PK85736: FPEU0101S CODE 1 DIAGNOSTIC DATA=0500007100000000, FPEV0214W RC 0, RS '00000000'X, SIGNING ON VIA PE CLIENT

Obtain the fix for this APAR.

APAR status

• Closed as unreproducible in next release.

Error description

• FPEU0101S INTERNAL ERROR IN MODULE FPEUFWMG, CODE=1, DIAGNOSTIC
  DATA=0500007100000000
  FPEV0214W DBQ2 USER AUTHORIZATION CHECK FOR USER CROSBBR FAILED
            (RC 0,RSN '00000000'X). LOGON REJECTED.
  
  In this case, the optional group ID you can specify in the PE
  client connect dialogue is not recognized by an RRSAF authroized
  SIGNON CALL during logon processing.  This is caused by the DB2
  DSN@SGN exit being modified to not consider secondary RACF
  groups.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: OMEGAMON XE for DB2 PE/DB2PM                 *
  *                 users of component:                          *
  *                 -   PE Server subtask                        *
  *                 -   Performance Expert Client                *
  ****************************************************************
  * PROBLEM DESCRIPTION: DB2 user exit DSN@SGN is modified to    *
  *                      retrieve no auth. information about     *
  *                      sec. ids to minimize RACF I/O.          *
  *                      Optional group id specified in PE       *
  *                      client logon window is not recognized   *
  *                      during RRSAF authorized signon.         *
  *                      Error message DGOK1409 is displayed by  *
  *                      PE client informing user about missing  *
  *                      authorities.                            *
  *                                                              *
  ****************************************************************
  * RECOMMENDATION: Apply this PTF                               *
  ****************************************************************
  PROBLEM SUMMARY:
  IF GROUP ID SPECIFIED DURING PE CLIENT LOGON, THEN THIS GROUP
  ID IS PASSED TO RRSAF AUTH.SIGNON CALLS IN CASE PRIM. AUTH. ID
  IS DIFFERENT FROM OMPE COLLECTOR ID.
  
  PROBLEM CONCLUSION:
  PASS GROUP ID SPECIFIED DURING PE CLIENT LOGON TO RRSAF CALL
  AUTH.SIGNON WHEN OMPE COLLECTOR PERFORMS A USER SWITCH.
  

Problem conclusion

Temporary fix

• If DB2 user exit DSN@SGN is modified in a way to not retrieve
  auth. information, assign appropriate DB2 privileges directly
  to user id.
  

Comments

• PASS GROUP ID SPECIFIED DURING PE CLIENT LOGON TO RRSAF CALL
  AUTH.SIGNON WHEN OMPE COLLECTOR PERFORMS A USER SWITCH.
  
  KEYWORDS : DSN@SGN USER EXIT MODIFICATION, MONITOR1 PRIVILEGE,
  MONITOR2 PRIVILEGE, PE CLIENT LOGON, DGOK1409
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UK46350

Modules/Macros

• DGOVMSTR DGOVRSFI FPEVZRAC
  

Fix information

• Fixed component name

  OM XE DB2PE/PM

• Fixed component ID

  5655OPE00

Applicable component levels

• R410 PSY UK46350

     UP09/05/09 P F905

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.