-956 error message while HADR IDS 10 UC4
Posted in 2007
A user setting up HDR/HADR between two SUSE 9 boxes on IDS 10.00.UC4 hit "-956 informix@fff:172.40.100.11 is not trusted", even though rsh/rlogin as user informix worked without a password; he also claimed sqlhosts on UC4 only accepted IP addresses, not hostnames. Suggestions were to check short vs. fully-qualified hostnames in /etc/hosts (and HOSTNAME in /etc/sysconfig/network), verify name resolution both ways, test with dbaccess as informix, and use $INFORMIXDIR/etc/hosts.equiv. The problem only appeared on UC4 (not UC6); the poster was advised to open an IBM support call and to push the customer off UC4 (no DST fixes). No resolution is recorded in the thread.
Auto-generated by DrWatson from the posts below — may be imperfect; read the full thread.
Topics: Security, Permissions & Auditing, Networking & sqlhosts Configuration
Hi all, I have implemented a hadr setup in two suse9 box using ids10 uc4. i am getting the following error "-956 informix@fff:172.40.100.11 is not trusted" i tried the following steps. i entered hostname in /root/.rhosts and /etc/hosts.equiv and also edited .netrc in both the machine still the database server is not able to communicate. i am able to connect from OS level without password. but database server is giving the above mentioned error. i noticed that sqlhosts file in UC4 doesnt take hostname it takes only ip address. can anyone help me out in this regard or tell me what are the steps required for trusted connection in HADR. Thanks and regards Deepak Biswas
sqlhosts *does* take host name. If you have the simple hostname and a fully-qualified hostname in /etc/hosts, you can try either - set HOSTNAME in /etc/sysconfig/netork to the simple hostname or - use the FQHN in sqlhosts Bob Roussey Unix / Informix Administration Spirit Airlines Robert.Roussey@SpiritAir.com -----Original Message----- From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of DEEPAK BISWAS Sent: Friday, August 24, 2007 9:28 AM To: ids@iiug.org Subject: -956 error message while HADR IDS 10 UC4 [9853] Hi all, I have implemented a hadr setup in two suse9 box using ids10 uc4. i am getting the following error "-956 informix@fff:172.40.100.11 is not trusted" i tried the following steps. i entered hostname in /root/.rhosts and /etc/hosts.equiv and also edited ..netrc in both the machine still the database server is not able to communicate. i am able to connect from OS level without password. but database server is giving the above mentioned error. i noticed that sqlhosts file in UC4 doesnt take hostname it takes only ip address. can anyone help me out in this regard or tell me what are the steps required for trusted connection in HADR. Thanks and regards Deepak Biswas ************************************************************************ ******* Forum Note: Use "Reply" to post a response in the discussion forum.
Hi,
critical is, that the user informix is trusted.
Have you tried as user informix to do the remote
connect on OS level (rlogin or similar)?
I never heard that you can enter IP-address only in
sqlhosts file, but not the hostname. This I think is not
a (version specific) problem of IDS.
It is more likely a setup problem between the machines.
First make sure that each machine "knows" itself by
name. Usually this is done by an entry in /etc/hosts.
There may be a difference between long and short
name (with and without full domain name qualification).
So you may have to put both into /etc/hosts.
Next see whether the peer is known by name
on each machine. E.g. use "nslookup" utility or
something similar. You may have to adjust some
setup regarding DNS utilization vs. files (like /etc/hosts).
As a last test, you can use dbaccess on one machine
to connect to server on the other and vice versa. Do
this as user informix and it should work without requiring
the password.
Once all this is correctly in place, HDR should work.
BTW: you can use $INFORMIXDIR/etc/hosts.equiv
instead of /etc/hosts.equiv. The syntax in the file is
the same, only $INFORMIXDIR/etc/hosts.equiv will
be effective for IDS only (but not all the other UNIX
functionality).
