Re: bad password error -951 in Server Studio
Posted in 2012
The permissions are wrong:
6783009 -rwsr-sr-- 1 root informix 23192656 Mar 28 15:36
/usr/local/informix/srvr1170new/bin/oninit
I'd say the installation as not completed correctly.
The connections from another server work because no password is involved.
With JDBC or iconnect you're using password, and that requires special
permissions (root) to access the /etc/shadow file.
You have to redo your installation... have you installed it as root? Which
command did you use?
Regards.
On Mon, Jul 2, 2012 at 5:55 PM, Laurie Gustin <lgustin@utah.gov> wrote:
> permissions are:
>
> -rwxr-xr--. 1 informix informix 23219335 Jun 14 09:15 oninit
> No modifications have been made after install. Note that the instance
> starts fine. I just cant connect through and jdbc connection or iconnect
> from my pc.
> Connecting through dbaccess from another informix server works fine.
>
> Laurie
>
> >>> Pamela Ekstrand <ekstrand@us.ibm.com> 6/28/2012 3:50 PM >>>
>
>
> Laurie,
>
> What are the permissions on the oninit file? We had a similar issue when
> the permissions were not set as:
>
> -rwsr-sr-- 1 root informix 27955947 Jul 20 2011 oninit
>
> Thanks.
>
> Pam Ekstrand
> Database Administrator
> email: ekstrand@us.ibm.com
> Home Office: 727-729-8210
> Cell: 727-365-3781
>
>
>
>
> From: "Laurie Gustin" <lgustin@utah.gov> To: "Fernando Nunes" <
> domusonline@gmail.com> Cc: MTYRRELL@utah.gov, informix-list@iiug.org,
> TyrrellMichael@iiug.org Date: 06/28/2012 04:44 PM Subject: Re: bad
> password error -951 in Server Studio Sent by:
> informix-list-bounces@iiug.org
> ------------------------------
>
>
>
> Fernando -
> Thanks for the reply - I checked on things and this is what I found.....
>
> Are you sure that the local database machine recognizes that user?
> I can log into the machine just fine... and run dbaccess from the
> command line. I should note that I also get this error when trying to
> connect with user informix
>
> Are you sure ssh is not authenticating the user against some other
> mechanism (LDAP for example)?
> no ldap or other authentication
>
> Does the user exist in /etc/passwd? Are you sure that "oninit" can access
> the file?
> yes - the user is in /etc/passwd permissions are: -rw-r--r--. 1
> root root 1707 Jun 28 09:31 passwd
>
> Do you use SE-Linux?
> se-linux was running. we shut it down but that didnt fix the problem.
>
> Is that a regular instance or a "private installation"?
> this is just a regular vanilla install of IDS 11.7
>
> Is oninit running as root/with setuid?
> most of the oninit processes are running as root, so I would say yes.
>
> Any other ideas?
>
> Thanks
> Laurie
>
> Laurie Gustin
> Database Administrator
> Dept of Technology Services
> Dept of Public Safety
> lgustin@utah.gov
> 801-965-4410
>
>
> >>> Fernando Nunes <domusonline@gmail.com> 6/28/2012 11:27 AM >>>
> Error -951, seen on the online log has nothing to do with .rhosts and no
> one should put things in .rhosts if it's not needed.
> Error -951 (this will not sound right) means the user does not exist. And
> yes, I've read the ssh test...
> Are you sure that the local database machine recognizes that user? Are you
> sure ssh is not authenticationg the user against some other mechanism (LDAP
> for example)?
>
> Does the user exist in /etc/passwd? Are you sure that "oninit" can access
> the file? Do you use SE-Linux? And do you use ldap? Is that a regular
> instance or a "private installation"? Is oninit running as root/with setuid?
>
> Regards
>
>
> On Thu, Jun 28, 2012 at 6:05 PM, Goldrick, Jim <*jgoldrick@judsonu.edu*<jgoldrick@judsonu.edu>>
> wrote:
> I think you get that error if you don’t have your .rhosts file setup.
> Informix requires the .rhosts to have the remove host name in it. I
> generally do it in the user’s home directory/.rhosts file.
>
> Thank you,
>
> Jim Goldrick
>
> System Admin
>
> Judson University
>
> 1151 N. State St.
> Elgin, IL 60123*
> **(573) 979-9079* <%28573%29%20979-9079>
> Reminder: Judson University IT will never ask for your password or other
> personal information over email.
>
> *jgoldrick@judsonu.edu* <brichardson@judsonu.edu>
>
> *From:* *informix-list-bounces@iiug.org* <informix-list-bounces@iiug.org>[mailto:
> *informix-list-bounces@iiug.org* <informix-list-bounces@iiug.org>] *On
> Behalf Of *Laurie Gustin*
> Sent:* Thursday, June 28, 2012 11:43 AM*
> To:* *informix-list@iiug.org* <informix-list@iiug.org>*
> Subject:* bad password error -951 in Server Studio
> This seems straight forward... hopefully someone knows a quick answer.
> IDS 11.7 FC5
> Red Hat Enterprise Server release 6.3 (Santiago)
> Trying to connect through Server Studio.
> Testing the database connection gets the following errors:
> 10:05:06 Get Shadow Password for user [lgustin] failed!
> 10:05:06 Check for password aging/account lock-out.
> 10:05:06 listener-thread: err = -951: oserr = 0: errstr = *
> lgustin@111.111.111.111* <lgustin@111.111.111.111>: Incorrect password or
> user *lgustin@111.111.111.111* <lgustin@111.111.111.111> is not known on
> the database server.
> The test for the ssh connection goes through fine. Which means the
> username and password really are correct.
> I'm thinking it has to do with access to the /etc/shadow file which has
> permissions 000 (and needs to stay that way).
> Any ideas?
> Thanks
> Laurie
>
> _______________________________________________
> Informix-list mailing list*
> **Informix-list@iiug.org* <Informix-list@iiug.org>*
> **http://www.iiug.org/mailman/listinfo/informix-list*<http://www.iiug.org/mailman/listinfo/informix-list>
>
>
>
>
> --
> Fernando Nunes
> Portugal
> *
> **http://informix-technology.blogspot.com*<http://informix-technology.blogspot.com/>
> My email works... but I don't check it frequently...
> _______________________________________________
> Informix-list mailing list
> Informix-list@iiug.org
> http://www.iiug.org/mailman/listinfo/informix-list
>
>
>
--
Fernando Nunes
Portugal
http://informix-technology.blogspot.com
My email works... but I don't check it frequently...