• Please help support our sponsors by considering their products and services.
    Our sponsors enable us to serve you with this high-speed Internet connection and fast webservers you are currently using at ADSM.ORG.
    They support this free flow of information and knowledge exchange service at no cost to you.

    Please welcome our latest sponsor Tectrade . We can show our appreciation by learning more about Tectrade Solutions
  • Community Tip: Please Give Thanks to Those Sharing Their Knowledge.

    If you receive helpful answer on this forum, please show thanks to the poster by clicking "LIKE" link for the answer that you found helpful.

  • Community Tip: Forum Rules (PLEASE CLICK HERE TO READ BEFORE POSTING)

    Click the link above to access ADSM.ORG Acceptable Use Policy and forum rules which should be observed when using this website. Violators may be banned from this website. This notice will disappear after you have made at least 3 posts.

Use Domain Or Local Account For ISP Initial Configuration?

jayp2200

ADSM.ORG Member
Joined
Apr 12, 2011
Messages
38
Reaction score
0
Points
0
Location
GA
OK so this should be a simple thing, but I'm drawing a blank for some reason...

Our security team requires the use of domain service accounts in order to log in and install applications on our servers. For the server I am working on, the domain service account I'm using is a member of the local Administrators group. The problem is, I am trying to run the IBM Spectrum Protect Instance Configuration Wizard to create a new instance on a Windows 2012 R2 server, but it just hangs after the first "Next" button click.

If I set up a local admin on the server and log into that account when running the Configuration Wizard, I am able to go through the wizard normally. So my question is... how can I make it so that the domain service account has the same rights to the server as a local admin account would?
 

RecoveryOne

ADSM.ORG Senior Member
Joined
Mar 15, 2017
Messages
294
Reaction score
61
Points
0
If I'm understanding you want a domain account to be a local admin of a machine?
Why not add the domain user to the local administrators group?

Anyhow, I'd just double check everything against the installation guide for Windows, so you don't run into pain later on.
 

marclant

ADSM.ORG Moderator
Joined
Jun 16, 2006
Messages
3,590
Reaction score
575
Points
0
Location
Canada
Website
www-947.ibm.com

jayp2200

ADSM.ORG Member
Joined
Apr 12, 2011
Messages
38
Reaction score
0
Points
0
Location
GA
OK so I ended up convincing our security team to allow me to use a local account on the server. I was able to get the config done once I logged in as that user, so now I'm at the point where I am ready to perform the DB restore. However, when I run the restore db command I am now getting the error: ANR2969E Database restore terminated. DB2 sqlcode -2033 DB2 sqlerrmc: 168.

Any ideas how I can fix this issue?
 

jayp2200

ADSM.ORG Member
Joined
Apr 12, 2011
Messages
38
Reaction score
0
Points
0
Location
GA
OK so I ended up convincing our security team to allow me to use a local account on the server. I was able to get the config done once I logged in as that user, so now I'm at the point where I am ready to perform the DB restore. However, when I run the restore db command I am now getting the error: ANR2969E Database restore terminated. DB2 sqlcode -2033 DB2 sqlerrmc: 168.

Any ideas how I can fix this issue?

Well, never mind. I ended up commenting out the "passwordaccess generate" line in the tsmdbmgr.opt file, and then the db restore went on through.
 

jayp2200

ADSM.ORG Member
Joined
Apr 12, 2011
Messages
38
Reaction score
0
Points
0
Location
GA
Well, never mind. I ended up commenting out the "passwordaccess generate" line in the tsmdbmgr.opt file, and then the db restore went on through.

...or so I thought. Got some further errors so I uncommented the line. Back to getting the same DB2 error. After doing some further research, it mentions the possibility of having the wrong Spectrum Protect client version installed. So on the previous server instance, I had version 8.1.6.0 installed but on this new one I have version 8.1.6.1. Does this really matter?
 

jayp2200

ADSM.ORG Member
Joined
Apr 12, 2011
Messages
38
Reaction score
0
Points
0
Location
GA

I'm running Windows Server 2012 R2, not AIX. I've already done the same steps though, using this page: https://www.ibm.com/support/knowled...srv.install.doc/t_srv_prep_dbmgr-windows.html

I uninstalled the 8.1.6.1 version, then used this post to remove some related files: https://www.ibm.com/support/pages/a...estorerollforward-terminated-db2-sqlcode-2079

I then tried downloading the 8.1.6.0 version of the BA client from the FTP site, but when I try to install it, it fails and in the log it shows a 1603 error. From what I understand of Windows installer errors, that usually means some piece is missing or incorrect, whether it be a file or a directory path. If I try reinstaling 8.1.6.1, it goes through just fine, so I have no idea what is wrong with the 8.1.6.0 installer.
 

jayp2200

ADSM.ORG Member
Joined
Apr 12, 2011
Messages
38
Reaction score
0
Points
0
Location
GA
I'm running Windows Server 2012 R2, not AIX. I've already done the same steps though, using this page: https://www.ibm.com/support/knowled...srv.install.doc/t_srv_prep_dbmgr-windows.html

I uninstalled the 8.1.6.1 version, then used this post to remove some related files: https://www.ibm.com/support/pages/a...estorerollforward-terminated-db2-sqlcode-2079

I then tried downloading the 8.1.6.0 version of the BA client from the FTP site, but when I try to install it, it fails and in the log it shows a 1603 error. From what I understand of Windows installer errors, that usually means some piece is missing or incorrect, whether it be a file or a directory path. If I try reinstaling 8.1.6.1, it goes through just fine, so I have no idea what is wrong with the 8.1.6.0 installer.

