Domain Authentication Problem

[blogan]

We are running DB2 7.1 Workgroup edition on a Windows NT server, in a
Windows 2003 domain. They have recently begun forcing users to change
their passwords every 60 days. When a user changes their domain
password, they can no longer connect to DB2. DB2 authenticates using
the domain ID, and the DB2 server is part of the domain. Has anyone
seen this problem, or does anyone have suggestions on how to solve the
issue? The DB2 instance is set to authenticate at the server.

Bob

[Ian]

blogan wrote:

We are running DB2 7.1 Workgroup edition on a Windows NT server, in a
Windows 2003 domain. They have recently begun forcing users to change
their passwords every 60 days. When a user changes their domain
password, they can no longer connect to DB2. DB2 authenticates using
the domain ID, and the DB2 server is part of the domain. Has anyone
seen this problem, or does anyone have suggestions on how to solve the
issue? The DB2 instance is set to authenticate at the server.

Are you sure that DB2 is actually authenticating users on the domain?
Meaning, I wonder if the DB2 server has local users and groups set up
for authentication (i.e., .\joesmith vs. DOMAIN\joesmith).

If this is the case, then obviously changing the domain account's
password doesn't affect the local account's password, which would
explain why users can't login when the domain account's passwords
are changed.

[blogan]

Ian, thanks for your reply. I believe the server DB2 is running on
might have some local accounts, but they have not been set up for the
users, only admins. A few things I have tried to get more information
on the problem is having the users use their old password, this doesn't
work, and having one of our system admins set the users password back
to their old password, this also doesn't work. Our users have roaming
profiles, and I also had the profile deleted and recreated. This did
not work either.

I have tried connecting to the database from the user's PC, with them
logged onto the domain, but connecting to the database using my ID and
password (my ID is in the DB2 sysadmin group). It won't let me connect
from the user's PC when they are the ID logged into the domain. I have
also tried removing the database, via the Client Configuration
Assistant, and adding it back, but this didn't work either.

The server is located remotely and accessed over our WAN. The PDC is
located at the site I am located at. We thought it might be a
replication issue, but the users can access their remote network drives
as soon as they change their password, so I don't think that is the
issue either.

If anyone has any other suggestions, thank you in advance.

Bob