IDS Forum

Re: cdr repair and Invalid connection-type.

Posted By: Nilesh Ozarkar
Date: Monday, 26 November 2007, at 6:53 p.m.

In Response To: Re: cdr repair and Invalid connection-type. (FRANK)

> (1) Can we avoid .netrc file to use it?

Yes, here is how you setup trusted environment for ER using s=6.
(excerpt from page ---
http://publib.boulder.ibm.com/infocenter/idshelp/v111/index.jsp?topic=/com.ibm.sec.doc/ids_am_032.html
)
When you set s=6, the Enterprise Replication or high availability cluster
connection requests are authenticated using a new mechanism. The system
administrator should create a file hosts.equiv file in the
$INFORMIXDIR/etc directory and add the names of the participating
Enterprise Replication and HDR nodes (host names, as would be found in the
third column of the INFORMIXSQLHOSTS file) in that file, one per line. The
format of the file is similar to the UNIX® /etc/hosts.equiv file. The file
should be owned by user informix, belong to group informix, and the
permissions should be restricted so that at most user informix can modify
the file (using octal permissions, one of the values 644, 640, 444, or 440
is appropriate).

> (2) what about the SQL error code and online error log?
> SQL code -232 :A SERIAL column (user_id) may not be updated.

There was a defect around this, which got fixed in later releases either
10.xC6 or 10.xC7, not sure.

> 20:16:43 listener-thread: err = -25539: oserr = 0: errstr = : Invalid
> connection-type.

Side effect of using s=6 in group, a known defect, you can workaround this
issue if you use tcp server alias instead of group name in cdr command.

HTH,

-Nilesh

ids-bounces@iiug.org wrote on 11/26/2007 02:35:57 PM:

> Nilesh,
>
> Thank you very much!!
>
> I tested your solution on Test host first. Progress made!
>
> We use s=6 to eliminate the .netrc file for ER's password requirment
> ( used to store a clear passwd, and also our Boss does not like
> setting up a trusted environment....)
>
> To test this, I temporarily put .netrc file back on to allow the
> utility to connect to the source server.
>
> The following is the output,
>
> informix@erin $ cdr repair ats --check
> ats.ncdcint_grp.osdint2_grp.D_4.071015_14:15:19.16
> Corresponding row will be updated on the source for replicate <327734>
>
> informix@erin $ cdr repair ats
> ats.ncdcint_grp.osdint2_grp.D_4.071015_14:15:19.16
> cdr error: prepare of op_stmt
> SQL code -232 :A SERIAL column (user_id) may not be updated.
>
> Looks it works fine, But the similar error message appeared in online
log,
>
> 20:16:43 listener-thread: err = -25539: oserr = 0: errstr = : Invalid
> connection-type.
>
> So, I have two more questions,
>
> (1) Can we avoid .netrc file to use it?
> (2) what about the SQL error code and online error log?
>
> Thanks again,
> Frank
>
> Attatche the ATS file and user_id is a serial number,
>
> informix@erin $ more ats.ncdcint_grp.osdint2_grp.D_4.071015_14:15:19.16
> TXH RIS
> file:/dbbackup/RepErr/ris.ncdcint_grp.osdint2_grp.D_4.071015_14:15:19.15

> has also been creat
> ed for this transaction
> ==========
> TXH Source ID:5 / Name:osdint2_grp / CommitTime:07-10-12 18:15:10
> TXH Target ID:6 / Name:ncdcint_grp / ReceiveTime:07-10-15 14:15:19
> TXH Number of rows processed when transaction was aborted:1
> TXH One or more rows in a transaction defined with tx scope were
rejected
> TXH CDR:6 (Error: Update aborted, row does not exist in target table)
> / SQL:0 / ISAM:0
> ----------
> RRH Row:1 / Replicate Id: 327734 / Table: noaa@informix.user_reg /
> DbOp:Update
> RRD 353882|test|test1|agupta1||||||||US|||2007/10/12|15|1|Y|||200
>
> Also attached the new sqlhosts
>
>
#**************************************************************************

> #
> # Licensed Material - Property Of IBM
> #
> # "Restricted Materials of IBM"
> #
> # IBM Informix Dynamic Server
> # (c) Copyright IBM Corporation 1996, 2004 All rights reserved.
> #
> # Title: sqlhosts
> # Description: erin database machine's sqlhost
> #
>
#**************************************************************************

