Did your add your user to the same installation you are connecting to
via Ingres/Net - listen address in the netu entry for your vnode should
be the same as II_INSTALLATION on the server?
Does your username contain some special characters (e.g. ".") or
spaces?
Do you have global and private entries for the same vnode - then the
private entry for the client user would take precedence.
Have you checked that the user can actually access the database on the
server:
Did you do a "sql dbname" after the logon as the user?


--
Bodo

Hi Johannes,

You've created a UNIX username...That is not creating an Ingres
Username.

You need to do...

sql iidbdb << SQL_END
create user you_username;
\p\g
\q
SQL_END

Marty

-----Original Message-----
From: info-ingres-bounces (AT) kettleriver...ting (DOT) com
[mailto:info-ingres-bounces (AT) kettleriverconsulting (DOT) com] On Behalf Of
Johannes
Sent: 05 February 2010 10:20
To: info-ingres (AT) kettleriverconsulting (DOT) com
Subject: Re: [Info-Ingres] How to create a "read only" user
withIngresNETlogin?

Hello Marty,

I checked "cat /etc/passwd" and my new User is created in the Unix
environment on the Ingres DB Server.
The password also is correct, i tried "su newuser" and entered the
password.

Johannes

_______________________________________________
Info-Ingres mailing list
Info-Ingres (AT) kettleriverconsulting (DOT) com
http://ext-cando.kettleriverconsulti...fo/info-ingres

You also need to create the user under Ingres. Ingres keeps it's own list of authorzed users.

You can use 'accessdb', option '3' and select 'create'.

Andre

-----Original Message-----
From: info-ingres-bounces (AT) kettleriver...ting (DOT) com [mailto:info-ingres-bounces (AT) kettleriverconsulting (DOT) com] On Behalf Of Johannes
Sent: February 5, 2010 5:20 AM
To: info-ingres (AT) kettleriverconsulting (DOT) com
Subject: Re: [Info-Ingres] How to create a "read only" user withIngresNETlogin?

Hello Marty,

I checked "cat /etc/passwd" and my new User is created in the Unix environment on the Ingres DB Server.
The password also is correct, i tried "su newuser" and entered the password.

Johannes

_______________________________________________
Info-Ingres mailing list
Info-Ingres (AT) kettleriverconsulting (DOT) com
http://ext-cando.kettleriverconsulti...fo/info-ingres

Johannes:

Was mkvalidpw run after the ingres installation?

At 01:23 AM 2/5/2010, you wrote:
Larry West, Financial Systems Manager
(206) 543-1644
Applied Physics
University of Washington

Ok Ok, i give you some more deatils.

The Ingres II Database is running since 4 yaers (not a fresh install),
we have one DB User,
wich is also owner of the dbs, tables, view, and so on. This user also
exists as a Unix User,
like Bodo mentioned before.
With this user it is absolutly no problem to connect via Ingres/Net
(ODBC) to the database.

Now we get a Business Inelligence System / Datawarehouse to run
statistics and reports.

For the Data Import to the DWH we would like to have a "read only"
user on our productiv Ingres Server,
to meet compliance of data security and safety.

What i did:

I installed Ingres/Net as Administrator on the DWH Server (W2K3R2 with
MSSQL2008) and configured a vnode
with Ingres Servername, old_username, old_password, WinTCP, Socket
II.
This works fine.

In the next step i created a new Unix user with password.
Then i created a new user with same name in Ingress with accessdb
command like Bodo and Andre recommended.
After this i granted access to 3 Databases (not the system DBs!) and
ran a script to grant selects on diffrent tables.

Back on the DWH Server i put the new username and new password into
the vnode fields.
Now the connection seems to connect (tried with VisualDBA) but it
freezes.
In the Ingres errlog.log isn' t any Login Failure (yesterday was,
because i had no Unix user).
If I now switch to ODBC and select this vnode, i got this error:

"Caution failed. - Database Name Browser
[CA][Ingres ODBC Driver][Ingres]User authorization check failed.
Your user identifier was not known to this installation.
Contact your system manager for further assistance."

And i cant see and select any database in the drop down field.

I have only one vnode configured on the DWH Server, and the user
credentials are private.

@Bodo: I tried to run sql dbname on the Ingres Server, but it seems
that the environment isn't configured.
I got an error of missing library paths.

@Larry: I did not run "mkvalidpw" because it isn't a fresh ingres
installation... (Shall i run it for each new user?)

Thank you all for your patience ;-)

Johannes

Probably not. If not a fresh install, then shouldn't be a
problem. I recently similar problems
but it was with a fresh install of 9.2

At 08:14 AM 2/5/2010, you wrote:
Larry West, Financial Systems Manager
(206) 543-1644
Applied Physics
University of Washington

Hi Johannes,
mkvalidpw shouldn't be the problem as you can connect with your
old/existing user via Ingres/Net.> I tried to run sql dbname on the Ingres Server, but it seems
- II_SYSTEM according your Ingres installations loacation
- PATH should contain $II_SYSTEM/ingres/bin and
$II_SYSTEM/ingres/utility
- LD_LIBRARY_PATH (or LIBPATH or SHLIB_PATH depending on your Unix
flavor) should contain $II_SYSTEM/ingres/lib
Then it should be possible to run "sql yourdb".


--
Bodo

'Let Claude Hopkins Scientific Advertising Audiobook Skyrocket Your
Sales' (http://www.claudehopkinsaudio.com)


--
anneemerick

Hi,

@ Bodo: I successfully started isql on the Ingres Database Server with
our new user,
it also was possible to do some selects like i granted the
permissions.

Is there any kind of vnode configuration with rights/restrictions
which could block
the connection from Ingres/Net client machines?

Johannes

There shouldn't be any problem with the Ingrea/Net connect, provided
your vnode on the Ingres client (which is your DWH Server) is using same
connection information (remote address, protocol, listen address) as the
one which is working.
Can you do a remote login (e.g. using "rlogin" or "telnet" - not just a
"su username") from your client to the server machine using your new
user's credentials?
Have you tested the (private) vnode using the "Test" item in "netutil"?


--
Bodo