By using this site, you agree to our updated Privacy Policy and our Terms of Use. Manage your Cookies Settings.
438,334 Members | 1,290 Online
Bytes IT Community
+ Ask a Question
Need help? Post your question and get tips & solutions from a community of 438,334 IT Pros & Developers. It's quick & easy.

Cannot create sample database

P: n/a
Hi, all

I'm new to DB2 world.

DB2 8.1 enterprise on Win XP. Installation (typical method) is fine. I
log in as 'abc' user (admin user) to do the installation. Now I have
'db2admin' user.

As 'abc' user I am able to open 'control center'. But when I try to
create sample database from 'First Steps', I get the error which is
'ABC is not valid authorization ID. SQLSTATE=42602'.

Questions:

1. Do I have to log in as 'db2admin' user to create database or
additional instance?

2. If so, what do I have to configure in order to do the FULL DBA job
as 'abc' user?

Thanks a lot!

Nov 12 '05 #1
Share this Question
Share on Google+
10 Replies


P: n/a
<ib****@yahoo.com> wrote in message
news:11*********************@g44g2000cwa.googlegro ups.com...
Hi, all

I'm new to DB2 world.

DB2 8.1 enterprise on Win XP. Installation (typical method) is fine. I
log in as 'abc' user (admin user) to do the installation. Now I have
'db2admin' user.

As 'abc' user I am able to open 'control center'. But when I try to
create sample database from 'First Steps', I get the error which is
'ABC is not valid authorization ID. SQLSTATE=42602'.

Questions:

1. Do I have to log in as 'db2admin' user to create database or
additional instance?

2. If so, what do I have to configure in order to do the FULL DBA job
as 'abc' user?

Thanks a lot!

You can create a security group in Windows, and user ids to it (new or
existing), and then define that group in the
sysadm_group database manager configuration parm.

See "Security issues when installing DB2 Universal Database" in the
Administration: Implementation Guide
Nov 12 '05 #2

P: n/a
Thanks a lot.

I know this is not about DB2, but how can I create a security group
under windows XP?

Thnx again.

Mark A wrote:
<ib****@yahoo.com> wrote in message
news:11*********************@g44g2000cwa.googlegro ups.com...
Hi, all

I'm new to DB2 world.

DB2 8.1 enterprise on Win XP. Installation (typical method) is fine. I
log in as 'abc' user (admin user) to do the installation. Now I have
'db2admin' user.

As 'abc' user I am able to open 'control center'. But when I try to
create sample database from 'First Steps', I get the error which is
'ABC is not valid authorization ID. SQLSTATE=42602'.

Questions:

1. Do I have to log in as 'db2admin' user to create database or
additional instance?

2. If so, what do I have to configure in order to do the FULL DBA job
as 'abc' user?

Thanks a lot!

You can create a security group in Windows, and user ids to it (new or
existing), and then define that group in the
sysadm_group database manager configuration parm.

See "Security issues when installing DB2 Universal Database" in the
Administration: Implementation Guide


Nov 12 '05 #3

P: n/a
In XP, got to Start=>Control Panel=>User Acounts=> Select the user you want
and modify it to make it an Administrator.
I don't think uou can create user groups in XP as this is not an OS that
has server capability so the usage of groups would not be very sensible.

HTH, Pierre.
--
Pierre Saint-Jacques
SES Consultants Inc.
514-737-4515
<ib****@yahoo.com> a écrit dans le message de news:
11*********************@g49g2000cwa.googlegroups.c om...
Thanks a lot.

I know this is not about DB2, but how can I create a security group
under windows XP?

Thnx again.

Mark A wrote:
<ib****@yahoo.com> wrote in message
news:11*********************@g44g2000cwa.googlegro ups.com...
> Hi, all
>
> I'm new to DB2 world.
>
> DB2 8.1 enterprise on Win XP. Installation (typical method) is fine. I
> log in as 'abc' user (admin user) to do the installation. Now I have
> 'db2admin' user.
>
> As 'abc' user I am able to open 'control center'. But when I try to
> create sample database from 'First Steps', I get the error which is
> 'ABC is not valid authorization ID. SQLSTATE=42602'.
>
> Questions:
>
> 1. Do I have to log in as 'db2admin' user to create database or
> additional instance?
>
> 2. If so, what do I have to configure in order to do the FULL DBA job
> as 'abc' user?
>
> Thanks a lot!
>

You can create a security group in Windows, and user ids to it (new or
existing), and then define that group in the
sysadm_group database manager configuration parm.

See "Security issues when installing DB2 Universal Database" in the
Administration: Implementation Guide


Nov 12 '05 #4

P: n/a
"Pierre Saint-Jacques" <se*****@invalid.net> wrote in message
news:ud*******************@weber.videotron.net...
In XP, got to Start=>Control Panel=>User Acounts=> Select the user you
want and modify it to make it an Administrator.
I don't think uou can create user groups in XP as this is not an OS that
has server capability so the usage of groups would not be very sensible.

