Windows 2003 R2 Server
DB2 Express C Version 9

DB21085I Instance "DB2" uses "32" bits and DB2 code release
"SQL09012" with
level identifier "01030107".
Informational tokens are "DB2 v9.1.200.166", "special_17369",
"WR21380_17369",
and Fix Pack "2".

DB2 is installed on the server and a database has been created. I am
able to log on to the database using the db2admin user or any other
administrator on the server locally using

First open the db2cmd.exe, then issue a
db2 connect to MYDB user db2admin using mypassword

successfully. As soon as I switch to a user that has simple user
rights, or is a power user and issue a connect nothing happens:

C:\>db2 connect to MYDB user db2admin using mypassword

C:\>db2 connect to MYDB user db2admin using mypassword

No error is reported in the db2cmd window. No error is reported in the
Windows error log. No error is reported in the db2diag.log. The
connect is issued in a terminal window on the same server with a non-
admin user logged on.

Client and Server are on the same machine. I have tested using the
LOCAL connection as well as a TCP/IP connection from the client to the
server.

Does anyone have any idea what could be wrong here?
Do I have to give the normal user accounts any special rights for
these to use the DB2 CLI interface? I have never had a similar problem
in previous installations of DB2 v9 clients.

Note, I am able to open the db2cmd.exe with a user with non-admin
rights. As a test I have set up the SQLLIB directory so that all users
have all rights on this directory, this did not resolve my problem.

Regards

Rudolf Bargholz

Hi Rudolf.

It might be that the admin users that you are referring to, are the
users that belong the the group defined in the DBM as SYSADM_GROUP
members. They generally bypass all database level restrictions. Meaning
they can access objects they do not have the explicit access to.
For any other user, the permissions have to be granted.
Check which group defines your non-admin users as users able to use the
database and check if they have CONNECT permissions to start with. If
so, check if they have permission to use anything at all.
If not, log in as an admin the perform the necessary grants.

I hope this helps a bit.

Regards,

-R-


Rudolf Bargholz wrote:

Hi Jurgen,

Thanks for the advice. Turns out the solution was to add all the users
that were logging on to the terminal server without admin right to the
DB2USERS group. After adding the users to the DB2USERS group the
connect funtionen correctly.

Regards

Rudolf Bargholz