IBM Support

IC86838: A VALID DOMAIN USER OF A DOMAIN GROUP WITH CONNECT PRIVILEGE GETS CONNECTION DENIED IN CASE OF GERMAN CHARACTER

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as fixed if next.

Error description

  • While   connecting  to  db a valid user of a domain group with
    connect privilege gets  connection denied message.
    
    SQL1060N  User " AAA " does not have the CONNECT privilege.
    SQLSTATE=08004
    
    The Domain User "domain123\AAAA" is member of the Domain Group
    "domain123\Test-DB2".
    
    Domain Group "domain123\Test-DB2" is member of the Domain
    Group "domain DB2Connect".
    
    "domain DB2Connect" has the CONNECT privilege for the database.
    
    db2diag.log  have  following error messages:
    ----------------------------------------------------------------
    ---
    2012-06-22-09.16.35.132000+120 I1087268F549       LEVEL: Error
    
    PID     : 1444                 TID  : 3268        PROC :
    db2syscs.exe
    INSTANCE: instdomain   NODE : 000         DB   :domaintesting
    APPHDL  : 0-28415              APPID:
    *LOCAL.Instdomain.120622071635
    EDUID   : 3268                 EDUNAME: db2agent (Domaintesting)
    
    FUNCTION: DB2 UDB, oper system services,
    GetGroupsFromAccessToken,
    probe:999
    
    MESSAGE : Unable to Acquire Access Token
    
    DATA #1 : Hexdump, 4 bytes
    
    0x000000000EE73CF4 : 7A00 0000
    z...
    
    
    2012-06-22-09.16.35.132000+120 I1087819F537       LEVEL: Error
    
    PID     : 1444                 TID  : 3268        PROC :
    db2syscs.exe
    INSTANCE: instdomain             NODE : 000         DB   :
    DBOKIDBS
    APPHDL  : 0-28415              APPID:
    *LOCAL.instdoamin.120622071635
    EDUID   : 3268                 EDUNAME: db2agent (domaintesting)
    
    FUNCTION: DB2 UDB, trace services, sqlt_logerr_data (secondary
    logging
    func, probe:0
    
    MESSAGE : User Name
    
    DATA #1 : Hexdump, 4 bytes
    
    0x000000000EE741F0 : 6130 3073
    aaaa
    
    
    2012-06-22-09.16.35.132000+120 I1088358F536       LEVEL: Error
    
    PID     : 1444                 TID  : 3268        PROC :
    db2syscs.exe
    INSTANCE: instdomain             NODE : 000         DB   :
    DBOKIDBS
    APPHDL  : 0-28415              APPID:
    *LOCAL.Instdomain.120622071635
    EDUID   : 3268                 EDUNAME: db2agent (Domaintesting)
    
    FUNCTION: DB2 UDB, trace services, sqlt_logerr_data (secondary
    logging
    func, probe:0
    
    MESSAGE : Location
    
    DATA #1 : Hexdump, 4 bytes
    
    0x000000000EE7387C : 5000 0000
    
    
    *********************************************************
    The  above  happens  due to ERROR_INSUFFICIENT_BUFFER  ( 122)
    during  login authentication when the required buffer length
    for login  is exceeding the
    existing value  in case of  usage a German  character domain
    name
    
    db2 will get the 0x7A error.
    

Local fix

  • NA
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * All  db2 users                                               *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * While   connecting  to  db a valid user of a domain group    *
    * with                                                         *
    * connect privilege gets  connection denied message.           *
    *                                                              *
    * SQL1060N  User " AAA " does not have the CONNECT privilege.  *
    * SQLSTATE=08004                                               *
    *                                                              *
    * The  above  is happens  due to ERROR_INSUFFICIENT_BUFFER  (  *
    * 122)                                                         *
    *                                                              *
    * This  happened  in case of a German character  and "Domain   *
    * Name"                                                        *
    * greater than 16 bytes,                                       *
    * db2 will get the 0x7A error                                  *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * Will be fixed in future fixpacks.                            *
    ****************************************************************
    

Problem conclusion

Temporary fix

  • NA
    

Comments

APAR Information

  • APAR number

    IC86838

  • Reported component name

    DB2 FOR LUW

  • Reported component ID

    DB2FORLUW

  • Reported release

    970

  • Status

    CLOSED FIN

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2012-09-26

  • Closed date

    2013-07-18

  • Last modified date

    2013-07-18

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    IC89716

Fix information

Applicable component levels

  • R970 PSY

       UP



Document information

More support for: DB2 for Linux, UNIX and Windows

Software version: 9.7

Reference #: IC86838

Modified date: 18 July 2013