PI08372: SQLCODE551 IN DSNTRIN DUE TO IMPROPER AUTHID CONVERSION FROM NON-US CCSID ENCODING

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• //DSNTRIN EXEC PGM=DSNTRIN,COND=(4,LT),
  //             PARM=('DB2SSN(DSX) MODE(INSTALL)',
  //             ' AUTHID(IBMDBC) SECDEFID(ITPDEUS)')
  
  DSNT002I DSNTRIN RECEIVED AN UNEXPECTED SQLCODE OF -551 FROM THE
  'GRANT' REQUEST
   DSNT408I SQLCODE = -551, ERROR:  IB MDBC DOES NOT HAVE THE
  PRIVILEGE TO PERFORM
            OPERATION GRANT SELECT ON OBJECT SYSIBM.ADMIN_TASKS
   DSNT418I SQLSTATE   = 42501 SQLSTATE RETURN CODE
   DSNT415I SQLERRP    = DSNXA07 SQL PROCEDURE DETECTING ERROR
   DSNT416I SQLERRD    = 254  0  0  -1  0  0 SQL DIAGNOSTIC
  INFORMATION
   DSNT416I SQLERRD    = X'000000FE'  X'00000000'  X'00000000'
  X'FFFFFFFF'
            X'00000000'  X'00000000' SQL DIAGNOSTIC INFORMATION
  

Local fix

• n/a
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of DSNTRIN, the installation and   *
  *                 configuration tool for DB2-supplied stored   *
  *                 procedures and user-defined functions (UDFs) *
  *                 in DB2 10 for z/OS and DB2 11 for z/OS, are  *
  *                 affected by this change.                     *
  ****************************************************************
  * PROBLEM DESCRIPTION: DSNTIJRT job step DSNTRIN ends with     *
  *                      return code 12 and one or more of the   *
  *                      following error messages:               *
  *                        DSNT002I DSNTRIN RECEIVED AN          *
  *                          UNEXPECTED SQLCODE OF -551 FROM     *
  *                          THE 'operation' REQUEST             *
  *                        DSNT408I SQLCODE = -551, ERROR:       *
  *                          auth-id DOES NOT HAVE THE           *
  *                          PRIVILEGE TO PERFORM OPERATION      *
  *                          operation ON OBJECT object-name     *
  *                                                              *
  *                        DSNT002I DSNTRIN RECEIVED AN          *
  *                          UNEXPECTED SQLCODE OF -552 FROM     *
  *                          THE 'operation' REQUEST             *
  *                        DSNT408I SQLCODE = -552, ERROR:       *
  *                          auth-id DOES NOT HAVE THE           *
  *                          PRIVILEGE TO PERFORM                *
  *                          OPERATION operation                 *
  *                                                              *
  *                      when an authorization id specified by   *
  *                      the AUTHID parameter, the SECDEFID      *
  *                      parameter, or both contains one or      *
  *                      more national symbols (@, #, $) and,    *
  *                      in the local EBCDIC CCSID used by       *
  *                      DB2, those characters do not reside     *
  *                      at the following code points:           *
  *                      - @: x'7C'                              *
  *                      - #: x'7B'                              *
  *                      - $: x'5B'                              *
  ****************************************************************
  * RECOMMENDATION: Apply the fixing PTF for this APAR.          *
  ****************************************************************
  DSNTRIN is a program called by job DSNTIJRT to install and
  configure DB2-supplied routines.  The AUTHID parameter of
  DSNTRIN specifies the CURRENT SQLID to be used to create and
  configure most DB2-supplied routines and related objects.  It
  also specifies the default OWNER when binding packages for such
  routines.  The SECDEFID parameter specifies the CURRENT SQLID
  setting to be used to create and configure DB2-supplied routines
  that use SECURITY DEFINER.
  
  Currently, if an authorization ID specified by AUTHID or
  SECDEFID (or both) contains one or more of the so-called
  national symbols (#, @, $), the authorization errors noted in
  the Problem Description of this APAR can occur when DSNTRIN
  runs on a DB2 that has a default EBCDIC CCSID in which those
  characters do not reside at the following code points:
  - @: x'7C'
  - #: x'7B'
  - $: x'5B'
  
  The error can occur because in the EBCDIC encoding scheme, the
  national symbols are "variant" characters, meaning that they
  do not reside at a consistent code point across all code pages.
  

Problem conclusion

• In response, DSNTRIN is modified to prevent misinterpretation
  of national symbols in authorization IDs specified by the AUTHID
  and SECDEFID parameters.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI14642 UI14643

Modules/Macros

• DSN@RIN  DSNTRIN
  

Fix information

• Fixed component name

  DB2 OS/390 & Z/

• Fixed component ID

  5740XYR00

Applicable component levels

• RA10 PSY UI14642

     UP14/02/14 P F402

• RB10 PSY UI14643

     UP14/02/14 P F402

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.