Informix

 View Only

  • 1.  err = -956 not trusted by the server.

    Posted Mon February 21, 2022 08:54 AM
    Hello,

    We are receiving err -956 error when we connect from one informix instance to another. It is working for long time and suddenly this error started showing up.
    No changes are made in any files(/etc/hosts.equiv or sqlhosts) by Unix or DBA teams.

    We fixed the issue once by bouncing one DB server for first time. it worked for few days and started showing up after few days.
    Second time, i fixed the issue by setting up REMOTE_SERVER_CFG file dynamically without bouncing for an informix instance. Now it looks stable from a week.

    However i wonder what is causing the issue? whatelse should be checked from Unix or DB side.
    Instances are running on VMs. Any changes in underlying hardware or Vcenter would cause this issue?


    Informix V12.1

    11:21:11 listener-thread: err = -956: oserr = 0: errstr = informix@xx.xx.xx.xx[xxxxx]: Client host or user informix@xx.xx.xx.xx[xxxxx] is not trusted by the server.


    ------------------------------
    Cherry
    ------------------------------

    #Informix


  • 2.  RE: err = -956 not trusted by the server.

    IBM Champion
    Posted Mon February 21, 2022 09:07 AM
    Is the IP and host name as per onstat -m in the hosts.equiv file from 
    REMOTE_SERVER_CFG
    Cheers
    Paul

    Paul Watson
    Oninit LLC
    +1-913-387-7529
    www.oninit.com
    Oninit®️ is a registered trademark of Oninit LLC



    Original Message


  • 3.  RE: err = -956 not trusted by the server.

    Posted Mon February 21, 2022 09:14 AM
    Hello Paul,

    only host name is mentioned in hosts.equiv file and however it is matching with output of onstat -m.

    ------------------------------
    Cherry
    ------------------------------

    Original Message


  • 4.  RE: err = -956 not trusted by the server.

    IBM Champion
    Posted Mon February 21, 2022 09:21 AM
    I normally just add exactly what the onstat -m says, typically the ip, the host name and the FQDN

    Cheers
    Paul

    Paul Watson
    Oninit LLC
    +1-913-387-7529
    www.oninit.com
    Oninit®️ is a registered trademark of Oninit LLC



    Original Message


  • 5.  RE: err = -956 not trusted by the server.

    Posted Mon February 21, 2022 10:02 AM
    Ok.. i found it is a good suggestion to add the ip, the host name and the FQDN to hosts.equiv file.

    ------------------------------
    Cherry
    ------------------------------

    Original Message


  • 6.  RE: err = -956 not trusted by the server.

    Posted Tue February 22, 2022 06:54 AM
    Hello,

    /etc/hosts.equiv is getting cached during Informix startup. when we make changes to this file on server, is there any way to load this file into Informix without  bouncing the instance?


    ------------------------------
    Cherry
    ------------------------------

    Original Message


  • 7.  RE: err = -956 not trusted by the server.

    IBM Champion
    Posted Tue February 22, 2022 07:31 AM
    If you have REMOTE_SERVER_CFG set the file is in $INFORMIXDIR/etc and will be updated.  Even the OS one shouldn't need an engine bounce. A re-caching can be seen in the online log

    Cheers
    Paul

    Paul Watson
    Oninit LLC
    +1-913-387-7529
    www.oninit.com
    Oninit®️ is a registered trademark of Oninit LLC



    Original Message


  • 8.  RE: err = -956 not trusted by the server.

    IBM Champion
    Posted Tue February 22, 2022 07:33 AM
    You can try setting NS_CACHE to all zeros with onmode -wm, wait a few seconds then set it back to it's normal setting:

    onmode -wm NS_CACHE='host=0,service=0,user=0,group=0,sqlhosts=0'
    sleep 5
    onmode -wm NS_CACHE='host=900,service=900,user=900,group=900,sqlhosts=900'

    I'm not sure whether or not NS_CACHE also affects the caching of the hosts.equiv mapping, but that would be my first try. Can any HCL folk jump in on this? Vlad? JC?

    Art

    ------------------------------
    Art S. Kagel, President and Principal Consultant
    ASK Database Management Corp.
    www.askdbmgt.com
    ------------------------------

    Original Message


  • 9.  RE: err = -956 not trusted by the server.

    IBM Champion
    Posted Tue February 22, 2022 07:58 AM
    Updated within a minute on one of my test servers

    Cheers
    Paul

    Paul Watson
    Oninit LLC
    +1-913-387-7529
    www.oninit.com
    Oninit®️ is a registered trademark of Oninit LLC



    Original Message


  • 10.  RE: err = -956 not trusted by the server.

    IBM Champion
    Posted Tue February 22, 2022 08:06 AM

    tootles[informix] date
    Tue Feb 22 08:03:07 AM EST 2022
    tootles[informix] vi $INFORMIXDIR/etc/hosts.equiv
    tootles[informix] onstat -m

    HCL OneDB Server Version 2.0.1.0 -- On-Line -- Up 17:41:27 -- 62005120 Kbytes
    2022-02-22 08:03:13

    Message Log File: /home/informix/live/tmp/online.log

    06:36:23 ??Maximum server connections 2
    06:36:23 ??Checkpoint Statistics - Avg. Txn Block Time 0.000, # Txns blocked 0, Plog used 73, Llog used 56

    07:21:23 ??Checkpoint Completed: ??duration was 0 seconds.
    07:21:23 ??Tue Feb 22 - loguniq 7, logpos 0x14121018, timestamp: 0xd726734 Interval: 3027

    07:21:23 ??Maximum server connections 2
    07:21:23 ??Checkpoint Statistics - Avg. Txn Block Time 0.000, # Txns blocked 0, Plog used 19, Llog used 9

    07:36:23 ??Checkpoint Completed: ??duration was 0 seconds.
    07:36:23 ??Tue Feb 22 - loguniq 7, logpos 0x14153018, timestamp: 0xd726b8b Interval: 3028

    07:36:23 ??Maximum server connections 2
    07:36:23 ??Checkpoint Statistics - Avg. Txn Block Time 0.000, # Txns blocked 0, Plog used 67, Llog used 50

    08:03:07 ??Trusted host cache successfully built:/home/informix/live/etc/hosts.equiv.
    08:03:07 ??Trusted host cache successfully built:/home/informix/live/etc/hosts.equiv.

    --  Paul Watson Oninit LLC +1-913-387-7529  Oninit is a Registered Trademark of Oninit LLC



    Original Message