Re: 12.10.FC9 1809 Error
User on AIX 7.2 with IDS 12.10.FC9 could connect as informix and users in the staff group but got error -1809 ('Local user validation failed' in online.log) for a newly created OS user, over a shared-memory (onipcshm) connection. After checking sqlhosts, DBSERVERNAME/ALIASES, NETTYPE and OS authentication, Fernando Nunes spotted that $INFORMIXDIR/bin/oninit was owned by informix and not setuid root, i.e. effectively a non-root installation, which cannot do OS user authentication. The user reinstalled as root and the problem was resolved, though the cause of the earlier bad install (possibly disk space) was never determined.
Auto-generated by DrWatson from the posts below — may be imperfect; read the full thread.
It's a bit strange.... AFAICR, 1809 is only returned in PAM connections. Are you trying to connect through a PAM listener? If yes, forget about connecting locally with user informix as it bypasses the PAM authentication. If you're connecting through a PAM listener/port than you need to check your PAM configuration... and try to use any debug provided by the modules you're using. PAM specification doesn't expose the internal errors to the calling application (Informix in this case), so the engine can't provide much more than the almost useless 1809 code. However you seemed to found some error in online log which is strange (for PAM failures). Please clarify if your connection is through PAM, and if it is, we'd need more info on you PAM configuration. Regards. On Wed, Apr 18, 2018 at 10:43 AM, SMITH JOHN <srafik0358@gmail.com> wrote: > Hi to All, > > I installed Informix 12.10.FC on AIX 7.2, everything is all right but i > have a > issue with connecting with a user that i created after installing et > starting > ids, > > i can connect with users of informix group, staff group but not with my > user > > the error is 1809 > > can anyone help please ? > > thanks in advace > > > ******************************************************************************* > > Forum Note: Use "Reply" to post a response in the discussion forum. > > -- Fernando Nunes Portugal http://informix-technology.blogspot.com My email works... but I don't check it frequently...
i'm just connecting on shared memory (onipcshm in sqlhosts) regards
Weird.... I must be missing something. Can you provide: - The sqlhosts file - The parameters DBSERVERNAME, DBSERVERALIASES, SECURITY_LOCALCONNECTION and NETTYPE - A traceroute to the "host" field in the sqlhost - Details about the system authentication that is configured (any integration with LDAP/AD?) - The online.log covering an isolated attempt - Verification that you can login wih the user on the machine (maybe it's just requiring a password change?) Regards. On Wed, Apr 18, 2018 at 12:25 PM, SMITH JOHN <srafik0358@gmail.com> wrote: > i'm just connecting on shared memory (onipcshm in sqlhosts) > > regards > > > ******************************************************************************* > > Forum Note: Use "Reply" to post a response in the discussion forum. > > -- Fernando Nunes Portugal http://informix-technology.blogspot.com My email works... but I don't check it frequently...
The sqlhosts file
ol_serv onipcshm 192.168.1.2 on_servername
ol_serv_tcp onsoctcp 192.168.1.2 9088
- The parameters DBSERVERNAME, DBSERVERALIASES, SECURITY_LOCALCONNECTION
and NETTYPE
# DBSERVERNAME - The name of the default database server
# DBSERVERALIASES - The list of up to 32 alternative dbservernames,
DBSERVERNAME ol_serv
DBSERVERALIASES ol_serv_tcp# NETTYPE - The configuration of poll threads
# NETTYPE <protocol>,<# poll threads>
# You can include multiple NETTYPE
NETTYPE ipcshm,1,50,CPU
NETTYPE soctcp,1,50,NET# SECURITY_LOCALCONNECTION - Specifies whether the server performs
# UNSECURE_ONSTAT - Controls whether non-DBSA users are
SECURITY_LOCALCONNECTION
UNSECURE_ONSTAT# DBSERVERNAME or DBSERVERALIASES that uses a
- A traceroute to the "host" field in the sqlhost
traceroute 192.168.1.2
trying to get source for 192.168.1.2
source should be 192.168.1.2
traceroute to 192.168.1.2 (192.168.1.2) from 192.168.1.2 (192.168.1.2), 30
hops max
outgoing MTU = 16384
1 serv_db (192.168.1.2) 0 ms 0 ms 0 ms
- Details about the system authentication that is configured (any
integration with LDAP/AD?)
no ldap/ad
- The online.log covering an isolated attempt
10:21:19 Reject connection - 12
10:21:19 Error: Local user validation failed.
- Verification that you can login wih the user on the machine (maybe it's
just requiring a password change?)
done
regards
Lovely... you destroyed all my ideas. But I have more:
1- With which user did you install Informix?
