err = -956 not trusted by the server.
Posted in 2022
Cherry got intermittent error -956 (client host not trusted) between Informix 12.1 instances. Paul Watson advised adding the IP, host name and FQDN exactly as onstat -m shows to hosts.equiv, which Cherry accepted. Paul said with REMOTE_SERVER_CFG the file is re-read without a bounce; Art Kagel suggested cycling NS_CACHE via onmode -wm. Paul confirmed his test server re-cached within a minute.
Auto-generated by Claude from the posts below — may be imperfect; read the full thread.
Topics: Server Administration, Networking & sqlhosts Configuration
Hello, We are receiving err -956 error when we connect from one informix instance to another. It is working for long time and suddenly this error started showing up. No changes are made in any files(/etc/hosts.equiv or sqlhosts) by Unix or DBA teams. We fixed the issue once by bouncing one DB server for first time. it worked for few days and started showing up after few days. Second time, i fixed the issue by setting up REMOTE_SERVER_CFG file dynamically without bouncing for an informix instance. Now it looks stable from a week. However i wonder what is causing the issue? whatelse should be checked from Unix or DB side. Instances are running on VMs. Any changes in underlying hardware or Vcenter would cause this issue? Informix V12.1 11:21:11 listener-thread: err = -956: oserr = 0: errstr = informix@xx.xx.xx.xx [xxxxx]: Client host or user informix@xx.xx.xx.xx [xxxxx] is not trusted by the server. ------------------------------ Cherry ------------------------------ #Informix
Is the IP and host name as per onstat -m in the hosts.equiv file from
Cheers
Paul
Paul Watson
Oninit LLC
+1-913-387-7529
www.oninit.com
Oninit® is a registered trademark of Oninit LLC
Hello Paul,
only host name is mentioned in hosts.equiv file and however it is matching with output of onstat -m.
------------------------------
Cherry
------------------------------
I normally just add exactly what the onstat -m says, typically the ip, the host name and the FQDN
Cheers
Paul
Paul Watson
Oninit LLC
+1-913-387-7529
www.oninit.com
Oninit® is a registered trademark of Oninit LLC
Ok.. i found it is a good suggestion to add the ip, the host name and the FQDN to hosts.equiv file. ------------------------------ Cherry ------------------------------
Hello, /etc/hosts.equiv is getting cached during Informix startup. when we make changes to this file on server, is there any way to load this file into Informix without bouncing the instance? ------------------------------ Cherry ------------------------------
If you have REMOTE_SERVER_CFG set the file is in $INFORMIXDIR/etc and will be updated. Even the OS one shouldn't need an engine bounce. A re-caching can be seen in the online log Cheers Paul Paul Watson Oninit LLC +1-913-387-7529 www.oninit.com Oninit® is a registered trademark of Oninit LLC
You can try setting NS_CACHE to all zeros with onmode -wm, wait a few seconds then set it back to it's normal setting:
onmode -wm NS_CACHE='
host=0,service=0,user=0,group=0,sqlhosts=0'sleep 5
onmode -wm NS_CACHE='host=900,service=900,user=900,group=900,sqlhosts=900'I'm not sure whether or not NS_CACHE also affects the caching of the hosts.equiv mapping, but that would be my first try. Can any HCL folk jump in on this? Vlad? JC?
Art
------------------------------
Art S. Kagel, President and Principal Consultant
ASK Database Management Corp.
www.askdbmgt.com
------------------------------
Updated within a minute on one of my test servers Cheers Paul Paul Watson Oninit LLC +1-913-387-7529 www.oninit.com Oninit® is a registered trademark of Oninit LLC
tootles[informix] date
Tue Feb 22 08:03:07 AM EST 2022
tootles[informix] vi $INFORMIXDIR/etc/hosts.equiv
tootles[informix] onstat -m
HCL OneDB Server Version 2.0.1.0 -- On-Line -- Up 17:41:27 -- 62005120 Kbytes
2022-02-22 08:03:13
Message Log File: /home/informix/live/tmp/online.log
06:36:23 ??Maximum server connections 2
06:36:23 ??Checkpoint Statistics - Avg. Txn Block Time 0.000, # Txns blocked 0, Plog used 73, Llog used 56
07:21:23 ??Checkpoint Completed: ??duration was 0 seconds.07:21:23 ??Tue Feb 22 - loguniq 7, logpos 0x14121018, timestamp: 0xd726734 Interval: 3027
07:21:23 ??Maximum server connections 2
07:21:23 ??Checkpoint Statistics - Avg. Txn Block Time 0.000, # Txns blocked 0, Plog used 19, Llog used 9
07:36:23 ??Checkpoint Completed: ??duration was 0 seconds.07:36:23 ??Tue Feb 22 - loguniq 7, logpos 0x14153018, timestamp: 0xd726b8b Interval: 3028
07:36:23 ??Maximum server connections 2
07:36:23 ??Checkpoint Statistics - Avg. Txn Block Time 0.000, # Txns blocked 0, Plog used 67, Llog used 50
08:03:07 ??Trusted host cache successfully built:/home/informix/live/etc/hosts.equiv.
08:03:07 ??Trusted host cache successfully built:/home/informix/live/etc/hosts.equiv.-- Paul Watson Oninit LLC +1-913-387-7529 Oninit is a Registered Trademark of Oninit LLC