HDR says my secondary is not trusted
Setting up HDR between two identical Windows 2003 R2 64-bit servers running IDS 11.50.FC7, the poster could restore and set primary/secondary modes, but the primary rejected the link with a 'user informix is not trusted' error, even though normal client connections (dbaccess, ODBC, ESQL/C) worked. Suggestions included checking MSCS-specific docs (not applicable here) and creating a hosts.equiv file. The fix: adding a hosts.equiv entry on each machine naming the other host plus the informix user got HDR working; using $INFORMIXDIR/etc/hosts.equiv with sqlhosts s=6 was offered as a tighter alternative, since a bare '+' trusts everyone and hosts.equiv flags in PCI scans.
Auto-generated by DrWatson from the posts below — may be imperfect; read the full thread.
I need a little help i am trying to setup a second server for HDR. The two
servers are identical. and in the same DOMAIN. They are Windows 2003 R2 64Bit
with IDS 11.50 FC7 Entp.
I was able to set the primary with onmode -d and do the restore with a backup
of serv1 to serv2. The onmode -d secondary on the second server went fine as
well but it wont connect to the primary. On the primary i am getting that the
user informix is not trusted by the server. I can connect from the secondary
to the primary using dbaccess without issue.
What am I missing here? All help is appreciated.
John C
Hello!
Are you using MSCS ??? If so, there´s an specific section on the
Informix Information Center, check it out:
http://publib.boulder.ibm.com/infocenter/idshelp/v115/topic/com.ibm.igmsw.doc/id
s_iw_010x.htm
Best regards.
Em 21/09/2010 12:24, JOHN A. CHAUVIN escreveu:
> I need a little help i am trying to setup a second server for HDR. The two
> servers are identical. and in the same DOMAIN. They are Windows 2003 R2 64Bit
> with IDS 11.50 FC7 Entp.
> I was able to set the primary with onmode -d and do the restore with a backup
> of serv1 to serv2. The onmode -d secondary on the second server went fine as
> well but it wont connect to the primary. On the primary i am getting that the
> user informix is not trusted by the server. I can connect from the secondary
> to the primary using dbaccess without issue.
>
> What am I missing here? All help is appreciated.
>
> John C
>
>
>
*******************************************************************************
> Forum Note: Use "Reply" to post a response in the discussion forum.
>
>
--
Alexandre Marini
Tecnologia da Informação - DBA
msn: alexandre_marini@hotmail.com
SEFAZ-MS / SGI-UGSR / Sistemas IBM-Informix
Cert-Info-Mgmt_color
IBM Informix Dynamic Server Certified Professional V10 / V11
Additional information center (step-by-step) that might indicate some
troubles on your "onmode -d" commands:
http://publib.boulder.ibm.com/infocenter/idshelp/v115/topic/com.ibm.admin.doc/id
s_admin_0931.htm
Best regards.
Em 21/09/2010 12:43, Alexandre Marini escreveu:
> Hello!
> Are you using MSCS ??? If so, there´s an specific section on the
> Informix Information Center, check it out:
>
>
http://publib.boulder.ibm.com/infocenter/idshelp/v115/topic/com.ibm.igmsw.doc/id
s_iw_010x.htm
>
> Best regards.
>
> Em 21/09/2010 12:24, JOHN A. CHAUVIN escreveu:
>> I need a little help i am trying to setup a second server for HDR. The two
>> servers are identical. and in the same DOMAIN. They are Windows 2003 R2
> 64Bit
>> with IDS 11.50 FC7 Entp.
>> I was able to set the primary with onmode -d and do the restore with a
> backup
>> of serv1 to serv2. The onmode -d secondary on the second server went fine as
>> well but it wont connect to the primary. On the primary i am getting that
> the
>> user informix is not trusted by the server. I can connect from the secondary
>> to the primary using dbaccess without issue.
>>
>> What am I missing here? All help is appreciated.
>>
>> John C
>>
>>
>>
>
*******************************************************************************
>> Forum Note: Use "Reply" to post a response in the discussion forum.
>>
>>
--
Alexandre Marini
Tecnologia da Informação - DBA
msn: alexandre_marini@hotmail.com
SEFAZ-MS / SGI-UGSR / Sistemas IBM-Informix
Cert-Info-Mgmt_color
IBM Informix Dynamic Server Certified Professional V10 / V11
Thanks Alex but we are not using clustering. They are totally separate servers
located in different buildings.
John A. Chauvin
Sr. Technical Consultant
MEDIWARE INFORMATION SYSTEMS
Office: (913) 307-1029
Mobile: (913) 489-1054
Fax: (913) 307-1111
John.Chauvin@mediware.com <mailto:John.Chauvin@mediware.com>
Customer Satisfaction is a top priority for Mediware.
We invite you to share your objective views of our performance by clicking
here <http://www.healthcomputing.com/Klas/Site/Providers/Evaluate.aspx>; . Your
responses will be vital to the focus of our ongoing improvement efforts.
This message (including any attachments) constitutes a confidential and/or
privileged communication and/or contains confidential information intended for
a specific individual and purpose, and is protected by law. If you are not the
intended recipient, please notify the sender by return email and delete this
message and any attachments. Any disclosure, copying, or distribution of this
message, or the taking of any action based on it, is strictly prohibited.
Nothing in this email is intended to create a binding agreement between
Mediware Information Systems, Inc. and any third party.
From: Alexandre Marini [mailto:amarini@fazenda.ms.gov.br]
Sent: Tuesday, September 21, 2010 11:43
To: ids@iiug.org
Cc: John Chauvin
Subject: Re: HDR says my secondary is not trusted [21396]
Hello!
Are you using MSCS ??? If so, there´s an specific section on the Informix
Information Center, check it out:
http://publib.boulder.ibm.com/infocenter/idshelp/v115/topic/com.ibm.igmsw.doc/id
s_iw_010x.htm
Best regards.
