Fast Unload Problem.

Raey

Fast Unload Problem.
We have some analysts who are using fast unload to unload data from a z/OS DB2 v8 tables using scheduled jobs.

The control card of the fast unload utility that the analyst is using is as shown below

FASTUNLOAD
LOAD-CONTROL DB2LOAD
OUTPUT-FORMAT DSNTIAUL
INPUT-FORMAT TABLE
SHRLEVEL CHANGE
ESTIMATED-ROWS 10000000
SQL-ACCESS NONE

SELECT A, B, C, D
FROM TABLE1
ORDER BY A, B

This job that is executing the above control card has been running for over a year. However, today it abend’ed due to ACF2 error. The error says that the job does not have read access on the VSAM dataset of the table.

I verified that the job never had read access on the VSAM dataset. So, my question to you all is how was this job able to run in the past?

I believe the key to this problem is the SQL-ACCESS NONE parameter. SQL-ACCESS NONE can use VSAM or EXCP method to unload the data.

Any way the error message that we are getting is

PFU0207I - FAST UNLOAD WILL USE MM ACCESS METHOD TO ACCESS TABLESPACE DATA
PFU0648E - MEDIA MANAGER OPEN FAILED - RTNCODE: 18 . MESSAGES FOLLOW.
GENMM04E - [login to unmask email]: Unable to CONNECT to dataset.
RC: X'00000008'
DSNAME: VSAM dataset name

ACF99913 ACF2 VIOLATION-00,16, VSAM dataset name
ACF95913 -AMS/CATALOG FUNCTION SUPPRESSED; AUTHORIZATION IS REQUIRED


Can anyone tell me why this job for a sudden is getting this error message?

Thanks,
Ayalew.


---------------------------------
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now.

The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L list archives, the FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information, and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms

Chris Hoelscher

Re: Fast Unload Problem.
(in response to Raey)
just a thought - is it possible there was an online reorg done that changed
one of the nodes from J0001 to I0001 and for some reason there was an
obscure rule that allowed read access to all VSAM datasets with a J0001 in
the 5th node???
not likely - but the real answer will turn out to be not likely ...


Chris Hoelscher
Senior IDMS & DB2 Database Administrator
Humana Inc
502-476-2538
[login to unmask email]



The information transmitted is intended only for the person or entity to which it is addressed and may contain CONFIDENTIAL material. If you receive this material/information in error, please contact the sender and delete or destroy the material/information.

The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L list archives, the FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information, and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms

Avram Friedman

Re: Fast Unload Problem.
(in response to Chris Hoelscher)
You state

> I verified that the job never had read access on the VSAM dataset. So,
my question to you all is how was this job able to run in the past?


System security is rarly granted by job name in ACF2 or RACF
It is therefore no surprize that this job was able to run in the past even
though the job was not previously authorized.

Has the user ID changed?
Has the underlying DB2 table space name changed?
Has the LPAR that you are running the job on changed?

Regards
Avram Friedman


On Fri, 21 Dec 2007 09:27:25 -0800, Ayalew Kassa
<[login to unmask email]> wrote:

