[login to unmask email]

Deepak Gujaba Gaikwad

[login to unmask email]
Hello All,

We are using DB2 V7. Our OPC scheduler is connected to 250+ groups. Because of the [login to unmask email] limit of 245 secondary auth ids, our batch jobs are failing.

We see this limit is increased to 1000+ in V8; but we don't have any plans for V8 upgrades as of now.


Is anybody using modified [login to unmask email] to increase this limit? Is there any PTF available to do so ?

Thanks for all your help.

Thanks & Regards,
Deepak Gujaba Gaikwad









---------------------------------
Yahoo! Photos
Ring in the New Year with Photo Calendars. Add photos, events, holidays, whatever.

---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email] Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm

Deepak Gujaba Gaikwad

[login to unmask email]
(in response to Roger Miller)
Hello All,

We are using DB2 V7. Our OPC scheduler is connected to 250+ groups. Because of the [login to unmask email] limit of 245 secondary auth ids, our batch jobs are failing.

We see this limit is increased to 1000+ in V8; but we don't have any plans for V8 upgrades as of now.


Is anybody using modified [login to unmask email] to increase this limit? Is there any PTF available to do so ?

Thanks for all your help.

Thanks & Regards,
Deepak Gujaba Gaikwad









---------------------------------
Yahoo! Photos
Ring in the New Year with Photo Calendars. Add photos, events, holidays, whatever.

---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email] Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm

This e-mail transmission contains information that is confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated.

---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email] Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm

Gulin Atabek

Re: [login to unmask email]
(in response to Deepak Gujaba Gaikwad)
Hello,
Depending on the security product you are using, you may implement secondary
authorization ID's without [login to unmask email]
For example CA-Top Secret for z/OS has an IBMGROUP resource to grant users
DB2 secondary authorization ID's.
I think there's a similar authorization mechanism in RACF.

hope this helps,
Gulin


-----Original Message-----
From: DB2 Data Base Discussion List [mailto:[login to unmask email]On Behalf Of
Deepak Gujaba Gaikwad
Sent: Tuesday, January 17, 2006 3:12 PM
To: [login to unmask email]
Subject: [DB2-L] [login to unmask email]


Hello All,

We are using DB2 V7. Our OPC scheduler is connected to 250+ groups. Because
of the [login to unmask email] limit of 245 secondary auth ids, our batch jobs are
failing.

We see this limit is increased to 1000+ in V8; but we don't have any plans
for V8 upgrades as of now.

Is anybody using modified [login to unmask email] to increase this limit? Is there any PTF
available to do so ?

Thanks for all your help.

Thanks & Regards,
Deepak Gujaba Gaikwad









----------------------------------------------------------------------------
----
Yahoo! Photos
Ring in the New Year with Photo Calendars. Add photos, events, holidays,
whatever. ------------------------------------------------------------------
--------------- Welcome to the IDUG DB2-L list. To unsubscribe, go to the
archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From
that page select "Join or Leave the list". The IDUG DB2-L FAQ is at
http://www.idugdb2-l.org. The IDUG List Admins can be reached at
[login to unmask email] Find out the latest on IDUG conferences at
http://conferences.idug.org/index.cfm


==========-
Bu e-posta sadece yukarida isimleri belirtilen kisiler arasinda özel haberlesme amacini tasimaktadir. Size yanlislikla ulasmissa lütfen gönderen kisiyi bilgilendiriniz ve mesaji sisteminizden siliniz. Turkiye Cumhuriyet Merkez Bankasi A.S. bu mesajin icerigi ile ilgili olarak hicbir hukuksal sorumlulugu kabul etmez.

This e-mail communication is intended for the private use of the people named above. If you received this message in error, please immediately notify the sender and delete it from your system. The Central Bank of The Republic of Turkey does not accept legal responsibility for the contents of this message.

---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email] Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm

Roger Miller

Re: [login to unmask email]
(in response to Gulin Atabek)
The exit routine cannot make this change, and [login to unmask email] exit routines do
not need to change to allow the larger number of secondary ids. You need
to have a migration plan soon, since V7 is about five years old now, and
it does take some time to do the work.

Roger Miller

On Tue, 17 Jan 2006 05:12:04 -0800, Deepak Gujaba Gaikwad
<[login to unmask email]> wrote:

>Hello All,
>
> We are using DB2 V7. Our OPC scheduler is connected to 250+ groups.
Because of the [login to unmask email] limit of 245 secondary auth ids, our batch jobs
are failing.
>
> We see this limit is increased to 1000+ in V8; but we don't have any
plans for V8 upgrades as of now.
>
>
> Is anybody using modified [login to unmask email] to increase this limit? Is there any
PTF available to do so ?
>
> Thanks for all your help.
>
> Thanks & Regards,
> Deepak Gujaba Gaikwad
>
>---------------------------------
>Yahoo! Photos
> Ring in the New Year with Photo Calendars. Add photos, events, holidays,
whatever.
>

---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email] Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm

Marcel Harleman

Re: [login to unmask email]
(in response to Roger Miller)
Hi,

I'm afraid the limit is not based on the possibilities of [login to unmask email],
but on the amount of storage that DB2 is able to reserve for it. We
have had similar problems and raised a question with IBM for it. The
answer was that this would need some kind of redesign, something
they've obviously done in V8.