OK so it turns out I also had to uninstall the IBM Spectrum Protect JVM as well before I could install the 8.1.6.0 BA client normally.

Either way, it makes no difference as I am still getting that pesky ANR2969E error.
 

marclant

ADSM.ORG Moderator
Joined
Jun 16, 2006
Messages
3,590
Reaction score
575
Points
0
Location
Canada
Website
www-947.ibm.com
Either way, it makes no difference as I am still getting that pesky ANR2969E error.
Still with sqlerrmc: 168? Becauuse the sqlerrmc, which is really a Spectrum Protect Client API return code passed back by DB2, is what determines the true cause.
 

jayp2200

ADSM.ORG Member
Joined
Apr 12, 2011
Messages
38
Reaction score
0
Points
0
Location
GA
Still with sqlerrmc: 168? Becauuse the sqlerrmc, which is really a Spectrum Protect Client API return code passed back by DB2, is what determines the true cause.

Yes, still the same 168 code.

I even ended up installing version 7.1.3.0 of the BA client, since it had the 32-bit and 64-bit API files, then installed the 8.1.6.0 version on top of it. Thought maybe it needed some older 32-bit files, but nope, still the same 168 error code no matter what.
 

marclant

ADSM.ORG Moderator
Joined
Jun 16, 2006
Messages
3,590
Reaction score
575
Points
0
Location
Canada
Website
www-947.ibm.com
Restoring on same machine or new machine?
If a new machine, is it the same version of the client and server as on the old one?
 

jayp2200

ADSM.ORG Member
Joined
Apr 12, 2011
Messages
38
Reaction score
0
Points
0
Location
GA
Restoring on same machine or new machine?
If a new machine, is it the same version of the client and server as on the old one?

I am trying the restore on the same physical machine, using the same computer name, same user account, etc. The only thing that is different from before is that I do not have access to version 8.1.6 of the server software, so I'm running version 8.1.5 currently. The only copy we had of the 8.1.6 server software was lost when our previous server was a victim of a cyberattack. We are not currently paying for maintenance, so I am not able to get into the Passport Advantage site and download 8.1.6 again... *sigh*
 

marclant

ADSM.ORG Moderator
Joined
Jun 16, 2006
Messages
3,590
Reaction score
575
Points
0
Location
Canada
Website
www-947.ibm.com
You won't be able to restore a 8.1.6 backup onto a 8.1.5 server. Need to restore onto the same version.
 

jayp2200

ADSM.ORG Member
Joined
Apr 12, 2011
Messages
38
Reaction score
0
Points
0
Location
GA
You won't be able to restore a 8.1.6 backup onto a 8.1.5 server. Need to restore onto the same version.
Is there anywhere else I can download the 8.1.6 version? If I can perform the restore, it had a backup of the 8.1.6 but of course that doesn't help us now...
 

jayp2200

ADSM.ORG Member
Joined
Apr 12, 2011
Messages
38
Reaction score
0
Points
0
Location
GA
Will that work though, if the backup was done with 8.1.6.0?
Nope, still didn't work after installing the version 8.1.6.1 that you sent me. Still getting the same error. In the db2diag.log file, it shows this, which of course is the same error:

SQL2033N An error occurred while accessing TSM during the processing of a database utility. TSM reason code: "168".
 

jayp2200

ADSM.ORG Member
Joined
Apr 12, 2011
Messages
38
Reaction score
0
Points
0
Location
GA
Nope, still didn't work after installing the version 8.1.6.1 that you sent me. Still getting the same error. In the db2diag.log file, it shows this, which of course is the same error:

SQL2033N An error occurred while accessing TSM during the processing of a database utility. TSM reason code: "168".
In addition, now if I try to connect to the database using the DB2 command window, I can't even do that... I get the message SQL1013N The database alias name or database name "TSMDB1" could not be found. SQLSTATE=42705
 

Advertise at ADSM.ORG

If you are reading this, so are your potential customer. Advertise at ADSM.ORG right now.

UpCloud high performance VPS at $5/month

Get started with $25 in credits on Cloud Servers. You must use link below to receive the credit. Use the promo to get upto 5 month of FREE Linux VPS.

The Spectrum Protect TLA (Three-Letter Acronym): ISP or something else?

  • Every product needs a TLA, Let's call it ISP (IBM Spectrum Protect).

    Votes: 18 18.4%
  • Keep using TSM for Spectrum Protect.

    Votes: 60 61.2%
  • Let's be formal and just say Spectrum Protect

    Votes: 12 12.2%
  • Other (please comement)

    Votes: 8 8.2%

Forum statistics

Threads
31,732
Messages
135,270
Members
21,730
Latest member
fahim
Top