>We have some analysts who are using fast unload to unload data from a
z/OS DB2 v8 tables using scheduled jobs.
>
> The control card of the fast unload utility that the analyst is using is as
shown below
>
> FASTUNLOAD
> LOAD-CONTROL DB2LOAD
> OUTPUT-FORMAT DSNTIAUL
> INPUT-FORMAT TABLE
> SHRLEVEL CHANGE
> ESTIMATED-ROWS 10000000
> SQL-ACCESS NONE
>
> SELECT A, B, C, D
> FROM TABLE1
> ORDER BY A, B
>
> This job that is executing the above control card has been running for over
a year. However, today it abend?ed due to ACF2 error. The error says that
the job does not have read access on the VSAM dataset of the table.
>
> I verified that the job never had read access on the VSAM dataset. So,
my question to you all is how was this job able to run in the past?
>
> I believe the key to this problem is the SQL-ACCESS NONE parameter. SQL-
ACCESS NONE can use VSAM or EXCP method to unload the data.
>
> Any way the error message that we are getting is
>
> PFU0207I - FAST UNLOAD WILL USE MM ACCESS METHOD TO ACCESS
TABLESPACE DATA
> PFU0648E - MEDIA MANAGER OPEN FAILED - RTNCODE: 18 . MESSAGES
FOLLOW.
> GENMM04E - [login to unmask email]: Unable to CONNECT to dataset.
> RC: X'00000008'
> DSNAME: VSAM dataset name
>
> ACF99913 ACF2 VIOLATION-00,16, VSAM dataset name
> ACF95913 -AMS/CATALOG FUNCTION SUPPRESSED; AUTHORIZATION IS
REQUIRED
>
>
> Can anyone tell me why this job for a sudden is getting this error message?
>
> Thanks,
> Ayalew.
>
>
>---------------------------------
>Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it
now.
>
>The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L list
archives, the FAQ, and delivery preferences are at http://www.idug.org/lsidug
under the Listserv tab. While at the site, you can also access the IDUG
Online Learning Center, Tech Library and Code Place, see the latest IDUG
conference information, and much more. If you have not yet signed up for
Basic Membership in IDUG, available at no cost, click on Member Services at
http://www.idug.org/lsms

The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L list archives, the FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information, and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms

Victor Bond

Re: Fast Unload Problem.
(in response to Avram Friedman)
Is it possible that the fastunload switched from EXCP to VSAM reads?
We had some issues with fastunload, V8 tablespaces and EXCP.

-----Original Message-----
From: DB2 Data Base Discussion List [mailto:[login to unmask email] On
Behalf Of Avram Friedman
Sent: Friday, December 21, 2007 10:52 AM
To: [login to unmask email]
Subject: Re: [DB2-L] Fast Unload Problem.

You state

> I verified that the job never had read access on the VSAM dataset.
So,
my question to you all is how was this job able to run in the past?


System security is rarly granted by job name in ACF2 or RACF
It is therefore no surprize that this job was able to run in the past
even
though the job was not previously authorized.

Has the user ID changed?
Has the underlying DB2 table space name changed?
Has the LPAR that you are running the job on changed?

Regards
Avram Friedman


On Fri, 21 Dec 2007 09:27:25 -0800, Ayalew Kassa
<[login to unmask email]> wrote:

>We have some analysts who are using fast unload to unload data from a
z/OS DB2 v8 tables using scheduled jobs.
>
> The control card of the fast unload utility that the analyst is using
is as
shown below
>
> FASTUNLOAD
> LOAD-CONTROL DB2LOAD
> OUTPUT-FORMAT DSNTIAUL
> INPUT-FORMAT TABLE
> SHRLEVEL CHANGE
> ESTIMATED-ROWS 10000000
> SQL-ACCESS NONE
>
> SELECT A, B, C, D
> FROM TABLE1
> ORDER BY A, B
>
> This job that is executing the above control card has been running
for over
a year. However, today it abend?ed due to ACF2 error. The error says
that
the job does not have read access on the VSAM dataset of the table.
>
> I verified that the job never had read access on the VSAM dataset.
So,
my question to you all is how was this job able to run in the past?
>
> I believe the key to this problem is the SQL-ACCESS NONE parameter.
SQL-
ACCESS NONE can use VSAM or EXCP method to unload the data.
>
> Any way the error message that we are getting is
>
> PFU0207I - FAST UNLOAD WILL USE MM ACCESS METHOD TO ACCESS
TABLESPACE DATA
> PFU0648E - MEDIA MANAGER OPEN FAILED - RTNCODE: 18 . MESSAGES
FOLLOW.
> GENMM04E - [login to unmask email]: Unable to CONNECT to dataset.
> RC: X'00000008'
> DSNAME: VSAM dataset name
>
> ACF99913 ACF2 VIOLATION-00,16, VSAM dataset name
> ACF95913 -AMS/CATALOG FUNCTION SUPPRESSED; AUTHORIZATION IS
REQUIRED
>
>
> Can anyone tell me why this job for a sudden is getting this error
message?
>
> Thanks,
> Ayalew.
>
>
>---------------------------------
>Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try
it
now.
>
>The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L
list
archives, the FAQ, and delivery preferences are at
http://www.idug.org/lsidug
under the Listserv tab. While at the site, you can also access the IDUG

