From: oddbande on
We have a system at one of our customers where the db2diag.log file is
filled with these messages (they always come together):

2010-06-04-21.11.30.788000+120 I2866F457 LEVEL: Warning
PID : 8484 TID : 5272 PROC : db2syscs.exe
INSTANCE: DB2 NODE : 000 DB : ICMNLSDB
APPHDL : 0-29791
EDUID : 5272 EDUNAME: db2agent (ICMNLSDB) 0
FUNCTION: DB2 UDB, bsu security, sqlexLogPluginMessage, probe:20
DATA #1 : String with size, 67 bytes
Password validation for user tordag01 failed with rc = -2146500507

2010-06-04-21.11.30.788000+120 I3325F452 LEVEL: Warning
PID : 8484 TID : 5272 PROC : db2syscs.exe
INSTANCE: DB2 NODE : 000 DB : ICMNLSDB
APPHDL : 0-29791
EDUID : 5272 EDUNAME: db2agent (ICMNLSDB) 0
FUNCTION: DB2 UDB, bsu security, sqlexSlsSystemAuthenticate, probe:150
MESSAGE : application id:
DATA #1 : String with size, 26 bytes
0AE630C5.600B.100604191131

The users don't seem to notice any inconvenience, but the log gets
filled up and thus makes it difficult to discover any other messages
of importance. Can anyone share their ideas of what may cause this?

The environment:
System resources (disk, CPU, memory)

Number of physical disks: 4
Physical memory: 32768 MB
Number of CPUs online and configured: 16, -1

Operating system and level
Operating system is: NT 64BIT
Microsoft Windows [Version 6.1.7600]

OSS reports operating system level as: 6.1.

DB2 Release Info

Server is running MPP/EEE (single node).
DB21085I Instance "DB2" uses "64" bits and DB2 code release
"SQL09055" with

level identifier "06060107".

Informational tokens are "DB2 v9.5.500.784", "s091123", "WR21458", and
Fix Pack

"5".

Product is installed at "C:\PROGRA~1\IBM\SQLLIB" with DB2 Copy Name
"DB2COPY1".


Regards
Odd Bjørn Andersen,
ErgoGroup AS, Oslo, Norway
From: Helmut Tessarek on
Please post the output of:

db2 get dbm cfg
db2 list node directory show detail
db2 list db directory
db2set -all

On 7.6.2010 07:02, oddbande wrote:
> We have a system at one of our customers where the db2diag.log file is
> filled with these messages (they always come together):
>
> 2010-06-04-21.11.30.788000+120 I2866F457 LEVEL: Warning
> PID : 8484 TID : 5272 PROC : db2syscs.exe
> INSTANCE: DB2 NODE : 000 DB : ICMNLSDB
> APPHDL : 0-29791
> EDUID : 5272 EDUNAME: db2agent (ICMNLSDB) 0
> FUNCTION: DB2 UDB, bsu security, sqlexLogPluginMessage, probe:20
> DATA #1 : String with size, 67 bytes
> Password validation for user tordag01 failed with rc = -2146500507
>
> 2010-06-04-21.11.30.788000+120 I3325F452 LEVEL: Warning
> PID : 8484 TID : 5272 PROC : db2syscs.exe
> INSTANCE: DB2 NODE : 000 DB : ICMNLSDB
> APPHDL : 0-29791
> EDUID : 5272 EDUNAME: db2agent (ICMNLSDB) 0
> FUNCTION: DB2 UDB, bsu security, sqlexSlsSystemAuthenticate, probe:150
> MESSAGE : application id:
> DATA #1 : String with size, 26 bytes
> 0AE630C5.600B.100604191131


--
Helmut K. C. Tessarek
DB2 Performance and Development

/*
Thou shalt not follow the NULL pointer for chaos and madness
await thee at its end.
*/
From: oddbande on
On Jun 7, 9:47 pm, Helmut Tessarek <tessa...(a)evermeet.cx> wrote:
> Please post the output of:
>
> db2 get dbm cfg
> db2 list node directory show detail
> db2 list db directory
> db2set -all
>
> On 7.6.2010 07:02, oddbande wrote:
>
>
>
>
>
> > We have a system at one of our customers where the db2diag.log file is
> > filled with these messages (they always come together):
>
> > 2010-06-04-21.11.30.788000+120 I2866F457          LEVEL: Warning
> > PID     : 8484                 TID  : 5272        PROC : db2syscs.exe
> > INSTANCE: DB2                  NODE : 000         DB   : ICMNLSDB
> > APPHDL  : 0-29791
> > EDUID   : 5272                 EDUNAME: db2agent (ICMNLSDB) 0
> > FUNCTION: DB2 UDB, bsu security, sqlexLogPluginMessage, probe:20
> > DATA #1 : String with size, 67 bytes
> > Password validation for user tordag01 failed with rc = -2146500507
>
> > 2010-06-04-21.11.30.788000+120 I3325F452          LEVEL: Warning
> > PID     : 8484                 TID  : 5272        PROC : db2syscs.exe
> > INSTANCE: DB2                  NODE : 000         DB   : ICMNLSDB
> > APPHDL  : 0-29791
> > EDUID   : 5272                 EDUNAME: db2agent (ICMNLSDB) 0
> > FUNCTION: DB2 UDB, bsu security, sqlexSlsSystemAuthenticate, probe:150
> > MESSAGE : application id:
> > DATA #1 : String with size, 26 bytes
> > 0AE630C5.600B.100604191131
>
> --
> Helmut K. C. Tessarek
> DB2 Performance and Development
>
> /*
>    Thou shalt not follow the NULL pointer for chaos and madness
>    await thee at its end.
> */- Hide quoted text -
>
> - Show quoted text -

