IDS 10.00.uc8

People, I have installed IDS 10.00.UC8 and I am experiencing issues we the error code returned by the database engine. The engine is logging an 952 error in the message logfile, however it is sending 951 to the client. USER NAME >> dbmon Enter the login name you want to use for this connection. ------------------------------------------------ Press CTRL-W for Help -------- servtst1_shm servtst1_tcp PASSWORD >> <WRONG PASS> Enter the password associated with the user identifier. ------------------------------------------------ Press CTRL-W for Help -------- servtst1_shm 951: Incorrect password or user dbmon@inf10-dp is not known on the database from the onstat -m output : 12:32:04 Password Validation for user [dbmon] failed! 12:32:04 Check for password aging/account lock-out. 12:32:04 listener-thread: err = -952: oserr = 0: errstr = dbmon@inf10-dp: User (dbmon@inf10-dp)'s password is not correct for the database server. [informix@inf10-dp utils]$ When doing the same test on IDS 10.00.UC6 instance : USER NAME >> dbmon Enter the login name you want to use for this connection. ------------------------------------------------ Press CTRL-W for Help -------- servtst2_shm servtst2_tcp PASSWORD >> <WRONG PASS> Enter the password associated with the user identifier. ------------------------------------------------ Press CTRL-W for Help -------- servtst2_shm servtst2_tcp 952: User (dbmon@inf10-dp)'s password is not correct for the database serve By chance did anyone meet this behaviour and possibly a solution for it. Regards Kenneth

This is expected behavior which was introduced since 10.00.UX7. It prevents an attacker to distinguish between an invalid login name (and hence also an invalid password) and a valid login name and invalid password.