
news:ud*******************@weber.videotron.net...

In XP, got to Start=>Control Panel=>User Acounts=> Select the user you
want and modify it to make it an Administrator.
I don't think uou can create user groups in XP as this is not an OS that
has server capability so the usage of groups would not be very sensible.

HTH, Pierre.
--
Pierre Saint-Jacques
SES Consultants Inc.
514-737-4515

I think that the existing Administrators group can be used.

[Hans Horn]

I have a similar problem under linux.

Can anybody give any leads what I have to do so users can do a DBA's job?
thx,
H.

1. Do I have to log in as 'db2admin' user to create database or
additional instance?

2. If so, what do I have to configure in order to do the FULL DBA job
as 'abc' user?

[Knut Stolze]

Hans Horn wrote:

I have a similar problem under linux.

Can anybody give any leads what I have to do so users can do a DBA's job?
thx,
H.

1. Do I have to log in as 'db2admin' user to create database or
additional instance?

2. If so, what do I have to configure in order to do the FULL DBA job
as 'abc' user?

In order to create a database, the user must have SYSADM privileges for the
instance in question. SYSADM is managed via groups on the operating system
level, and the database manager configuration contains a parameter
SYSADM_GROUP which specifies the group you need. In my case I have this:

$ db2 get dbm cfg | grep SYSADM
SYSADM group name (SYSADM_GROUP) = TRUSTED

So any other user that shall have SYSADM privileges must be in the "trusted"
user group.

--
Knut Stolze
Information Integration
IBM Germany / University of Jena

[Hans Horn]

Knut,

ain't workin!

$ whoami
HansHorn

$ groups
wheel audio users portage db2fadm1 db2iadm1

$ db2 get dbm cfg | grep SYSADM
SYSADM group name (SYSADM GROUP) = DB2IADM1

$ db2 connect to sample
SQL30082N Attempt to establish connection failed with security reason "24"
("USERNAME AND/OR PASSWORD INVALID"). SQLSTATE=08001

Could it be a case-sensitivity issue?
H.

Knut Stolze wrote:

Hans Horn wrote:

I have a similar problem under linux.

Can anybody give any leads what I have to do so users can do a DBA's
job? thx,
H.

1. Do I have to log in as 'db2admin' user to create database or
additional instance?

2. If so, what do I have to configure in order to do the FULL DBA
job as 'abc' user?

In order to create a database, the user must have SYSADM privileges
for the instance in question. SYSADM is managed via groups on the
operating system level, and the database manager configuration
contains a parameter SYSADM_GROUP which specifies the group you need.
In my case I have this:

$ db2 get dbm cfg | grep SYSADM
SYSADM group name (SYSADM_GROUP) = TRUSTED

So any other user that shall have SYSADM privileges must be in the
"trusted" user group.

[Knut Stolze]

Hans Horn wrote:

Knut,

ain't workin!

$ whoami
HansHorn

$ groups
wheel audio users portage db2fadm1 db2iadm1

$ db2 get dbm cfg | grep SYSADM
SYSADM group name (SYSADM GROUP) = DB2IADM1

$ db2 connect to sample
SQL30082N Attempt to establish connection failed with security reason
"24"
("USERNAME AND/OR PASSWORD INVALID"). SQLSTATE=08001

The error message says to me that the user-id/password was not correct.
Have you tried:

$ db2 connect to sample user HansHorn using <your-pwd>

??

In order to verify this, you might want to grant CONNECT privileges to
PUBLIC temporarily. You don't need SYSADM authorization for the
connection.

I don't think this would be necessary but did you restart DB2 after you
added your user to the group db2iadm1?

--
Knut Stolze
Information Integration
IBM Germany / University of Jena

[Hans Horn]

Knut Stolze wrote:

Hans Horn wrote:

Knut,

ain't workin!

$ whoami
HansHorn

$ groups
wheel audio users portage db2fadm1 db2iadm1

$ db2 get dbm cfg | grep SYSADM
SYSADM group name (SYSADM GROUP) = DB2IADM1

$ db2 connect to sample
SQL30082N Attempt to establish connection failed with security
reason "24"
("USERNAME AND/OR PASSWORD INVALID"). SQLSTATE=08001
The error message says to me that the user-id/password was not
correct. Have you tried:

$ db2 connect to sample user HansHorn using <your-pwd>

No I have not tried that one yet! Will do when I get back to that machine
later today!

But, I do get the same SQL30082N error when I try:
db2 create database test
I don't think this would be necessary but did you restart DB2 after
you added your user to the group db2iadm1?

Yup!

[Hans Horn]

Knut Stolze wrote:

$ db2 connect to sample user HansHorn using <your-pwd> .... same error here!
In order to verify this, you might want to grant CONNECT privileges to
PUBLIC temporarily. You don't need SYSADM authorization for the
connection.

as db2inst1:
db2 connect to sample
db2 grant connect on database to user HansHorn

as me:
.... same error

as db2inst1:
db2 grant connect on database to PUBLIC

as me:
.... same error

Does that make sense?
Is db2 maintaining its own repo of usernames and passwords?
H.