Output from 'get dbm cfg':

Database Manager Configuration

Node type = Enterprise Server Edition with local and remote
clients

Database manager configuration release level = 0x0c00

Maximum total of files open (MAXTOTFILOP) = 16000
CPU speed (millisec/instruction) (CPUSPEED) =
2,440445e-007
Communications bandwidth (MB/sec) (COMM_BANDWIDTH) = 1,000000e
+002

Max number of concurrently active databases (NUMDB) = 8
Federated Database System Support (FEDERATED) = NO
Transaction processor monitor name (TP_MON_NAME) =

Default charge-back account (DFT_ACCOUNT_STR) =

Java Development Kit installation path (JDK_PATH) = C:
\PROGRA~1\IBM\SQLLIB\java\jdk

Diagnostic error capture level (DIAGLEVEL) = 2
Notify Level (NOTIFYLEVEL) = 3
Diagnostic data directory path (DIAGPATH) =

Default database monitor switches
Buffer pool (DFT_MON_BUFPOOL) = OFF
Lock (DFT_MON_LOCK) = OFF
Sort (DFT_MON_SORT) = OFF
Statement (DFT_MON_STMT) = OFF
Table (DFT_MON_TABLE) = OFF
Timestamp (DFT_MON_TIMESTAMP) = ON
Unit of work (DFT_MON_UOW) = OFF
Monitor health of instance and databases (HEALTH_MON) = ON

SYSADM group name (SYSADM_GROUP) =
SYSCTRL group name (SYSCTRL_GROUP) =
SYSMAINT group name (SYSMAINT_GROUP) =
SYSMON group name (SYSMON_GROUP) =

Client Userid-Password Plugin (CLNT_PW_PLUGIN) =
Client Kerberos Plugin (CLNT_KRB_PLUGIN) = IBMkrb5
Group Plugin (GROUP_PLUGIN) =
GSS Plugin for Local Authorization (LOCAL_GSSPLUGIN) =
Server Plugin Mode (SRV_PLUGIN_MODE) = UNFENCED
Server List of GSS Plugins (SRVCON_GSSPLUGIN_LIST) =
Server Userid-Password Plugin (SRVCON_PW_PLUGIN) =
Server Connection Authentication (SRVCON_AUTH) =
NOT_SPECIFIED
Cluster manager (CLUSTER_MGR) =

Database manager authentication (AUTHENTICATION) = SERVER
Cataloging allowed without authority (CATALOG_NOAUTH) = NO
Trust all clients (TRUST_ALLCLNTS) = YES
Trusted client authentication (TRUST_CLNTAUTH) = CLIENT
Bypass federated authentication (FED_NOAUTH) = NO

Default database path (DFTDBPATH) = F:

Database monitor heap size (4KB) (MON_HEAP_SZ) =
AUTOMATIC(768)
Java Virtual Machine heap size (4KB) (JAVA_HEAP_SZ) = 2048
Audit buffer size (4KB) (AUDIT_BUF_SZ) = 0
Size of instance shared memory (4KB) (INSTANCE_MEMORY) =
AUTOMATIC(7391029)
Backup buffer default size (4KB) (BACKBUFSZ) = 1024
Restore buffer default size (4KB) (RESTBUFSZ) = 1024

Agent stack size (AGENT_STACK_SZ) = 16
Minimum committed private memory (4KB) (MIN_PRIV_MEM) = 32
Private memory threshold (4KB) (PRIV_MEM_THRESH) = 20000

Sort heap threshold (4KB) (SHEAPTHRES) = 0

Directory cache support (DIR_CACHE) = YES

Application support layer heap size (4KB) (ASLHEAPSZ) = 15
Max requester I/O block size (bytes) (RQRIOBLK) = 32767
Query heap size (4KB) (QUERY_HEAP_SZ) = 1000

Workload impact by throttled utilities(UTIL_IMPACT_LIM) = 10

Priority of agents (AGENTPRI) = SYSTEM
Agent pool size (NUM_POOLAGENTS) =
AUTOMATIC(100)
Initial number of agents in pool (NUM_INITAGENTS) = 0
Max number of coordinating agents (MAX_COORDAGENTS) =
AUTOMATIC(200)
Max number of client connections (MAX_CONNECTIONS) =
AUTOMATIC(MAX_COORDAGENTS)

