JR29114: FIXPACK OVERRIDES EXTENDED SECURITY SETTINGS TO USE DEFAULT GROUPS, DB2ADMNS AND DB2USERS.

DB2 Version 9.5 Fix Pack 4  for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 4a for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 5 for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 6a for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 7 for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 8 for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 9 for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 10 for Linux, UNIX, and Windows

APAR status

• Closed as program error.

Error description

• FixPack installer overrides extended security settings to use
  default groups, DB2ADMNS and DB2USERS.
  Users can specify different group names from default ones at
  product installation time, for instance, MYADMNS and MYUSERS.
  However DB2 sets default DB2ADMNS and DB2USERS groups after
  applying fixpack.
  

Local fix

• db2extsec can be used to revert back to original settings, like
  as below:
  db2extsec -a MYADMNS -u MYUSERS
  Note: db2extsec fails with SQL1046N if users hit IZ12929. In
  this case db2set can be used to revert back to registry
  settings.
  db2set DB2_ADMINGROUP=MYADMNS
  db2set DB2_USERSGROUP=MYUSERS
  

Problem summary

• Users Affected:
  Users who changes group name(s) for extend security settings on
  Windows platforms.
  .
  Problem Description:
  FixPack installer overrides extended security settings to use
  default groups, DB2ADMNS and DB2USERS.
  Users can specify different group names from default ones at
  product installation time, for instance, MYADMNS and MYUSERS.
  However DB2 sets default DB2ADMNS and DB2USERS groups after
  applying fixpack.
  .
  Problem Summary:
  The default group names are coded in MSI file to install
  fixpack.
  

Problem conclusion

• Problem was first fixed in Version 9.5 FixPack 4 (s090429).
  

Temporary fix

• db2extsec can be used to revert back to original settings, like
  as below:
  db2extsec -a MYADMNS -u MYUSERS
  Note: db2extsec fails with SQL1046N if users hit IZ12929. In
  this case db2set can be used to revert back to registry
  settings.
  db2set DB2_ADMINGROUP=MYADMNS
  db2set DB2_USERSGROUP=MYUSERS
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  JR29091

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• INSTALL
  

Fix information

• Fixed component name

  DB2 UDB WSE WIN

• Fixed component ID

  5765F3501

Applicable component levels

• R950 PSN

     UP