Cannot create surrogate user on IDS 12.10FC14

I try to create surrogate user on IDS(on Windows). When i run CREATE USER SUGER WITH PASSWORD "pass" PROPERTIES user "username"; in dbaccess . DBAccess send me error 26729: The user username is not in the /etc/informix/allowed.surrogates file. Where do i put this file(allowed.surrogates) in windows installation of IDS to find dbaccess and create surrogate user. ------------------------------ iliyan iliev developer MoI-DCIS ------------------------------ #Informix

Hi iliyan, Did you create and use a user in Informix in the Windows environment? I thought the usermapping feature would work on Windows so far, but if you look at the 'Internal users' page in the knowledge center, there is no explanation on how to set it up on Windows. https://www.ibm.com/support/knowledgecenter/SSGU8G_12.1.0/com.ibm.sec.doc/ids_am_045.htm ------------------------------ SangGyu Jeong Software Engineer Infrasoft Seoul Korea, Republic of ------------------------------

Iliyan and SangGyu: I am not certain this feature ever worked under Windows OS. Typically I rely on the Windows passthrough authentication and either create a local Windows user account or an Active Directory domain account depending on how my customer site is set up. I happened to be setting up a new system and tested the surrogate user command as Iliyan did. I got the following after creating the allowed.surrogates file: in DBACCESS: CREATE USER SUGER WITH PASSWORD "pass123ABC!" PROPERTIES user "username"; 26729: The user username is not in the /etc/informix/allowed.surrogates fileFrom the command line: D:\\Program Files\\IBM\\Informix\\12.10> onmode -cache surrogatesWarning: Loading entries in the surrogates file /etc/informix/allowed.surrogates into surrogate cache resulted in errors. Check the message log for more information. In the IDS message log after running onmode -cache surrogates :10:22:55 Warning: Unable to open the surrogates file /etc/informix/allowed.surrogates. 10:22:55 Warning: Loading entries from the surrogates file /etc/informix/allowed.surrogates into surrogate cache failed. Surrogate cache does not exist. ------------------------------ Best regards, Martin Graney Queues Enforth Development, Inc. Stoneham, MA 02148 ------------------------------

Hi , SangGyu When i install IDS. Install create user in informix who mapped with user of OS. ------------------------------ iliyan iliev developer MoI-DCIS ------------------------------

The 'informix' user is automatically created when Informix is installed. In the Windows environment, users cannot be created using the CREATE USER statement, so the user account of the OS must be used. ------------------------------ SangGyu Jeong Software Engineer Infrasoft Seoul Korea, Republic of ------------------------------

Hi Martin. Thank you for sharing your test results. It is strange to display the /etc directory in the error 26729 message even in the Windows environment. ------------------------------ SangGyu Jeong Software Engineer Infrasoft Seoul Korea, Republic of ------------------------------

Just in case this is unclear: that user informix created by the installer is a regular OS level user (either local or in Windows domain), not a database server level user. that's the default Informix way of user authentication: the database users are OS users and they're authenticated against the OS (either pre-authenticated if logged on to the OS locally, or having to provide an existent OS user and its OS password). ------------------------------ Andreas Legner ------------------------------

Hi Martin, In saw in "ids_machine_notes_12.10.txt" file for Informix 12.10 .xC14 on WINDOWS : Features not supported ====================== ....... 4. Mapped users and "CREATE USER" statement in documentation is only for UNIX and Linux. So, I think you are right - this feature doesn't worked under Windows OS. Regards, ------------------------------ Boycho Velkov ------------------------------

There was a phrase in the machine notes about the Mapped user feature limitation! From the machine notes in 11.70, the contents are listed, but so far, I have never had any doubts that it won't work on Windows. ------------------------------ SangGyu Jeong Software Engineer Infrasoft Seoul Korea, Republic of ------------------------------