So if you're looking for a solution I'm afraid [login to unmask email] is not the way
to go. See if you can use other (surrogate) userids for different
application systems or task groupings or GRANT all the necessary
authorizations to that one and only OPC scheduler user.

Good luck.

Marcel.

>Hello All,
>
> We are using DB2 V7. Our OPC scheduler is connected to 250+ groups. Because of the [login to unmask email] limit of 245 secondary auth ids, our batch jobs are failing.
>
> We see this limit is increased to 1000+ in V8; but we don't have any plans for V8 upgrades as of now.
>
>
> Is anybody using modified [login to unmask email] to increase this limit? Is there any PTF available to do so ?
>
> Thanks for all your help.
>
> Thanks & Regards,
> Deepak Gujaba Gaikwad
>
>
>
>
>
>
>
>
>
>---------------------------------
>Yahoo! Photos
> Ring in the New Year with Photo Calendars. Add photos, events, holidays, whatever.
>
>---------------------------------------------------------------------------------
>Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email] Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm

---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email] Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm

James Campbell

Re: [login to unmask email]
(in response to Marcel Harleman)
My recollections of playing with [login to unmask email] (back in V3 days) is
that RACF groups are processed in the same order as the time
order in which the id was connected to the group. So you could
disconnect the OPC ID from some groups which are not used for
DB2 purposes, and then re-connect it. This should (well this is
really a RACF thing, not DB2) shuffle the secondary auth-ids up
the list. Check IFCID 234 output.

Other alternatives include identifying those groups which are used
as secondary auth-ids and only processing those in the exit. One
site uses the group-id data field for a similar purpose.

James Campbell


On 17 Jan 2006 at 5:12, Deepak Gujaba Gaikwad wrote:

>
> Hello All,
>
> We are using DB2 V7. OurOPC scheduleris connected to 250+groups. Becauseof the
> [login to unmask email] 245secondaryauth ids,ourbatch jobs are failing.
>
> Wesee this limit is increased to 1000+ in V8; but we don't have any plans for V8 upgrades as of
> now.
>
>
> Is anybody using modified [login to unmask email] to increase this limit? Is there any PTF available to do so
> ?
>
> Thanks for all your help.
>
> Thanks & Regards,
> Deepak Gujaba Gaikwad
>
>
>
>
>
>
>
>
> Yahoo! Photos
> Ring in the New Year with Photo Calendars. Add photos, events, holidays, whatever. ---------------
> ------------------------------------------------------------------ Welcome to the IDUG DB2-L list. To
> unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html.
> From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-
> l.org. The IDUG List Admins can be reached at [login to unmask email] Find out
> the latest on IDUG conferences at http://conferences.idug.org/index.cfm

---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email] Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm

Deepak Gujaba Gaikwad

Re: [login to unmask email]
(in response to James Campbell)
Thank you all for your replies.

One more question for the same. If completely enable RACF authorization exit [login to unmask email] (with profiles like DB1P.*.* so that authorisation will be always done by RACF and never by DB2) ; would [login to unmask email] still come in picture.





James Campbell <[login to unmask email]> wrote:
My recollections of playing with [login to unmask email] (back in V3 days) is
that RACF groups are processed in the same order as the time
order in which the id was connected to the group. So you could
disconnect the OPC ID from some groups which are not used for
DB2 purposes, and then re-connect it. This should (well this is
really a RACF thing, not DB2) shuffle the secondary auth-ids up
the list. Check IFCID 234 output.

Other alternatives include identifying those groups which are used
as secondary auth-ids and only processing those in the exit. One
site uses the group-id data field for a similar purpose.

James Campbell


On 17 Jan 2006 at 5:12, Deepak Gujaba Gaikwad wrote:

>
> Hello All,
>
> We are using DB2 V7. OurOPC scheduleris connected to 250+groups. Becauseof the
> [login to unmask email] 245secondaryauth ids,ourbatch jobs are failing.
>
> Wesee this limit is increased to 1000+ in V8; but we don't have any plans for V8 upgrades as of
> now.
>
>
> Is anybody using modified [login to unmask email] to increase this limit? Is there any PTF available to do so
> ?
>
> Thanks for all your help.
>
> Thanks & Regards,
> Deepak Gujaba Gaikwad
>
>
>
>
>
>
>
>
> Yahoo! Photos
> Ring in the New Year with Photo Calendars. Add photos, events, holidays, whatever. ---------------
> ------------------------------------------------------------------ Welcome to the IDUG DB2-L list. To
> unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html.
> From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-
> l.org. The IDUG List Admins can be reached at [login to unmask email] Find out
> the latest on IDUG conferences at http://conferences.idug.org/index.cfm

---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email] Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm




---------------------------------
Yahoo! Photos
Ring in the New Year with Photo Calendars. Add photos, events, holidays, whatever.

