DDf Security Violation II, undocumented error

Kevin Kinney

DDf Security Violation II, undocumented error
I'm installing DB2 9.1 on z/OS 1.9 and am trying to test DRDA by CONNECTing
from a PC using DB2 Connect Enterprise.
Can anyone tell me where to find documentation on SQL30082N, RC=22?

Thank you,
kk

BACKGROUND: After tracing the 'CONNECT' call, I see this -
4250 errtrans DB2 UDB global services sqlzRcToSqlca cei
(13.3.26.15.2.40)
pid 3964 tid 3980 cpid -1 node 0 sec 146 nsec 875122873 probe
40
Error Translation
Original Error ZRC = 0x8037012D = -2143878867 = SQLJR_AUTERR
New Error SQL30082

4251 error DB2 UDB global services sqlzRcToSqlca cei
(4.3.26.15.2.50)
pid 3964 tid 3980 cpid -1 node 0 sec 146 nsec 875129454 probe
50
Error ZRC = 0x8037012D = -2143878867 = SQLJR_AUTERR
bytes 144

Data1 (PD_DB2_TYPE_SQLCA,136) SQLCA:
sqlcaid : SQLCA sqlcabc: 136 sqlcode: -30082 sqlerrml: 22
sqlerrmc: 15 PROCESSING FAILURE
sqlerrp : SQLEXSMC
sqlerrd : (1) 0x8037012D (2) 0x0000012D (3) 0x00000000
(4) 0x00000000 (5) 0x00000000 (6) 0x00000000
sqlwarn : (1) (2) (3) (4) (5) (6)
(7) (8) (9) (10) (11)
sqlstate:

All I see on the mainframe is this - (There are no RACF errors
created)
DSNL030I -DB9G DSNLTSEC DDF PROCESSING FAILURE FOR 145
LUWID=GADC3343.FFFE.C32D49270690
AUTHID=[RACF userid], REASON=00F30013

______________________________________________________________________

* IDUG 2009 Denver, CO, USA * May 11-15, 2009 * http://IDUG.ORG/lsNA *
______________________________________________________________________



The IDUG DB2-L Listserv is only part of your membership in IDUG. The DB2-L list archives, FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms

tim malamphy

Re: DDf Security Violation II, undocumented error
(in response to Kevin Kinney)
Couldn't find an RC 22 either.
Looks like the RACF id is invalid based on the 00F30013 code in the trace.

timm



--- On Tue, 10/21/08, Kevin Kinney <[login to unmask email]> wrote:

> From: Kevin Kinney <[login to unmask email]>
> Subject: [DB2-L] DDf Security Violation II, undocumented error
> To: [login to unmask email]
> Date: Tuesday, October 21, 2008, 9:12 AM
> I'm installing DB2 9.1 on z/OS 1.9 and am trying to test
> DRDA by CONNECTing
> from a PC using DB2 Connect Enterprise.
> Can anyone tell me where to find documentation on
> SQL30082N, RC=22?
>
> Thank you,
> kk
>
> BACKGROUND: After tracing the 'CONNECT' call, I see
> this -
> 4250 errtrans DB2 UDB global services sqlzRcToSqlca cei
> (13.3.26.15.2.40)
> pid 3964 tid 3980 cpid -1 node 0 sec 146 nsec
> 875122873 probe
> 40
> Error Translation
> Original Error ZRC = 0x8037012D = -2143878867 =
> SQLJR_AUTERR
> New Error SQL30082
>
> 4251 error DB2 UDB global services sqlzRcToSqlca cei
> (4.3.26.15.2.50)
> pid 3964 tid 3980 cpid -1 node 0 sec 146 nsec
> 875129454 probe
> 50
> Error ZRC = 0x8037012D = -2143878867 = SQLJR_AUTERR
> bytes 144
>
> Data1 (PD_DB2_TYPE_SQLCA,136) SQLCA:
> sqlcaid : SQLCA sqlcabc: 136 sqlcode: -30082
> sqlerrml: 22
> sqlerrmc: 15 PROCESSING FAILURE
> sqlerrp : SQLEXSMC
> sqlerrd : (1) 0x8037012D (2) 0x0000012D (3)
> 0x00000000
> (4) 0x00000000 (5) 0x00000000 (6)
> 0x00000000
> sqlwarn : (1) (2) (3) (4) (5)
> (6)
> (7) (8) (9) (10) (11)
> sqlstate:
>
> All I see on the mainframe is this - (There are no RACF
> errors
> created)
> DSNL030I -DB9G DSNLTSEC DDF PROCESSING FAILURE FOR 145
> LUWID=GADC3343.FFFE.C32D49270690
> AUTHID=[RACF userid], REASON=00F30013
>
> ______________________________________________________________________
>
> * IDUG 2009 Denver, CO, USA * May 11-15, 2009 *
> http://IDUG.ORG/lsNA *
> ______________________________________________________________________
>
>
>
> The IDUG DB2-L Listserv is only part of your membership in
> IDUG. The DB2-L list archives, FAQ, and delivery
> preferences are at http://www.idug.org/lsidug under the
> Listserv tab. While at the site, you can also access the
> IDUG Online Learning Center, Tech Library and Code Place,
> see the latest IDUG conference information and much more.
> If you have not yet signed up for Basic Membership in IDUG,
> available at no cost, click on Member Services at
> http://www.idug.org/lsms