Keep fenced process (KEEPFENCED) = YES
Number of pooled fenced processes (FENCED_POOL) =
AUTOMATIC(MAX_COORDAGENTS)
Initial number of fenced processes (NUM_INITFENCED) = 0

Index re-creation time and redo index build (INDEXREC) = RESTART

Transaction manager database name (TM_DATABASE) = 1ST_CONN
Transaction resync interval (sec) (RESYNC_INTERVAL) = 180

SPM name (SPM_NAME) = DOK20011
SPM log size (SPM_LOG_FILE_SZ) = 256
SPM resync agent limit (SPM_MAX_RESYNC) = 20
SPM log path (SPM_LOG_PATH) =

NetBIOS Workstation name (NNAME) =

TCP/IP Service name (SVCENAME) = db2c_DB2
Discovery mode (DISCOVER) = SEARCH
Discover server instance (DISCOVER_INST) = ENABLE

Maximum query degree of parallelism (MAX_QUERYDEGREE) = ANY
Enable intra-partition parallelism (INTRA_PARALLEL) = NO

Maximum Asynchronous TQs per query (FEDERATED_ASYNC) = 0

No. of int. communication buffers(4KB)(FCM_NUM_BUFFERS) =
AUTOMATIC(4096)
No. of int. communication channels (FCM_NUM_CHANNELS) =
AUTOMATIC(2048)
Node connection elapse time (sec) (CONN_ELAPSE) = 10
Max number of node connection retries (MAX_CONNRETRIES) = 5
Max time difference between nodes (min) (MAX_TIME_DIFF) = 60

db2start/db2stop timeout (min) (START_STOP_TIME) = 10


Output from 'list node directory':
SQL1037W The node directory is empty. SQLSTATE=01606

Output from 'list db directory':

System Database Directory

Number of entries in the directory = 4

Database 1 entry:

Database alias = RMDBP1
Database name = RMDBP1
Local database directory = F:
Database release level = c.00
Comment =
Directory entry type = Indirect
Catalog database partition number = 0
Alternate server hostname =
Alternate server port number =

Database 2 entry:

Database alias = ICMNLSDB
Database name = ICMNLSDB
Local database directory = F:
Database release level = c.00
Comment =
Directory entry type = Indirect
Catalog database partition number = 0
Alternate server hostname =
Alternate server port number =

Database 3 entry:

Database alias = RMDB
Database name = RMDB
Local database directory = F:
Database release level = c.00
Comment =
Directory entry type = Indirect
Catalog database partition number = 0
Alternate server hostname =
Alternate server port number =

Database 4 entry:

Database alias = TASKSDB
Database name = TASKSDB
Local database directory = F:
Database release level = c.00
Comment =
Directory entry type = Indirect
Catalog database partition number = 0
Alternate server hostname =
Alternate server port number =

Output from 'db2set -all':
[e] DB2PATH=C:\Program Files\IBM\SQLLIB
[i] DB2ACCOUNTNAME=DOK10011\db2admin
[i] DB2INSTOWNER=DOK10011
[i] DB2PORTRANGE=60000:60003
[i] DB2_GRP_LOOKUP=local
[i] DB2INSTPROF=C:\PROGRAMDATA\IBM\DB2\DB2COPY1
[i] DB2COMM=TCPIP
[g] DB2_EXTSECURITY=YES
[g] DB2SYSTEM=DOK10011
[g] DB2PATH=C:\Program Files\IBM\SQLLIB
[g] DB2INSTDEF=DB2
[g] DB2CLIINIPATH=C:\Program Files\IBM\SQLLIB
[g] DB2ADMINSERVER=DB2DAS00


Regards
Odd Bjørn A.
ErgoGroup AS, Oslo, Norway
From: Helmut Tessarek on
Hi,

Thanks for the info. Your settings are pretty much default, so I'm not quite
sure yet, why you get this warning.

I assume you don't get this warning for all users, just for some of them, right?

The return code means:

Identifer:
SQLO_BAD_PSW
Identifer (without component):
SQLZ_RC_BADPSW

Description:
The password is not valid for the specified userid

I have to investigate further. I'll keep you posted.


--
Helmut K. C. Tessarek
DB2 Performance and Development

/*
Thou shalt not follow the NULL pointer for chaos and madness
await thee at its end.
*/
From: Helmut Tessarek on
Hi Odd,

> I have to investigate further. I'll keep you posted.

That should never have happened. Could you delete db2diag.log, start a db2
trace, do a connect with the bad password and send me the trace and
db2diag.log (zipped)?

Please format the trace as fmt and flw.

Thanks.

--
Helmut K. C. Tessarek
DB2 Performance and Development

/*
Thou shalt not follow the NULL pointer for chaos and madness
await thee at its end.
*/