0

I want to use LDAP data for the authentication process in DB2.

I have already configured DB2 via PAM to retrieve the information of the NIS server that is in the ActiveDirectory. It works perfect with usernames that have 8 characters or less. I followed this instructions

$ db2 connect to sample user username using test-2014

   Database Connection Information

 Database server        = DB2/LINUXX8664 9.7.9
 SQL authorization ID   = USERNAME
 Local database alias   = SAMPLE

However, I have problems with users with longer usernames.

$ db2 connect to sample user username123 using test-2014
SQL30082N  Security processing failed with reason "24" ("USERNAME AND/OR
PASSWORD INVALID").  SQLSTATE=08001

I know that the password is correct, and it seems there is a DB2 limit on *NIX systems

Users are defined in ActiveDirectory and change the username is not possible. However, DB2 authentication could be configure in any way, the important is to use the ActiveDirectory information.

What can I do? Is there any possibility to create username aliases in ActiveDirectory?

username123 -> userna-1

Can I configure PAM differently to deal with this issue?

I am using DB2 9.7 and Active Directory 2008. I do not want to create my own security plugin for db2, but use Transparent LDAP.

AngocA
  • 111
  • 5

1 Answers1

0

The username that DB2 receives is the pre-Windows 2000 value. In that case, there could be two usernames in ActiveDirectory

  • The first one for normal usage.
  • The other one, for compatibility with other systems, like DB2.
AngocA
  • 111
  • 5