IC92235: MISLEADING ERROR -952 REPORTED TO ONLINE.LOG FOR PROXIED CONNECTIONS AND SECURITY_LOCALCONNECTION > 0

APAR status

• Closed as fixed if next.

Error description

• If your application connects to the Informix Server through some
  kind of proxy (Informix Connection manager in proxy mode, SSH
  tunnel or some 3rd party product), the connection to the
  database is internally done under the ID of the user running the
  proxy. If you have at the same time the SECURITY_LOCALCONNECTION
  parameter in the $ONCONFIG file set to 1 or 2, the application
  connections made by the users are refused as the ID of the user
  who is running the application doesn't match the ID of the user
  who is trying to connect to the database. This is expected
  behavior. However, the error reported in such a scenario to the
  online.log file is
  
  -952    User (<user-id>)'s password is not correct for the
  database server.
  
  The password that is specified for the server computer in your
  ~/.netrc file or in the USER clause of a CONNECT statement is
  incorrect. The
  database server does not accept (or cannot find) your account
  password. Check that your password is specified correctly, and
  try again. This message appears with Version 6.0 and later.
  
  which is misleading (as it doesn't report the real problem) and
  can make the investigation of various network/authorization
  problems harder then it could be.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Users with proxy connections who have inappropriately set    *
  * onconfig value SECURITY_LOCALCONNECTION                      *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See Error Description                                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Upgrade to IBM Informix 11.70.xC9.                           *
  ****************************************************************
  

Problem conclusion

Temporary fix

Comments

• This change enables users to better understand when connection
  failures are occurring because of the setting of onconfig
  parameter SECURITY_LOCALCONNECTION.
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels

• RB70 PSN

     UP

• RB70 PSY

     UP