> # IANA (www.iana.org) assigned port number/service names for Informix:
> # sqlexec 9088/tcp
> # sqlexec-ssl 9089/tcp
>
> osdint2_grp group - - i=5
> osdint2_er onsoctcp dora-dat online9173
> s=6,g=osdint2_grp
> osdint2_tcp onsoctcp dora-dat online9153 g=osdint2_grp
>
> ncdcint_grp group - - i=6
> ncdcint_er onsoctcp erin-dat online9190
> s=6,g=ncdcint_grp
> ncdcint_tcp onsoctcp erin-dat online9193 g=ncdcint_grp
> ncdcint onipcshm erin-dat service9193 g=ncdcint_grp
>
> On Nov 26, 2007 1:17 PM, Nilesh Ozarkar <nilesho@us.ibm.com> wrote:
> > FRANK,
> >
> > When you use security option s=6 in the sqlhosts file to indicate that
the
> > corresponding port accepts only HDR and ER connection requests, any
other
> > type of connection request either from applications or cdr utility
will be
> > rejected with error -25539.
> >
> > Add the TCP dbserveralias to the ncdcprd_grp server group, then cdr
> > utility will work. For e.g.
> >
> > ncdcprd_tcp onsoctcp 192.168.213.36 online9180 g=ncdcprd_grp
> >
> > HTH,
> >
> > -Nilesh
> >
> > ids-bounces@iiug.org wrote on 11/26/2007 10:11:06 AM:
> >
> > > HI, folks,
> > >
> > > We did cdr repair, but got a "Invalid connection-type.",
> > >
> > > informix@otto $ cdr repair ats --check
> > > ats.ncdcprd_grp.ngdcprd_grp.D_391.071125_18:41:11.4
> > > connect to ncdcprd_grp failed
> > > Invalid connection-type.
> > > (-25539)
> > >
> > > ncdcprd_grp is a ER group definition line in sqlhosts file( see
> > > attached sqlhosts file).
> > >
> > > IDS10 UC5 , AIX 5.3
> > >
> > > Any comments?
> > >
> > > Thanks,
> > > Frank
> > >
> > > sqlhosts,
> > >
> > >
> >
#**************************************************************************

> >
> > > #
> > > # Licensed Material - Property Of IBM
> > > #
> > > # "Restricted Materials of IBM"
> > > #
> > > # IBM Informix Dynamic Server
> > > # (c) Copyright IBM Corporation 1996, 2004 All rights reserved.
> > > #
> > > # Title: sqlhosts
> > > # Description: erika database machine's sqlhost
> > > #
> > >
> >
#**************************************************************************

> >
> > > # IANA (www.iana.org) assigned port number/service names for
Informix:
> > > # sqlexec 9088/tcp
> > > # sqlexec-ssl 9089/tcp
> > >
> > > osdint1_grp group - - i=1
> > > osdint1_er onsoctcp 192.168.203.87 online9170
> > > s=6,g=osdint1_grp
> > > osdint1_tcp onsoctcp 192.168.203.87 online9150
> > >
> > > ncdcprd_grp group - - i=3
> > > ncdcprd_er onsoctcp 192.168.213.36 online9183
> > > s=6,g=ncdcprd_grp
> > > ncdcprd_tcp onsoctcp 192.168.213.36 online9180
> > > ncdcprd onipcshm 192.168.213.36 service9180
> > >
> > > ngdcprd_grp group - - i=2
> > > ngdcprd_er onsoctcp 192.168.223.5 online9193
> > > s=6,g=ngdcprd_grp
> > > ngdcprd_tcp onsoctcp 192.168.223.5 online9190
> > >
> > >
> > >
> >
> >
>
*******************************************************************************
> > > Forum Note: Use "Reply" to post a response in the discussion forum.
> > >
> >
> >
> >
>
*******************************************************************************
> > Forum Note: Use "Reply" to post a response in the discussion forum.
> >
> >
>
>
>
*******************************************************************************
> Forum Note: Use "Reply" to post a response in the discussion forum.
>

Messages In This Thread

• cdr repair and Invalid connection-type.
  FRANK -- Monday, 26 November 2007, at 11:11 a.m.
  • Re: cdr repair and Invalid connection-type.
    Nilesh Ozarkar -- Monday, 26 November 2007, at 1:17 p.m.
    • Re: cdr repair and Invalid connection-type.
      FRANK -- Monday, 26 November 2007, at 3:35 p.m.
      • Re: cdr repair and Invalid connection-type.
        Nilesh Ozarkar -- Monday, 26 November 2007, at 6:53 p.m.

IDS Forum is maintained by Administrator with WebBBS 5.12.