RE: Linked Servers to UDB via IBMDADB2, access denied



A clue was found.
This will work when you remote desktop to the server and log in as either
the administrators account to the account in which the database engine is
running under. But it will not work with any other account, even if that
account is part of the administrators group.
What is different about the "Administrator" account from an a account that
is simply a member of the Administor"s" group?
The account used by the sqlserver engine is also part of the administrators
group.

"DBA449" wrote:

A linked server definition in MSSQL 2000, can succcessfully authenticates
with a UDB database v8.1.0.61 on a SUN box, but then gets access denied,
eventhough the account being used has DBADM authority. However, I can
successfully authenticate and query the same UDB databases from a DOS DB2
command prompt on the same windows 2003 server.

See example below and results:
On the windoes 2003 server...
set nocount on
EXEC sp_addlinkedserver
@server = 'srvr1833',
@srvproduct = 'aeplm148',
@provider = 'IBMDADB2',
@datasrc = 'aeplm148',
@location = 'srvr1833.dbms.gdomain.com:18330',
@catalog = 'aeplm148'
go
EXEC sp_addlinkedsrvlogin
@rmtsrvname = 'srvr1833',
@useself = false,
@rmtuser = 'User1',
@rmtpassword = 'Password1'
go
EXEC sp_serveroption
@server = 'srvr1833',
@optname = 'data access',
@optvalue = 'true'
go
SELECT *
FROM srvr1833.aepcclm148.epl.mline

Results:
Server: Msg 7399, Level 16, State 1, Line 1
OLE DB provider 'IBMDADB2' reported an error. Access denied.
OLE DB error trace [OLE/DB Provider 'IBMDADB2' IUnknown::QueryInterface
returned 0x80070005: Access denied.].


Yet on a DOS command line using db2...


db2 => connect to aeplm148 user User1 using Password1

Database Connection Information

Database server = DB2/SUN 8.1.6
SQL authorization ID = DGIEPL
Local database alias = AEPLM148

db2 => list database directory

System Database Directory

Number of entries in the directory = 1

Database 1 entry:

Database alias = AEPLM148
Database name = AEPLM148
Node name = XX
Database release level = a.00
Comment =
Directory entry type = Remote
Catalog database partition number = -1
Alternate server hostname =
Alternate server port number =

db2 => list node directory show detail

Node Directory

Number of entries in the directory = 1

Node 1 entry:

Node name = XX
Comment =
Directory entry type = LOCAL
Protocol = TCPIP
Hostname = srvr1833.dbms.gdomain.com
Service name = 18330
Remote instance name =
System =
Operating system type = None

db2 => select * from aeplm148.epl.mline fetch first 2 rows only

I_PLANT_PL I_STDY I_PRES_LINE I_PRES_TYP N_LINE_NAME
L_PLAN I_LOAD_TYP I_AUTOM_TYP I_PRES_LINE_SIZE I_PRES_MECHNM_TYP
L_
TCH_PL_LINE_TO_PLT_LINE Q_SHUT_HGT Q_NMBR_OF_STATNS I_UPD_TID D_UPD_LAST
X_COMN

More results followed but not pasted....

Can anybody offer some suggestions?
I've run out of ideas.

I know the linked server is authenticating properly because when I put in a
bad password, the error message returned says, bad password or userid.

One would assume that the problem is on the UDB server only. Yet I can
access the data from the Windows 2003 server using the UDB client in a DOS
prompt.
Both techniques authenticate properly. Only the linked server gets access
denied.

The driver version on the Windows 2003 Server is DB2 v8.1.12.99


.



Relevant Pages

  • Re: ADP/SQL Server 2000 Security Problem
    ... The server is running Windows 2003. ... I'll also test using a SQL Server account and see what happens. ... it worked in MSDE 2000. ... I have not created any new accounts for the production database. ...
    (microsoft.public.access.adp.sqlserver)
  • Re: Help with WSS 3.0 Server Farm Config - Backend SQL 2005
    ... I had to use only "sharepoint" to get the ... What interest me though is that the database get created but fails after ... Virtual Server with DBSVR ... an account local to the WEBSVR) to create and access the SQL server, ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Restored Server but SharePoint refusing admin access
    ... > SID/BID or remove the user from the database and add it again. ... >, In SQL Configuration Manager go to SQL> Server ... > you had) you cannot access the database from that account. ... > newly added administrator account (for me, since I added a new admin ...
    (microsoft.public.windows.server.sbs)
  • RE: Single Sign On Database Connection Issues
    ... SSOSrv, I'm having difficulty on the "Manage Server Settings for Single ... to define the necessary database. ... So after assigning the appropriate security to the user account, ...
    (microsoft.public.sharepoint.portalserver)
  • Re: Keep getting this error when trying to use Web Parts in VS2005 Beta 2. Why?
    ... > setup another database. ... >> operation or the server is not responding. ... This is necessary because the web server account will ... >> This is necessary because the web server account will attempt to ...
    (microsoft.public.dotnet.framework.aspnet)