______________________________________________________________________

* IDUG 2009 Denver, CO, USA * May 11-15, 2009 * http://IDUG.ORG/lsNA *
______________________________________________________________________



The IDUG DB2-L Listserv is only part of your membership in IDUG. The DB2-L list archives, FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms

Jim Irwin

Re: DDf Security Violation II, undocumented error
(in response to tim malamphy)
00F30013 means that the RACF user id doesn't have authority to connect
to the target DB2 subsystem.

-----Original Message-----
From: DB2 Data Base Discussion List [mailto:[login to unmask email] On
Behalf Of Kevin Kinney
Sent: Tuesday, October 21, 2008 11:13 AM
To: [login to unmask email]
Subject: [DB2-L] DDf Security Violation II, undocumented error

I'm installing DB2 9.1 on z/OS 1.9 and am trying to test DRDA by
CONNECTing
from a PC using DB2 Connect Enterprise.
Can anyone tell me where to find documentation on SQL30082N, RC=22?

Thank you,
kk

BACKGROUND: After tracing the 'CONNECT' call, I see this -
4250 errtrans DB2 UDB global services sqlzRcToSqlca cei
(13.3.26.15.2.40)
pid 3964 tid 3980 cpid -1 node 0 sec 146 nsec 875122873 probe
40
Error Translation
Original Error ZRC = 0x8037012D = -2143878867 = SQLJR_AUTERR
New Error SQL30082

4251 error DB2 UDB global services sqlzRcToSqlca cei
(4.3.26.15.2.50)
pid 3964 tid 3980 cpid -1 node 0 sec 146 nsec 875129454 probe
50
Error ZRC = 0x8037012D = -2143878867 = SQLJR_AUTERR
bytes 144

Data1 (PD_DB2_TYPE_SQLCA,136) SQLCA:
sqlcaid : SQLCA sqlcabc: 136 sqlcode: -30082 sqlerrml: 22
sqlerrmc: 15 PROCESSING FAILURE
sqlerrp : SQLEXSMC
sqlerrd : (1) 0x8037012D (2) 0x0000012D (3) 0x00000000
(4) 0x00000000 (5) 0x00000000 (6) 0x00000000
sqlwarn : (1) (2) (3) (4) (5) (6)
(7) (8) (9) (10) (11)
sqlstate:

All I see on the mainframe is this - (There are no RACF errors
created)
DSNL030I -DB9G DSNLTSEC DDF PROCESSING FAILURE FOR 145
LUWID=GADC3343.FFFE.C32D49270690
AUTHID=[RACF userid], REASON=00F30013

______________________________________________________________________

* IDUG 2009 Denver, CO, USA * May 11-15, 2009 * http://IDUG.ORG/lsNA *
______________________________________________________________________



The IDUG DB2-L Listserv is only part of your membership in IDUG. The
DB2-L list archives, FAQ, and delivery preferences are at
http://www.idug.org/lsidug under the Listserv tab. While at the site,
you can also access the IDUG Online Learning Center, Tech Library and
Code Place, see the latest IDUG conference information and much more.
If you have not yet signed up for Basic Membership in IDUG, available at
no cost, click on Member Services at http://www.idug.org/lsms

______________________________________________________________________

* IDUG 2009 Denver, CO, USA * May 11-15, 2009 * http://IDUG.ORG/lsNA *
______________________________________________________________________



The IDUG DB2-L Listserv is only part of your membership in IDUG. The DB2-L list archives, FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms

Jim Irwin

Re: DDf Security Violation II, undocumented error
(in response to Jim Irwin)
Sorry....sent the reply before I was done. Most likely the id involved
is not in the DSNR class for distributed connections.

