How can I create a DB2 database when logging on to a domain user?

 

Problem description: an error occurs when DB2 V9.5 is installed in the domain user environment to create a database, prompting that the user has no permissions.

 

The details are as follows:

 

When creating a database, enter db2sampl

 

 

 

D: \ Program Files \ IBM \ SQLLIB \ BIN> db2sampl

 

Creating database "SAMPLE "...

 

Attempt to create the database "SAMPLE"

 

Failed.

 

SQL1092N "XXXXX" does not have the permission to execute the request command.

 

'Db2sampl' processing complete.

 

XXXXX indicates the domain user name.

 

Solution: Check the official documentation.

 

 

 

Precautions for Windows Security

On the machine that defines the account, any valid DB2 that belongs to the local Administrators Group®Database user accounts are granted the "system management" (SYSADM) permission.

 

In Windows®In the domain environment, by default, only domain users belonging to the Administrators group on the "Domain Controller" have SYSADM permissions on the instance. Because DB2 always performs authorization on the machine that defines the account, adding a domain user to the local Administrators Group on the server does not grant the SYSADM permission to the domain user.

 

Note: In a domain environment (for example, in Windows), DB2 only authenticates the first 64 groups that meet the requirements and restrictions of the user identity. You can have more than 64 groups.

To avoid adding domain users to the Administrators group on the domain controller, create a global security group, for example, global_group, and add users who want to grant SYSADM permissions to them. Finally, to configure the DB2 server to identify users in this global group as SYSADM, enter the following command:

 

DB2STOP

DB2 update dbm cfg using SYSADM_GROUP global_group

DB2START

 

 

 

Solution:

 

1. Create a new group on domain control. The group type is global-security group such as DB2DOMINO

 

2. Add the domain users that manage the DB2 server to this group.

 

3. Execution

 

 

DB2STOP

DB2 update dbm cfg using SYSADM_GROUP DB2DOMINO

DB2START

 

4. Set the startup account of the DB2 database service in services as a domain user.

 

Everything works after the test is retested.

 

 

 

Reference:

 

Http://publib.boulder.ibm.com/infocenter/db2luw/v9/index.jsp? Topic=%2Fcom.ibm.db2.udb.admin.doc%2Fdoc%2Fc0005380.htm & resultof = % 22 windows % 22% 20% 22% E5 % 9F % 9F % E7 % 94% A8 % E6 % 88% B7 % 22% 20

 

 

 

This article is from the "jollyos" blog