求助：informix权限问题：（涉及shadow文件）

fg008

环境：informix IDS 9.40.UC4 / Solaris 9
上个星期改了sqlhosts , services文件：
sqlhosts:
c5      ontlitcp    c5 CONFERLINK5
services:
CONFERLINK5 2003/tcp

重启数据库后oninit正常，isql 选择数据库时显示以下错误：
   951: Incorrect password or user  is not known on the database server.

感觉设置没问题，修改shadow权限：chmod 444 shadow
发现就正常了
问题是怎么会这样？这样的shadow权限肯定是不行的，太不安全了

ahkai

你启动数据库的用户有权限读取这个文件吗？

fg008

我用informix用户启动的，这个系统我以前是别人管的
记得原来ipcs查看，share memory的OWNER是root,group 是informix
不知道怎么启数据库是这个效果，我用root启数据库：
export ONCONFIG=onconfig.C5; export INFORMIXSERVER=c5;
export INFORMIXDIR=/usr/informix；
/usr/informix/bin/oninit
结果还是一样

fg008

不知道怎么样启动才能让信号量的owner是root

ahkai

看看oninit的权限有问题吗？

chmod 6754 $INFORMIXDIR/bin/oninit
chown root:informix $INFOMRIXDIR/bin/oninit

fg008

解决了，在IBM网站上搜了一下：
Problem
All users get error "Get Shadow password for user [username]" when connecting to database server running on Linux, HP-UX or Solaris  
  
Solution

PROBLEM

When you try to connect to the database server you get error -951, and any user that tries to connect to the database server gets the same error as well.


If the instance is up and you are trying to connect you will see the following error message:
Get Shadow Password for user [informix] failed!
Check for password aging/account lock-out.
listener-thread: err = -951: oserr = 0: errstr = informix: Incorrect password or user informix is not known on the database server.
If you are initializing for the first time you will also see the following message
Error building sysmaster database

The instance is initialized but the sysmaster database creation fails.


CAUSE

$INFORMIXDIR/bin/oninit has wrong permissions and/or attributes


SOLUTION

Assign $INFORMIXDIR/bin/oninit to user root and group informix, permissions 6754 by executing the following command as user root or user with root privileges


chown root:informix $INFORMIXDIR/bin/oninit

chmod 6754 $INFORMIXDIR/bin/oninit

COMMON PROBLEMS

Symptom: You are getting the error described above, but the cause is different from the above.


Resolution: The error indicate user access error, see link section for other reason and solutions.

fg008

谢谢，正是这个办法！！可能以前安装的有问题！

fg008

确实是安装问题，onmode等命令的owner都不是root

fg008

或者说谁误改了文件的owner