PM07797: PROVIDE OPTION TO SELECT WHETHER DB2 CANCEL THREAD COMMAND ISSUED UNDER USER OR TASK AUTHORITY 10/03/29 PTF PECHANGE

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• PK90400 enhanced OMPE such that when the product is configured
  for external security, the userid (user id) of the logged on
  user is passed to DB2. The DB2 authority to CANCEL THREAD is
  based on the privileges granted to the logged on user's DB2
  authid.
  
  When OMPE is configured for internal security the OMPE task id
  is passed to DB2 and the authority to cancel a thread is based
  on the authority granted to the OMPE task.
  
  Prior to PK90400 the CANCEL THREAD command was always issued
  under the authid of the OMPE task.
  
  This APAR will provide a user configurable option to allow the
  OMPE task to always issue the CANCEL THREAD under the authid of
  the OMPE task even when OMPE is configured for external
  security.
  
  The OMPE command, TCMD which results in the DB2 CANCEL THREAD
  being issued remains protected as before. If internal security
  is in effect, the user must know the password for the security
  level defined to TCMD. If external security is employed the user
  id logged on must have the appropriate security system access to
  the resource under which the TCMD is protected.
  Additional symptom:
  FPEV0553W DB2Z DB2 REPORTED IFI ERROR (RC 00000008, RS 00E60824)
  
  
  Additional keywords
  KO2SUPDI KO2SUPD RACF Secondary authid KO2RACFX KO2RACFA ACF Top
  Secret
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: OMEGAMON XE for DB2 PE/DB2PM                 *
  *                 users of component:                          *
  *                 -   Classic Interface                        *
  ****************************************************************
  * PROBLEM DESCRIPTION: After PK90400, VTAM Classic Cancel      *
  *                      Thread TCMD command uses authorization  *
  *                      of the signed on user. However the      *
  *                      authorization of the OMEGAMON started   *
  *                      task may be required.                   *
  ****************************************************************
  * RECOMMENDATION: Apply this PTF                               *
  *                                                              *
  ****************************************************************
  PROBLEM SUMMARY:
  For the CANCEL THREAD command:
  Some customers prefer to use the authority of the OMEGAMON
  started task.
  
  Other customers prefer to use the authority of the signed
  on user.
  
  PROBLEM CONCLUSION:
  For the CANCEL THREAD command:
  This APAR changes/restores OMEGAMON to use the authority
  provided by the OMEGAMON started task as before
  APAR PK90400.
  
  This APAR also provides a method to select which type of
  authority will be used.
  
  See the new option 9 provided in the updated member
  <hilev>.TKANSAM(KO2MOD02) and the ++HOLD note associated
  with this PTF.
  

Problem conclusion

• For the CANCEL THREAD command:
  This APAR changes/restores OMEGAMON to use the authority
  provided by the OMEGAMON started task as before
  APAR PK90400.
  
  This APAR also provides a method to select which type of
  authority will be used.
  
  See the new option 9 provided in the updated member
  <hilev>.TKANSAM(KO2MOD02) and the ++HOLD note associated
  with this PTF.
  
  KEYWORDS : CANCEL THREAD KO2MOD02
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  PM05451

• APAR is sysrouted TO one or more of the following:

  UK55150

Modules/Macros

• KO2MOD02 KO2OTHGB
  

Fix information

• Fixed component name

  OM XE DB2PE/PM

• Fixed component ID

  5655OPE00

Applicable component levels

• R410 PSY UK55150

     UP10/03/18 P F003 ®

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.