Informix

 View Only
  • 1.  Cannot create surrogate user on IDS 12.10FC14

    Posted Tue March 31, 2020 08:44 AM
    I try to create surrogate user on IDS(on Windows). When i run CREATE USER SUGER WITH PASSWORD "pass" PROPERTIES user "username"; in dbaccess . DBAccess send me error  26729: The user username is not in the /etc/informix/allowed.surrogates file.
    Where do i put this file(allowed.surrogates) in windows installation of IDS to find dbaccess  and create surrogate user.

    ------------------------------
    iliyan iliev
    developer MoI-DCIS
    ------------------------------

    #Informix


  • 2.  RE: Cannot create surrogate user on IDS 12.10FC14

    Posted Tue March 31, 2020 09:46 AM
    Hi iliyan,
    Did you create and use a user in Informix in the Windows environment?
    I thought the usermapping feature would work on Windows so far, but if you look at the 'Internal users' page in the knowledge center, there is no explanation on how to set it up on Windows.
    https://www.ibm.com/support/knowledgecenter/SSGU8G_12.1.0/com.ibm.sec.doc/ids_am_045.htm

    ------------------------------
    SangGyu Jeong
    Software Engineer
    Infrasoft
    Seoul Korea, Republic of
    ------------------------------



  • 3.  RE: Cannot create surrogate user on IDS 12.10FC14

    Posted Tue March 31, 2020 11:23 AM
    Hi , SangGyu
    When i install IDS. Install create user in informix who mapped with user of OS.


    ------------------------------
    iliyan iliev
    developer MoI-DCIS
    ------------------------------



  • 4.  RE: Cannot create surrogate user on IDS 12.10FC14

    Posted Tue March 31, 2020 11:54 AM
    @iliyan iliev
    The 'informix' user is automatically created when Informix is installed.
    In the Windows environment, users cannot be created using the CREATE USER statement, so the user account of the OS must be used. ​​

    ------------------------------
    SangGyu Jeong
    Software Engineer
    Infrasoft
    Seoul Korea, Republic of
    ------------------------------



  • 5.  RE: Cannot create surrogate user on IDS 12.10FC14

    IBM Champion
    Posted Tue March 31, 2020 12:40 PM
    Just in case this is unclear:
    • that user informix created by the installer is a regular OS level user (either local or in Windows domain), not a database server level user.
    • that's the default Informix way of user authentication: the database users are OS users and they're authenticated against the OS (either pre-authenticated if logged on to the OS locally, or having to provide an existent OS user and its OS password).


    ------------------------------
    Andreas Legner
    ------------------------------



  • 6.  RE: Cannot create surrogate user on IDS 12.10FC14

    Posted Tue March 31, 2020 11:05 AM

    Iliyan and SangGyu:

    I am not certain this feature ever worked under Windows OS.  Typically I rely on the Windows passthrough authentication and either create a local Windows user account or an Active Directory domain account depending on how my customer site is set up. 

    I happened to be setting up a new system and tested the surrogate user command as Iliyan did.  I got the following after creating the allowed.surrogates file:

    in DBACCESS:

    CREATE USER SUGER WITH PASSWORD "pass123ABC!" PROPERTIES user "username";

    26729: The user username is not in the /etc/informix/allowed.surrogates file

    From the command line:

    D:\Program Files\IBM\Informix\12.10>onmode -cache surrogates
    Warning: Loading entries in the surrogates file /etc/informix/allowed.surrogates into surrogate cache
    resulted in errors. Check the message log for more information.


    In the IDS message log after running onmode -cache surrogates:  
    10:22:55 Warning: Unable to open the surrogates file /etc/informix/allowed.surrogates.
    10:22:55 Warning: Loading entries from the surrogates file /etc/informix/allowed.surrogates into surrogate cache
    failed. Surrogate cache does not exist.



    ------------------------------
    Best regards,
    Martin Graney
    Queues Enforth Development, Inc.
    Stoneham, MA 02148
    ------------------------------



  • 7.  RE: Cannot create surrogate user on IDS 12.10FC14

    Posted Tue March 31, 2020 12:34 PM
    Hi Martin.
    Thank you for sharing your test results. It is strange to display the /etc directory in the error 26729 message even in the Windows environment.

    ------------------------------
    SangGyu Jeong
    Software Engineer
    Infrasoft
    Seoul Korea, Republic of
    ------------------------------



  • 8.  RE: Cannot create surrogate user on IDS 12.10FC14

    Posted Wed April 01, 2020 09:45 AM
    Hi Martin,
    In  saw in "ids_machine_notes_12.10.txt" file for Informix 12.10.xC14 on WINDOWS:

    Features not supported
    ======================
    .......

    4. Mapped users

    and "CREATE USER" statement in documentation is only for UNIX and Linux.
    So, I think you are right - this feature doesn't worked under Windows OS.

    Regards,

    ------------------------------
    Boycho Velkov
    ------------------------------



  • 9.  RE: Cannot create surrogate user on IDS 12.10FC14

    Posted Wed April 01, 2020 10:03 AM
    @Boycho Velkov
    There was a phrase in the machine notes about the Mapped user feature limitation!
    From the machine notes in 11.70, the contents are listed, but so far, I have never had any doubts that it won't work on Windows.

    ------------------------------
    SangGyu Jeong
    Software Engineer
    Infrasoft
    Seoul Korea, Republic of
    ------------------------------