Online Learning Center, Tech Library and Code Place, see the latest IDUG

conference information, and much more. If you have not yet signed up
for
Basic Membership in IDUG, available at no cost, click on Member Services
at
http://www.idug.org/lsms

The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L
list archives, the FAQ, and delivery preferences are at
http://www.idug.org/lsidug under the Listserv tab. While at the site,
you can also access the IDUG Online Learning Center, Tech Library and
Code Place, see the latest IDUG conference information, and much more.
If you have not yet signed up for Basic Membership in IDUG, available at
no cost, click on Member Services at http://www.idug.org/lsms

The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L list archives, the FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information, and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms

Raey

Re: Fast Unload Problem.
(in response to Victor Bond)
Yes, I see an online reorg run'ed recently on the tablespace that is in question and changed the I0001 to J0001. But , our shop is not controlling VSAM accesses on the J0001 level of the dataset.

But thanks for the info.

Ayalew.

Chris Hoelscher <[login to unmask email]> wrote:
just a thought - is it possible there was an online reorg done that changed one of the nodes from J0001 to I0001 and for some reason there was an obscure rule that allowed read access to all VSAM datasets with a J0001 in the 5th node???
not likely - but the real answer will turn out to be not likely ...


Chris Hoelscher
Senior IDMS & DB2 Database Administrator
Humana Inc
502-476-2538
[login to unmask email]



The information transmitted is intended only for the person or entity to which it is addressed and may contain CONFIDENTIAL material. If you receive this material/information in error, please contact the sender and delete or destroy the material/information.
The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L list archives, the FAQ, and delivery preferences are at www.idug.org under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information, and much more.
If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services



---------------------------------
Never miss a thing. Make Yahoo your homepage.

The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L list archives, the FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information, and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms

Raey

Re: Fast Unload Problem.
(in response to Raey)
Hello Avram,

we control VSAM access on the first 8 character of the VSAM dataset which is the subsystem name + Facility code + system code ( for example Z1TTZTFF). This means that we have Z1TTZTFF acf2 rule for this application that controls VSAM access. This rule did not change since April 2007.

I do not think the tablespace name has changed either. But , even if it is changed it is not gonna make a difference because we control the VSAM access on the high level (the first 8 characters of the VSAM dataset which did not change)

The VSAM dataset was not migrated to tapea either ...

So, the error message that we got is

ACF99913 ACF2 VIOLATION-00,16,Z1OT8109,P10277, VSAM dataset name
ACF95913 -AMS/CATALOG FUNCTION SUPPRESSED;

When I google'ed on ACF95913, I found some info that says the error was due to tryig to read scrached tape... does my error message in some way related to this one ?

Thanks and Best Regards,


Avram Friedman <[login to unmask email]> wrote:
You state

> I verified that the job never had read access on the VSAM dataset. So,
my question to you all is how was this job able to run in the past?


System security is rarly granted by job name in ACF2 or RACF
It is therefore no surprize that this job was able to run in the past even
though the job was not previously authorized.

Has the user ID changed?
Has the underlying DB2 table space name changed?
Has the LPAR that you are running the job on changed?

Regards
Avram Friedman


On Fri, 21 Dec 2007 09:27:25 -0800, Ayalew Kassa
wrote:

