PM95119: ACF2 USERS: MONITOR1 / MONITOR2 SECURITY REPORT VIOLATIONS WHEN ATTEMPTING BIND

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• The DB2 Administration Tool for z/OS calls the DB STORED
  PROCEDURE DSNWZP when producing BIND syntax. Customer who use
  CA ACF2 will see MONITOR1 and MONITOR2 violations on their
  ACF2  Security log reports as the STORED PROCEDURE DSNWZP
  requires MONITOR1 / MONITOR2 authority.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users of the DB2 Administration Tool for     *
  *                 z/OS who use the package and plan panels     *
  *                 ADB21KB 'Bind Package', ADB21PR 'Rebind      *
  *                 Application Plan', ADB21PB 'Bind             *
  *                 Application Plan' and ADB21KR 'Rebind        *
  *                 Package' to bind/rebind package/plan.        *
  ****************************************************************
  * PROBLEM DESCRIPTION: The DB2 Administration Tool for z/OS    *
  *                      calls the DB2 STORED PROCEDURE DSNWZP   *
  *                      when producing BIND syntax.  A user     *
  *                      who uses CA ACF2 as an external         *
  *                      security product will see MONITOR1      *
  *                      and MONITOR2 violations on their        *
  *                      ACF2 Security log reports as the        *
  *                      STORED PROCEDURE DSNWZP requires        *
  *                      MONITOR1 / MONITOR2 authority.          *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Program needs a flag to help customer to decide whether to
  call DSNWZP before generating bind/rebind syntax.
  

Problem conclusion

• Panel ADB2P2 'Change DB2 Admin Defaults' has been amended to
  include a new field 'Get DB2 ZPARM':
  
  Get DB2 ZPARM
  Specifies whether to call the DSNWZP stored procedure.
  
  Y YES means call DSNWZP and retrieve DB2 Zparms in the process.
  N NO means do not call DSNWZP.
  
  The default value is YES.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI15252 UI15253 UI15254

Modules/Macros

• ADBHP2   ADBR     ADB2PARM ADB2P2   ADB21KB  ADB21KR  ADB21PB
  ADB21PR
  

Fix information

• Fixed component name

  DB2 ADMIN TOOL

• Fixed component ID

  568851500

Applicable component levels

• RA10 PSY UI15252

     UP14/02/20 P F402

• RA20 PSY UI15253

     UP14/02/20 P F402

• RB10 PSY UI15254

     UP14/02/20 P F402

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.