Skip to Content
avatar image
Former Member

PAM authentication failed on linux while installing MaxDB Database

Seeing following errors in sapinst.log

INFO 2007-03-29 16:25:23

Account sqdln1 already exists.

ERROR 2007-03-29 16:25:25

The dbmcli call for action DB_CREATE failed. Check the logfile XCMDOUT.LOG.

ERROR 2007-03-29 16:25:25

The dbmcli call for action DB_CREATE failed. Check the logfile XCMDOUT.LOG.

ERROR 2007-03-29 16:25:25

FCO-00011 The step sdb_create_db_instance with step key |NW_Doublestack_DB|ind|ind|ind|ind|0|0|NW_CreateDBandLoad|ind|ind|ind|ind|9|0|NW_CreateDB|ind|ind|ind|ind|0|0|NW_ADA_DB|ind|ind|ind|ind|6|0|SdbPreInstanceDialogs|ind|ind|ind|ind|3|0|SdbInstanceDialogs|ind|ind|ind|ind|1|0|SDB_INSTANCE_CREATE|ind|ind|ind|ind|0|0|sdb_create_db_instance was executed with status ERROR .

And the XCMDOUT.LOG has following error:

ERR

-24875,ERR_NEEDADMI: The operating system user is not a member of the database administrators group

-24994,ERR_RTE: Runtime environment error

5,PAM authentication failed: Authentication failure

Here's the snippet from /etc/group

sapinst:x:500:root,ln1adm

sapsys:x:501:

sdba:*:502:sqdln1,root,sdb,ln1adm

Here's the relevant part from the /etc/passwd file:

ln1adm:x:500:501:SAP System Administrator:/home/ln1adm:/bin/csh

sdb:x:501:502:Database Software Owner:/home/sdb:/bin/csh

sqdln1:x:502:501:Owner of Database Instance LN1:/home/sqdln1:/bin/csh

Any idea why PAM is not authenticating the root user correctly? Even manually firing the dbmcli

gives the same error:

  1. /sapdb/programs/bin/dbmcli -n sapln1db -R /sapdb/LN1/db db_create LN1 CONTROL,vcs12345 sqdln1,vcs12345

ERR

-24875,ERR_NEEDADMI: The operating system user is not a member of the database administrators group

-24994,ERR_RTE: Runtime environment error

5,PAM authentication failed: Authentication failure

Please help.

Satish/

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

3 Answers

  • Mar 29, 2007 at 12:31 PM

    you will start trhe installation as root, but during the installation process root uses different user ids in order to install the different parts...

    -> what about sapsys? the <sid>adm's primary group is always sapsys...

    i just had a glimpse into my docs (sap erp.2005 on aix and maxdb 7.6) and my groups were as follows:

    sapinst <ID> <sid>adm, sqd<sid>, sdb

    sapsys <ID> <sid>adm, sqd<sid>

    sdba <ID> <sid>adm, sqd<sid>, sdb

    maybe it helps 😉

    GreetZ, AH

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Mar 30, 2007 at 04:38 AM

    The group and user entries are fine. I have modified the user and groups but still getting the same authentication error. I have disabled MD5 password authentication and now its just shadow. But still the problem persists.

    Please help.

    <XCMDOUT.LOG>

    ERR

    -24875,ERR_NEEDADMI: The operating system user is not a member of the database administrators group

    -24994,ERR_RTE: Runtime environment error

    5,PAM authentication failed: Authentication failure

    </XCMDOUT.LOG>

    </etc/passwd>

    ln1adm:x:500:501:SAP System Administrator:/home/ln1adm:/bin/csh

    sdb:x:501:502:Database Software Owner:/home/sdb:/bin/csh

    sqdln1:x:502:501:Owner of Database Instance LN1:/home/sqdln1:/bin/csh

    </etc/passwd>

    </etc/group>

    sapinst:x:500:ln1adm,root,sdb

    sapsys:x:501:root,sdb

    sdba:x:502:sqdln1,root,sdb

    </etc/group>

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Mar 30, 2007 at 06:02 AM

    Yes the users can login interactively. I am on RedHat Enterprise Linux 4 Update 4. This is really annoying to get stuck with all the PAM errors. 😔

    Add comment
    10|10000 characters needed characters exceeded