Re: JDBC error message(SOLVED) -- DOMINO400

Sometimes the communication channels aren't always they should be...

Turns out the server was upgraded from 7.0.1 FP1 to 7.0.2 over the 
weekend.  That must have impacted how the user is presented to the RDB 
entry.  Trace information shows an initial authentication attempt by the 
user profile we have specified, which did not generate any authentication 
errors.  There then was a subsequent authentication attempt by QNOTES 
which generated a security exception.  The application PF's that this web 
app access have pretty tight object level security.  The user profile we 
have specified on the connection string has explicit rights to these PF's 
while QNOTES does not.  Adding QNOTES to the authority list resolved the 
problem.

So upgrading from 7.0.1 to 7.0.2 seemed to cause the authentication 
attempt by QNOTES rather than(or in addition to) the usrprf identified on 
the connection string - I guess I'll dig into the release notes for 7.0.2 
and see if this was identified.

Thanks for everyone's help...

Bob




Chris Whisonant <Chris.Whisonant@xxxxxxxxxxxxx> 
Sent by: domino400-bounces+rlaing=gemko.com@xxxxxxxxxxxx
02/27/2007 09:26 AM
Please respond to
Lotus Domino on the iSeries / AS400 <domino400@xxxxxxxxxxxx>


To
Lotus Domino on the iSeries / AS400 <domino400@xxxxxxxxxxxx>
cc

Subject
Re: JDBC error message






Any luck with the IPL?

Just grasping at straws here, but is there an exit program specified for 
DDM now?

Check DSPNETA for "DDM request access" mine has no program specified and 
is just *OBJAUT.

Chris Whisonant
Senior Mid-Range Systems Administrator
Comporium
803-326-7270
IBM Certified Specialist -- eServer i5 iSeries Domino Technical Solutions 
V5R3
IBM eServer Certified Systems Expert - iSeries Technical Solutions V5R2
IBM Certified System Administrator - Lotus Notes and Domino 6/6.5/7
IBM Certified Associate Developer - Lotus Notes and Domino 6/6.5

domino400-bounces+chris.whisonant=comporium.com@xxxxxxxxxxxx wrote on 
02/26/2007 05:31:19 PM:

Nope -- I tried QSECOFR as the authenticating user as well and same 
message


Robert Laing
Project Manager/Solution Developer
GEMKO Information Group, Inc.
120 Church St.
Buffalo, NY 14202
(716) 854-2585 x117
email: rlaing@xxxxxxxxx
web: www.gemko.com 



rob@xxxxxxxxx 
Sent by: domino400-bounces+rlaing=gemko.com@xxxxxxxxxxxx
02/26/2007 04:58 PM
Please respond to
Lotus Domino on the iSeries / AS400 <domino400@xxxxxxxxxxxx>


To
Lotus Domino on the iSeries / AS400 <domino400@xxxxxxxxxxxx>
cc

Subject
Re: JDBC error message






Password expiration?

Rob Berendt
-- 
Group Dekko Services, LLC
Dept 01.073
PO Box 2000
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





Chris Whisonant <Chris.Whisonant@xxxxxxxxxxxxx> 
Sent by: domino400-bounces+rob=dekko.com@xxxxxxxxxxxx
02/26/2007 04:52 PM
Please respond to
Lotus Domino on the iSeries / AS400 <domino400@xxxxxxxxxxxx>


To
Lotus Domino on the iSeries / AS400 <domino400@xxxxxxxxxxxx>
cc

Fax to

Subject
Re: JDBC error message






Do you have any CPF* messages in QSYSOPR or QHST around that time?

Chris Whisonant
Senior Mid-Range Systems Administrator
Comporium
803-326-7270
IBM Certified Specialist -- eServer i5 iSeries Domino Technical

Solutions

V5R3
IBM eServer Certified Systems Expert - iSeries Technical Solutions V5R2
IBM Certified System Administrator - Lotus Notes and Domino 6/6.5/7
IBM Certified Associate Developer - Lotus Notes and Domino 6/6.5

domino400-bounces+chris.whisonant=comporium.com@xxxxxxxxxxxx wrote on 
02/26/2007 04:41:02 PM:

I have a Domino web application that's been working for years that 
accesses DB2 data on the iSeries using the JDBC Toolbox driver.

All of a sudden(or so it seems) DB2 stopped responding to the requests

from the JDBC driver with the following:

02/26/2007 16:34:22   HTTP JVM: java.sql.SQLException: The application

server rejected the connection. (General security error.)

Nothing seemingly has changed on either the Domino side or the iSeries

side.  7.0.2 and v5r4

The connection uses the default RDBDIRE and has for years.  I haven't

run

a trace yet but will do that shortly, I'm also going to IPL tonight

and

see what that does.  Anyone else seen this or have any other

suggestions

???

Thanks,
Bob
_______________________________________________
This is the Lotus Domino on the iSeries / AS400 (Domino400) mailing

list

To post a message email: Domino400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/domino400.



NOTICE: This message contains information which may be confidential. If 
the reader is neither the intended recipient nor a person responsible

for

delivering the message to the intended recipient, you are notified that 
any distribution, copying or retention of this communication is strictly

prohibited. If you have received this communication in error, please 
notify us immediately by return e-mail, telephone or facsimile. Thank

you.

_______________________________________________
This is the Lotus Domino on the iSeries / AS400 (Domino400) mailing list
To post a message email: Domino400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/domino400.


_______________________________________________
This is the Lotus Domino on the iSeries / AS400 (Domino400) mailing list
To post a message email: Domino400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/domino400.



_______________________________________________
This is the Lotus Domino on the iSeries / AS400 (Domino400) mailing list
To post a message email: Domino400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/domino400.



NOTICE: This message contains information which may be confidential. If 
the reader is neither the intended recipient nor a person responsible for 
delivering the message to the intended recipient, you are notified that 
any distribution, copying or retention of this communication is strictly 
prohibited. If you have received this communication in error, please 
notify us immediately by return e-mail, telephone or facsimile. Thank you.
_______________________________________________
This is the Lotus Domino on the iSeries / AS400 (Domino400) mailing list
To post a message email: Domino400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/domino400.