Em 21/09/2010 12:24, JOHN A. CHAUVIN escreveu:
I need a little help i am trying to setup a second server for HDR. The two
servers are identical. and in the same DOMAIN. They are Windows 2003 R2 64Bit
with IDS 11.50 FC7 Entp.
I was able to set the primary with onmode -d and do the restore with a backup
of serv1 to serv2. The onmode -d secondary on the second server went fine as
well but it wont connect to the primary. On the primary i am getting that the
user informix is not trusted by the server. I can connect from the secondary
to the primary using dbaccess without issue.
What am I missing here? All help is appreciated.
John C
*******************************************************************************
Forum Note: Use "Reply" to post a response in the discussion forum.
--
Alexandre Marini
Tecnologia da Informação - DBA
msn: alexandre_marini@hotmail.com
SEFAZ-MS / SGI-UGSR / Sistemas IBM-Informix
IBM Informix Dynamic Server Certified Professional V10 / V11
Alexandre
That's the site I used to set it up. Didn't find anything helpful there since
the clients can connect and we have a server that connects with ODBC and
ESQL\\\\C no problems its strange that the two IDS servers cant.
Thanks
John A. Chauvin
> -----Original Message-----
> From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of
> Alexandre Marini
> Sent: Tuesday, September 21, 2010 11:53
> To: ids@iiug.org
> Subject: Re: HDR says my secondary is not trusted [21398]
>
> Additional information center (step-by-step) that might indicate some
> troubles on your "onmode -d" commands:
>
>
>
http://publib.boulder.ibm.com/infocenter/idshelp/v115/topic/com.ibm.admin.doc/i
> ds_admin_0931.htm
>
> Best regards.
>
> Em 21/09/2010 12:43, Alexandre Marini escreveu:
> > Hello!
> > Are you using MSCS ??? If so, there´s an specific section on the
> > Informix Information Center, check it out:
> >
> >
>
http://publib.boulder.ibm.com/infocenter/idshelp/v115/topic/com.ibm.igmsw.doc/i
> ds_iw_010x.htm
> >
> > Best regards.
> >
> > Em 21/09/2010 12:24, JOHN A. CHAUVIN escreveu:
> >> I need a little help i am trying to setup a second server for HDR. The two
> >> servers are identical. and in the same DOMAIN. They are Windows 2003 R2
> > 64Bit
> >> with IDS 11.50 FC7 Entp.
> >> I was able to set the primary with onmode -d and do the restore with a
> > backup
> >> of serv1 to serv2. The onmode -d secondary on the second server went fine
> as
> >> well but it wont connect to the primary. On the primary i am getting that
> > the
> >> user informix is not trusted by the server. I can connect from the
> secondary
> >> to the primary using dbaccess without issue.
> >>
> >> What am I missing here? All help is appreciated.
> >>
> >> John C
> >>
> >>
> >>
> >
>
*******************************************************************************
> >> Forum Note: Use "Reply" to post a response in the discussion forum.
> >>
> >>
>
> --
>
> Alexandre Marini
>
> Tecnologia da Informação - DBA
>
> msn: alexandre_marini@hotmail.com
>
> SEFAZ-MS / SGI-UGSR / Sistemas IBM-Informix
>
> Cert-Info-Mgmt_color
>
> IBM Informix Dynamic Server Certified Professional V10 / V11
>
>
>
*******************************************************************************
> Forum Note: Use "Reply" to post a response in the discussion forum.
>
Go to C:\\\\WINDOWS\\\\system32\\\\drivers\\\\etc directory in both server
Create file named "hosts.equiv" and add only one character in that file
that is "+". Hopefully you will not get that trusted thing.
Thanks
Amitava
"John Chauvin" <John.Chauvin@mediware.com>
Sent by: ids-bounces@iiug.org
09/21/2010 10:26 PM
Please respond to
ids@iiug.org
To
ids@iiug.org
cc
Subject
RE: HDR says my secondary is not trusted [21399]
Thanks Alex but we are not using clustering. They are totally separate
servers
located in different buildings.
John A. Chauvin
Sr. Technical Consultant
MEDIWARE INFORMATION SYSTEMS
Office: (913) 307-1029
Mobile: (913) 489-1054
Fax: (913) 307-1111
John.Chauvin@mediware.com <mailto:John.Chauvin@mediware.com>
Customer Satisfaction is a top priority for Mediware.
We invite you to share your objective views of our performance by clicking
here <http://www.healthcomputing.com/Klas/Site/Providers/Evaluate.aspx>; .
Your
responses will be vital to the focus of our ongoing improvement efforts.
This message (including any attachments) constitutes a confidential and/or
privileged communication and/or contains confidential information intended
for
a specific individual and purpose, and is protected by law. If you are not
the
intended recipient, please notify the sender by return email and delete
this
message and any attachments. Any disclosure, copying, or distribution of
this
message, or the taking of any action based on it, is strictly prohibited.
Nothing in this email is intended to create a binding agreement between
Mediware Information Systems, Inc. and any third party.
From: Alexandre Marini [mailto:amarini@fazenda.ms.gov.br]
Sent: Tuesday, September 21, 2010 11:43
To: ids@iiug.org
Cc: John Chauvin
Subject: Re: HDR says my secondary is not trusted [21396]
Hello!
Are you using MSCS ??? If so, there´s an specific section on the Informix
Information Center, check it out:
http://publib.boulder.ibm.com/infocenter/idshelp/v115/topic/com.ibm.igmsw.doc/id
s_iw_010x.htm
Best regards.
Em 21/09/2010 12:24, JOHN A. CHAUVIN escreveu:
I need a little help i am trying to setup a second server for HDR. The two
servers are identical. and in the same DOMAIN. They are Windows 2003 R2
64Bit
with IDS 11.50 FC7 Entp.
I was able to set the primary with onmode -d and do the restore with a
backup
of serv1 to serv2. The onmode -d secondary on the second server went fine
as
well but it wont connect to the primary. On the primary i am getting that
the
user informix is not trusted by the server. I can connect from the
secondary
to the primary using dbaccess without issue.
