Informix Error -32100: MAC check failed.

Cause and resolution

MAC check failed.

Your session sensitivity label does not permit you to perform the operation on the OnLine/Secure object that you are accessing because it violates the MAC policy of IBM Informix OnLine/Secure. Log in at the appropriate sensitivity label and retry the operation.

Oninit® Troubleshooting Guidance

Reasons / Common Causes

-32100 fires when a session's sensitivity label doesn't permit the attempted operation on an OnLine/Secure object — per the official guidance, this violates OnLine/Secure's MAC (Mandatory Access Control) policy.

The session's sensitivity label doesn't dominate (or isn't comparable to) the object's sensitivity label, per the official guidance — the direct, only cause.

Solutions / Resolution

Log in at the appropriate sensitivity label and retry the operation, per the official guidance.

Examples

N/A

No specific triggering statement is documented beyond a session sensitivity-label/MAC policy mismatch.

Diagnostic Checks

Check the session's current sensitivity label against the target object's label, and log in at the label the operation actually requires.

Related Errors / Related Topics

-32101 — "DAC check failed." A related access-control error, on discretionary (identity-based) access control rather than mandatory (label-based) access control.

A session's sensitivity label violated OnLine/Secure's MAC policy for the target object — log in at the appropriate label.