2- provide an "ls -l $INFORMIXDIR/bin/oninit"
Thanks
On Wed, Apr 18, 2018 at 1:03 PM, SMITH JOHN <srafik0358@gmail.com> wrote:
> The sqlhosts file
>
> ol_serv onipcshm 192.168.1.2 on_servername
> ol_serv_tcp onsoctcp 192.168.1.2 9088>
> - The parameters DBSERVERNAME, DBSERVERALIASES, SECURITY_LOCALCONNECTION
> and NETTYPE
>
> # DBSERVERNAME - The name of the default database server
> # DBSERVERALIASES - The list of up to 32 alternative dbservernames,
> DBSERVERNAME ol_serv
> DBSERVERALIASES ol_serv_tcp> # NETTYPE - The configuration of poll threads
> # NETTYPE <protocol>,<# poll threads>
> # You can include multiple NETTYPE
> NETTYPE ipcshm,1,50,CPU
> NETTYPE soctcp,1,50,NET> # SECURITY_LOCALCONNECTION - Specifies whether the server performs
> # UNSECURE_ONSTAT - Controls whether non-DBSA users are
> SECURITY_LOCALCONNECTION
> UNSECURE_ONSTAT> # DBSERVERNAME or DBSERVERALIASES that uses a
>
> - A traceroute to the "host" field in the sqlhost
>
> traceroute 192.168.1.2
> trying to get source for 192.168.1.2
> source should be 192.168.1.2
> traceroute to 192.168.1.2 (192.168.1.2) from 192.168.1.2 (192.168.1.2), 30
> hops max
> outgoing MTU = 16384
> 1 serv_db (192.168.1.2) 0 ms 0 ms 0 ms
>
> - Details about the system authentication that is configured (any
> integration with LDAP/AD?)
>
> no ldap/ad
>
> - The online.log covering an isolated attempt
>
> 10:21:19 Reject connection - 12
> 10:21:19 Error: Local user validation failed.
>
> - Verification that you can login wih the user on the machine (maybe it's
> just requiring a password change?)
>
> done
>
> regards
>
>
>
*******************************************************************************
>
> Forum Note: Use "Reply" to post a response in the discussion forum.
>
>
--
Fernando Nunes
Portugal
http://informix-technology.blogspot.com
My email works... but I don't check it frequently...
first i've installed with root, then with informix but the same issue ls -lt $INFORMIXDIR lrwxrwxrwx 1 informix informix 12 Apr 16 10:05 /app_ifx/informix -> ifx12.10.fc9 ls -lt $INFORMIXDIR/bin/oninit -rwxr-xr-- 1 informix informix 45269121 Apr 17 08:54 /app_ifx/informix/bin/oninit
With an installation as Informix (non-root installation) OS user
authentication is not supported. That explains why it's failing now, as the
owner and permissions of oninit show.
You'll need to re-install it with root and then we can proceed. The owner
of "oninit" should be root and it must be setuid.
Whitout it, Informix cannot access the privilege authentication files/data.
Regards.
On Wed, Apr 18, 2018 at 3:10 PM, SMITH JOHN <srafik0358@gmail.com> wrote:
> first i've installed with root, then with informix but the same issue
>
> ls -lt $INFORMIXDIR
> lrwxrwxrwx 1 informix informix 12 Apr 16 10:05 /app_ifx/informix ->
> ifx12.10.fc9
> ls -lt $INFORMIXDIR/bin/oninit
> -rwxr-xr-- 1 informix informix 45269121 Apr 17 08:54
> /app_ifx/informix/bin/oninit
>
>
>
*******************************************************************************
>
> Forum Note: Use "Reply" to post a response in the discussion forum.
>
>
--
Fernando Nunes
Portugal
http://informix-technology.blogspot.com
My email works... but I don't check it frequently...
but i've aleady installed with root, and i had the same issue, what did i miss ? :)
We will only find that out once you do it again. The error you're getting with the current setup is to be expected. We need to check installation permissions once you install it again. Sounds like the installation didn't succeed... Please provide also the installation command and eventually the installation log Regards. On Wed, Apr 18, 2018 at 3:59 PM, SMITH JOHN <srafik0358@gmail.com> wrote: > but i've aleady installed with root, and i had the same issue, > what did i miss ? :) > > > ******************************************************************************* > > Forum Note: Use "Reply" to post a response in the discussion forum. > > -- Fernando Nunes Portugal http://informix-technology.blogspot.com My email works... but I don't check it frequently...
unfortunately i can not do a re install now i found a way to run the application with this installation,, however it s not a production server, it s just a "container of data' but i still need to find a solution for the production in few months however, i still also d'ont understand what i can access with a member of staff user !!! and not with a user that a i created !!
The current installation has several limitations. You shouldn't work with it. You will loose time, and most probably make other loose time while trying to help you. Regards. On Wed, Apr 18, 2018 at 4:24 PM, SMITH JOHN <srafik0358@gmail.com> wrote: > unfortunately i can not do a re install now > > i found a way to run the application with this installation,, however it s > not > a production server, it s just a "container of data' > > but i still need to find a solution for the production in few months > > however, i still also d'ont understand what i can access with a member of > staff user !!! and not with a user that a i created !! > > > ******************************************************************************* > > Forum Note: Use "Reply" to post a response in the discussion forum. > > -- Fernando Nunes Portugal http://informix-technology.blogspot.com My email works... but I don't check it frequently...
Ok Fernando, You re absolutely Right i ll try to reinstall and let you know sincerly
hi fernando i reinstall informix with root and everything is ok now but really don t understand what happened, did same install before !! anyway thans a lot for your support
It would scare me if it didn't. It's impossible to say what went wrong and I understand how disturbing it can be, not knowing what happened. We can only imagine something (like lack os space) went wrong during previous installation.... file permissions an ownership are changed in the end.... Anyway, it's good everything is working now. Regards On Sun, Apr 22, 2018, 19:10 SMITH JOHN <srafik0358@gmail.com> wrote: > hi fernando > i reinstall informix with root and everything is ok now > but really don t understand what happened, did same install before !! > > anyway > > thans a lot for your support > > > ******************************************************************************* > > Forum Note: Use "Reply" to post a response in the discussion forum. > >