SYSCTXTTRUSTATTRS catalog table

The SYSCTXTTRUSTATTRS table contains one row for each list of attributes for a given trusted context. The schema is SYSIBM.

Start of changeFL 505 SYSIBM.SYSCTXTTRUSTATTRS has an associated history table, SYSIBM.SYSCTXTTRUSTATTR_H, which provides temporal versioning of the catalog table. Both tables contain the same columns, with the same data types. The temporal relationship must be enabled before the history table can be used. Rows in the history table can be deleted by using the REORG TABLESPACE DISCARD option. For information about enabling the temporal relationship, see Temporal versioning for Db2 security-related catalog tables.End of change

Table 1. SYSIBM.SYSCTXTTRUSTATTRS table column descriptions
Column name Data type Description Use
CONTEXTID
INTEGER
NOT NULL
The internal trusted context ID. G
NAME
VARCHAR(128)
NOT NULL
The name of the trust attribute. Possible values include the following:
  • 'ADDRESS'
  • 'ENCRYPTION'
  • 'JOBNAME'
  • 'SERVAUTH'
G
VALUE
VARCHAR(254)
NOT NULL
The value of the trust attribute. Possible values including the following attributes:
  • An IPv4 address is represented as a dotted decimal IP address. An example of an IPv4 address is '9.112.46.111'.
  • An IPv6 address is represented as a colon hexadecimal address. An example of an IPv6 address is '2001:0DB8:0000:0000:0008:0800:200C:417A', which can also be expressed in a compressed form as '2001:DB8::8:800:200C:417A'.
  • Start of changeAn IPv4 subnet address is represented as IPv4-address/mm where IPv4-address is the initial IPv4 address of a subnet and mm ranges 1-32 which represents the number of initial bits of an IPv4 address that belong in the subnet. An example of an IPv4 address is '9.112.46.0/24'.End of change
  • Start of changeAn IPv6 subnet address is represented as IPv6-address/mm where IPv6-address is the initial IPv6 address of a subnet and mm ranges 1-128 which represents the number of initial bits of an IPv6 address that belong in the subnet. An example of an IPv6 address is '2001:0DB8:0000:0000:0000:0000:0000:0000/32'. This subnet address can also be expressed in a compressed form as '2001:DB8::/32'.End of change
  • A domain name which is converted to an IP address by the domain name server where a resulting IPv4 or IPv6 address is determined.
  • The minimum level of encryption of the data stream (network encryption) for the connection. Supported values are 'NONE', 'LOW', and 'HIGH'.
  • A job or started task name for local applications. If the job name ends with *, any job name that matches the characters prior to * in the specified job name are considered for establishing the trusted connection.
  • A network access security zone name in the RACF® SERVAUTH class.
G
CREATEDTS
TIMESTAMP
NOT NULL
The time when the attribute is created. G
IBMREQD
CHAR(1)
NOT NULL
A value of Y indicates that the row was provided with the Db2 product code. For all other values, see Release dependency indicators.

The value in this field is not a reliable indicator of release dependencies.

G
SYS_START
TIMESTAMP(12)
NOT NULL
GENERATED ALWAYS
AS ROW BEGIN
FL 505 Start of changeThe row-begin column of the SYSTEM_TIME period, for system-period data versioning.End of change G
SYS_END
TIMESTAMP(12)
NOT NULL
GENERATED ALWAYS
AS ROW END
FL 505 Start of changeThe row-end column of the SYSTEM_TIME period, for system-period data versioning.End of change G
TRANS_START
TIMESTAMP(12)
NOT NULL
GENERATED ALWAYS
AS TRANSACTION
START ID
FL 505 Start of changeThe transaction-start-ID column, for system-period data versioning.End of change G
Start of changeFL 505 GEN_SESSION_USEREnd of change Start of change
VARCHAR(128)
GENERATED ALWAYS AS (SESSION_USER)
End of change
Start of changeThe value of the SESSION_USER special register. This column contains a null value when the value is unknown for the existing rows prior to catalog level V13R1M505.End of change Start of changeGEnd of change