userid disabled or restricted in DB2 8.1.7

Posted on 2005-04-07
Last Modified: 2008-01-09
I am seeing a weird problem with DB2 8.1.7 When we connect to the
database using the following command in db2 CLP
db2 connect to <dbname> user <user> using <passwd>

I get the following error,
"userid disabled or restricted"

For this the DB2 suggests the following. the DB2 CLP
2.Type the command db2 connect to <dbname> user <user> using <passwd>
3.If you encounter error such as userid disabled or restricted, type
the command
        db2secv82 /u <usergroup>
4.Start the db2 (db2secv82 command stops the database)
5.They also say that this is because of the new security feature
"Enable OS Security" option during installation or migration of DB2 8.1.7

     The problem is that every time (say after a system restart)i need to
reissue this command for the users to access the db2 objects

Is there any way to permanently resolve this issue in DB2 8.1.7

Question by:nagki
    LVL 13

    Expert Comment

    Add the Everyone group to the DB2ADMNS and DB2USERS groups.
    LVL 8

    Author Comment

    Thanx for ur quick response

    I found "DB2ADMS" and "DB2USERS" groups in my computer groups list..

    But i din't find "Everyone" group "Everyone" group will exist or ur meaning is that add all the users for whom we want the previlege of accessing DB2.

    db2admin user is there in both groups..
    I logged in as db2admin..even then it's given same error

    SQL30082N  Attempt to establish connection failed with security reason "19"

    Hope this error statment may be helpful for you..
    LVL 13

    Expert Comment

    Have you added the users who will use the database to the DB2USERS group? If not, add them now.
    Next, add the users to the DB2ADMS group who will have administrative rights on the instance, database and Control Center.
    Next, with no users connected to the database, and no administrators making any other changes to the database/instance,  run this command:
    db2secv82 /u /a
    The system should now be setup properly.
    LVL 8

    Author Comment

    Hi ghp7000,

    I added the user to both groups DB2USERS AND DB2ADMS groups..

    I ran that command with no users connected to database and no administrators are making changes to database..

    After that i logged-off and logged-in again..

    Now i got new error
    SQL1042C An unexpected system error occured.

    and DB2 didn't turn up at start-up..what might be problem?

    and one more doubt will it be ok if i run that command "db2secv82 /u /a" once or need i to run that command for every reboot/logoff.

    If u want any logs/eventlogs information i can post..

    LVL 13

    Accepted Solution

    no, you shouldnt have to run the command every time.
    Are you logging on to Windows with the same user id that you are using to connect to the database? If not, log on to Windows with the same user name that is in the DB2USERS group. If that doen't work, I would try stopping and starting the instance
    re try to connect. If still same error, run these commands again
    db2secv82 /u /a, then
    db2secv82 /r
    stop and start the instance again.
    Re try to connect. You should now have "userid disabled or restricted"  error

    LVL 13

    Expert Comment

    are you sure that the user in question is not disabled on Windows?
    go to administrative tools, computer management, users and groups, highlight the user in question, right click, choose properties, make sure the account is not locked out, the password has not expired, or the account has not expired.

    Featured Post

    Enabling OSINT in Activity Based Intelligence

    Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

    Join & Write a Comment

    Recursive SQL in UDB/LUW (you can use 'recursive' and 'SQL' in the same sentence) A growing number of database queries lend themselves to recursive solutions.  It's not always easy to spot when recursion is called for, especially for people una…
    Recursive SQL in UDB/LUW (it really isn't that hard to do) Recursive SQL is most often used to convert columns to rows or rows to columns.  A previous article described the process of converting rows to columns.  This article will build off of th…
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…
    In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now