Return
-
Title
Is the Centrify plugin supported by the DB2 cartridge? -
Description
Is the Centrify plugin for DB2 supported by the Foglight DB2 cartridge?
When a new DB2 instance wants to be added in Foglight, the following error may appear:
ERROR com.quest.qsi.fason.core.collection.processor.InstanceProcessor - Failed to run DB2InstanceInfoProcessor processor of DB2_Maintenance collection.java.lang.RuntimeException: Failed to execute collection [DB2_Maintenance], reason=[Foglight][DB2 JDBC Driver][DB2]Access to Remote Database "" failed. Reason: Local Security Service non-retryable error.- Profile:DB2Profile{host='', port='', databaseName='', username='', password='', socketTimeout (sec)='900, authenticationType='SERVER'}Caused by: com.quest.qsi.fason.core.errorhandling.AgentConnectionException: [Foglight][DB2 JDBC Driver][DB2]Access to Remote Database "" failed. Reason: Local Security Service non-retryable error.- Profile:DB2Profile{host=', port='', databaseName='', username=', password='', socketTimeout (sec)='900, authenticationType='SERVER'}The connection works outside of Foglight, using the DB2 Command Line Processor.DB2 is version 9.7.x LUW and the UserID used in the connection is the instance owner.When using the DB2 external connection tool of Foglight, the connection also fails.The error "ADM13001E" can be seen in db2diag log.When executing the command db2 get dbm cfg in DB2 command line processor, the following configuration can be seen:Client Userid-Password Plugin (CLNT_PW_PLUGIN) =Client Kerberos Plugin (CLNT_KRB_PLUGIN) =Group Plugin (GROUP_PLUGIN) = centrifydc_db2groupGSS Plugin for Local Authorization (LOCAL_GSSPLUGIN) =Server Plugin Mode (SRV_PLUGIN_MODE) = UNFENCEDServer List of GSS Plugins (SRVCON_GSSPLUGIN_LIST) =Server Userid-Password Plugin (SRVCON_PW_PLUGIN) = centrifydc_db2userpassServer Connection Authentication (SRVCON_AUTH) = NOT_SPECIFIEDCluster manager (CLUSTER_MGR) = -
Cause
The DB2 instance was configured with the Identity Broker Service for IBM DB2 plugin. This Centrify plugin was not configured correctly. -
Resolution
WORKAROUND:
- Verify the configuration of the Centrify plugin integration with a DB2 administrator.
- As per recommendations of IBM, it's suggested to un-install the Centrify plugin and remove the reference to the instance.
STATUS
The 3rd party DataDirect driver (made by Progress) used in the 5.6.10.3 and higher DB2 cartridges is currently not compatible with the Certify plugin begin in use in early 2015.The 5.6.10.3 cartridge was released in early 2015. DB2 cartridges released prior to 5.6.10.3 may be compatible with the Centrify plugin.Centrify is presently unsupported by the third-party maker of the DB2 driver used by the Foglight DB2 driver. -
Additional Information
After have un-installed the centrify plugin, the connection was established successfully in Foglight. For more information: IBM_Article_21995267