What am I missing here? All help is appreciated.
John C
*******************************************************************************
Forum Note: Use "Reply" to post a response in the discussion forum.
--
Alexandre Marini
Tecnologia da Informação - DBA
msn: alexandre_marini@hotmail.com
SEFAZ-MS / SGI-UGSR / Sistemas IBM-Informix
IBM Informix Dynamic Server Certified Professional V10 / V11
*******************************************************************************
Forum Note: Use "Reply" to post a response in the discussion forum.
I don't know about Windows, but in the Unix world isn't this equivalent to
telling your server to trust everyone? That seems a little dangerous. Maybe
put in the specific IP address instead?
Larry
> To: ids@iiug.org
> From: amitacha@in.ibm.com
> Subject: RE: HDR says my secondary is not trusted [21402]
> Date: Tue, 21 Sep 2010 13:21:07 -0400
>
> Go to C:\\\\WINDOWS\\\\system32\\\\drivers\\\\etc directory in both server
>
> Create file named "hosts.equiv" and add only one character in that file
> that is "+". Hopefully you will not get that trusted thing.
>
> Thanks
> Amitava
>
> "John Chauvin" <John.Chauvin@mediware.com>
> Sent by: ids-bounces@iiug.org
> 09/21/2010 10:26 PM
> Please respond to
> ids@iiug.org
>
> To
> ids@iiug.org
> cc
>
> Subject
> RE: HDR says my secondary is not trusted [21399]
>
> Thanks Alex but we are not using clustering. They are totally separate
> servers
> located in different buildings.
>
> John A. Chauvin
> Sr. Technical Consultant
> MEDIWARE INFORMATION SYSTEMS
>
> Office: (913) 307-1029
> Mobile: (913) 489-1054
> Fax: (913) 307-1111
> John.Chauvin@mediware.com <mailto:John.Chauvin@mediware.com>
>
> Customer Satisfaction is a top priority for Mediware.
> We invite you to share your objective views of our performance by clicking
>
> here <http://www.healthcomputing.com/Klas/Site/Providers/Evaluate.aspx>; .
> Your
> responses will be vital to the focus of our ongoing improvement efforts.
>
> This message (including any attachments) constitutes a confidential and/or
>
> privileged communication and/or contains confidential information intended
> for
> a specific individual and purpose, and is protected by law. If you are not
> the
> intended recipient, please notify the sender by return email and delete
> this
> message and any attachments. Any disclosure, copying, or distribution of
> this
> message, or the taking of any action based on it, is strictly prohibited.
> Nothing in this email is intended to create a binding agreement between
> Mediware Information Systems, Inc. and any third party.
>
> From: Alexandre Marini [mailto:amarini@fazenda.ms.gov.br]
> Sent: Tuesday, September 21, 2010 11:43
> To: ids@iiug.org
> Cc: John Chauvin
> Subject: Re: HDR says my secondary is not trusted [21396]
>
> Hello!
> Are you using MSCS ??? If so, there´s an specific section on the Informix
> Information Center, check it out:
>
>
>
http://publib.boulder.ibm.com/infocenter/idshelp/v115/topic/com.ibm.igmsw.doc/id
s_iw_010x.htm
>
> Best regards.
>
> Em 21/09/2010 12:24, JOHN A. CHAUVIN escreveu:
>
> I need a little help i am trying to setup a second server for HDR. The two
>
> servers are identical. and in the same DOMAIN. They are Windows 2003 R2
> 64Bit
> with IDS 11.50 FC7 Entp.
> I was able to set the primary with onmode -d and do the restore with a
> backup
> of serv1 to serv2. The onmode -d secondary on the second server went fine
> as
> well but it wont connect to the primary. On the primary i am getting that
> the
> user informix is not trusted by the server. I can connect from the
> secondary
> to the primary using dbaccess without issue.
>
> What am I missing here? All help is appreciated.
>
> John C
>
>
>
*******************************************************************************
>
> Forum Note: Use "Reply" to post a response in the discussion forum.
>
> --
>
> Alexandre Marini
>
> Tecnologia da Informação - DBA
>
> msn: alexandre_marini@hotmail.com
>
> SEFAZ-MS / SGI-UGSR / Sistemas IBM-Informix
>
> IBM Informix Dynamic Server Certified Professional V10 / V11
>
>
>
*******************************************************************************
>
> Forum Note: Use "Reply" to post a response in the discussion forum.
>
>
>
*******************************************************************************
> Forum Note: Use "Reply" to post a response in the discussion forum.
>
Better to create hosts.equiv like this:
On server 1:
server_2_name
On server 2:
server_1_name
That way the two servers should be able to interact. If you want to make the
connection a bit more secure, you can add the Informix user ID after each
server name and it should still work. Example:
server_1_name informix
--EEM
> -----Original Message-----
> From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of
> LARRY SORENSEN
> Sent: Tuesday, September 21, 2010 1:07 PM
> To: ids@iiug.org
> Subject: RE: HDR says my secondary is not trusted [21403]
>
> I don't know about Windows, but in the Unix world isn't this equivalent
> to
> telling your server to trust everyone? That seems a little dangerous.
> Maybe
> put in the specific IP address instead?
>
> Larry
>
> > To: ids@iiug.org
> > From: amitacha@in.ibm.com
> > Subject: RE: HDR says my secondary is not trusted [21402]
> > Date: Tue, 21 Sep 2010 13:21:07 -0400
> >
> > Go to C:\\\\WINDOWS\\\\system32\\\\drivers\\\\etc directory in both server
> >
> > Create file named "hosts.equiv" and add only one character in that
> file
> > that is "+". Hopefully you will not get that trusted thing.
