Re: -952 Authentication Error on Solaris 10
Posted in 2009
Topics: Installation, Setup & Upgrades, Server Administration, Security, Permissions & Auditing, Networking & sqlhosts Configuration, Platform-Specific Issues, Versions, Editions & End-of-Life
Hello Nate,
what happens if you do the same using dbaccess
eq ssh to the machine
start dbaccess choose the connect option choose your network
informixserver
supply user and passwd
could be an os issue??? sorry just guessing
Superboer.
Hello Ian,
because i have had dozens of problems like the above where someone got
rid of root or suid.
why don't you test this on your testbox, you will see.
it could very well be -951 what is returned.....
On 27 mrt, 15:22, Ian Michael Gumby <im_gu...@hotmail.com> wrote:
> Superboer,
>
> If that were true, then how could he log in using same password and id when physically on the box?
> (Assuming that he is using the same user id and password.)
>
> With respect to the install, if he did the same process in production as in development, then his 'sticky bits' would have been set.
>
> Of course one question comes to mind. If he's on the same machine, is he connecting via TCP/IP sockets or shared memory?
> If he's not using TCP/IP for the connection, then I wonder if there's a firewall or something blocking the connection and he's timing out?
>
>
>
> > From: superbo...@t-online.de
> > Subject: Re: -952 Authentication Error on Solaris 10
> > Date: Fri, 27 Mar 2009 03:44:03 -0700
> > To: informix-l...@iiug.org
>
> > Hello Nate,
>
> > maybe oninit does not have suid bits set or is not owned by root??
> > eq
>
> > -rwsr-sr-- 1 root informix
>
> > Superboer.
>
> > On 27 mrt, 00:53, wcottishpoet <drybur...@yahoo.com> wrote:
> > > No idea what the problem is but IDS 9.40 will not be supported by IBM
> > > after next month
>
> > > Do you have plans to upgrade to IDS 11?
>
> > _______________________________________________
> > Informix-list mailing list
> > Informix-l...@iiug.org
> >http://www.iiug.org/mailman/listinfo/informix-list
>
> _________________________________________________________________
> Express your personality in color! Preview and select themes for Hotmail®.http://www.windowslive-hotmail.com/LearnMore/personalize.aspx?ocid=TX...
Superboer,
I was thinking along the lines of a firewall issue.
Assuming that the production box and the development box are similar
machines in terms of OS and set up, if one box works and one box
fails, then it could be a configuration issue. That could mean
firewall, IDS setup, or user admin setup. If they're using some form
of single sign-on that's on both machines (yp?), then it makes a tcp/
ip filter issue more likely. However, the weird thing is that in
order to get a -952 issue, its a server generated issue. So maybe its
a configuration issue in ODBC? Like the password isn't coming across
ok or that the user doesn't have connect privileges with the specified
db? (And that could be it.)
So what's different between the two boxes?
-G
On Mar 30, 12:24 pm, superbo...@t-online.de wrote:
> Hello Nate,
>
> what happens if you do the same using dbaccess
>
> eq ssh to the machine
> start dbaccess choose the connect option choose your network
> informixserver
> supply user and passwd
>
> could be an os issue??? sorry just guessing
>
> Superboer.
>
> Hello Ian,
>
> because i have had dozens of problems like the above where someone got
> rid of root or suid.
>
> why don't you test this on your testbox, you will see.
> it could very well be -951 what is returned.....
>
> On 27 mrt, 15:22, Ian Michael Gumby <im_gu...@hotmail.com> wrote:
>
> > Superboer,
>
> > If that were true, then how could he log in using same password and id when physically on the box?
> > (Assuming that he is using the same user id and password.)
>
> > With respect to the install, if he did the same process in production as in development, then his 'sticky bits' would have been set.
>
> > Of course one question comes to mind. If he's on the same machine, is he connecting via TCP/IP sockets or shared memory?
> > If he's not using TCP/IP for the connection, then I wonder if there's a firewall or something blocking the connection and he's timing out?
>
> > > From: superbo...@t-online.de
> > > Subject: Re: -952 Authentication Error on Solaris 10
> > > Date: Fri, 27 Mar 2009 03:44:03 -0700
> > > To: informix-l...@iiug.org
>
> > > Hello Nate,
>
> > > maybe oninit does not have suid bits set or is not owned by root??
> > > eq
>
> > > -rwsr-sr-- 1 root informix
>
> > > Superboer.
>
> > > On 27 mrt, 00:53, wcottishpoet <drybur...@yahoo.com> wrote:
> > > > No idea what the problem is but IDS 9.40 will not be supported by IBM
> > > > after next month
>
> > > > Do you have plans to upgrade to IDS 11?
>
> > > _______________________________________________
> > > Informix-list mailing list
> > > Informix-l...@iiug.org
> > >http://www.iiug.org/mailman/listinfo/informix-list
>
> > _________________________________________________________________
> > Express your personality in color! Preview and select themes for Hotmail®.http://www.windowslive-hotmail.com/LearnMore/personalize.aspx?ocid=TX...
Hello Ian,
well may be testing dbaccess on the local box using user and passwd to
connect may
rule that out???
wait and see
Superboer.
On 30 mrt, 19:29, Ian Michael Gumby <im_gu...@hotmail.com> wrote:
> Superboer,
>
> I was thinking along the lines of a firewall issue.
>
> Assuming that the production box and the development box are similar
> machines in terms of OS and set up, if one box works and one box
> fails, then it could be a configuration issue. That could mean
> firewall, IDS setup, or user admin setup. If they're using some form
> of single sign-on that's on both machines (yp?), then it makes a tcp/
> ip filter issue more likely. However, the weird thing is that in
> order to get a -952 issue, its a server generated issue. So maybe its
> a configuration issue in ODBC? Like the password isn't coming across
> ok or that the user doesn't have connect privileges with the specified
> db? (And that could be it.)
>
> So what's different between the two boxes?
>
> -G
>
> On Mar 30, 12:24 pm, superbo...@t-online.de wrote:
>
> > Hello Nate,
>
> > what happens if you do the same using dbaccess
>
> > eq ssh to the machine
> > start dbaccess choose the connect option choose your network
> > informixserver
> > supply user and passwd
>
> > could be an os issue??? sorry just guessing
>
> > Superboer.
>
> > Hello Ian,
>
> > because i have had dozens of problems like the above where someone got
> > rid of root or suid.
>
> > why don't you test this on your testbox, you will see.
> > it could very well be -951 what is returned.....
>
> > On 27 mrt, 15:22, Ian Michael Gumby <im_gu...@hotmail.com> wrote:
>
> > > Superboer,
>
> > > If that were true, then how could he log in using same password and id when physically on the box?
> > > (Assuming that he is using the same user id and password.)
>
> > > With respect to the install, if he did the same process in production as in development, then his 'sticky bits' would have been set.
>
> > > Of course one question comes to mind. If he's on the same machine, is he connecting via TCP/IP sockets or shared memory?
> > > If he's not using TCP/IP for the connection, then I wonder if there's a firewall or something blocking the connection and he's timing out?
>
> > > > From: superbo...@t-online.de
> > > > Subject: Re: -952 Authentication Error on Solaris 10
> > > > Date: Fri, 27 Mar 2009 03:44:03 -0700
> > > > To: informix-l...@iiug.org
>
> > > > Hello Nate,
>
> > > > maybe oninit does not have suid bits set or is not owned by root??
> > > > eq
>
> > > > -rwsr-sr-- 1 root informix
>
> > > > Superboer.
>
> > > > On 27 mrt, 00:53, wcottishpoet <drybur...@yahoo.com> wrote:
> > > > > No idea what the problem is but IDS 9.40 will not be supported by IBM
> > > > > after next month
>
> > > > > Do you have plans to upgrade to IDS 11?
>
> > > > _______________________________________________
> > > > Informix-list mailing list
> > > > Informix-l...@iiug.org
> > > >http://www.iiug.org/mailman/listinfo/informix-list
>
> > > _________________________________________________________________
> > > Express your personality in color! Preview and select themes for Hotmail®.http://www.windowslive-hotmail.com/LearnMore/personalize.aspx?ocid=TX...
Ian Michael Gumby wrote: > Superboer, > order to get a -952 issue, its a server generated issue. So maybe its > a configuration issue in ODBC? Like the password isn't coming across > ok or that the user doesn't have connect privileges with the specified > db? (And that could be it.) If the user doesn't have connect privileges, then the error is different. IDS first goes through the authentication process (making sure you're the one you're saying), and then checks the privileges. Each situation has a different set of errors. Some versions had an issue with passwords longer than 8 characters. I think this was specific to Solaris. It's easy to check if anybody thinks that this maybe the issue (you can change the password, if it's longer than 8 chars, for testing purposes). Regards. -- Fernando Nunes Portugal http://informix-technology.blogspot.com My email works... but I don't check it frequently...