DB2數(shù)據(jù)庫連接失敗問題

DB2的一個用戶由于被頻繁的錯誤密碼重試造成失敗，但是db2diag.log里面并沒有顯示客戶端數(shù)據(jù)庫連接失敗的IP地址及其他詳細信息，沒法定位是來自哪個IP地址的連接嘗試造成的。

2020-04-01-07.20.14.418243-300 I659550E481           LEVEL: Error
PID     : 31215                TID : 139835100620544 PROC : db2ckpwd 0
INSTANCE: db2inst1             NODE : 000
HOSTNAME: xxx.xxx.xxx.xxx
EDUID   : 2                    EDUNAME: db2wdog 0 [db2inst1]
FUNCTION: DB2 UDB, oper system services, sqlo_validate_pwd, probe:99
MESSAGE : crypt() returned NULL
DATA #1 : Hexdump, 4 bytes
0x00007F2DE57D1D30 : 1600 0000                                  ....

2020-04-01-07.20.14.419077-300 I660032E498           LEVEL: Warning
PID     : 31207                TID : 139642481403648 PROC : db2sysc 0
INSTANCE: db2inst1             NODE : 000            DB   : BIDB
APPHDL  : 0-12187
HOSTNAME: xxx.xxx.xxx.xxx
EDUID   : 325                  EDUNAME: db2agent (BIDB) 0
FUNCTION: DB2 UDB, bsu security, sqlexLogPluginMessage, probe:20
DATA #1 : String with size, 65 bytes
Password validation for user biuser failed with rc = -2029059891

解決辦法

db2 connect to BIDB

db2 "create audit policy fl categories validate status both error type normal"
db2 "audit database using policy fl"

db2audit start

等待...發(fā)現(xiàn)db2diag.log中出現(xiàn)了新的 Password validation  錯誤消息

db2audit flush

db2audit archive database BIDB to /tmp/audit

db2audit extract delasc to /tmp/audit from files /tmp/audit/db2audit.db.BIDB.log.0.xxxxxx

生成了 validate.del 文件，這個文件中 顯示了客戶端的IP地址和客戶端用的user