Topic
  • 3 replies
  • Latest Post - ‏2013-04-04T11:28:23Z by SystemAdmin
SystemAdmin
SystemAdmin
340 Posts

Pinned topic ILMT 7.5 local users account

‏2012-11-09T10:51:16Z |
Hi did anybody successfully moved local accounts created during installation of ILMT (tlmsvr,db2admin) to domain account - I mean switch local account to domain account?
many thx in advice
Damian
Updated on 2013-04-04T11:28:23Z at 2013-04-04T11:28:23Z by SystemAdmin
  • SystemAdmin
    SystemAdmin
    340 Posts

    Re: ILMT 7.5 local users account

    ‏2012-11-21T20:01:54Z  
    Hi Damian,

    Yes, you did! :-)

    Sharing with others the procedure from our mail thread:

    1. After installation, switching the rights of DB2 instance to domain user
    http://pic.dhe.ibm.com/infocenter/db2luw/v10r1/index.jsp?topic=%2Fcom.ibm.db2.luw.admin.sec.doc%2Fdoc%2Fc0023391.html

    2. Switching Local Policy for processes of DB2 to domain user

    3. Changing user in service

    4. Granting to new user the dbadmin rights to TLMA database
    db2 GRANT DBADM ON DATABASE TO MY_GROUP\MY_USER
    http://pic.dhe.ibm.com/infocenter/db2luw/v10r1/topic/com.ibm.db2.luw.sql.ref.doc/doc/r0000958.html

    5. ILMT side: changing tlmsrv in WAS console in section:
    Global security > JAAS - J2C authentication data > LMT_JAAS_Auth
    User ID: MY_GROUP\MY_USER
    Password: *********

    6. Remove local users and use just domain users according to company policy.

    Regards,
    Michał Klak
    ILMT Central Team


    The postings on this site are my own and do not necessarily represent IBM's positions, strategies or opinions.
    Please contact product support if you need IBM's official advice.

    If you want to extend your knowledge of ILMT, you may check this site:
    https://www.ibm.com/developerworks/mydeveloperworks/wikis/home/wiki/IBM+License+Metric+Tool
  • SystemAdmin
    SystemAdmin
    340 Posts

    Re: ILMT 7.5 local users account

    ‏2013-02-27T15:23:40Z  
    Hi Damian,

    Yes, you did! :-)

    Sharing with others the procedure from our mail thread:

    1. After installation, switching the rights of DB2 instance to domain user
    http://pic.dhe.ibm.com/infocenter/db2luw/v10r1/index.jsp?topic=%2Fcom.ibm.db2.luw.admin.sec.doc%2Fdoc%2Fc0023391.html

    2. Switching Local Policy for processes of DB2 to domain user

    3. Changing user in service

    4. Granting to new user the dbadmin rights to TLMA database
    db2 GRANT DBADM ON DATABASE TO MY_GROUP\MY_USER
    http://pic.dhe.ibm.com/infocenter/db2luw/v10r1/topic/com.ibm.db2.luw.sql.ref.doc/doc/r0000958.html

    5. ILMT side: changing tlmsrv in WAS console in section:
    Global security > JAAS - J2C authentication data > LMT_JAAS_Auth
    User ID: MY_GROUP\MY_USER
    Password: *********

    6. Remove local users and use just domain users according to company policy.

    Regards,
    Michał Klak
    ILMT Central Team


    The postings on this site are my own and do not necessarily represent IBM's positions, strategies or opinions.
    Please contact product support if you need IBM's official advice.

    If you want to extend your knowledge of ILMT, you may check this site:
    https://www.ibm.com/developerworks/mydeveloperworks/wikis/home/wiki/IBM+License+Metric+Tool
    Hi Michał Klak,

    I also need to switch from a local db2admin account to a domain account.

    I'm having problems to follow the instructions.

    1. I cannot find any information about switching to a domain user in the link.

    2. Where do I change this? Is it in Local Security Policy?

    Best Regards,
    Tomas
  • SystemAdmin
    SystemAdmin
    340 Posts

    Re: ILMT 7.5 local users account

    ‏2013-04-04T11:28:23Z  
    Hi Michał Klak,

    I also need to switch from a local db2admin account to a domain account.

    I'm having problems to follow the instructions.

    1. I cannot find any information about switching to a domain user in the link.

    2. Where do I change this? Is it in Local Security Policy?

    Best Regards,
    Tomas
    Hi Tomas,

    Ad1 During "switching" local Db2 groups to domain resources You need to execute this command:

    db2extsec /u mydomain\db2users /a mydomain\db2admns

    command is located in bin/sh scripts in DB2 in bin folder

    Ad2 this is a command form DB2 not Local Policy

    Best regards Damian
    Good luck