RACF and DB2 performce

Roberto Mandolini

RACF and DB2 performce
Hi all,
we're planning to migrate from DB2 security to RACF security.
All steps are defined but I hav a doubt about the performace.
We have a datashr environment with 3 members, we use IMS fpr transacttion
monitor and we have all plans granted to public because the access to use
the plans is checked by IMS/RACF security. (we do not have DSN3§SGN in our
SDSNEXIT)
Now if a plan is granted to public, DB" skip any grant check. Now if I will
use RACF check for any run of an IMS plan I will have any performance
degradation? We have only 1 sys1.racf, so all the access will be performed
throug this resorce. (we made about 6 million thds/day)
have you any info about this question?

Txs in advance

Best regards

Roberto Mandolini
EDS - Roma Servizi Informatici
Funzione Sistemi - DB2 System Administrator
Email: [login to unmask email]
Via Molfetta, 101 - 00171 - Roma
Tel. +39-06-25342038
Fax +39-06-25342116

---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email] Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm

Roger Miller

Re: RACF and DB2 performce
(in response to Roberto Mandolini)
This might cost you a minute of cpu time a day, under 1 tenth of 1 percent
or nothing you can see or measure. If you work to keep the number of
rules small and use the storage wisely, we have had customers tell us they
perform better. You have probably already seen the foils and notes:
http://www.ibm.com/software/data/db2/os390/techdocs/db2sec1001o.pdf

Roger Miller

On Wed, 14 Jan 2004 08:42:20 -0600, Roberto Mandolini
<[login to unmask email]> wrote:

>Hi all,
>we're planning to migrate from DB2 security to RACF security.
>All steps are defined but I hav a doubt about the performace.
>We have a datashr environment with 3 members, we use IMS fpr transacttion
>monitor and we have all plans granted to public because the access to use
>the plans is checked by IMS/RACF security. (we do not have DSN3§SGN in our
>SDSNEXIT)
>Now if a plan is granted to public, DB" skip any grant check. Now if I
will
>use RACF check for any run of an IMS plan I will have any performance
>degradation? We have only 1 sys1.racf, so all the access will be performed
>throug this resorce. (we made about 6 million thds/day)
>have you any info about this question?
>
>Txs in advance
>
>Best regards
>
>Roberto Mandolini
>EDS - Roma Servizi Informatici
>Funzione Sistemi - DB2 System Administrator
>Email: [login to unmask email]
> Via Molfetta, 101 - 00171 - Roma
> Tel. +39-06-25342038
> Fax +39-06-25342116

---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email] Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm