INF -951
On IDS 9.40/HP-UX 11.11 after a long shutdown, onmode -l and dbaccess as informix failed with "Get Shadow Password for user [informix] failed" and error -951 (oserr 2). Suggestions included checking /etc/shadow for password aging/expiry (fix the last-changed or expiry columns), verifying trusted vs normal HP-UX mode, and confirming oninit permissions (root:informix, mode 6754). The poster's site runs a second account inf<sid> sharing informix's UID/GID; he resolved it by logging in as informix with the inf<sid> profile and running GRANT DBA TO informix in sysmaster. Art Kagel warned against duplicating informix's UID/GID.
Auto-generated by DrWatson from the posts below — may be imperfect; read the full thread.
Hi.
I am using a Informix 9.40 database on a HPUX PA-RISC 11.11 server.
It is a sanbox database. I restarted after a long inactivity period.
When I luanch a onmode -l command, we can see the following in the online log:
14:11:21 Get Shadow Password for user [informix] failed!
14:11:21 Check for password aging/account lock-out.
14:11:21 listener-thread: err = -951: oserr = 2: errstr = informix: Incorrect
password or user informix is not known on the database server.
System error = 2.
When I use dbaccess with the informix user, I get the same error. I did a lot
of research on various knowledge base sites. None of the cases were similar to
mine (oserr = 2). The description of this OS error is 'No such file or
directory'. What file/directory is it refering to ? I verifed that the user
exist on the server and is unlocked.
Suggestions ?
Serge Védrine
Hi Serge,
It is complaining about "Shadow Password".
You may need to check on your HPUX for the existence and condition of an
/etc/shadow file that compliments your /etc/passwd file. There may be
something funky with your /etc/shadow file since you mentioned you are
restarting after a long period of inactivity...
Here is a doc link that might be helpful:
http://docs.hp.com/en/B2355-90950/ch08s15.html
good luck,
Norma Jean
-----Original Message-----
From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of SERGE
VEDRINE
Sent: Wednesday, May 13, 2009 2:09 PM
To: ids@iiug.org
Subject: INF -951 [15753]
Hi.
I am using a Informix 9.40 database on a HPUX PA-RISC 11.11 server.
It is a sanbox database. I restarted after a long inactivity period.
When I luanch a onmode -l command, we can see the following in the online log:
14:11:21 Get Shadow Password for user [informix] failed!
14:11:21 Check for password aging/account lock-out.
14:11:21 listener-thread: err = -951: oserr = 2: errstr = informix: Incorrect
password or user informix is not known on the database server.
System error = 2.
When I use dbaccess with the informix user, I get the same error. I did a lot
of research on various knowledge base sites. None of the cases were similar to
mine (oserr = 2). The description of this OS error is 'No such file or
directory'. What file/directory is it refering to ? I verifed that the user
exist on the server and is unlocked.
Suggestions ?
Serge Védrine
*******************************************************************************
Forum Note: Use "Reply" to post a response in the discussion forum.
One other common issue with the 951 error is that the permission on
the $INFORMIXDIR/bin/oninit have changed. Check to make sure they
are owner root group informix mode 6754.
John F. Miller III
STSM, Support Architect
miller3@us.ibm.com
503-578-5645
IBM Informix Dynamic Server (IDS)
ids-bounces@iiug.org wrote on 05/13/2009 12:08:55 PM:
> [image removed]
>
> INF -951 [15753]
>
> SERGE VEDRINE
>
> to:
>
> ids
>
> 05/13/2009 12:12 PM
>
> Sent by:
>
> ids-bounces@iiug.org
>
> Please respond to ids
>
> Hi.
>
> I am using a Informix 9.40 database on a HPUX PA-RISC 11.11 server.
>
> It is a sanbox database. I restarted after a long inactivity period.
>
> When I luanch a onmode -l command, we can see the following in the
> online log:
>
> 14:11:21 Get Shadow Password for user [informix] failed!
> 14:11:21 Check for password aging/account lock-out.
> 14:11:21 listener-thread: err =3D -951: oserr =3D 2: errstr =3D infor=
mix:
Incorrect
> password or user informix is not known on the database server.
> System error =3D 2.
>
> When I use dbaccess with the informix user, I get the same error. I d=
id a
lot
> of research on various knowledge base sites. None of the cases were
> similar to
> mine (oserr =3D 2). The description of this OS error is 'No such file=
or
> directory'. What file/directory is it refering to ? I verifed that th=
e
user
> exist on the server and is unlocked.
>
> Suggestions ?
>
> Serge V=E9drine
>
>
>
***********************************************************************=
********
> Forum Note: Use "Reply" to post a response in the discussion forum.=
>=
The -951 Informix error is telling you that either the informix login is not
recognized on the machine or that the informix password you used is invalid.
Art S. Kagel
Oninit (www.oninit.com)
IIUG Board of Directors (art@iiug.org)
Disclaimer: Please keep in mind that my own opinions are my own opinions and
do not reflect on my employer, Oninit, the IIUG, nor any other organization
with which I am associated either explicitly or implicitly. Neither do
those opinions reflect those of other individuals affiliated with any entity
with which I am affiliated nor those of the entities themselves.
On Wed, May 13, 2009 at 3:08 PM, SERGE VEDRINE <serge.vedrine@domtar.com>wrote:
> Hi.
>
> I am using a Informix 9.40 database on a HPUX PA-RISC 11.11 server.
>
> It is a sanbox database. I restarted after a long inactivity period.
>
> When I luanch a onmode -l command, we can see the following in the online
> log:
>
> 14:11:21 Get Shadow Password for user [informix] failed!
> 14:11:21 Check for password aging/account lock-out.