> >
> > Thanks
> > Amitava
> >
> > "John Chauvin" <John.Chauvin@mediware.com>
> > Sent by: ids-bounces@iiug.org
> > 09/21/2010 10:26 PM
> > Please respond to
> > ids@iiug.org
> >
> > To
> > ids@iiug.org
> > cc
> >
> > Subject
> > RE: HDR says my secondary is not trusted [21399]
> >
> > Thanks Alex but we are not using clustering. They are totally
> separate
> > servers
> > located in different buildings.
> >
> > John A. Chauvin
> > Sr. Technical Consultant
> > MEDIWARE INFORMATION SYSTEMS
> >
> > Office: (913) 307-1029
> > Mobile: (913) 489-1054
> > Fax: (913) 307-1111
> > John.Chauvin@mediware.com <mailto:John.Chauvin@mediware.com>
> >
> > Customer Satisfaction is a top priority for Mediware.
> > We invite you to share your objective views of our performance by
> clicking
> >
> > here
> <http://www.healthcomputing.com/Klas/Site/Providers/Evaluate.aspx>; .
> > Your
> > responses will be vital to the focus of our ongoing improvement
> efforts.
> >
> > This message (including any attachments) constitutes a confidential
> and/or
> >
> > privileged communication and/or contains confidential information
> intended
> > for
> > a specific individual and purpose, and is protected by law. If you
> are not
> > the
> > intended recipient, please notify the sender by return email and
> delete
> > this
> > message and any attachments. Any disclosure, copying, or distribution
> of
> > this
> > message, or the taking of any action based on it, is strictly
> prohibited.
> > Nothing in this email is intended to create a binding agreement
> between
> > Mediware Information Systems, Inc. and any third party.
> >
> > From: Alexandre Marini [mailto:amarini@fazenda.ms.gov.br]
> > Sent: Tuesday, September 21, 2010 11:43
> > To: ids@iiug.org
> > Cc: John Chauvin
> > Subject: Re: HDR says my secondary is not trusted [21396]
> >
> > Hello!
> > Are you using MSCS ??? If so, there´s an specific section on the
> Informix
> > Information Center, check it out:
> >
> >
> >
> http://publib.boulder.ibm.com/infocenter/idshelp/v115/topic/com.ibm.igm
> sw.doc/ids_iw_010x.htm
> >
> > Best regards.
> >
> > Em 21/09/2010 12:24, JOHN A. CHAUVIN escreveu:
> >
> > I need a little help i am trying to setup a second server for HDR.
> The two
> >
> > servers are identical. and in the same DOMAIN. They are Windows 2003
> R2
> > 64Bit
> > with IDS 11.50 FC7 Entp.
> > I was able to set the primary with onmode -d and do the restore with
> a
> > backup
> > of serv1 to serv2. The onmode -d secondary on the second server went
> fine
> > as
> > well but it wont connect to the primary. On the primary i am getting
> that
> > the
> > user informix is not trusted by the server. I can connect from the
> > secondary
> > to the primary using dbaccess without issue.
> >
> > What am I missing here? All help is appreciated.
> >
> > John C
> >
> >
> >
> ***********************************************************************
> ********
> >
> > Forum Note: Use "Reply" to post a response in the discussion forum.
> >
> > --
> >
> > Alexandre Marini
> >
> > Tecnologia da Informação - DBA
> >
> > msn: alexandre_marini@hotmail.com
> >
> > SEFAZ-MS / SGI-UGSR / Sistemas IBM-Informix
> >
> > IBM Informix Dynamic Server Certified Professional V10 / V11
> >
> >
> >
> ***********************************************************************
> ********
> >
> > Forum Note: Use "Reply" to post a response in the discussion forum.
> >
> >
> >
> ***********************************************************************
> ********
> > Forum Note: Use "Reply" to post a response in the discussion forum.
> >
>
>
> ***********************************************************************
> ********
> Forum Note: Use "Reply" to post a response in the discussion forum.
Thanks everyone. I was trying to stay away from the hosts.equiv as it shows up
on PCI scans as a vulnerability. I did put it on both servers with the
hostname informix and its working now. Strange that the rest of the standard
windows trust works but the HDR is not.
Thanks Again.
John A. Chauvin
Sr. Technical Consultant
> -----Original Message-----
> From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of Everett
> Mills
> Sent: Tuesday, September 21, 2010 13:21
> To: ids@iiug.org
> Subject: RE: HDR says my secondary is not trusted [21405]
>
> Better to create hosts.equiv like this:
>
> On server 1:
>
> server_2_name
>
> On server 2:
>
> server_1_name
>
> That way the two servers should be able to interact. If you want to make the
> connection a bit more secure, you can add the Informix user ID after each
> server name and it should still work. Example:
>
> server_1_name informix
>
> --EEM
>
> > -----Original Message-----
> > From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of
> > LARRY SORENSEN
> > Sent: Tuesday, September 21, 2010 1:07 PM
> > To: ids@iiug.org
> > Subject: RE: HDR says my secondary is not trusted [21403]
> >
> > I don't know about Windows, but in the Unix world isn't this equivalent
> > to
> > telling your server to trust everyone? That seems a little dangerous.
> > Maybe
> > put in the specific IP address instead?
> >
> > Larry
> >
> > > To: ids@iiug.org
> > > From: amitacha@in.ibm.com
> > > Subject: RE: HDR says my secondary is not trusted [21402]
> > > Date: Tue, 21 Sep 2010 13:21:07 -0400
> > >
> > > Go to C:\\\\WINDOWS\\\\system32\\\\drivers\\\\etc directory in both server
> > >
> > > Create file named "hosts.equiv" and add only one character in that
> > file
> > > that is "+". Hopefully you will not get that trusted thing.
> > >
> > > Thanks
> > > Amitava
> > >
> > > "John Chauvin" <John.Chauvin@mediware.com>
> > > Sent by: ids-bounces@iiug.org
> > > 09/21/2010 10:26 PM
> > > Please respond to
> > > ids@iiug.org
> > >
> > > To
> > > ids@iiug.org
> > > cc
> > >
> > > Subject
> > > RE: HDR says my secondary is not trusted [21399]
> > >
> > > Thanks Alex but we are not using clustering. They are totally
> > separate
> > > servers
> > > located in different buildings.
