Set user information for the fenced user

DB2® user-defined functions (UDFs) and stored procedures can be either fenced or not fenced.

Fenced UDFs and stored procedures run under the fenced user and group. UDFs cannot access most DB2 internal control and data areas, whether inadvertently or deliberately. This separation between the data and the stored procedure or function makes fenced UDFs and stored procedures a safer choice for the database.

UDFs and stored procedures that are not fenced run in the same address space as the database manager. This results in increased database performance, but user code can accidentally or maliciously damage the database control structures. You should use stored procedures that are not fenced only when you need to maximize the performance benefits.

For security reasons, it is recommended that you do not use the instance name as the fenced user. However, if you are not planning to use UDFs or stored procedures, you can set the fenced user to the instance name instead of creating another user.

In a Network Information Services (NIS) environment, users and groups are remotely managed from an NIS server. Users and groups that you want to use with your DB2 product must exist on the NIS server prior to installation. The DB2 Setup wizard cannot create users or groups in an NIS environment.

To create a new user ID to be the fenced user ID, click New user and provide information about the fenced user in the fields.

The User name you specify must be a valid DB2 user ID. Valid DB2 user IDs:

A UID is a number that uniquely identifies a user. If you want a specific UID to be used, type it in the UID field. Otherwise, select Use default UID to use a system-generated UID.

The Group name you type can be an existing group you have defined, or a new group that will be created if it does not exist. The group must be the primary group of the user.

A GID is a number that uniquely identifies a group. If you are creating a new group and you want a specific GID to be used, type it in the GID field. Otherwise, select Use default GID to use a system-generated GID. If the group already exists, then the GID field will be filled and Use default GID will be disabled.

The Password you specify must contain 1 to 8 characters.

Confirm the password by typing it again in the Confirm password field.

Note:
The system will generate a password for new user IDs if no password is provided.

The Home directory is the directory created for the new user.

You cannot change the location of the directory once it is created.

You can type a valid new directory or click [...] to select an existing directory, although permission problems could arise if an existing directory is used.

The DB2 Setup wizard will check the user ID, home directory and password for validity. The user ID and password are stored in the operating system security files.

Click Existing user to use an existing user ID. You can type a valid User name or click [...] to select an existing user name.