PM05451: PROVIDE OPTION TO SELECT WHETHER DB2 CANCEL THREAD COMMAND ISSUED UNDER USER OR TASK AUTHORITY 10/03/29 PTF PECHANGE

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• PK76483 enhanced OMPE such that when the product is configured
  for external security, the userid (user id) of the logged on
  user is passed to DB2. The DB2 authority to CANCEL THREAD is
  based on the privileges granted to the logged on user's DB2
  authid.
  
  When OMPE is configured for internal security the OMPE task id
  is passed to DB2 and the authority to cancel a thread is based
  on the authority granted to the OMPE task.
  
  Prior to PK76483 the CANCEL THREAD command was always issued
  under the authid of the OMPE task.
  
  This APAR will provide a user configurable option to allow the
  OMPE task to always issue the CANCEL THREAD under the authid of
  the OMPE task even when OMPE is configured for external
  security.
  
  The OMPE command, TCMD which results in the DB2 CANCEL THREAD
  being issued remains protected as before. If internal security
  is in effect, the user must know the password for the security
  level defined to TCMD. If external security is employed the user
  id logged on must have the appropriate security system access to
  the resource under which the TCMD is protected.
  
  PK76483 implemented this change in V410. The change is rolled
  forward in the base code of V420
  
  Additional keywords
  KO2SUPDI KO2SUPD RACF Secondary authid KO2RACFX KO2RACFA ACF Top
  Secret
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: OMEGAMON XE for DB2 PE/DB2PM                 *
  *                 users of component:                          *
  *                 -   Classic Interface                        *
  *                 -   ICAT                                     *
  ****************************************************************
  * PROBLEM DESCRIPTION: After PK76483, VTAM Classic Cancel      *
  *                      Thread TCMD command uses authorization  *
  *                      of signed on user. However the          *
  *                      authorization of the started task may   *
  *                      be required.                            *
  ****************************************************************
  * RECOMMENDATION: Apply this PTF                               *
  *                                                              *
  ****************************************************************
  PROBLEM SUMMARY:
  Some users would prefer to grant authority to the OMEGAMON
  started task to cancel threads instead of granting authority to
  each user signed on.
  
  PROBLEM CONCLUSION:
  With the new option TCMDSECU=STC in Panel KD261PA the OMEGAMON
  server authorization will be used instead of that of the signed
  on user as introduced by PK76483.
  

Problem conclusion

• With the new option TCMDSECU=STC in Panel KD261PA the OMEGAMON
  server authorization will be used instead of that of the signed
  on user as introduced by PK76483.
  
  KEYWORDS : TCMDSECU=STC  KD261PA PK76483
             THREAD TCMD COMMAND
  

Temporary fix

• *********
  * HIPER *
  *********
  

Comments

• ž**** PE10/03/01 PTF IN ERROR. SEE APAR PM08608  FOR DESCRIPTION
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UK54334 PM07797

Modules/Macros

• KD2BHELP KD2CPFMI KD2DDICT KD2HOMS  KD2HOMSA
  KD2HOMSB KD2HOMSC KD2SBATO KD261CVS KD261PA  KD261SB1 KD2610SP
  KO2OTHGB
  

Fix information

• Fixed component name

  OM XE DB2PE/PM

• Fixed component ID

  5655OPE00

Applicable component levels

• R420 PSY UK54334

     UP10/02/17 P F002

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.