Using RACF to control access to DB2 Objects

Cristian Molaro

Using RACF to control access to DB2 Objects
Hello list,

When asked, IBM recommends / supports (as far as I found) moving the access
control of DB2 objects to RACF.
I would like to have your opinion / comments / experiences about this...

Are you using RACF to control access to DB2 objects in your shop?
Did you found impacts on performance?
Was the migration smooth?
Please don't hesitate to share any comment, as I hope they will help me to
have a picture of what to expect when moving security control to RACF

We are running DB2 7.1 for zOS (v 1.4) and the machine is a z990. We serve
both local and distributed applications.

Thanks in advance for your help and for sharing your opinion!

Cristian Molaro
EB, Belgium

---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email] Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm

PK Ganapathy

Re: Using RACF to control access to DB2 Objects
(in response to Cristian Molaro)
Hello Cristian,

All the shops that I have worked so far have had the 2 levels of
protections for DB2 data - one using the regular DB2 security
(GRANT/REVOKE), and the other using RACF where the first or 2nd node of the
dataset HLQ was protected.

I don't recall having had any performance impacts in this area.

-PK.Ganapathy
DB2 DBA at Verizon
IBM Certified UDB v8.1 DBA for z/OS & LUW.

On Wed, 12 Jan 2005 05:07:20 -0600, Cristian Molaro <[login to unmask email]> wrote:

>Hello list,
>
>When asked, IBM recommends / supports (as far as I found) moving the access
>control of DB2 objects to RACF.
>I would like to have your opinion / comments / experiences about this...
>
>Are you using RACF to control access to DB2 objects in your shop?
>Did you found impacts on performance?
>Was the migration smooth?
>Please don't hesitate to share any comment, as I hope they will help me to
>have a picture of what to expect when moving security control to RACF
>
>We are running DB2 7.1 for zOS (v 1.4) and the machine is a z990. We serve
>both local and distributed applications.
>
>Thanks in advance for your help and for sharing your opinion!
>
>Cristian Molaro
>EB, Belgium
>
>---------------------------------------------------------------------------
------
>Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and
home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page
select "Join or Leave the list". The IDUG DB2-L FAQ is at
http://www.idugdb2-l.org. The IDUG List Admins can be reached at DB2-L-
[login to unmask email] Find out the latest on IDUG conferences at
http://conferences.idug.org/index.cfm

---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email] Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm