Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

DDF Security?

104 views
Skip to first unread message

mvsguy

unread,
Oct 15, 2008, 10:25:04 AM10/15/08
to
I'm getting a security error when accessing DB2 9.1 from DB2 connect
-
db2 => connect to [mainframe] user [userid] USING [password]
SQL30082N Security processing failed with reason "15" ("PROCESSING
FAILURE") SQLSTATE=08001
The mainframe spits out the following message -
DSNL030I -DB9G DSNLTSEC DDF PROCESSING FAILURE FOR 610
LUWID=GADC3343.FFFE.C325BB499FB1
AUTHID=[userid], REASON=00F30013

How can I tell what is causing the error?

Regards,
MVSGuy

mvsmsh

unread,
Oct 15, 2008, 4:36:27 PM10/15/08
to
Hi
It's hard to say what's the problem ( no more M/F DB2 in my site),
but it looks like that user is not authorized to connect to DB2 .

Please have look DSNDBM1 and DDF syslog .

Is the user_id DDF RACF user id or enduser id ?

There's good DB2 list server mainly focus on M/F ,
http://www.idugdb2-l.org/cgi-bin/wa?A0=DB2-L

mvsguy

unread,
Oct 16, 2008, 7:58:53 AM10/16/08
to
> Please have look DSNDBM1  and DDF syslog .

There's nothing in any of the started task message logs, sysout, or
the console log.

> Is the user_id DDF RACF user id or enduser id ?

I have tried both, with the same result. I've confirmed the end user
id is SYSADM, which should have all the access possible.

> There's good DB2 list server mainly focus  on M/F ,http://www.idugdb2-l.org/cgi-bin/wa?A0=DB2-L

Thank you, I wasn't aware of that one. I've posted my message there
too.

Thank you,
kk

todd...@verizon.net

unread,
Nov 12, 2008, 5:29:57 PM11/12/08
to
You need to define a profile for the subsystem(s). For instance, my
subsystems are called TEK1 and TEK2. I would execute the following:


RDEFINE DSNR TEK*.* UACC(READ)
SETR RACLIST(DSNR) REFRESH

This is documented in the admin guide here:

http://publib.boulder.ibm.com/infocenter/dzichelp/v2r2/index.jsp?topic=/com.ibm.db29.doc/db29lib.htm

Todd.

0 new messages