PI71741: MORE FLEXIBILITY NEEDED FOR DRIVING THE DB2 ACM USER EXIT.

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• The DB2 ACM user exit is provided by the third-party vendor of
  the centralized security product.  How that ACM implements the
  interfacing with the security product can vary.  IIDR CDC for
  z/OS needs to be able to accommodate different internal
  implementations of the DB2 ACM when determining the
  capabilities of the Agent user when they are logging on.
  

Local fix

• Assign elevated authority/permissions to the Management
  Console's user identifier being used to logon to the IIDR CDC
  for z/OS Agent.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users of IIDR CDC for z/OS who use a third   *
  *                 party centralized security access facility   *
  *                 product to perform access verification for   *
  *                 DB2 users of DB2 resources.                  *
  ****************************************************************
  * PROBLEM DESCRIPTION: A centralized Security Access Facility  *
  *                      product interfaces with DB2 using an    *
  *                      ACM (Access Control Module) that is     *
  *                      supplied by the security product        *
  *                      vendor.  Implementation of an ACM can   *
  *                      differ from vendor to vendor.  The ACM  *
  *                      can also vary its operation based on    *
  *                      how the security product is configured. *
  *                      IIDR CDC for z/OS loads and calls the   *
  *                      ACM in order to determine whether or    *
  *                      not an end user should be able to have  *
  *                      access (replicate) from or to a table.  *
  *                      These calls to the ACM may need to be   *
  *                      issued with knowledge of how the ACM is *
  *                      written and how the security product is *
  *                      configured.                             *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  
  IIDR CDC for z/OS needs to be directed on how to manage resource
  access verification using a DB2 ACM, especially if the ACM is
  supplied by a third party software vendor.
  

Problem conclusion

Temporary fix

Comments

• A new configuration keyword has been supplied to direct IIDR CDC
  for z/OS's use of the DB2 ACM.
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI46900

Modules/Macros

•    CHCDSCPF CHCSECDL
  

Fix information

• Fixed component name

  INFO SRVR CDC Z

• Fixed component ID

  5655U7600

Applicable component levels

• RA21 PSY UI46900

     UP17/05/17 P F705

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.