IT26252: DES CONNECTIONS USING GATEWAY CONCENTRATOR AGAINST DB2 FOR Z/OS CAN FAIL

Db2 Version 11.1 Mod4 Fix Pack4 iFix001 for Linux, UNIX, and Windows
Db2 Version 11.1 Mod 4 Fix Pack 4 for Linux, UNIX, and Windows
Db2 Version 11.1 Mod 4 Fix Pack 6 for Linux, UNIX, and Windows
Db2 Version 11.1 Mod 4 Fix Pack 5 for Linux, UNIX, and Windows
Db2 Version 11.1 Mod 4 Fix Pack 7 for Linux, UNIX, and Windows

APAR status

• Closed as program error.

Error description

• This fix is needed to complete the solution for APAR# IT25880.
  
  A remote JDBC application using DES connections against DB2 for
  z/OS using a DB2 Connect gateway with Connection Concentrator
  enabled can cause authentications to fail.
  
  In a DRDA trace we will see the following:
  
      NM: SECCHKRM - Security Check
        LL: 35    CP: 1219
        NM: SVRCOD - Severity Code
          LL: 6    CP: 1149
          Error Severity Code (0X0008)
        NM: SRVDGN - Server Diagnostic Information
          LL: 12    CP: 1153
          DATA:                              (ASCII)
  (EBCDIC)
          0000000C00000000                   ........
  ........
        NM: SECCHKCD - Security Check Code
          LL: 5    CP: 11A4
          Local security Service non-retryable error (0X0A)
        NM: SVCERRNO - Security Service Error Number
          LL: 8    CP: 11B4
          DECIMAL:     12
          HEXADECIMAL: 0000000C
  

Local fix

• Disable connection concentrator on the gateway.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * ALL                                                          *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See Error Description                                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Upgrade to Db2 11.1 Mod 4 Fixpack 4 or higher                *
  ****************************************************************
  

Problem conclusion

• First fixed in Db2 11.1 Mod 4 Fixpack 4
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  IT26253

Fix information

• Fixed component name

  DB2 FOR LUW

• Fixed component ID

  DB2FORLUW

Applicable component levels

• RB10 PSN

     UP