For information about creating DB2 user accounts and granting privileges in DB2, go to the DB2 Information Center http://publib.boulder.ibm.com/infocenter/db2help/index.jsp.

1. Ensure that the Domino server user is a member of the group DB2DOM (SYSCTRL_GROUP).

2. Ensure that you have at least one other DB2 user account that has SYSADM authority.

3. Connect to the DB2 database using the User ID that has SYSADM authority.

4. Grant SECADM authority to the Domino server ID.

5. Connect to the DB2 database using the Domino server ID.

6. Grant SETSESSIONUSER privilege to the group, DB2DOM.

Example

Make the following assumptions:

• The local DB2 Instance, DB2, runs as the OS User ID db2admin.
• db2admin has SYSADM authority because either db2admin is in the group specified by SYSADM_GROUP=xxx in the DB2 Instance configuration, or SYSADM_GROUP= is blank and db2admin is in the local Administrators group.
• The DB2 database is named DOMINO.
• The Domino server connects to the DB2 database as the OS User ID, DominoServerUserID.
• The DB2 Instance configuration specifies SYSCTRL_GROUP=DB2DOM.
• DominoServerUserID is a member of the OS group, DB2DOM.

1. Type this command:

db2 connect to DOMINO user db2admin

3. Type this command:

db2 grant secadm on database to user DominoServerUserID

db2 connect to DOMINO user DominoServerUserID

6. Type this command:

db2 grant SETSESSIONUSER on public to group DB2DOM

Domino now has the SETSESSIONUSER privilege when needed.

If you are using an IBM® AIX® or Linux® platform, return to the roadmap topic Enabling the Domino server to communicate with the DB2 server.

See also

Enabling the Domino server to communicate with the DB2 server
Installation and setup procedures

Glossary