Regards,
Martin
--
Martin Fuerderer
IBM Informix Development Munich, Germany
Information Management
IBM Deutschland GmbH
Chairman of the Supervisory Board: Hans Ulrich Märki
Board of Management: Martin Jetter (Chairman), Rudolf Bauer, Christian
Diedrich, Christoph Grandpierre, Matthias Hartmann, Thomas Fell, Michael
Diemer
Corporate Seat: Stuttgart, Germany; Reg.-Gericht: Amtsgericht Stuttgart,
HRB-Nr.: 14 562 WEEE-Reg.-Nr. DE 99369940
ids-bounces@iiug.org wrote on 24.08.2007 15:27:48:
> Hi all,
> I have implemented a hadr setup in two suse9 box using ids10 uc4. i am
getting
> the following error "-956 informix@fff:172.40.100.11 is not trusted" i
tried
> the following steps.
> i entered hostname in /root/.rhosts and /etc/hosts.equiv and also edited
> ..netrc in both the machine still the database server is not able to
> communicate. i am able to connect from OS level without password. but
database
> server is giving the above mentioned error. i noticed that sqlhosts file
in
> UC4 doesnt take hostname it takes only ip address. can anyone help me
out in
> this regard or tell me what are the steps required for trusted
connection in
> HADR.
>
> Thanks and regards
> Deepak Biswas
>
>
>
*******************************************************************************
> Forum Note: Use "Reply" to post a response in the discussion forum.
>
Hi martin, Here is answer for you question. 1. critical is, that the user informix is trusted.Have you tried as user informix to do the remote connect on OS level (rlogin or similar)? Ans: Yes, from OS using informix user i am able to connect without password using rsh rlogin 2.I never heard that you can enter IP-address only in sqlhosts file, but not the hostname. This I think is not a (version specific) problem of IDS Ans: Yes, i am facing the problem only with IDS Uc4 not with ids10 Uc6. but client requirement is uc4
Hi, can you please open a call with IBM Informix Tech Support and have them to help you sort out this problem? Regards, Martin -- Martin Fuerderer IBM Informix Development Munich, Germany Information Management IBM Deutschland GmbH Chairman of the Supervisory Board: Hans Ulrich Märki Board of Management: Martin Jetter (Chairman), Rudolf Bauer, Christian Diedrich, Christoph Grandpierre, Matthias Hartmann, Thomas Fell, Michael Diemer Corporate Seat: Stuttgart, Germany; Reg.-Gericht: Amtsgericht Stuttgart, HRB-Nr.: 14 562 WEEE-Reg.-Nr. DE 99369940 "DEEPAK BISWAS" <deepak.biswas19@gmail.com> Sent by: ids-bounces@iiug.org 24.08.2007 16:15 Please respond to ids@iiug.org To ids@iiug.org cc Subject Re: -956 error message while HADR IDS 10 UC4 [9858] Hi martin, Here is answer for you question. 1. critical is, that the user informix is trusted.Have you tried as user informix to do the remote connect on OS level (rlogin or similar)? Ans: Yes, from OS using informix user i am able to connect without password using rsh rlogin 2.I never heard that you can enter IP-address only in sqlhosts file, but not the hostname. This I think is not a (version specific) problem of IDS Ans: Yes, i am facing the problem only with IDS Uc4 not with ids10 Uc6. but client requirement is uc4 ******************************************************************************* Forum Note: Use "Reply" to post a response in the discussion forum.
You should talk to your customer about that requirement. UC4 does not have the fixes to the issues dealing with Daylight Saving Time, whereas UC6 does. Take care. Clifton M. Bean Informix DBA / AIX System Admin Currency Technics & Metrics Phone: (972) 812-1411 x244 -----Original Message----- From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of DEEPAK BISWAS Sent: Friday, August 24, 2007 9:15 AM To: ids@iiug.org Subject: Re: -956 error message while HADR IDS 10 UC4 [9858] Hi martin, Here is answer for you question. 1. critical is, that the user informix is trusted.Have you tried as user informix to do the remote connect on OS level (rlogin or similar)? Ans: Yes, from OS using informix user i am able to connect without password using rsh rlogin 2.I never heard that you can enter IP-address only in sqlhosts file, but not the hostname. This I think is not a (version specific) problem of IDS Ans: Yes, i am facing the problem only with IDS Uc4 not with ids10 Uc6. but client requirement is uc4 **************************************************************************** *** Forum Note: Use "Reply" to post a response in the discussion forum.