Start of change

00D30116

Explanation

Authentication of a remote user was rejected by Db2. The TCPALVER (TCP/IP Already Verified) subsystem parameter has been set to SERVER_ENCRYPT and the user ID and password authentication that was provided is not allowed because the password could not be evaluated to be a RACF PassTicket.

This error is likely to result from the following causes:

  • The RACF PTKTDATA class is inactive, or the resource (IRRPTAUTH.application.target-userid) is not defined to z/OS.
  • The RACF PTKTDATA class is active and the resource IRRPTAUTH.application.target-userid is defined to z/OS but the user ID associated to ssnmDIST started task is not permitted to use it.
  • The password provided is not a valid RACF PassTicket.

System action

The remote access attempt to Db2 is rejected, and the connection is terminated.

System programmer response

Ensure that the RACF PTKTDATA class is active, or the resource IRRPTAUTH.application.target-userid is defined and the user ID associated to ssnmDIST started task is permitted to access this resource, and try the remote request again.

Problem determination

If you suspect an error in Db2, you might need to report the problem. For information about identifying and reporting the problem, see Collecting diagnostic data.
Collect the following diagnostic items:
  • Console output from the system on which the job was run, and a listing of the SYSLOG data set for the period of time that spans the failure.

Severity

0 (informational)

End of change