DSNT776I csect-name SERVER DISTRIBUTED AGENT WITH LUWID=luwid THREAD-INFO=thread-information PRDID=product-identifier FOR LOCATION=location RECEIVED event-type EXCEPTION DUE TO PROFILE ID=profile-id OCCURRED number TIME(S)
Explanation
A monitor connections profile for security profile has detected that an exception condition occurred.
- csect-name
- The name of the control section that issued the message.
- luwid
- The logical unit of work identifier (LUWID).
- thread-information
- Information about the thread. The information is presented in a colon-delimited list that contains the following segments. An asterisk (*) in any segment indicates that the information is not available.
The authorization identifier. For profiles with AUTHID filtering, it contains the user ID that matches the profile. For profiles with LOCATION filtering, it can be * or SYSOPR if Db2 issues the message before determining the value, or it can be the primary authorization ID. 
- The name of the user's workstation.
- The ID of the user.
- The name of the application.
- The statement type for the previously executed statement: dynamic or static.
- The statement identifier for the previously executed statement, if available. The statement identifier can be used to identify the particular SQL statement. For static statements, the statement identifier correlates to the STMT_ID column in the SYSIBM.SYSPACKSTMT table. For dynamic statements, the statement identifier correlates to the STMT_ID column in the DSN_STATEMENT_CACHE_TABLE table. That statement might not have contributed to the current failure.
- The name of the role that is associated with the thread.
- The correlation token that can be used to correlate work at the remote system with work performed at the Db2 subsystem. The correlation token, if available, is enclosed in '<' and '>' characters, and contains three components, separated by periods:
- A 3–39 character IP address.
- A 1–8 character port address.
- A 12 character unique identifier.
- An asterisk (*) in any segment indicates that the information is not available.
- product-identifier
- An alphanumeric string that identifies the product.
The product identifier (PRDID) value is an 8-byte character value in pppvvrrm format, where: ppp is a 3-letter product code; vv is the version;rr is the release; and m is the modification level.
For Db2 13 for z/OS®, the modification level (0–9 or A–Z) indicates a specific function level. For example:
- DSN13012 for V13R1M501.
- DSN13011 for V13R1M500.
- DSN13010 for V13R1M100.
For more information, see Product identifier (PRDID) values in Db2 for z/OS.
- location
- The location name of the requester.
- event-type
- The type of profile threshold event, as defined in the SYSIBM.DSN_PROFILE_ATTRIBUTES table, that
was exceeded:
- MONITOR REST CONNECTIONS FOR SECURITY
- A profile exception threshold was exceeded for the monitor REST connections for security event type.
- MONITOR JDBC CONNECTIONS FOR SECURITY
- A profile exception threshold was exceeded for the monitor JDBC connections for security event type.
- MONITOR CLI CONNECTIONS FOR SECURITY
- A profile exception threshold was exceeded for the monitor CLI connections for security event type.
- MONITOR DB2CONNECT CONNECTIONS FOR SECURITY
- A profile exception threshold was exceeded for the monitor DB2CONNECT connections for security event type.
- MONITOR DSN CONNECTIONS FOR SECURITY
- A profile exception threshold was exceeded for the monitor DSN connections for security event type.
- MONITOR * CONNECTIONS FOR SECURITY
- A profile exception threshold was exceeded for the monitor * connections for security event type.
- profile-id
- The profile ID of the monitor profile (defined in DSN_PROFILE_TABLE) that detected the condition.
- number
- The number of times that profile-id monitor profile exception condition has occurred since this message was last issued for each unique connection identified by luwid.
System action
This message is issued every time that a connection does not meet the MONITOR CONNECTIONS FOR SECURITY conditions of the associated SYSIBM.DSN_PROFILE_ATTRIBUTES table ATTRIBUTE1 column value of EXCEPTION_DIAGLEVEL3.
In addition to issuing this message, the system writes an audit class 7 IFCID 319, and a statistics class 4 IFCID 402 trace record for any profile exception condition that occurs in a statistics interval. The statistics trace record tracks the number of MONITOR CONNECTIONS FOR SECURITY exceptions.
Operator response
Notify the system programmer.
System programmer response
Use the IFCID 402 and 319 trace records to identify the application requester by its IP address, product identifier, and number of exception conditions. Use the identifying information to update the application requester to meet the authentication and AT-TLS policy requirements as defined in the profile.
Problem determination
Analyze the statistics class 4 IFCID 402 and audit class 7 IFCID 319 trace records.