>We have some analysts who are using fast unload to unload data from a
z/OS DB2 v8 tables using scheduled jobs.
>
> The control card of the fast unload utility that the analyst is using is as
shown below
>
> FASTUNLOAD
> LOAD-CONTROL DB2LOAD
> OUTPUT-FORMAT DSNTIAUL
> INPUT-FORMAT TABLE
> SHRLEVEL CHANGE
> ESTIMATED-ROWS 10000000
> SQL-ACCESS NONE
>
> SELECT A, B, C, D
> FROM TABLE1
> ORDER BY A, B
>
> This job that is executing the above control card has been running for over
a year. However, today it abend?ed due to ACF2 error. The error says that
the job does not have read access on the VSAM dataset of the table.
>
> I verified that the job never had read access on the VSAM dataset. So,
my question to you all is how was this job able to run in the past?
>
> I believe the key to this problem is the SQL-ACCESS NONE parameter. SQL-
ACCESS NONE can use VSAM or EXCP method to unload the data.
>
> Any way the error message that we are getting is
>
> PFU0207I - FAST UNLOAD WILL USE MM ACCESS METHOD TO ACCESS
TABLESPACE DATA
> PFU0648E - MEDIA MANAGER OPEN FAILED - RTNCODE: 18 . MESSAGES
FOLLOW.
> GENMM04E - [login to unmask email]: Unable to CONNECT to dataset.
> RC: X'00000008'
> DSNAME: VSAM dataset name
>
> ACF99913 ACF2 VIOLATION-00,16, VSAM dataset name
> ACF95913 -AMS/CATALOG FUNCTION SUPPRESSED; AUTHORIZATION IS
REQUIRED
>
>
> Can anyone tell me why this job for a sudden is getting this error message?
>
> Thanks,
> Ayalew.
>
>
>---------------------------------
>Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it
now.
>
>The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L list
archives, the FAQ, and delivery preferences are at http://www.idug.org/lsidug
under the Listserv tab. While at the site, you can also access the IDUG
Online Learning Center, Tech Library and Code Place, see the latest IDUG
conference information, and much more. If you have not yet signed up for
Basic Membership in IDUG, available at no cost, click on Member Services at
http://www.idug.org/lsms

The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L list archives, the FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information, and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms



---------------------------------
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now.

The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L list archives, the FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information, and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms

Jim Tonchick

Re: Fast Unload Problem.
(in response to Raey)
If the error was an ACF2 s913, then either the rule covering the dataset
alias (highlevel) must have changed or the dataset name must have changed.
Either way you need to talk to the ACF2 administrators or someone with ACF2 AUDIT
authority to decompile the rule set and see exactly how it is coded. Only
then can you start to figure out what and why.

Jim Tonchick
Acxiom - CDC



**************************************See AOL's top rated recipes
(http://food.aol.com/top-rated-recipes?NCID=aoltop00030000000004)

The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L list archives, the FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information, and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms

Raey

Re: Fast Unload Problem.
(in response to Jim Tonchick)
Hello Jim,
The job did not get s913 ACF2 error. Below is the error that I noticed in th job.

ACF99913 ACF2 VIOLATION-00,16,Z1OT8109,P10277, VSAM dataset name
ACF95913 -AMS/CATALOG FUNCTION SUPPRESSED;

Thanks for the info.

Ayalew Kassa.


[login to unmask email] wrote: If the error was an ACF2 s913, then either the rule covering the dataset alias (highlevel) must have changed or the dataset name must have changed. Either way you need to talk to the ACF2 administrators or someone with ACF2 AUDIT authority to decompile the rule set and see exactly how it is coded. Only then can you start to figure out what and why.

Jim Tonchick
Acxiom - CDC




---------------------------------
See AOL's top rated recipes and easy ways to stay in shape for winter.

The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L list archives, the FAQ, and delivery preferences are at www.idug.org under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information, and much more.
If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services


---------------------------------
Looking for last minute shopping deals? Find them fast with Yahoo! Search.

The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L list archives, the FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information, and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms

Jim Tonchick

Re: Fast Unload Problem.
(in response to Raey)
ACF99913 is a security violation error message. You need to talk to the
ACF2 administrators to find out what changed. The "16" says that the rule
explicitly prevents access. Since the job worked in the past, either the ACF2
rules changed or the table was moved to a new tablespace or a new index was
created over the table resulting in a new dataset name not explicitly listed in a
rule.

The Fast Load utility does not use DB2's media manager. The batch job
running the utility must have the appropriate security access to the physical VSAM
tablespaces and indexspaces that contain the table data.

Jim Tonchick
Acxiom - CDC





**************************************See AOL's top rated recipes
(http://food.aol.com/top-rated-recipes?NCID=aoltop00030000000004)

The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L list archives, the FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information, and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms