Home

Latest versions	fixlist
11.1.0.7
10.5.0.9
10.1.0.6
9.8.0.5
9.7.0.11
9.5.0.10
9.1.0.12

Have problems? - contact us.
Register for free
Contact form

DB2 - Problem description

Problem IC86838	Status: Closed
A VALID DOMAIN USER OF A DOMAIN GROUP WITH CONNECT PRIVILEGE GETS CONNECTION DENIED IN CASE OF GERMAN CHARACTER
product:
DB2 FOR LUW / DB2FORLUW / 970 - DB2
Problem description:
While connecting to db a valid user of a domain group with connect privilege gets connection denied message. SQL1060N User " AAA " does not have the CONNECT privilege. SQLSTATE=08004 The Domain User "domain123\AAAA" is member of the Domain Group "domain123\Test-DB2". Domain Group "domain123\Test-DB2" is member of the Domain Group "domain DB2Connect". "domain DB2Connect" has the CONNECT privilege for the database. db2diag.log have following error messages: ---------------------------------------------------------------- --- 2012-06-22-09.16.35.132000+120 I1087268F549 LEVEL: Error PID : 1444 TID : 3268 PROC : db2syscs.exe INSTANCE: instdomain NODE : 000 DB :domaintesting APPHDL : 0-28415 APPID: LOCAL.Instdomain.120622071635 EDUID : 3268 EDUNAME: db2agent (Domaintesting) FUNCTION: DB2 UDB, oper system services, GetGroupsFromAccessToken, probe:999 MESSAGE : Unable to Acquire Access Token DATA #1 : Hexdump, 4 bytes 0x000000000EE73CF4 : 7A00 0000 z... 2012-06-22-09.16.35.132000+120 I1087819F537 LEVEL: Error PID : 1444 TID : 3268 PROC : db2syscs.exe INSTANCE: instdomain NODE : 000 DB : DBOKIDBS APPHDL : 0-28415 APPID: LOCAL.instdoamin.120622071635 EDUID : 3268 EDUNAME: db2agent (domaintesting) FUNCTION: DB2 UDB, trace services, sqlt_logerr_data (secondary logging func, probe:0 MESSAGE : User Name DATA #1 : Hexdump, 4 bytes 0x000000000EE741F0 : 6130 3073 aaaa 2012-06-22-09.16.35.132000+120 I1088358F536 LEVEL: Error PID : 1444 TID : 3268 PROC : db2syscs.exe INSTANCE: instdomain NODE : 000 DB : DBOKIDBS APPHDL : 0-28415 APPID: LOCAL.Instdomain.120622071635 EDUID : 3268 EDUNAME: db2agent (Domaintesting) FUNCTION: DB2 UDB, trace services, sqlt_logerr_data (secondary logging func, probe:0 MESSAGE : Location DATA #1 : Hexdump, 4 bytes 0x000000000EE7387C : 5000 0000 ******************************************************** The above happens due to ERROR_INSUFFICIENT_BUFFER ( 122) during login authentication when the required buffer length for login is exceeding the existing value in case of usage a German character domain name db2 will get the 0x7A error.
Problem Summary:
**************************************************************** * USERS AFFECTED: * * All db2 users * **************************************************************** * PROBLEM DESCRIPTION: * * While connecting to db a valid user of a domain group * * with * * connect privilege gets connection denied message. * * * * SQL1060N User " AAA " does not have the CONNECT privilege. * * SQLSTATE=08004 * * * * The above is happens due to ERROR_INSUFFICIENT_BUFFER ( * * 122) * * * * This happened in case of a German character and "Domain * * Name" * * greater than 16 bytes, * * db2 will get the 0x7A error * **************************************************************** * RECOMMENDATION: * * Will be fixed in future fixpacks. * ****************************************************************
Local Fix:
NA
available fix packs:
DB2 Version 9.7 Fix Pack 8 for Linux, UNIX, and Windows DB2 Version 9.7 Fix Pack 9 for Linux, UNIX, and Windows DB2 Version 9.7 Fix Pack 9a for Linux, UNIX, and Windows DB2 Version 9.7 Fix Pack 10 for Linux, UNIX, and Windows
Solution

Workaround
NA
BUG-Tracking
forerunner : APAR is sysrouted TO one or more of the following: IC89716 follow-up :
Timestamps
Date - problem reported : Date - problem closed : Date - last modified :	26.09.2012 18.07.2013 18.07.2013
Problem solved at the following versions (IBM BugInfos)

Problem solved according to the fixlist(s) of the following version(s)
9.7.0.8