DB2 - Problem description
Problem IT21767 | Status: Closed |
SQL30082 RC=15, PASSWDEXPIRED ERRNO=22 IF MISSING 64-BIT GSA MODULE | |
product: | |
DB2 FOR LUW / DB2FORLUW / A50 - DB2 | |
Problem description: | |
This applies only to AIX. After applying a fixpack at one of the levels or higher: v10.1 FP 6 v10.5 FP9 v11.1 M1 FP2 and if AIX has old GSE fileset which does not contain 64-bit module, DB2 will return the error below: $ db2 "connect to v101 user db2inst1" Enter current password for db2inst1: SQL30082NÂ Security processing failed with reason "15" ("PROCESSING FAILURE"). SQLSTATE=08001 db2idag.log shows: 2017-07-25-15.51.03.562065-240 I52822A649Â Â Â Â Â Â Â Â Â Â LEVEL: Severe PIDÂ Â Â Â : 29032930Â Â Â Â Â Â Â Â Â Â Â Â TID : 258Â Â Â Â Â Â Â Â Â Â Â PROC : db2ckpwd INSTANCE: db2inst1Â Â Â Â Â Â Â Â Â Â Â Â Â NODE : 000 HOSTNAME: test EDUIDÂ Â : 258Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â EDUNAME: db2sysc FUNCTION: DB2 UDB, trace services, sqlt_logerr_data (secondary logging function), probe:50 MESSAGE : Failed in AIX call passwdexpired(): 017-07-25-15.51.03.562556-240 I53472A695Â Â Â Â Â Â Â Â Â Â LEVEL: Severe PIDÂ Â Â Â : 29032930Â Â Â Â Â Â Â Â Â Â Â Â TID : 258Â Â Â Â Â Â Â Â Â Â Â PROC : db2ckpwd INSTANCE: db2inst1Â Â Â Â Â Â Â Â Â Â Â Â Â NODE : 000 HOSTNAME: test EDUIDÂ Â : 258Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â EDUNAME: db2sysc FUNCTION: DB2 UDB, trace services, sqlt_logerr_data (secondary logging function), probe:50 MESSAGE : Message = DATA #1 : Hexdump, 52 bytes 0x00000001101C9C70 : 3330 3034 2D36 3139 2053 6563 7572 6974Â Â Â 3004-619 Securit 0x00000001101C9C80 : 7920 6D65 7468 6F64 2022 4753 4122 2063Â Â Â y method "GSA" c 0x00000001101C9C90 : 6F75 6C64 206E 6F74 2062 6520 6C6F 6164Â Â Â ould not be load 0x00000001101C9CA0 : 6564 2E0AÂ Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â ed.. Contents same as technote www.ibm.com/support/docview.wss?uid=swg22006654 | |
Problem Summary: | |
**************************************************************** * USERS AFFECTED: * * AIX * **************************************************************** * PROBLEM DESCRIPTION: * * See Error Description * **************************************************************** * RECOMMENDATION: * * Apply v10.5 FP 10 to server * **************************************************************** | |
Local Fix: | |
(a) Do not use GSA for authentication As root change the authentication method for DB2 instance owner id db2inst1 to files # chuser SYSTEM=files registry=files db2inst1 (b) Update AIX fileset gsa.ldapauth.rte to the latest version or one which includes both 32-bit and 64-bit modules. For example 4.0.0.8 would contain 64-bit module. This older version below does not have 64-bit module for GSA. $ lslpp -aL|grep -i gsa  gsa.ldapauth.rte         3.1.0.27   C    F   ldapauth GSA client package After updating the fileset, add program_64 to /etc/methods.cfg so 64-bit GSA module can be used. GSA:     program = /usr/lib/security/GSA    program_64 = /usr/lib/security/GSA64 | |
Solution | |
Workaround | |
See LOCAL FIX. | |
BUG-Tracking | |
forerunner : follow-up : IT21771 | |
Timestamps | |
Date - problem reported : Date - problem closed : Date - last modified : | 03.08.2017 16.07.2018 16.07.2018 |
Problem solved at the following versions (IBM BugInfos) | |
Problem solved according to the fixlist(s) of the following version(s) |