SYSCONTEXTAUTHIDS catalog table

The SYSCONTEXTAUTHIDS table contains one row for each authorization ID with which the trusted context can be used. The schema is SYSIBM.

Start of changeFL 505 SYSIBM.SYSCONTEXTAUTHIDS has an associated history table, SYSIBM.SYSCONTEXTAUTHIDS_H, which provides temporal versioning of the catalog table. Both tables contain the same columns, with the same data types. The temporal relationship must be enabled before the history table can be used. Rows in the history table can be deleted by using the REORG TABLESPACE DISCARD option. For information about enabling the temporal relationship, see Temporal versioning for Db2 security-related catalog tables.End of change

Table 1. SYSIBM.SYSCONTEXTAUTHIDS table column descriptions
Column name Data type Description Use
CONTEXTID
INTEGER
NOT NULL
The internal trusted context ID. G
AUTHID
VARCHAR(128)
NOT NULL
The primary authorization ID that can reuse a connection. When RACF® is used, this is a RACF profile name that contains the primary authorization IDs that are permitted to use the connection in the identified trusted context. A RACF profile name in this column has an ampersand (&) sign as the first character, to distinguish it from an authorization ID. G
AUTHENTICATE
CHAR(1)
NOT NULL
Whether authentication is required for the authorization ID in the AUTHID column:
Y
Authentication token is required for the authorization ID. For local requests, the token is the password. For remote requests, the token can be a password, a RACF passticket, or a Kerberos token
N
Authentication is not required
G
ROLE
VARCHAR(128)
NOT NULL
The role for the authorization ID in the AUTHID column. The role supersedes the default role that is defined for the trusted context. G
CREATEDTS
TIMESTAMP
NOT NULL
The time when the authorization ID is added to the trusted context. G
IBMREQD
CHAR(1)
NOT NULL
A value of Y indicates that the row was provided with the Db2 product code. For all other values, see Release dependency indicators.

The value in this field is not a reliable indicator of release dependencies.

G
SECURITYLABEL
VARCHAR(24)
NOT NULL
RACF security label for AUTHID. The security label supersedes the default security label, if any, that is defined for the context. G
SYS_START
TIMESTAMP(12)
NOT NULL
GENERATED ALWAYS
AS ROW BEGIN
FL 505 Start of changeThe row-begin column of the SYSTEM_TIME period, for system-period data versioning.End of change G
SYS_END
TIMESTAMP(12)
NOT NULL
GENERATED ALWAYS
AS ROW END
FL 505 Start of changeThe row-end column of the SYSTEM_TIME period, for system-period data versioning.End of change G
TRANS_START
TIMESTAMP(12)
NOT NULL
GENERATED ALWAYS
AS TRANSACTION
START ID
FL 505 Start of changeThe transaction-start-ID column, for system-period data versioning.End of change G
Start of changeFL 505 GEN_SESSION_USEREnd of change Start of change
VARCHAR(128)
GENERATED ALWAYS AS (SESSION_USER)
End of change
Start of changeThe value of the SESSION_USER special register. This column contains a null value when the value is unknown for the existing rows prior to catalog level V13R1M505.End of change Start of changeGEnd of change