Troubleshooting
Problem
The -952 error is generally a bad account/password combination. However when there is 100% confidence that the account/password combination is correct, a -952 error can still occur. This article explains one scenario and a possible solution for that problem.
Symptom
Assumptions:
- 100% confidence that the account/password combination is correct
- The OS is properly configured to authenticate Kerberos/AD user accounts
- The user account is a remote Kerberos/AD account
- AIX OS
A -952 error is reported in the server message log and possibly a -951 error to the client.
Cause
The remote AD server may not have a crypt hash password stored for the user account. If so it will return "*" for the crypt hash password value. This value does not match the crypt hash value of the passed-in password.
Resolving The Problem
Take one of the following actions where applicable:
- Ensure the permissions of the oninit binary are rwsr-sr--, owner is root and group is informix
- Try running the instance as user root instead of user informix
- Use some other form of authentication such as PAM or SSO
Related Information
[{"Product":{"code":"SSGU8G","label":"Informix Servers"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"Not Applicable","Platform":[{"code":"PF002","label":"AIX"}],"Version":"11.5;11.7;12.1","Edition":"","Line of Business":{"code":"","label":""}}]
Was this topic helpful?
Document Information
Modified date:
16 June 2018
UID
swg21650838