-----Original Message-----
From: DB2 Data Base Discussion List [mailto:[login to unmask email] On
Behalf Of Kevin Kinney
Sent: Tuesday, October 21, 2008 11:13 AM
To: [login to unmask email]
Subject: [DB2-L] DDf Security Violation II, undocumented error

I'm installing DB2 9.1 on z/OS 1.9 and am trying to test DRDA by
CONNECTing
from a PC using DB2 Connect Enterprise.
Can anyone tell me where to find documentation on SQL30082N, RC=22?

Thank you,
kk

BACKGROUND: After tracing the 'CONNECT' call, I see this -
4250 errtrans DB2 UDB global services sqlzRcToSqlca cei
(13.3.26.15.2.40)
pid 3964 tid 3980 cpid -1 node 0 sec 146 nsec 875122873 probe
40
Error Translation
Original Error ZRC = 0x8037012D = -2143878867 = SQLJR_AUTERR
New Error SQL30082

4251 error DB2 UDB global services sqlzRcToSqlca cei
(4.3.26.15.2.50)
pid 3964 tid 3980 cpid -1 node 0 sec 146 nsec 875129454 probe
50
Error ZRC = 0x8037012D = -2143878867 = SQLJR_AUTERR
bytes 144

Data1 (PD_DB2_TYPE_SQLCA,136) SQLCA:
sqlcaid : SQLCA sqlcabc: 136 sqlcode: -30082 sqlerrml: 22
sqlerrmc: 15 PROCESSING FAILURE
sqlerrp : SQLEXSMC
sqlerrd : (1) 0x8037012D (2) 0x0000012D (3) 0x00000000
(4) 0x00000000 (5) 0x00000000 (6) 0x00000000
sqlwarn : (1) (2) (3) (4) (5) (6)
(7) (8) (9) (10) (11)
sqlstate:

All I see on the mainframe is this - (There are no RACF errors
created)
DSNL030I -DB9G DSNLTSEC DDF PROCESSING FAILURE FOR 145
LUWID=GADC3343.FFFE.C32D49270690
AUTHID=[RACF userid], REASON=00F30013

______________________________________________________________________

* IDUG 2009 Denver, CO, USA * May 11-15, 2009 * http://IDUG.ORG/lsNA *
______________________________________________________________________



The IDUG DB2-L Listserv is only part of your membership in IDUG. The
DB2-L list archives, FAQ, and delivery preferences are at
http://www.idug.org/lsidug under the Listserv tab. While at the site,
you can also access the IDUG Online Learning Center, Tech Library and
Code Place, see the latest IDUG conference information and much more.
If you have not yet signed up for Basic Membership in IDUG, available at
no cost, click on Member Services at http://www.idug.org/lsms

______________________________________________________________________

* IDUG 2009 Denver, CO, USA * May 11-15, 2009 * http://IDUG.ORG/lsNA *
______________________________________________________________________



The IDUG DB2-L Listserv is only part of your membership in IDUG. The DB2-L list archives, FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms

Ulrich Boche

DDf Security Violation II, undocumented error
(in response to Jim Irwin)


On Tuesday, 21.10.2008 at 16:12 GMT, Kevin Kinney <[login to unmask email]>
wrote:
> I'm installing DB2 9.1 on z/OS 1.9 and am trying to test DRDA by
CONNECTing
> from a PC using DB2 Connect Enterprise.
> Can anyone tell me where to find documentation on SQL30082N, RC=22?
>
> Thank you,
> kk
>
> BACKGROUND: After tracing the 'CONNECT' call, I see this -
> 4250 errtrans DB2 UDB global services sqlzRcToSqlca cei
> (13.3.26.15.2.40)
> pid 3964 tid 3980 cpid -1 node 0 sec 146 nsec 875122873 probe
> 40
> Error Translation
> Original Error ZRC = 0x8037012D = -2143878867 = SQLJR_AUTERR
> New Error SQL30082
>
> 4251 error DB2 UDB global services sqlzRcToSqlca cei
> (4.3.26.15.2.50)
> pid 3964 tid 3980 cpid -1 node 0 sec 146 nsec 875129454 probe
> 50
> Error ZRC = 0x8037012D = -2143878867 = SQLJR_AUTERR
> bytes 144
>
> Data1 (PD_DB2_TYPE_SQLCA,136) SQLCA:
> sqlcaid : SQLCA sqlcabc: 136 sqlcode: -30082 sqlerrml: 22
> sqlerrmc: 15 PROCESSING FAILURE
> sqlerrp : SQLEXSMC
> sqlerrd : (1) 0x8037012D (2) 0x0000012D (3) 0x00000000
> (4) 0x00000000 (5) 0x00000000 (6) 0x00000000
> sqlwarn : (1) (2) (3) (4) (5) (6)
> (7) (8) (9) (10) (11)
> sqlstate:
>
> All I see on the mainframe is this - (There are no RACF errors
> created)
> DSNL030I -DB9G DSNLTSEC DDF PROCESSING FAILURE FOR 145
> LUWID=GADC3343.FFFE.C32D49270690
> AUTHID=[RACF userid], REASON=00F30013
>