> > >
> > > John A. Chauvin
> > > Sr. Technical Consultant
> > > From: Alexandre Marini [mailto:amarini@fazenda.ms.gov.br]
> > > Sent: Tuesday, September 21, 2010 11:43
> > > To: ids@iiug.org
> > > Cc: John Chauvin
> > > Subject: Re: HDR says my secondary is not trusted [21396]
> > >
> > > Hello!
> > > Are you using MSCS ??? If so, there´s an specific section on the
> > Informix
> > > Information Center, check it out:
> > >
> > >
> > >
> > http://publib.boulder.ibm.com/infocenter/idshelp/v115/topic/com.ibm.igm
> > sw.doc/ids_iw_010x.htm
> > >
> > > Best regards.
> > >
> > > Em 21/09/2010 12:24, JOHN A. CHAUVIN escreveu:
> > >
> > > I need a little help i am trying to setup a second server for HDR.
> > The two
> > >
> > > servers are identical. and in the same DOMAIN. They are Windows 2003
> > R2
> > > 64Bit
> > > with IDS 11.50 FC7 Entp.
> > > I was able to set the primary with onmode -d and do the restore with
> > a
> > > backup
> > > of serv1 to serv2. The onmode -d secondary on the second server went
> > fine
> > > as
> > > well but it wont connect to the primary. On the primary i am getting
> > that
> > > the
> > > user informix is not trusted by the server. I can connect from the
> > > secondary
> > > to the primary using dbaccess without issue.
> > >
> > > What am I missing here? All help is appreciated.
> > >
> > > John C
> > >
> > >
> > >
> > ***********************************************************************
> > ********
> > >
> > > Forum Note: Use "Reply" to post a response in the discussion forum.
> > >
> > > --
> > >
> > > Alexandre Marini
> > >
> > > Tecnologia da Informação - DBA
> > >
> > > msn: alexandre_marini@hotmail.com
> > >
> > > SEFAZ-MS / SGI-UGSR / Sistemas IBM-Informix
> > >
> > > IBM Informix Dynamic Server Certified Professional V10 / V11
> > >
> > >
> > >
> > ***********************************************************************
> > ********
> > >
> > > Forum Note: Use "Reply" to post a response in the discussion forum.
> > >
> > >
> > >
> > ***********************************************************************
> > ********
> > > Forum Note: Use "Reply" to post a response in the discussion forum.
> > >
> >
> >
> > ***********************************************************************
> > ********
> > Forum Note: Use "Reply" to post a response in the discussion forum.
>
>
>
*******************************************************************************
> Forum Note: Use "Reply" to post a response in the discussion forum.
>
Instead of system level hosts.equiv, you can use
$INFORMIXDIR/etc/hosts.equiv along with connection security option (s=3D=
6) in
sqlhosts.
More details --
http://publib.boulder.ibm.com/infocenter/idshelp/v115/topic/com.ibm.sec=
.doc/ids_am_032.htm
Nilesh
ids-bounces@iiug.org wrote on 09/21/2010 02:28:59 PM:
> From:
>
> "John Chauvin" <John.Chauvin@mediware.com>
>
> To:
>
> ids@iiug.org
>
> Date:
>
> 09/21/2010 02:29 PM
>
> Subject:
>
> RE: HDR says my secondary is not trusted [21408]
>
> Sent by:
>
> ids-bounces@iiug.org
>
> Thanks everyone. I was trying to stay away from the hosts.equiv as
> it shows up
> on PCI scans as a vulnerability. I did put it on both servers with th=
e
> hostname informix and its working now. Strange that the rest of the
standard
> windows trust works but the HDR is not.
>
> Thanks Again.
>
> John A. Chauvin
> Sr. Technical Consultant
> > -----Original Message-----
> > From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf =
Of
> Everett
> > Mills
> > Sent: Tuesday, September 21, 2010 13:21
> > To: ids@iiug.org
> > Subject: RE: HDR says my secondary is not trusted [21405]
> >
> > Better to create hosts.equiv like this:
> >
> > On server 1:
> >
> > server_2_name
> >
> > On server 2:
> >
> > server_1_name
> >
> > That way the two servers should be able to interact. If you want
> to make the
> > connection a bit more secure, you can add the Informix user ID afte=
r
each
> > server name and it should still work. Example:
> >
> > server_1_name informix
> >
> > --EEM
> >
> > > -----Original Message-----
> > > From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behal=
f Of
> > > LARRY SORENSEN
> > > Sent: Tuesday, September 21, 2010 1:07 PM
> > > To: ids@iiug.org
> > > Subject: RE: HDR says my secondary is not trusted [21403]
> > >
> > > I don't know about Windows, but in the Unix world isn't this
equivalent
> > > to
> > > telling your server to trust everyone? That seems a little danger=
ous.
> > > Maybe
> > > put in the specific IP address instead?
> > >
> > > Larry
> > >
> > > > To: ids@iiug.org
> > > > From: amitacha@in.ibm.com
> > > > Subject: RE: HDR says my secondary is not trusted [21402]
> > > > Date: Tue, 21 Sep 2010 13:21:07 -0400
> > > >
> > > > Go to C:\\\\WINDOWS\\\\system32\\\\drivers\\\\etc directory in both server
> > > >
> > > > Create file named "hosts.equiv" and add only one character in t=
hat
> > > file
> > > > that is "+". Hopefully you will not get that trusted thing.
> > > >
> > > > Thanks
> > > > Amitava
> > > >
> > > > "John Chauvin" <John.Chauvin@mediware.com>
> > > > Sent by: ids-bounces@iiug.org
> > > > 09/21/2010 10:26 PM
> > > > Please respond to
> > > > ids@iiug.org
> > > >
> > > > To
> > > > ids@iiug.org
> > > > cc
> > > >
> > > > Subject
> > > > RE: HDR says my secondary is not trusted [21399]
> > > >
> > > > Thanks Alex but we are not using clustering. They are totally
> > > separate
> > > > servers
> > > > located in different buildings.