---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email] Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm

Wayne Driscoll

Re: [login to unmask email]
(in response to Deepak Gujaba Gaikwad)
James,
Unfortunately, RACF now builds the list-of-groups in the ACEE (which the
[login to unmask email] uses) in alphabetic order, so this will not help.
Wayne Driscoll
Product Developer
JME Software LLC
NOTE: All opinions are strictly my own.


-----Original Message-----
From: DB2 Data Base Discussion List [mailto:[login to unmask email] On Behalf
Of James Campbell
Sent: Tuesday, January 17, 2006 10:05 PM
To: [login to unmask email]
Subject: Re: [DB2-L] [login to unmask email]

My recollections of playing with [login to unmask email] (back in V3 days) is that RACF
groups are processed in the same order as the time order in which the id was
connected to the group. So you could disconnect the OPC ID from some groups
which are not used for
DB2 purposes, and then re-connect it. This should (well this is really a
RACF thing, not DB2) shuffle the secondary auth-ids up the list. Check
IFCID 234 output.

Other alternatives include identifying those groups which are used as
secondary auth-ids and only processing those in the exit. One site uses the
group-id data field for a similar purpose.

James Campbell


On 17 Jan 2006 at 5:12, Deepak Gujaba Gaikwad wrote:

>
> Hello All,
>
> We are using DB2 V7. OurOPC scheduleris connected to 250+groups.
> Becauseof the [login to unmask email] 245secondaryauth ids,ourbatch jobs are
failing.
>
> Wesee this limit is increased to 1000+ in V8; but we don't have any
> plans for V8 upgrades as of now.
>
>
> Is anybody using modified [login to unmask email] to increase this limit? Is there
> any PTF available to do so ?
>
> Thanks for all your help.
>
> Thanks & Regards,
> Deepak Gujaba Gaikwad
>
>
>
>
>
>
>
>
> Yahoo! Photos
> Ring in the New Year with Photo Calendars. Add photos, events,
> holidays, whatever. ---------------
> ------------------------------------------------------------------
> Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and
home page at http://www.idugdb2-l.org/archives/db2-l.html.
> From that page select "Join or Leave the list". The IDUG DB2-L FAQ is
> at http://www.idugdb2- l.org. The IDUG List Admins can be reached at
> [login to unmask email] Find out the latest on IDUG
> conferences at http://conferences.idug.org/index.cfm

----------------------------------------------------------------------------
-----
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home
page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select
"Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org.
The IDUG List Admins can be reached at [login to unmask email] Find
out the latest on IDUG conferences at http://conferences.idug.org/index.cfm

---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email] Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm

Wayne Driscoll

Re: [login to unmask email]
(in response to Deepak Gujaba Gaikwad)
James,
Unfortunately, RACF now builds the list-of-groups in the ACEE (which the
[login to unmask email] uses) in alphabetic order, so this will not help.
Wayne Driscoll
Product Developer
JME Software LLC
NOTE: All opinions are strictly my own.


-----Original Message-----
From: DB2 Data Base Discussion List [mailto:[login to unmask email] On Behalf
Of James Campbell
Sent: Tuesday, January 17, 2006 10:05 PM
To: [login to unmask email]
Subject: Re: [DB2-L] [login to unmask email]

My recollections of playing with [login to unmask email] (back in V3 days) is that RACF
groups are processed in the same order as the time order in which the id was
connected to the group. So you could disconnect the OPC ID from some groups
which are not used for
DB2 purposes, and then re-connect it. This should (well this is really a
RACF thing, not DB2) shuffle the secondary auth-ids up the list. Check
IFCID 234 output.

Other alternatives include identifying those groups which are used as
secondary auth-ids and only processing those in the exit. One site uses the
group-id data field for a similar purpose.

