PAM authentication failed on linux while installing MaxDB Database

[Former Member]

Seeing following errors in sapinst.log

INFO 2007-03-29 16:25:23

Account sqdln1 already exists.

ERROR 2007-03-29 16:25:25

The dbmcli call for action DB_CREATE failed. Check the logfile XCMDOUT.LOG.

ERROR 2007-03-29 16:25:25

The dbmcli call for action DB_CREATE failed. Check the logfile XCMDOUT.LOG.

ERROR 2007-03-29 16:25:25

FCO-00011 The step sdb_create_db_instance with step key |NW_Doublestack_DB|ind|ind|ind|ind|0|0|NW_CreateDBandLoad|ind|ind|ind|ind|9|0|NW_CreateDB|ind|ind|ind|ind|0|0|NW_ADA_DB|ind|ind|ind|ind|6|0|SdbPreInstanceDialogs|ind|ind|ind|ind|3|0|SdbInstanceDialogs|ind|ind|ind|ind|1|0|SDB_INSTANCE_CREATE|ind|ind|ind|ind|0|0|sdb_create_db_instance was executed with status ERROR .

And the XCMDOUT.LOG has following error:

ERR

-24875,ERR_NEEDADMI: The operating system user is not a member of the database administrators group

-24994,ERR_RTE: Runtime environment error

5,PAM authentication failed: Authentication failure

Here's the snippet from /etc/group

sapinst:x:500:root,ln1adm

sapsys:x:501:

sdba:*:502:sqdln1,root,sdb,ln1adm

Here's the relevant part from the /etc/passwd file:

ln1adm:x:500:501:SAP System Administrator:/home/ln1adm:/bin/csh

sdb:x:501:502:Database Software Owner:/home/sdb:/bin/csh

sqdln1:x:502:501:Owner of Database Instance LN1:/home/sqdln1:/bin/csh

Any idea why PAM is not authenticating the root user correctly? Even manually firing the dbmcli

gives the same error:

1. /sapdb/programs/bin/dbmcli -n sapln1db -R /sapdb/LN1/db db_create LN1 CONTROL,vcs12345 sqdln1,vcs12345

ERR

-24875,ERR_NEEDADMI: The operating system user is not a member of the database administrators group

-24994,ERR_RTE: Runtime environment error

5,PAM authentication failed: Authentication failure

Please help.

Satish/

[Former Member]

Yes the users can login interactively. I am on RedHat Enterprise Linux 4 Update 4. This is really annoying to get stuck with all the PAM errors.

[roland_mallmann]

Hi,

which MaxDB version (incl. Buildnr) are you using?

Regards,

Roland

[Former Member]

The group and user entries are fine. I have modified the user and groups but still getting the same authentication error. I have disabled MD5 password authentication and now its just shadow. But still the problem persists.

Please help.

<XCMDOUT.LOG>

ERR

-24875,ERR_NEEDADMI: The operating system user is not a member of the database administrators group

-24994,ERR_RTE: Runtime environment error

5,PAM authentication failed: Authentication failure

</XCMDOUT.LOG>

</etc/passwd>

ln1adm:x:500:501:SAP System Administrator:/home/ln1adm:/bin/csh

sdb:x:501:502:Database Software Owner:/home/sdb:/bin/csh

sqdln1:x:502:501:Owner of Database Instance LN1:/home/sqdln1:/bin/csh

</etc/passwd>

</etc/group>

sapinst:x:500:ln1adm,root,sdb

sapsys:x:501:root,sdb

sdba:x:502:sqdln1,root,sdb

</etc/group>

[andreas_herzog]

hmm...maybe i overread it...but which unix you're on?

-> is it possible that an interactive login is not possible for any of those users?

GreetZ, AH

[andreas_herzog]

you will start trhe installation as root, but during the installation process root uses different user ids in order to install the different parts...

-> what about sapsys? the <sid>adm's primary group is always sapsys...

i just had a glimpse into my docs (sap erp.2005 on aix and maxdb 7.6) and my groups were as follows:

sapinst <ID> <sid>adm, sqd<sid>, sdb

sapsys <ID> <sid>adm, sqd<sid>

sdba <ID> <sid>adm, sqd<sid>, sdb

maybe it helps

GreetZ, AH