Start of change

DSNT776I csect-name SERVER DISTRIBUTED AGENT WITH LUWID=luwid THREAD-INFO=thread-information PRDID=product-identifier FOR LOCATION=location RECEIVED event-type EXCEPTION DUE TO PROFILE ID=profile-id OCCURRED number TIME(S)

Explanation

A monitor connections profile for security profile has detected that an exception condition occurred.

csect-name
The name of the control section that issued the message.
luwid
The logical unit of work identifier (LUWID).
thread-information
Information about the thread. The information is presented in a colon-delimited list that contains the following segments. An asterisk (*) in any segment indicates that the information is not available.
  • Start of changeThe authorization identifier. For profiles with AUTHID filtering, it contains the user ID that matches the profile. For profiles with LOCATION filtering, it can be * or SYSOPR if Db2 issues the message before determining the value, or it can be the primary authorization ID. End of change
  • The name of the user's workstation.
  • The ID of the user.
  • The name of the application.
  • The statement type for the previously executed statement: dynamic or static.
  • The statement identifier for the previously executed statement, if available. The statement identifier can be used to identify the particular SQL statement. For static statements, the statement identifier correlates to the STMT_ID column in the SYSIBM.SYSPACKSTMT table. For dynamic statements, the statement identifier correlates to the STMT_ID column in the DSN_STATEMENT_CACHE_TABLE table. That statement might not have contributed to the current failure.
  • The name of the role that is associated with the thread.
  • The correlation token that can be used to correlate work at the remote system with work performed at the Db2 subsystem. The correlation token, if available, is enclosed in '<' and '>' characters, and contains three components, separated by periods:
    • A 3–39 character IP address.
    • A 1–8 character port address.
    • A 12 character unique identifier.
  • An asterisk (*) in any segment indicates that the information is not available.
product-identifier
An alphanumeric string that identifies the product.
The product identifier (PRDID) value is an 8-byte character value in pppvvrrm format, where: ppp is a 3-letter product code; vv is the version;rr is the release; and m is the modification level. Start of changeFor Db2 13 for z/OS®, the modification level (0–9 or A–Z) indicates a specific function level. For example:End of change
  • DSN13012 for V13R1M501.
  • DSN13011 for V13R1M500.
  • DSN13010 for V13R1M100.
Start of changeFor more information, see Product identifier (PRDID) values in Db2 for z/OS.End of change
location
The location name of the requester.
event-type
The type of profile threshold event, as defined in the SYSIBM.DSN_PROFILE_ATTRIBUTES table, that was exceeded:
MONITOR REST CONNECTIONS FOR SECURITY
A profile exception threshold was exceeded for the monitor REST connections for security event type.
MONITOR JDBC CONNECTIONS FOR SECURITY
A profile exception threshold was exceeded for the monitor JDBC connections for security event type.
MONITOR CLI CONNECTIONS FOR SECURITY
A profile exception threshold was exceeded for the monitor CLI connections for security event type.
MONITOR DB2CONNECT CONNECTIONS FOR SECURITY
A profile exception threshold was exceeded for the monitor DB2CONNECT connections for security event type.
MONITOR DSN CONNECTIONS FOR SECURITY
A profile exception threshold was exceeded for the monitor DSN connections for security event type.
MONITOR * CONNECTIONS FOR SECURITY
A profile exception threshold was exceeded for the monitor * connections for security event type.
profile-id
The profile ID of the monitor profile (defined in DSN_PROFILE_TABLE) that detected the condition.
number
The number of times that profile-id monitor profile exception condition has occurred since this message was last issued for each unique connection identified by luwid.

System action

This message is issued every time that a connection does not meet the MONITOR CONNECTIONS FOR SECURITY conditions of the associated SYSIBM.DSN_PROFILE_ATTRIBUTES table ATTRIBUTE1 column value of EXCEPTION_DIAGLEVEL3.

In addition to issuing this message, the system writes an audit class 7 IFCID 319, and a statistics class 4 IFCID 402 trace record for any profile exception condition that occurs in a statistics interval. The statistics trace record tracks the number of MONITOR CONNECTIONS FOR SECURITY exceptions.

Operator response

Notify the system programmer.

System programmer response

Use the IFCID 402 and 319 trace records to identify the application requester by its IP address, product identifier, and number of exception conditions. Use the identifying information to update the application requester to meet the authentication and AT-TLS policy requirements as defined in the profile.

Problem determination

Analyze the statistics class 4 IFCID 402 and audit class 7 IFCID 319 trace records.

End of change