> > > >
> > > > John A. Chauvin
> > > > Sr. Technical Consultant
>
> > > > From: Alexandre Marini [mailto:amarini@fazenda.ms.gov.br]
> > > > Sent: Tuesday, September 21, 2010 11:43
> > > > To: ids@iiug.org
> > > > Cc: John Chauvin
> > > > Subject: Re: HDR says my secondary is not trusted [21396]
> > > >
> > > > Hello!
> > > > Are you using MSCS ??? If so, there=B4s an specific section on =
the
> > > Informix
> > > > Information Center, check it out:
> > > >
> > > >
> > > >
> > >
http://publib.boulder.ibm.com/infocenter/idshelp/v115/topic/com.ibm.igm=
> > > sw.doc/ids_iw_010x.htm
> > > >
> > > > Best regards.
> > > >
> > > > Em 21/09/2010 12:24, JOHN A. CHAUVIN escreveu:
> > > >
> > > > I need a little help i am trying to setup a second server for H=
DR.
> > > The two
> > > >
> > > > servers are identical. and in the same DOMAIN. They are Windows=
2003
> > > R2
> > > > 64Bit
> > > > with IDS 11.50 FC7 Entp.
> > > > I was able to set the primary with onmode -d and do the restore=
with
> > > a
> > > > backup
> > > > of serv1 to serv2. The onmode -d secondary on the second server=
went
> > > fine
> > > > as
> > > > well but it wont connect to the primary. On the primary i am
getting
> > > that
> > > > the
> > > > user informix is not trusted by the server. I can connect from =
the
> > > > secondary
> > > > to the primary using dbaccess without issue.
> > > >
> > > > What am I missing here? All help is appreciated.
> > > >
> > > > John C
> > > >
> > > >
> > > >
> > >
***********************************************************************=
> > > ********
> > > >
> > > > Forum Note: Use "Reply" to post a response in the discussion fo=
rum.
> > > >
> > > > --
> > > >
> > > > Alexandre Marini
> > > >
> > > > Tecnologia da Informa=E7=E3o - DBA
> > > >
> > > > msn: alexandre_marini@hotmail.com
> > > >
> > > > SEFAZ-MS / SGI-UGSR / Sistemas IBM-Informix
> > > >
> > > > IBM Informix Dynamic Server Certified Professional V10 / V11
> > > >
> > > >
> > > >
> > >
***********************************************************************=
> > > ********
> > > >
> > > > Forum Note: Use "Reply" to post a response in the discussion fo=
rum.
> > > >
> > > >
> > > >
> > >
***********************************************************************=
> > > ********
> > > > Forum Note: Use "Reply" to post a response in the discussion fo=
rum.
> > > >
> > >
> > >
> > >
***********************************************************************=
> > > ********
> > > Forum Note: Use "Reply" to post a response in the discussion foru=
m.
> >
> >
> >
>
***********************************************************************=
********
> > Forum Note: Use "Reply" to post a response in the discussion forum.=
> >
>
>
>
***********************************************************************=
********
> Forum Note: Use "Reply" to post a response in the discussion forum.=
>=
That sounds a little safer. The link does not appear to exist on the
IBM site.
I pasted the full link in and it says "The topic that you have requested
is not available. The link may be wrong, or you may not have the
corresponding product feature installed. This online help only includes
documentation for features that are installed."
John A. Chauvin
Sr. Technical Consultant
> -----Original Message-----
> From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of
Nilesh
> Ozarkar
> Sent: Tuesday, September 21, 2010 16:08
> To: ids@iiug.org
> Subject: RE: HDR says my secondary is not trusted [21412]
>
> Instead of system level hosts.equiv, you can use
> $INFORMIXDIR/etc/hosts.equiv along with connection security option
(s=3D=
> 6) in
> sqlhosts.
> More details --
>
http://publib.boulder.ibm.com/infocenter/idshelp/v115/topic/com.ibm.sec=
> ..doc/ids_am_032.htm
>
> Nilesh
>
> ids-bounces@iiug.org wrote on 09/21/2010 02:28:59 PM:
>
> > From:
> >
> > "John Chauvin" <John.Chauvin@mediware.com>
> >
> > To:
> >
> > ids@iiug.org
> >
> > Date:
> >
> > 09/21/2010 02:29 PM
> >
> > Subject:
> >
> > RE: HDR says my secondary is not trusted [21408]
> >
> > Sent by:
> >
> > ids-bounces@iiug.org
> >
> > Thanks everyone. I was trying to stay away from the hosts.equiv as
> > it shows up
> > on PCI scans as a vulnerability. I did put it on both servers with
th=
> e
> > hostname informix and its working now. Strange that the rest of the
> standard
> > windows trust works but the HDR is not.
> >
> > Thanks Again.
> >
> > John A. Chauvin
> > Sr. Technical Consultant
> > > -----Original Message-----
> > > From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf
=
> Of
> > Everett
> > > Mills
> > > Sent: Tuesday, September 21, 2010 13:21
> > > To: ids@iiug.org
> > > Subject: RE: HDR says my secondary is not trusted [21405]
> > >
> > > Better to create hosts.equiv like this:
> > >
> > > On server 1:
> > >
> > > server_2_name
> > >
> > > On server 2:
> > >
> > > server_1_name
> > >
> > > That way the two servers should be able to interact. If you want
> > to make the
> > > connection a bit more secure, you can add the Informix user ID
afte=
> r
> each
> > > server name and it should still work. Example:
> > >
> > > server_1_name informix
> > >
> > > --EEM
> > >
> > > > -----Original Message-----
> > > > From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On
Behal=
> f Of
>
> > > > LARRY SORENSEN
> > > > Sent: Tuesday, September 21, 2010 1:07 PM
> > > > To: ids@iiug.org
> > > > Subject: RE: HDR says my secondary is not trusted [21403]
> > > >
> > > > I don't know about Windows, but in the Unix world isn't this
> equivalent
> > > > to
> > > > telling your server to trust everyone? That seems a little
danger=
> ous.
