suche 36x36
Latest versionsfixlist
11.1.0.7 FixList
10.5.0.9 FixList
10.1.0.6 FixList
9.8.0.5 FixList
9.7.0.11 FixList
9.5.0.10 FixList
9.1.0.12 FixList
Have problems? - contact us.
Register for free anmeldung-x26
Contact form kontakt-x26

DB2 - Problem description

Problem IT21767 Status: Closed

SQL30082 RC=15, PASSWDEXPIRED ERRNO=22 IF MISSING 64-BIT GSA MODULE

product:
DB2 FOR LUW / DB2FORLUW / A50 - DB2
Problem description:
This applies only to AIX.
After applying a fixpack at one of the levels or higher:

v10.1 FP 6
v10.5 FP9
v11.1 M1 FP2

and if AIX has old GSE fileset which does not contain 64-bit
module, DB2 will return the error below:

$ db2 "connect to v101 user db2inst1"
Enter current password for db2inst1:
SQL30082N  Security processing failed with reason "15"
("PROCESSING FAILURE"). SQLSTATE=08001

db2idag.log shows:

2017-07-25-15.51.03.562065-240 I52822A649           LEVEL:
Severe
PID     : 29032930             TID : 258            PROC :
db2ckpwd
INSTANCE: db2inst1              NODE : 000
HOSTNAME: test
EDUID   : 258                  EDUNAME: db2sysc
FUNCTION: DB2 UDB, trace services, sqlt_logerr_data (secondary
logging function), probe:50
MESSAGE : Failed in AIX call passwdexpired():

017-07-25-15.51.03.562556-240 I53472A695           LEVEL: Severe
PID     : 29032930             TID : 258            PROC :
db2ckpwd
INSTANCE: db2inst1              NODE : 000
HOSTNAME: test
EDUID   : 258                  EDUNAME: db2sysc
FUNCTION: DB2 UDB, trace services, sqlt_logerr_data (secondary
logging function), probe:50
MESSAGE : Message =
DATA #1 : Hexdump, 52 bytes
0x00000001101C9C70 : 3330 3034 2D36 3139 2053 6563 7572 6974   
3004-619 Securit
0x00000001101C9C80 : 7920 6D65 7468 6F64 2022 4753 4122 2063   
y method "GSA" c
0x00000001101C9C90 : 6F75 6C64 206E 6F74 2062 6520 6C6F 6164   
ould not be load
0x00000001101C9CA0 : 6564 2E0A                                 
ed..

Contents same as technote
www.ibm.com/support/docview.wss?uid=swg22006654
Problem Summary:
****************************************************************
* USERS AFFECTED:                                              *
* AIX                                                          *
****************************************************************
* PROBLEM DESCRIPTION:                                         *
* See Error Description                                        *
****************************************************************
* RECOMMENDATION:                                              *
* Apply v10.5 FP 10 to server                                  *
****************************************************************
Local Fix:
(a) Do not use GSA for authentication
As root change the authentication method for DB2 instance owner
id db2inst1 to files

# chuser SYSTEM=files registry=files db2inst1

(b) Update AIX fileset gsa.ldapauth.rte to the latest version or
one which includes both 32-bit and 64-bit modules.

For example 4.0.0.8 would contain 64-bit module.

This older version below does not have 64-bit module for GSA.

$ lslpp -aL|grep -i gsa
  gsa.ldapauth.rte          3.1.0.27    C     F    ldapauth GSA
client package

After updating the fileset, add program_64 to /etc/methods.cfg
so 64-bit GSA module can be used.

GSA:
    program = /usr/lib/security/GSA
    program_64 = /usr/lib/security/GSA64
Solution
Workaround
See LOCAL FIX.
BUG-Tracking
forerunner  : 
follow-up : IT21771 
Timestamps
Date  - problem reported    :
Date  - problem closed      :
Date  - last modified       :
03.08.2017
16.07.2018
16.07.2018
Problem solved at the following versions (IBM BugInfos)
Problem solved according to the fixlist(s) of the following version(s)