PH62137: NEW FUNCTION

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• E24121 New Function
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All Distributed Data Facility (DDF) users.   *
  ****************************************************************
  * PROBLEM DESCRIPTION: This APAR adds a new message DSNL061I   *
  *                      which will specifically report          *
  *                      authentication or authorization         *
  *                      errors with '00F300xx'X reason-code     *
  *                      values at a minimal interval of 5       *
  *                      minutes for each unique combination     *
  *                      of the reason code, IP address, user    *
  *                      ID, and product identifier.             *
  ****************************************************************
  When an application lacks proper error handling and keeps
  connecting with invalid security credentials, the z/OS console
  becomes flooded with DSNL030I and ICH408I messages. This
  situation can potentially cause the Db2 MSTR address space to
  abnormally terminate because it reaches the maximum number of
  lines.
  
  Instead of issuing the DSNL030I message to the z/OS console
  for every authentication or authorization error event and
  potentially flooding the z/OS console, this APAR adds a new
  message DSNL061I which will specifically report
  authentication or authorization errors with '00F300xx'X
  reason-code values. The DSNL061I message will be issued at a
  minimal interval of 5 minutes for each unique combination of
  the reason code, IP address, user ID, and product identifier.
  
  By issuing this DSNL061I message along with suppressing the
  corresponding RACF ICH408I console message at a minimal
  5-minute interval, both z/OS system administrators and Db2
  database administrators can see the messages without flooding
  the z/OS console or risking the Db2 MSTR address space
  breakdown. It also enables them to see other important
  messages.
  

Problem conclusion

Temporary fix

Comments

• The DSNL061I message is issued at most once per
  5-minute interval for each unique combination of the reason
  code, IP address, user ID, and product identifier. Any
  related RACF ICH408I message is also suppressed by Db2 from
  the z/OS console during the same 5-minute interval. Db2 will
  issue the WTO for ICH408I messages when it's the time to
  print DSNL061I according to the 5-minule rule.
  ×**** PE25/02/12 FIX IN ERROR. SEE APAR PH65237  FOR DESCRIPTION
  ×**** PE25/05/29 FIX IN ERROR. SEE APAR PH66792  FOR DESCRIPTION
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI99566

Modules/Macros

• DSN3AUCN DSNFCDIR DSNFLDIR DSNLDTMG DSNLDTML DSNLDUMP DSNLJEMG
  DSNLJTIN DSNLQCTL DSNLTDT2 DSNLTMIN DSNLTSEC DSNLTSTR DSNWDFDI
  

Fix information

• Fixed component name

  DB2 OS/390 & Z/

• Fixed component ID

  5740XYR00

Applicable component levels

• RD10 PSY UI99566

     UP25/01/11 P F501  

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.