IDS Forum

RE: not trusted

Posted By: Jeff Filippi
Date: Monday, 22 September 2014, at 6:35 p.m.

In Response To: Re: not trusted (Fernando Nunes)

For the -951 errors, try adding the following to your onconfig, make sure
you add a carriage return at the end of the line.
This helps for users connecting into the database server.

CHECKALLDOMAINSFORUSER 1

Jeff

-----Original Message-----
From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of
Fernando Nunes
Sent: Monday, September 22, 2014 5:14 PM
To: ids@iiug.org
Subject: Re: not trusted [33848]

If you have a -951 error you should have a message in online.log. I'd like
to know what was it. It's probably a -956 or a -951.
Any error -951, -952 and -956 generates a -951 on the client side (for
security reasons we don't want to tell the client exactly what is the
problem).

For now ignore the mention to .netrc... it's not related to your problem.

As for that entry... "lo_ifx" is one of your server's ALIAS... check the
$ONCONFIG. Did you create an instance automatically during the installation?

Regards

On Mon, Sep 22, 2014 at 6:35 PM, BillHatVerizon <garage_dba@verizon.net>
wrote:

> I set REMOTE_SERVER_CFG as you said and that error went away.
> Now when I run ontape -a I get this:
>
> Performing automatic backup of logical logs.
> could not fork server connection, SQLCODE -951 Program over.
>
> The error 951 says:
> User username is not known on the database server.
> The database server that you tried to access does not accept either
> your user ID, the login name that is specified for the desired server
> host in your ~/.netrc file, or the user name that is specified in the
> USER clause of a CONNECT statement. If you are explicitly specifying
> your user name in the ~/.netrc file or in a CONNECT statement, check
> that the name is correct.
>
> Where is the .netrc file on Windows? in the registry?
> Also please note that my sqlhosts.[servicename] has a new line that I
> did not have on another install of 12.10c4:
> lo_ifx olsoctcp 127.0.0.1 lo_ifx
>
> This seems to be for large objects which I don't deal with.
> Is this related? how do I get rid of it?
>
> -----Original Message-----
> From: Fernando Nunes
> Sent: Sunday, September 21, 2014 4:44 PM
> To: ids@iiug.org
> Subject: Re: not trusted [33834]
>
> Somehow the Informix process doesn't see it self as that name...
> That's easy to happen if you have multiple TCP interfaces (I assume
> you're connecting through TCP).
> It would be interesting to see your "sqlhosts" configuration.
> The message cleary says that the server resolved the IP address from
> where it's receiving the connection as "LastDitch.home" while the
> client software thinks the hostname is the short name (LastDitch).
> I honestly would have to test something.... Depending on the version,
> Informix may require both of these to be "trusted"
>
> You may easily workaround it by creating a file in %INFORMIXDIR%\etc
> and call it (for example) instance_trusts.
>
> Inside that file put:
>
> LastDitch.home informix
> LastDitch informix
>
> and change the REMOTE_SERVER_CFG parameter to that filename:
>
> onmode -wf REMOTE_SERVER_CFG=instance_trusts
>
> Then try to connect again.
> Ideally you should solve your machine DNS issues... (or if you're not
> using DNS, the equivalent file configuration)
>
> Regards
>
> On Sun, Sep 21, 2014 at 10:02 PM, BillHatVerizon
> <garage_dba@verizon.net>
> wrote:
>
> > This concerns on IDS12.10.TC4IE on windows server 2012 R2.
> > This was a fresh install.
> > When I run ontape a I get:
> > 17:09:36 listener-thread: err = -956: oserr = 0: errstr =
> > Administrator@LastDitch.home[LastDitch]:
> >
> > Client host or user Administrator@LastDitch.home[LastDitch] is not
> > trusted by the server.
> >
> > The finderr help file says:
> > Client client-name or user is not trusted by the database server.
> > The desired database server does not consider the client computer or
> > your user ID trusted.
> >
> > This is on the server so is the client computer is the server.
> > This happens with user Administrator and user Informix.
> > They are both administrators on the server. Why would they not be
> > trusted?
> > How do I make them trusted?
> >
> >
> >
> >
>
>
>
****************************************************************************
***
> > Forum Note: Use "Reply" to post a response in the discussion forum.
> >
> >
>
> --
> Fernando Nunes
> Portugal
>
> http://informix-technology.blogspot.com
> My email works... but I don't check it frequently...
>
> --047d7b10c847bcec7d05039a3bef
>
>
>
>
****************************************************************************
***
> Forum Note: Use "Reply" to post a response in the discussion forum.
>
>
>
>
****************************************************************************
***
> Forum Note: Use "Reply" to post a response in the discussion forum.
>
>

--
Fernando Nunes
Portugal

http://informix-technology.blogspot.com
My email works... but I don't check it frequently...

--047d7b10c8478312a90503aec228

****************************************************************************
***
Forum Note: Use "Reply" to post a response in the discussion forum.

Messages In This Thread

• not trusted
  BillHatVerizon -- Sunday, 21 September 2014, at 5:02 p.m.
  • Re: not trusted
    Fernando Nunes -- Sunday, 21 September 2014, at 5:44 p.m.
    • Re: not trusted
      BillHatVerizon -- Monday, 22 September 2014, at 1:35 p.m.
      • Re: not trusted
        Fernando Nunes -- Monday, 22 September 2014, at 6:13 p.m.
        • RE: not trusted
          Jeff Filippi -- Monday, 22 September 2014, at 6:35 p.m.
        • Re: not trusted
          BillHatVerizon -- Tuesday, 23 September 2014, at 11:33 a.m.
    • Re: not trusted
      BillHatVerizon -- Monday, 22 September 2014, at 8:44 p.m.

IDS Forum is maintained by Administrator with WebBBS 5.12.