> 14:11:21 listener-thread: err = -951: oserr = 2: errstr = informix:
> Incorrect
> password or user informix is not known on the database server.
> System error = 2.
>
> When I use dbaccess with the informix user, I get the same error. I did a
> lot
> of research on various knowledge base sites. None of the cases were similar
> to
> mine (oserr = 2). The description of this OS error is 'No such file or
> directory'. What file/directory is it refering to ? I verifed that the user
> exist on the server and is unlocked.
>
> Suggestions ?
>
> Serge Védrine
>
>
>
>
*******************************************************************************
> Forum Note: Use "Reply" to post a response in the discussion forum.
>
>
--001636c5b1f4e5709d0469d1032e
Hi,
HP-UX works trusted or normal mode ???
Check is exist /opt/star-ncf-opt directory ?
On Wed, 2009-05-13 at 15:08 -0400, SERGE VEDRINE wrote:
> Hi.
>
> I am using a Informix 9.40 database on a HPUX PA-RISC 11.11 server.
>
> It is a sanbox database. I restarted after a long inactivity period.
>
> When I luanch a onmode -l command, we can see the following in the online
log:
>
> 14:11:21 Get Shadow Password for user [informix] failed!
> 14:11:21 Check for password aging/account lock-out.
> 14:11:21 listener-thread: err = -951: oserr = 2: errstr = informix: Incorrect
> password or user informix is not known on the database server.
> System error = 2.
>
> When I use dbaccess with the informix user, I get the same error. I did a lot
> of research on various knowledge base sites. None of the cases were similar
to
> mine (oserr = 2). The description of this OS error is 'No such file or
> directory'. What file/directory is it refering to ? I verifed that the user
> exist on the server and is unlocked.
>
> Suggestions ?
>
> Serge Vdrine
>
>
>
*******************************************************************************
> Forum Note: Use "Reply" to post a response in the discussion forum.
>
--
wkg
On Wed, May 13, 2009 at 12:08, SERGE VEDRINE <serge.vedrine@domtar.com> wrote:
> I am using a Informix 9.40 database on a HPUX PA-RISC 11.11 server.
>
> It is a sanbox database. I restarted after a long inactivity period.
>
> When I luanch a onmode -l command, we can see the following in the online
log:
>
> 14:11:21 Get Shadow Password for user [informix] failed!
> 14:11:21 Check for password aging/account lock-out.
> 14:11:21 listener-thread: err = -951: oserr = 2: errstr = informix: Incorrect
> password or user informix is not known on the database server.
> System error = 2.
>
> When I use dbaccess with the informix user, I get the same error. I did a lot
> of research on various knowledge base sites. None of the cases were similar
to
> mine (oserr = 2). The description of this OS error is 'No such file or
> directory'. What file/directory is it refering to ? I verifed that the user
> exist on the server and is unlocked.
>
> Suggestions ?
In /etc/shadow, there is a column which record when the password was
last changed, counted in days since 1970-01-01. There is also an
expiry column, recording the number of days that the password is
valid. You can either remove the value from the expiry column or edit
the 'last changed' column to a newer value.
You can determine an appropriate value for the last changed column (if
you have a working IDS database) using:
SELECT TODAY - MDY(1,1,1970) FROM systables WHERE tabid = 1;
The value on 2009-05-14 is 14379.
(I had to fix some passwords on my Solaris machine recently.)
The entries look like:
dbuser1:XXXXXXXXXX:14343:0:90::::
That's good for 90 days from 2009-04-09.
--
Jonathan Leffler #include <disclaimer.h>
Email: jleffler@earthlink.net, jleffler@us.ibm.com
Guardian of DBD::Informix v2008.0513 -- http://dbi.perl.org/
"Blessed are we who can laugh at ourselves, for we shall never cease
to be amused."
NB: Please do not use this email for correspondence.
I don't necessarily read it every week, even.
Yogi Berra - "If you ask me anything I don't know, I'm not going to
answer." - http://www.brainyquote.com/quotes/authors/y/yogi_berra.html
The setup at our company is that we have the user informix that is the owner of the Informix software. We also have another user inf<sid>, where <sid> is the database name. This user has the same unix user id and group ids than user informix for security/privileges reasons. The problems that I have described in this post were experienced while using the user inf<sid>. To solve my problem, I logged with the informix user with inf<sid> profile and grant DBA privilege to user informix in the sysmaster database (grant DBA to informix;). Thanks to everyone who sent me suggestions and information. I learned a lot about Informix security and authentication. Serge Vedrine
You should not be spoofing the informix user's userid and groupid. It causes many problems. Art Art S. Kagel Oninit (www.oninit.com) IIUG Board of Directors (art@iiug.org) Disclaimer: Please keep in mind that my own opinions are my own opinions and do not reflect on my employer, Oninit, the IIUG, nor any other organization with which I am associated either explicitly or implicitly. Neither do those opinions reflect those of other individuals affiliated with any entity with which I am affiliated nor those of the entities themselves. On Fri, May 15, 2009 at 7:40 AM, SERGE VEDRINE <serge.vedrine@domtar.com>wrote: > The setup at our company is that we have the user informix that is the > owner > of the Informix software. We also have another user inf<sid>, where <sid> > is > the database name. This user has the same unix user id and group ids than > user > informix for security/privileges reasons. > > The problems that I have described in this post were experienced while > using > the user inf<sid>. To solve my problem, I logged with the informix user > with > inf<sid> profile and grant DBA privilege to user informix in the sysmaster > database (grant DBA to informix;). > > Thanks to everyone who sent me suggestions and information. I learned a lot > about Informix security and authentication. > > Serge Vedrine > > > > ******************************************************************************* > Forum Note: Use "Reply" to post a response in the discussion forum. > > --001636c5b712b975780469f36236