HTH, Pierre.
--
Pierre Saint-Jacques
SES Consultants Inc.
514-737-4515


I think that the existing Administrators group can be used.
Nov 12 '05 #5

P: n/a
I have a similar problem under linux.

Can anybody give any leads what I have to do so users can do a DBA's job?
thx,
H.
1. Do I have to log in as 'db2admin' user to create database or
additional instance?

2. If so, what do I have to configure in order to do the FULL DBA job
as 'abc' user?

Nov 12 '05 #6

P: n/a
Hans Horn wrote:
I have a similar problem under linux.

Can anybody give any leads what I have to do so users can do a DBA's job?
thx,
H.
1. Do I have to log in as 'db2admin' user to create database or
additional instance?

2. If so, what do I have to configure in order to do the FULL DBA job
as 'abc' user?


In order to create a database, the user must have SYSADM privileges for the
instance in question. SYSADM is managed via groups on the operating system
level, and the database manager configuration contains a parameter
SYSADM_GROUP which specifies the group you need. In my case I have this:

$ db2 get dbm cfg | grep SYSADM
SYSADM group name (SYSADM_GROUP) = TRUSTED

So any other user that shall have SYSADM privileges must be in the "trusted"
user group.

--
Knut Stolze
Information Integration
IBM Germany / University of Jena
Nov 12 '05 #7

P: n/a
Knut,

ain't workin!

$ whoami
HansHorn

$ groups
wheel audio users portage db2fadm1 db2iadm1

$ db2 get dbm cfg | grep SYSADM
SYSADM group name (SYSADM GROUP) = DB2IADM1

$ db2 connect to sample
SQL30082N Attempt to establish connection failed with security reason "24"
("USERNAME AND/OR PASSWORD INVALID"). SQLSTATE=08001

Could it be a case-sensitivity issue?
H.

Knut Stolze wrote:
Hans Horn wrote:
I have a similar problem under linux.

Can anybody give any leads what I have to do so users can do a DBA's
job? thx,
H.
1. Do I have to log in as 'db2admin' user to create database or
additional instance?

2. If so, what do I have to configure in order to do the FULL DBA
job as 'abc' user?


In order to create a database, the user must have SYSADM privileges
for the instance in question. SYSADM is managed via groups on the
operating system level, and the database manager configuration
contains a parameter SYSADM_GROUP which specifies the group you need.
In my case I have this:

$ db2 get dbm cfg | grep SYSADM
SYSADM group name (SYSADM_GROUP) = TRUSTED

So any other user that shall have SYSADM privileges must be in the
"trusted" user group.

Nov 12 '05 #8

P: n/a
Hans Horn wrote:
Knut,

ain't workin!

$ whoami
HansHorn

$ groups
wheel audio users portage db2fadm1 db2iadm1

$ db2 get dbm cfg | grep SYSADM
SYSADM group name (SYSADM GROUP) = DB2IADM1

$ db2 connect to sample
SQL30082N Attempt to establish connection failed with security reason
"24"
("USERNAME AND/OR PASSWORD INVALID"). SQLSTATE=08001


The error message says to me that the user-id/password was not correct.
Have you tried:

$ db2 connect to sample user HansHorn using <your-pwd>

??

In order to verify this, you might want to grant CONNECT privileges to
PUBLIC temporarily. You don't need SYSADM authorization for the
connection.

I don't think this would be necessary but did you restart DB2 after you
added your user to the group db2iadm1?

--
Knut Stolze
Information Integration
IBM Germany / University of Jena
Nov 12 '05 #9

P: n/a
Knut Stolze wrote:
Hans Horn wrote:
Knut,

ain't workin!

$ whoami
HansHorn

$ groups
wheel audio users portage db2fadm1 db2iadm1

$ db2 get dbm cfg | grep SYSADM
SYSADM group name (SYSADM GROUP) = DB2IADM1

$ db2 connect to sample
SQL30082N Attempt to establish connection failed with security
reason "24"
("USERNAME AND/OR PASSWORD INVALID"). SQLSTATE=08001
The error message says to me that the user-id/password was not
correct. Have you tried:

$ db2 connect to sample user HansHorn using <your-pwd>

No I have not tried that one yet! Will do when I get back to that machine
later today!

But, I do get the same SQL30082N error when I try:
db2 create database test
I don't think this would be necessary but did you restart DB2 after
you added your user to the group db2iadm1?

Yup!

Nov 12 '05 #10

P: n/a
Knut Stolze wrote:
$ db2 connect to sample user HansHorn using <your-pwd> .... same error here!
In order to verify this, you might want to grant CONNECT privileges to
PUBLIC temporarily. You don't need SYSADM authorization for the
connection.

as db2inst1:
db2 connect to sample
db2 grant connect on database to user HansHorn

as me:
.... same error

as db2inst1:
db2 grant connect on database to PUBLIC

as me:
.... same error

Does that make sense?
Is db2 maintaining its own repo of usernames and passwords?
H.
Nov 12 '05 #11

This discussion thread is closed

Replies have been disabled for this discussion.