Informix Error 952
5.3 after changing password through a remote server AIX; 952; passwd; rdist; rhost Technote (troubleshooting) Problem(Abstract) When a user's password is altered through a remote AIX server, there are cases where any connection using this new password will get error -952. Symptom When you run IBM Informix Dynamic Server (IDS) database engine on the AIX operating system version 5.3, you may experience a -952 error when the password is changed from a remote host. The following error message appears in the online.log file: listener-thread: err = -952: oserr = 0: errstr = informix: User (informix)'s password is not correct for the database server. Cause This is a known IBM AIX product defect. The defect identifier is IY80055: SECURITY ROUTINES MISHANDLES IF PASSWD FILE IS RENAMED ON THE FLY This problem is due to a problem with AIX's passwd mechanism, where the password is cached, and the passwd file is overwritten with a new password issued from a command on the remote host. The old password is accessed by the engine because the OS is not actually reading the new password from the password file, but delivering the older cached version of the password to the database engine. Environment The following products and operating systems are affected: Product Name Product Version(s) Hardware Vendor Operating System IBM Informix Dynamic Server 7.31 9.40 10.00 IBM AIX 5.3 Resolving the problem Contact AIX Support to obtain an efix for APAR IY80055 or the latest Maintenance Level which includes this APAR. Document information More support for: Informix Servers Software version: 7.3, 9.4, 10.0 Operating system(s): AIX Software edition: Enterprise, Workgroup Reference #: 1226667 Modified date: 2008-10-20 Site availability Site assistance Contact and feedback Need support? Submit feedback to IBM Support 1-800-IBM-7378 (USA) Directory of worldwide contacts Contact Privacy Terms of use Accessibility
remote Kerberos/AD user account is authenticating to IDS Technote (troubleshooting) Problem(Abstract) The -952 error is generally a bad account/password combination. However when there is 100% confidence that the account/password combination is correct, a -952 error can still occur. This article explains one scenario and a possible solution for that problem. Symptom Assumptions: 100% confidence that the account/password combination is correct The OS is properly http://www.ibm.com/support/docview.wss?uid=swg21226667 configured to authenticate Kerberos/AD user accounts The user account is a remote Kerberos/AD account AIX OS A -952 error is reported in the server message log and possibly a -951 error to the client. Cause The remote AD server may not have a crypt hash password stored for the user account. If so it http://www.ibm.com/support/docview.wss?uid=swg21650838 will return "*" for the crypt hash password value. This value does not match the crypt hash value of the passed-in password. Resolving the problem Take one of the following actions where applicable: Ensure the permissions of the oninit binary are rwsr-sr--, owner is root and group is informix Try running the instance as user root instead of user informix Use some other form of authentication such as PAM or SSO Related information Single Sign-On With IBM Informix Setting up Kerberos/SSO in IDS using Windows AD Configuring Informix Clients for Single Sign-On -951 / -952 when using Loadable Password Algorithm (LPA A possible solution for a -952 error when seen on AIX w Document information More support for: Informix Servers Software version: 11.5, 11.7, 12.1 Operating system(s): AIX Reference #: 1650838 Modified date: 2016-03-06 Site availability Site assistance Contact and feedback Need support? Submit feedback to IBM Support 1-800-IBM-7378 (USA) Directory of worldwide contacts Contact Privacy Terms of use Accessibility
the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the http://www.dbforums.com/showthread.php?438389-952-Error forum that you want to visit from the selection below. Results 1 to 11 of 11 Thread: -952 Error Tweet Thread Tools Show Printable Version Subscribe to this Thread… Search Thread Advanced http://www.prstech.com/resources/tips/error_952_hpux.shtml Search Display Linear Mode Switch to Hybrid Mode Switch to Threaded Mode 07-22-02,17:31 #1 pklucas View Profile View Forum Posts Registered User Join Date Jul 2002 Location Parkersburg, WV Posts 5 Unanswered: -952 informix error Error I am having a problem connecting through ODBC to a Informix SE 7.2 engine. I am getting the following error. "[Informix][ODBC Driver][Informix] user "%S" password is not correct for the database server." - on the ODBC side. "Daemon err=-952: users password is not correct for the database server." - on the database side. The server is a linux box based on redhat 6.2. and I have informix error 952 never connected to this server before via ODBC. Any help would be apreciated. Reply With Quote 07-22-02,22:43 #2 rnealejr View Profile View Forum Posts Registered User Join Date Feb 2002 Posts 2,232 Which user id are you using ? How long is the password ? Can you access Informix if you login into linux directly using dbaccess / onstat commands ? Also, look at your release notes. Which version of informix are you running - include uc version ? Last edited by rnealejr; 07-22-02 at 22:45. Reply With Quote 07-23-02,09:29 #3 pklucas View Profile View Forum Posts Registered User Join Date Jul 2002 Location Parkersburg, WV Posts 5 I am using the informix user id. and the password is 6 charaters long. when logged on locally I have no problem accessing the database with dbaccess. And I am running Informix-SE 7.24 UC5. thanks for helping. Reply With Quote 07-23-02,18:59 #4 rnealejr View Profile View Forum Posts Registered User Join Date Feb 2002 Posts 2,232 I believe this is a known bug with uc5 and the fix is in uc8 - I will let you know what I am able to find out. Reply With Quote 07-23-02,21:24 #5 rnealejr Vie
me crazy for hours. Unix and Informix use the same Unix facility to validate passwords. How could it be that I could log into Unix (HP/UX) without a problem, but not Informix, using the same login ID and password ? Well, under HP/UX, only the first eight characters of a password are significant (if it is not set up as a "trusted" system). HP/UX throws away everything but the first 8 characters of your password when it creates the encrypted password in the /etc/passwd file. But Informix does no such thing. So - if you have a password that exceeds 8 characters (like I did), Informix uses the entire password to authenticate. Of course this fails since it doesn't match the 8 character password. So most likely you will want to use a password that has 8 or less characters. In addition, HP/UX wants you to have at least 6 characters AND must contain at least two uppercase and/or lowercase letters and at least one numeric or special character. Yikes! That doesn't leave much flexibility. finderr -952 952 User's password is not correct for the database server. The password that is specified for the server computer in your ~/.netrc file or in the USER clause of a CONNECT statement is incorrect. The database server does not accept (or cannot find) your account password. Check that your password is specified correctly, and try again. This message appears with Version 6.0 and later. -952 Incorrect user password for remote host. The database server resides on another computer system that does not accept (or cannot find) your account password. Verify that your password is correctly entered in the appropriate authorization or password file. This message appears prior to Version 6.0.