Question & Answer
Question
What causes error message CPF9190 RC15 when making DDM / DRDA connections from IBM i?
Cause
DDM/DRDA connections may fail with the following error:
CPF9190 - Authorization failure on DDM TCP/IP connection attempt with Reason Code 15
RC15 = Security processing at the server failed.
This is a general error on the Client / Source / AR system.
The root cause of the error may only be found on the server that rejected the authentication attempt. If the server is an IBM i, the error will be found in the QRWTSRVR job log on the Server / Target / AS . Methods to generate QRWTSRVR job logs are listed at the bottom of this document under "Related Information". Alternatively, try:
CPF9190 - Authorization failure on DDM TCP/IP connection attempt with Reason Code 15
RC15 = Security processing at the server failed.
This is a general error on the Client / Source / AR system.
The root cause of the error may only be found on the server that rejected the authentication attempt. If the server is an IBM i, the error will be found in the QRWTSRVR job log on the Server / Target / AS . Methods to generate QRWTSRVR job logs are listed at the bottom of this document under "Related Information". Alternatively, try:
WRKSPLF SELECT(*ALL *ALL *ALL QRWTSRVR)
Note that "QRWTSRVR" should be substituted for "QZDASOINIT" in document "Generate a joblog for connections to DB2 for IBM i".
This document lists potential causes of, and resolutions to, message CPF9190 RC=15.
Answer
|
1. |
Application Administration implemented on the Server.
A communications trace shows the QBRMS profile was used and "not authorized to command" flowed to client. The QRWTSRVR joblog on the target system shows: CPF9898 - QIBM_DB_DDMDRDA FUNCTION USAGE IS DENIED FOR USER PROFILE QBRMS. Accessing the Application Administration -> Host Applications tab in System i Navigator and looking at option "DDM & DRDA APPLICATION SERVER ACCESS" under IBM i -> Database shows it was configured so that one group profile was allowed and all others denied. Clicking on the Customize button and changing the settings back to the default settings such that everyone was allowed resolved the problem. Alternatively, execute the following: DSPFCNUSG FCNID(QIBM_DB_DDMDRDA) |
|
2.
|
A particular user profile fails to make a DDM connection with message CPF9190 rc15.
The user has matching user profiles on both systems, and CHGDDMTCPA is set to not require a password. A different user profile works fine. The library list associated with the job description used by the failing user profile contained a library that no longer existed. Removing the missing library from the library list resolved the issue. WRKSPLF <usrprf> on the target system should show a QRWTSRVR joblog containing message CPF9810 - Library &1 not found. |
|
3.
|
A missing or damaged Job Description for the user on the target system will also cause message CPF9190 RC15. Replace to fix.
|
|
4.
|
Corrupted user space QCNPRSTBLS.
These are usually accompanied by a CPF9150 message in QRWTSRVR job log. Communications trace will show the following sequence: ACCSEC - Access Security (for User ID only) EXCSATRD - Server Attributes Reply Data SYNTAXRM - Data Steam Syntax Error In this case, the DDM server Properties in System i Navigator would not display. The solution was to delete the following parser table on the server side, which will re-create itself on the first connect attempt: DLTUSRSPC USRSPC(QSYS/QCNPRSTBLS) |
|
5.
|
The "Using the Relational Database directory" section of the Distributed Database Programming topic in the Knowledge Center explains that the RDB name passed on the connection request must match a valid entry on the target machine:
http://www.ibm.com/support/knowledgecenter/en/ssw_ibm_i_72/ddp/rbal1rdbdir.htm Applications that had been exploiting a defect in RDB name access may fail with message CPF9190 RC=15 after application of SI56042 and SI56081. To resolve, you should follow one of the resolutions detailed in document N1020951, PTF Application Causes Message CPF3E06 in Source System Job Log. |
Related Information
[{"Product":{"code":"SWG60","label":"IBM i"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Component":"--","Platform":[{"code":"PF012","label":"IBM i"}],"Version":"Version Independent","Edition":"","Line of Business":{"code":"LOB57","label":"Power"}}]
Was this topic helpful?
Document Information
Modified date:
15 February 2021
UID
nas8N1020959