>
> > > > Maybe
> > > > put in the specific IP address instead?
> > > >
> > > > Larry
> > > >
> > > > > To: ids@iiug.org
> > > > > From: amitacha@in.ibm.com
> > > > > Subject: RE: HDR says my secondary is not trusted [21402]
> > > > > Date: Tue, 21 Sep 2010 13:21:07 -0400
> > > > >
> > > > > Go to C:\\\\WINDOWS\\\\system32\\\\drivers\\\\etc directory in both server
> > > > >
> > > > > Create file named "hosts.equiv" and add only one character in
t=
> hat
> > > > file
> > > > > that is "+". Hopefully you will not get that trusted thing.
> > > > >
> > > > > Thanks
> > > > > Amitava
> > > > >
> > > > > "John Chauvin" <John.Chauvin@mediware.com>
> > > > > Sent by: ids-bounces@iiug.org
> > > > > 09/21/2010 10:26 PM
> > > > > Please respond to
> > > > > ids@iiug.org
> > > > >
> > > > > To
> > > > > ids@iiug.org
> > > > > cc
> > > > >
> > > > > Subject
> > > > > RE: HDR says my secondary is not trusted [21399]
> > > > >
> > > > > Thanks Alex but we are not using clustering. They are totally
> > > > separate
> > > > > servers
> > > > > located in different buildings.
> > > > >
> > > > > John A. Chauvin
> > > > > Sr. Technical Consultant
> >
> > > > > From: Alexandre Marini [mailto:amarini@fazenda.ms.gov.br]
> > > > > Sent: Tuesday, September 21, 2010 11:43
> > > > > To: ids@iiug.org
> > > > > Cc: John Chauvin
> > > > > Subject: Re: HDR says my secondary is not trusted [21396]
> > > > >
> > > > > Hello!
> > > > > Are you using MSCS ??? If so, there=B4s an specific section on
=
> the
> > > > Informix
> > > > > Information Center, check it out:
> > > > >
> > > > >
> > > > >
> > > >
>
http://publib.boulder.ibm.com/infocenter/idshelp/v115/topic/com.ibm.igm=
>
> > > > sw.doc/ids_iw_010x.htm
> > > > >
> > > > > Best regards.
> > > > >
> > > > > Em 21/09/2010 12:24, JOHN A. CHAUVIN escreveu:
> > > > >
> > > > > I need a little help i am trying to setup a second server for
H=
> DR.
> > > > The two
> > > > >
> > > > > servers are identical. and in the same DOMAIN. They are
Windows=
>
> 2003
> > > > R2
> > > > > 64Bit
> > > > > with IDS 11.50 FC7 Entp.
> > > > > I was able to set the primary with onmode -d and do the
restore=
>
> with
> > > > a
> > > > > backup
> > > > > of serv1 to serv2. The onmode -d secondary on the second
server=
>
> went
> > > > fine
> > > > > as
> > > > > well but it wont connect to the primary. On the primary i am
> getting
> > > > that
> > > > > the
> > > > > user informix is not trusted by the server. I can connect from
=
> the
> > > > > secondary
> > > > > to the primary using dbaccess without issue.
> > > > >
> > > > > What am I missing here? All help is appreciated.
> > > > >
> > > > > John C
> > > > >
> > > > >
> > > > >
> > > >
>
***********************************************************************=
>
> > > > ********
> > > > >
> > > > > Forum Note: Use "Reply" to post a response in the discussion
fo=
> rum.
>
> > > > >
> > > > > --
> > > > >
> > > > > Alexandre Marini
> > > > >
> > > > > Tecnologia da Informa=E7=E3o - DBA
> > > > >
> > > > > msn: alexandre_marini@hotmail.com
> > > > >
> > > > > SEFAZ-MS / SGI-UGSR / Sistemas IBM-Informix
> > > > >
> > > > > IBM Informix Dynamic Server Certified Professional V10 / V11
> > > > >
> > > > >
> > > > >
> > > >
>
***********************************************************************=
>
> > > > ********
> > > > >
> > > > > Forum Note: Use "Reply" to post a response in the discussion
fo=
> rum.
>
> > > > >
> > > > >
> > > > >
> > > >
>
***********************************************************************=
>
> > > > ********
> > > > > Forum Note: Use "Reply" to post a response in the discussion
fo=
> rum.
>
> > > > >
> > > >
> > > >
> > > >
>
************************************
I found what you describe in the IBM Informix Security Guide.
I will implement this and see what happens
Thanks for the help.
John A. Chauvin
Sr. Technical Consultant
> -----Original Message-----
> From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of
Nilesh
> Ozarkar
> Sent: Tuesday, September 21, 2010 16:08
> To: ids@iiug.org
> Subject: RE: HDR says my secondary is not trusted [21412]
>
> Instead of system level hosts.equiv, you can use
> $INFORMIXDIR/etc/hosts.equiv along with connection security option
(s=3D=
> 6) in
> sqlhosts.
> More details --
>
http://publib.boulder.ibm.com/infocenter/idshelp/v115/topic/com.ibm.sec=
> ..doc/ids_am_032.htm
>
> Nilesh
>
> ids-bounces@iiug.org wrote on 09/21/2010 02:28:59 PM:
>
> > From:
> >
> > "John Chauvin" <John.Chauvin@mediware.com>
> >
> > To:
> >
> > ids@iiug.org
> >
> > Date:
> >
> > 09/21/2010 02:29 PM
> >
> > Subject:
> >
> > RE: HDR says my secondary is not trusted [21408]
> >
> > Sent by:
> >
> > ids-bounces@iiug.org
> >
> > Thanks everyone. I was trying to stay away from the hosts.equiv as
> > it shows up
> > on PCI scans as a vulnerability. I did put it on both servers with
th=
> e
> > hostname informix and its working now. Strange that the rest of the
> standard
> > windows trust works but the HDR is not.
