IZ33692: WHEN A USER BELONGS TO GROUP WITH MORE THAN 2000 MEMBERS, GROUP LOOKUP FAILS WITH SQL30082N, RC=26 ON CONNECTING TO DATABASE

DB2 Version 9.1 Fix Pack 7  for Linux, UNIX and Windows
DB2 Version 9.1 Fix Pack 7a  for Linux, UNIX and Windows
DB2 Version 9.1 Fix Pack 8  for Linux, UNIX and Windows
DB2 Version 9.1 Fix Pack 9  for Linux, UNIX and Windows
DB2 Version 9.1 Fix Pack 10  for Linux, UNIX and Windows
DB2 Version 9.1 Fix Pack 11  for Linux, UNIX and Windows
DB2 Version 9.1 Fix Pack 12  for Linux, UNIX and Windows

APAR status

• Closed as program error.

Error description

• When a user belongs to group with more than 2000 members, group
  lookup fails with SQL30082N, RC=26 when connecting to database.
  The typical error meesage when running 'db2 connect to ...':
  SQL30082N Attempt to establish connection failed with security
  reason "26". ("SERVER SECURITY PLUGIN ERROR") SQLSTATE=08001
  
  Errors in db2diag.log:
  
  2007-04-27-16.35.02.756678-240 I6002C247          LEVEL: Severe
  PID     : 36032                TID : 1
  FUNCTION: DB2 Common, Security, Users and Groups, secLogMessage,
  probe:20
  DATA #1 : String, 42 bytes
  secGetGroups failed with rc = -2029059908
  
  2007-04-20-15.36.52.236638-240 I138571C242        LEVEL: Severe
  PID     : 19594                TID : 1
  FUNCTION: DB2 Common, Security, Users and Groups,
  secLogMessage,probe:20DATA #1 : String, 37 bytes
  osplugin_get_groups rc = -2029059908
  
  db2trc showed sqloGetGroupAttribById returned:
  
  rc = 0x870F00BC = -2029059908 = SQLO_BUFFSMALL
  

Local fix

Problem summary

• Users Effected:
  When a user belongs to group with more than 2000 members.
  
  Problem Description:
  When a user belongs to group with more than 2000 members, group
  lookup fails with SQL30082N, RC=26 when connecting to database.
  
  
  Problem Summary:
  WHEN A USER BELONGS TO GROUP WITH MORE THAN 2000 MEMBERS, GROUP
  LOOKUP FAILS WITH SQL30082N, RC=26 ON CONNECTING TO DATABASE.
  

Problem conclusion

• defect  wsdbu00529542
  CSD     First fixed in DB2 UDB Version V9.1, FixPak 7
  module  engn_sqo
  

Temporary fix

• Upgrade to DB2 Version V9.1, FixPak 7
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  IZ00470

• APAR is sysrouted TO one or more of the following:

  IZ33698

Fix information

• Fixed component name

  DB2 CEE AIX

• Fixed component ID

  5765F3000

Applicable component levels

• R910 PSY

     UP