Trusted system and DB2

[Ricardo R Peirano]

Hi
I have a HP-UX 11.11 trusted system with an UDB DB2 version 7.2 on it. One of the users I have, had a too short passwd (3 characters) so I changed it but the DB2 didn´t realised of it and the user can´t connect to the DB2. I was looking up the reason of this behavior and I found that the old passwd (the shorter) is in the /etc/passwd file. When I copy the new passwd string from the /tcb/files.. file into the /etc/passwd file, the user can connect to DB2 with the new passwd.
Can anybody help me with this probl

[aparna challagulla]

hi,

How did u change the password. at the unix level or in the DB2 database.
It seems that /etc/passwd file was not updated properly. We have a similar setup and there is no problem with passwords.
rgds,
aparna

[Ricardo R Peirano]

I changed the passwd with the passwd command at OS level. The DB2 people tell me that DB2 trust in the OS user authentication.

[Michael Steele_2]

When you cat /etc/passwd do you see "*" in the second fragment of each line?

If you don't, if you see a string of encrypted garbage, then not trusted.

"*" - trusted.

[aparna challagulla]

hi,

Just now tested on our development machine i was able to connect to the db2 database after changing the users password.
check /etc/passwd file using /usr/sbin/pwck command.

HTH
aparna

[Ricardo R Peirano]

Michael
I already know that, but the thing is that the system is in trusted system (I have a tcb directory, I can use the getprpw command, all the other users has an '*' into the second field of /etc/passwd file) but DB2 didnt realised of it. Even more, when the old passwd is into the second field of /etc/passwd and the new in the /tcb/files.. file I can log in into the OS (with a ssh) with the new passwd and I can connect to the DB2 with the old passwd. For some reason that I can´t imagine DB2 didn´t realise that the system is trusted but at OS level the system is trusted and is working w

[Ricardo R Peirano]

Aparma
first that all tahnk you for your time.
I already did a pwck -s and it didnt report any problem. Just when I have teh old passwd string in /etc/passwd it told me that these users (they are two users really) didnt have an '*' in the second field

[Ricardo R Peirano]

I finally found the problem. It was that the utility db2ckpw from UDB DB2 had it's security as r-xr-xr-- where it had to have r-s-r-x-r-- root , so since the files in /tcb/files... could not been read for anybody the db2ckpw couldn´t resolve the authentication.

Regards and thank you all

Ricardo