[fix]-What to look for when the following message is encountered
Scenario:
1. Expired password.
2. Insufficient user rights for DB access.
3. Invalid encryption scheme.
Error:
Connection authorization failure occurred. Reason: Password expired. ERRORCODE=-4214, SQLSTATE=28000.
Error message:
[jcc][t4][2010][11246][4.7.89]
Connection authorization failure occurred.
Reason: Local security service non-retryable error.
ERRORCODE=-4214, SQLSTATE=28000
Fix 1:
Perform the below checks:
1. Ensure that the DB service is in Running state.
2. Verify the database user ID & password, and provide enough rights for the appropriate DB.
3. With expired user password follow the below criteria:
a. Update the password.
b. Extend the password expiration date.
Fix 2:
1. Stop Director Server with command:
# smstop
2. Run changePassword to get the updated password. When the Director manages passwords use the below command:
Run <director-root>/bin/changePassword.sh
# /opt/ibm/director/bin/changePassword.sh
3. Use the changePassword tool from the below link to avoid password issues:
http://pic.dhe.ibm.com/infocenter/director/pubs/topic/com.ibm.director.cli.helps.doc/fqm0_r_cli_changepassword.html
3. Use below command to stop ISD managed DB2:
# /opt/ibm/director/bin/smdb stop
4. With below command start the ISD managed DB2:
# /opt/ibm/director/bin/smdb start
6. Verify the connection:
# /opt/ibm/director/bin/smdbcli.sh connect
5. Start Director Server with the command:
# smstart
Fix 3:
Verify the RACF security settings.
Fix 4:
1. Ensure that required settings are made related to the environment variables and completed with system restart.
2. Check for JDBC drivers’ version and update it.
Fix 5:
1. The below update must be made to the file /etc/pam.d/common-password via a text editor.
From:
[success=1 default=ignore] pam_unix.so obscure<strong> sha512</strong>
To:
[success=1 default=ignore] pam_unix.so obscure <strong>md5</strong>
2. Now execute run passwd db2inst1 and add new or same password.
3. Execute ConfigEngine.sh create-database again.
4. Now, ensure that the file /etc/pam.d/common-password is updated back to sha512.
In Fedora 10 edit the file /etc/pam.d/system-auth.
Related Tags:
- Password expired.ERRORCODE=4214
- windows - How to reset/change expired password for DB2 Content
- database - DB2 Connection Authorization Faliure Occured Reason
- Connection authorization failure (error -4214)