PH24315: DB2 12 FOR Z/OS NEW FUNCTION SUPPORT FOR ENF 71 WHEN A USER IS REVOKED DUE TO EXCESSIVE INVALID PASSWORD ATTEMPTS

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• Db2 12 for z/OS NEW FUNCTION support for ENF 71 when a user
  is revoked due to excessive invalid password attempts
  

Local fix

• n/a
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All Db2 12 for z/OS users of                                 *
  * AUTHEXIT_CACHEREFRESH subsystem parameter                    *
  * set to ALL.                                                  *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Db2 support for RACF type 71 ENF                             *
  * signal for revoking a user due to                            *
  * excessive invalid password attempts.                         *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  When the AUTHEXIT_CACHEREFRESH system parameter is set to ALL,
  Db2 listens to ENF signals from RACF and processes cache
  entries. Db2 needs to support type 71 ENF signal from RACF for
  any user being revoked due to excessive invalid password
  attempts.
  

Problem conclusion

Temporary fix

Comments

• Db2 code has been changed to support type 71 ENF signal from
  RACF for any user being revoked due to excessive invalid
  password attempts and when AUTHEXIT_CACHEREFRESH is set to
  ALL.
  This Db2 APAR can be applied independently without the z/OS
  APARs OA58677 and OA58678. However, in order to exploit this
  Db2 enhancement, those z/OS APARs are required. Otherwise,
  applying this Db2 APAR has no effect.
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI69790

Modules/Macros

• DSNXAE71 DSN3AUGC
  

Fix information

• Fixed component name

  DB2 OS/390 & Z/

• Fixed component ID

  5740XYR00

Applicable component levels

• RC10 PSY UI69790

     UP20/06/09 P F006

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.