> >
> > Thanks Again.
> >
> > John A. Chauvin
> > Sr. Technical Consultant
> > > -----Original Message-----
> > > From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf
=
> Of
> > Everett
> > > Mills
> > > Sent: Tuesday, September 21, 2010 13:21
> > > To: ids@iiug.org
> > > Subject: RE: HDR says my secondary is not trusted [21405]
> > >
> > > Better to create hosts.equiv like this:
> > >
> > > On server 1:
> > >
> > > server_2_name
> > >
> > > On server 2:
> > >
> > > server_1_name
> > >
> > > That way the two servers should be able to interact. If you want
> > to make the
> > > connection a bit more secure, you can add the Informix user ID
afte=
> r
> each
> > > server name and it should still work. Example:
> > >
> > > server_1_name informix
> > >
> > > --EEM
> > >
> > > > -----Original Message-----
> > > > From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On
Behal=
> f Of
>
> > > > LARRY SORENSEN
> > > > Sent: Tuesday, September 21, 2010 1:07 PM
> > > > To: ids@iiug.org
> > > > Subject: RE: HDR says my secondary is not trusted [21403]
> > > >
> > > > I don't know about Windows, but in the Unix world isn't this
> equivalent
> > > > to
> > > > telling your server to trust everyone? That seems a little
danger=
> ous.
>
> > > > Maybe
> > > > put in the specific IP address instead?
> > > >
> > > > Larry
> > > >
> > > > > To: ids@iiug.org
> > > > > From: amitacha@in.ibm.com
> > > > > Subject: RE: HDR says my secondary is not trusted [21402]
> > > > > Date: Tue, 21 Sep 2010 13:21:07 -0400
> > > > >
> > > > > Go to C:\\\\WINDOWS\\\\system32\\\\drivers\\\\etc directory in both server
> > > > >
> > > > > Create file named "hosts.equiv" and add only one character in
t=
> hat
> > > > file
> > > > > that is "+". Hopefully you will not get that trusted thing.
> > > > >
> > > > > Thanks
> > > > > Amitava
> > > > >
> > > > > "John Chauvin" <John.Chauvin@mediware.com>
> > > > > Sent by: ids-bounces@iiug.org
> > > > > 09/21/2010 10:26 PM
> > > > > Please respond to
> > > > > ids@iiug.org
> > > > >
> > > > > To
> > > > > ids@iiug.org
> > > > > cc
> > > > >
> > > > > Subject
> > > > > RE: HDR says my secondary is not trusted [21399]
> > > > >
> > > > > Thanks Alex but we are not using clustering. They are totally
> > > > separate
> > > > > servers
> > > > > located in different buildings.
> > > > >
> > > > > John A. Chauvin
> > > > > Sr. Technical Consultant
> >
> > > > > From: Alexandre Marini [mailto:amarini@fazenda.ms.gov.br]
> > > > > Sent: Tuesday, September 21, 2010 11:43
> > > > > To: ids@iiug.org
> > > > > Cc: John Chauvin
> > > > > Subject: Re: HDR says my secondary is not trusted [21396]
> > > > >
> > > > > Hello!
> > > > > Are you using MSCS ??? If so, there=B4s an specific section on
=
> the
> > > > Informix
> > > > > Information Center, check it out:
> > > > >
> > > > >
> > > > >
> > > >
>
http://publib.boulder.ibm.com/infocenter/idshelp/v115/topic/com.ibm.igm=
>
> > > > sw.doc/ids_iw_010x.htm
> > > > >
> > > > > Best regards.
> > > > >
> > > > > Em 21/09/2010 12:24, JOHN A. CHAUVIN escreveu:
> > > > >
> > > > > I need a little help i am trying to setup a second server for
H=
> DR.
> > > > The two
> > > > >
> > > > > servers are identical. and in the same DOMAIN. They are
Windows=
>
> 2003
> > > > R2
> > > > > 64Bit
> > > > > with IDS 11.50 FC7 Entp.
> > > > > I was able to set the primary with onmode -d and do the
restore=
>
> with
> > > > a
> > > > > backup
> > > > > of serv1 to serv2. The onmode -d secondary on the second
server=
>
> went
> > > > fine
> > > > > as
> > > > > well but it wont connect to the primary. On the primary i am
> getting
> > > > that
> > > > > the
> > > > > user informix is not trusted by the server. I can connect from
=
> the
> > > > > secondary
> > > > > to the primary using dbaccess without issue.
> > > > >
> > > > > What am I missing here? All help is appreciated.
> > > > >
> > > > > John C
> > > > >
> > > > >
> > > > >
> > > >
>
***********************************************************************=
>
> > > > ********
> > > > >
> > > > > Forum Note: Use "Reply" to post a response in the discussion
fo=
> rum.
>
> > > > >
> > > > > --
> > > > >
> > > > > Alexandre Marini
> > > > >
> > > > > Tecnologia da Informa=E7=E3o - DBA
> > > > >
> > > > > msn: alexandre_marini@hotmail.com
> > > > >
> > > > > SEFAZ-MS / SGI-UGSR / Sistemas IBM-Informix
> > > > >
> > > > > IBM Informix Dynamic Server Certified Professional V10 / V11
> > > > >
> > > > >
> > > > >
> > > >
>
***********************************************************************=
>
> > > > ********
> > > > >
> > > > > Forum Note: Use "Reply" to post a response in the discussion
fo=
> rum.
>
> > > > >
> > > > >
> > > > >
> > > >
>
***********************************************************************=
>
> > > > ********
> > > > > Forum Note: Use "Reply" to post a response in the discussion
fo=
> rum.
>
> > > > >
> > > >
> > > >
> > > >
>
***********************************************************************=
>
> > > > ********
> > > > Forum Note: Use "Reply" to post a response in the discussion
foru=
> m.
> > >
> > >
> > >
> >
>
*****