James Campbell


On 17 Jan 2006 at 5:12, Deepak Gujaba Gaikwad wrote:

>
> Hello All,
>
> We are using DB2 V7. OurOPC scheduleris connected to 250+groups.
> Becauseof the [login to unmask email] 245secondaryauth ids,ourbatch jobs are
failing.
>
> Wesee this limit is increased to 1000+ in V8; but we don't have any
> plans for V8 upgrades as of now.
>
>
> Is anybody using modified [login to unmask email] to increase this limit? Is there
> any PTF available to do so ?
>
> Thanks for all your help.
>
> Thanks & Regards,
> Deepak Gujaba Gaikwad
>
>
>
>
>
>
>
>
> Yahoo! Photos
> Ring in the New Year with Photo Calendars. Add photos, events,
> holidays, whatever. ---------------
> ------------------------------------------------------------------
> Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and
home page at http://www.idugdb2-l.org/archives/db2-l.html.
> From that page select "Join or Leave the list". The IDUG DB2-L FAQ is
> at http://www.idugdb2- l.org. The IDUG List Admins can be reached at
> [login to unmask email] Find out the latest on IDUG
> conferences at http://conferences.idug.org/index.cfm

----------------------------------------------------------------------------
-----
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home
page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select
"Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org.
The IDUG List Admins can be reached at [login to unmask email] Find
out the latest on IDUG conferences at http://conferences.idug.org/index.cfm

---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email] Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm


This e-mail transmission contains information that is confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated.

---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email] Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm

Roger Miller

Re: [login to unmask email]
(in response to Wayne Driscoll)
Changing to use RACF access control is a big change. Some customers who
use this technique don't have secondary authids at all, while others still
need for secondary ids. There are very substantial authorization and RACF
changes in V8, but you should read and consider carefully before you work
to change to RACF access control.

Start with Appendix B of the Administration Guide from a current book,
such as dsnagh15.pdf, Acrobat page 950.
http://publib.boulder.ibm.com/cgi-bin/bookmgr/download/dsnagh15.pdf

The discussion under "Is this exit for you?" is very important. Also
check the foil version of the discussion:
ftp://ftp.software.ibm.com/software/db2storedprocedure/db2zos390/techdocs/d
b2sec1001p.pdf

The V8 library book is also good, although it is not accurate for V7.
http://publib.boulder.ibm.com/epubs/pdf/dsnraj12.pdf

Roger Miller

On Wed, 18 Jan 2006 04:52:41 -0800, Deepak Gujaba Gaikwad
<[login to unmask email]> wrote:

>Thank you all for your replies.
>
> One more question for the same. If completely enable RACF
authorization exit [login to unmask email] (with profiles like DB1P.*.* so that
authorisation will be always done by RACF and never by DB2) ; would
[login to unmask email] still come in picture.
>
>
>
>James Campbell <[login to unmask email]> wrote:
> My recollections of playing with [login to unmask email] (back in V3 days) is
>that RACF groups are processed in the same order as the time
>order in which the id was connected to the group. So you could
>disconnect the OPC ID from some groups which are not used for
>DB2 purposes, and then re-connect it. This should (well this is
>really a RACF thing, not DB2) shuffle the secondary auth-ids up
>the list. Check IFCID 234 output.
>
>Other alternatives include identifying those groups which are used
>as secondary auth-ids and only processing those in the exit. One
>site uses the group-id data field for a similar purpose.
>
>James Campbell
>
>
>On 17 Jan 2006 at 5:12, Deepak Gujaba Gaikwad wrote:
>
>>
>> Hello All,
>>
>> We are using DB2 V7. OurOPC scheduleris connected to 250+groups.
Becauseof the
>> [login to unmask email] 245secondaryauth ids,ourbatch jobs are failing.
>>
>> Wesee this limit is increased to 1000+ in V8; but we don't have any
plans for V8 upgrades as of
>> now.
>>
>>
>> Is anybody using modified [login to unmask email] to increase this limit? Is there any
PTF available to do so
>> ?
>>
>> Thanks for all your help.
>>
>> Thanks & Regards,
>> Deepak Gujaba Gaikwad
>>
>>

---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email] Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm

Ulrich Boche

[login to unmask email]
(in response to Wayne Driscoll)
On Tuesday, 17.01.2006 at 05:12 PST, Deepak Gujaba Gaikwad
<[login to unmask email]> wrote:
> Hello All,
>
> We are using DB2 V7.  Our OPC scheduler is connected to 250+ groups.
Because of
> the [login to unmask email] limit of 245 secondary auth ids,  our batch jobs are
failing.
>
> We see this limit is increased to 1000+ in V8; but we don't have any
plans for
> V8 upgrades as of now.
>
> Is anybody using modified [login to unmask email] to increase this limit? Is there any
PTF
> available to do so ?
>

As other postings have stated, there is no way to raise the number of
secondary auth IDs in DB2 V7.
I would like to note that having userids connected to more than 250 groups
is not very effective in terms of performance and doesn't make the
administration of users and authorities any easier. I would try to reduce
the number of connects for the userids involved in DB2 below 245.

Of course, technically you can connect a userid to 8191 groups in RACF but
you really don't want to do that.
--
Ulrich Boche
SVA GmbH, Germany
IBM Premier Business Partner
---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email] Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm