PK97976: User of PE Client is not able to start SQL Activity Trace due to FPEV6814I USER DOES NOT HAVE REQUIRED MONITOR 1/2 PRIVILEGE CRD

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• Refactor test lib provided for PMR 88684,035,724 into current
  product streams: retrieve "sec ids" by explicitly calling DB2
  user exit DSN3SGN. Use these sec ids for third-party check prior
  to starting of CRD.
  

Local fix

• UK46961 - Using RACF secondary IDs
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: OMEGAMON XE for DB2 PE/DB2PM                 *
  *                 users of component:                          *
  *                 -   PE Server subtask                        *
  *                 -   Performance Expert Client                *
  *                 -   Performance Warehouse users              *
  ****************************************************************
  * PROBLEM DESCRIPTION: User of Performance Expert Client tries *
  *                      to activate the SQL Activity Traces for *
  *                      a certain DB2 thread but encounters the *
  *                      message FPEV6814I ... USER ... DOES NOT *
  *                      HAVE REQUIRED MONITOR1/2 PRIVILEGE TO   *
  *                      COLLECT REPORT DATA in OMPE sysprint    *
  *                      file.                                   *
  ****************************************************************
  * RECOMMENDATION: Apply this PTF                               *
  *                                                              *
  ****************************************************************
  PROBLEM SUMMARY:
  Customer grants MON1/2 privileges to one or several RACF groups.
  A Performance Warehouse user uses a primary authorization ID
  that is neither recorded in the DB2 system catalog nor in any
  RACF profiles but it is a member of one or more mentioned above
  RACF groups. Customer customizes the DB2 sign-on exits DSN3@SGN
  to provide the list of those secondary authorization IDs to DB2
  and expects thereby that the Performance Warehouse userid would
  be honored with the same MON1/2 privileges as well. However
  when the Performance Warehouse user tries to activate the SQL
  Activity Trace from Performance Expert Client using the above
  userid, PE Server subtask issues the message FPEV6814I which
  indicates that the userid has no corresponding privilege.
  
  PROBLEM CONCLUSION:
  The Collect Report Data, a component of PE Server subtask, was
  extended with a new feature to provide DB2 with names of RACF
  groups, which are granted by corresponding DB2 privileges and
  authority. These RACF group names are retrieved via the DB2
  sign-on exit DSN3@SGN customized by customer for this purpose.
  This feature is enabled by the card //DB2AUTH DD DUMMY within
  the Performance Warehouse job.
  

Problem conclusion

Temporary fix

Comments

• The Collect Report Data, a component of PE Server subtask, was
  extended with a new feature to provide DB2 with names of RACF
  groups, which are granted by corresponding DB2 privileges and
  authority. These RACF group names are retrieved via the DB2
  sign-on exit DSN3@SGN customized by customer for this purpose.
  This feature is enabled by the card //DB2AUTH DD DUMMY within
  the Performance Warehouse job.
  
   The service level of the
   OMEGAMON collector PE Server subtask
   FPEV0000I  DATA SERVER INITIALIZATION
   FPEV0114I  PTF BUILD IS 10.070 for V 4.1
   FPEV0114I  PTF BUILD IS 10.070 for V 4.2
  
  
  
  KEYWORDS: SQL ACTIVITY TRACE  COLLECT REPORT DATA, MONITOR1/2
            PRIVILEGE FPEV6814I
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UK55307 UK55308

Modules/Macros

• DGO@BTCH DGO@CHKB DGO@CONV DGO@DB   DGO@DB2I
  DGO@DB2S DGO@DTA1 DGO@DTA3 DGO@DTA5 DGO@DTA6 DGO@DTA7 DGO@LLOG
  DGO@LOAD DGO@MIG1 DGO@MIG2 DGO@MT1  DGO@MT2  DGO@MT3  DGO@MT4
  DGO@MT5  DGO@PC1  DGO@PC2  DGO@PC3  DGO@PC4  DGO@PRV1 DGO@PRV2
  DGO@SCRD DGO@SDOB DGO@SIDS DGO@SP   DGO@SQPA DGO@TBL  DGO@VW1
  DGO@VW2  DGO@WRPA DGO@WRP2 DGO@WR2C DGO@WSTE DGOMDX00 DGOMERPL
  DGOPMHDR DGOVBMG  DGOVCCP  DGOVCINI DGOVCRDB DGOVDB2C DGOVDB2F
  DGOVDB2I DGOVDB2S DGOVDMSG DGOVDS   DGOVDSIN DGOVDSRC DGOVDSS
  DGOVEEDI DGOVEEDR DGOVEEDS DGOVEEDT DGOVEE00 DGOVEE01 DGOVGIFC
  DGOVHMCD DGOVHMDR DGOVHMM0 DGOVHMM1 DGOVHMM2 DGOVHMM3 DGOVHMSD
  FPEUHDRS FPEVDBXT FPEVDB2I FPEVDB2S FPEVDB22 FPEVMST1 FPEVMST2
  FPEVM000 FPEVREQ0 FPEVSERV FPEVSQLI FPEVTMEM FPEVWRPA FPEVWRP2
  FPEVWR2C FPEVZMAI FPEVZRAC FPEZCRD  FPEZPMS  HKDB410J HKDB420J
  KDB410J  KDB420J
  

Fix information

• Fixed component name

  OM XE DB2PE/PM

• Fixed component ID

  5655OPE00

Applicable component levels

• R410 PSY UK55307

     UP10/03/26 P F003

• R420 PSY UK55308

     UP10/03/26 P F003

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.