In case you haven't found out by now, your users need READ access to
"ssid.DIST" in RACF class DSNR where "ssid" is the ID of your DB2
subsystem.

In releases earlier than z/OS V1R6, RACF checking for class DSNR could be
turned on or off by DB2 subsystem with definitions in the RACF Router
Table. This is no longer supported and appropriate access in class DSNR is
required for all subsystems, users and connections if the class is active.
--
Ulrich Boche
SVA GmbH, Germany
______________________________________________________________________

* IDUG 2009 Denver, CO, USA * May 11-15, 2009 * http://IDUG.ORG/lsNA *
______________________________________________________________________



The IDUG DB2-L Listserv is only part of your membership in IDUG. The DB2-L list archives, FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms

Prabeesh Raman

DDF error
(in response to Ulrich Boche)
I am trying to connect to a remote server and receive the following error.
What could be possible reasons.


ERROR:
SQLCODE : -30020 DSNTIAR CODE : 0

DSNT408I SQLCODE = -30020, ERROR: EXECUTION FAILED DUE TO A DISTRIBUTION
PROTOCOL ERROR THAT CAUSED DEALLOCATION OF THE CONVERSATION: REASON
124C (011D)
DSNT418I SQLSTATE = 58009 SQLSTATE RETURN CODE
DSNT415I SQLERRP = DSNLZRSQ SQL PROCEDURE DETECTING ERROR
DSNT416I SQLERRD = 0 0 0 -1 0 0 SQL DIAGNOSTIC INFORMATION
DSNT416I SQLERRD = X'00000000' X'00000000' X'00000000' X'FFFFFFFF'
X'00000000' X'00000000' SQL DIAGNOSTIC INFORMATION

Thanks and Regard
Prabeesh R

______________________________________________________________________

* IDUG 2009 Denver, CO, USA * May 11-15, 2009 * http://IDUG.ORG/lsNA *
______________________________________________________________________



The IDUG DB2-L Listserv is only part of your membership in IDUG. The DB2-L list archives, FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms

Leslie

Re: DDF error
(in response to Prabeesh Raman)
Hi

I would check that you are on the correct release of software . I'm sure I
have had somebody ask me about this in the past only to find that the
software level of the remote or local client was out of sync.



i.e. LUW needs to be on Fix Pack x . etc etc .



Leslie Pendlebury-Bowe



_____

From: DB2 Data Base Discussion List [mailto:[login to unmask email] On Behalf
Of Prabeesh Raman
Sent: 28 November 2008 14:16
To: [login to unmask email]
Subject: [DB2-L] DDF error




I am trying to connect to a remote server and receive the following error.
What could be possible reasons.


ERROR:
SQLCODE : -30020 DSNTIAR CODE : 0

DSNT408I SQLCODE = -30020, ERROR: EXECUTION FAILED DUE TO A DISTRIBUTION
PROTOCOL ERROR THAT CAUSED DEALLOCATION OF THE CONVERSATION: REASON
124C (011D)
DSNT418I SQLSTATE = 58009 SQLSTATE RETURN CODE
DSNT415I SQLERRP = DSNLZRSQ SQL PROCEDURE DETECTING ERROR
DSNT416I SQLERRD = 0 0 0 -1 0 0 SQL DIAGNOSTIC INFORMATION
DSNT416I SQLERRD = X'00000000' X'00000000' X'00000000' X'FFFFFFFF'
X'00000000' X'00000000' SQL DIAGNOSTIC INFORMATION



Thanks and Regard
Prabeesh R

_____

< http://idug.org/lsNA > IDUG 2009 - North America * May 11-15, 2009 *
Denver, CO, USA

The IDUG DB2-L Listserv is only part of your membership in IDUG. The DB2-L
list archives, FAQ, and delivery preferences are at IDUG.ORG
< http://www.idug.org/lsidug > under the Listserv tab. While at the site, you
can also access the IDUG Online Learning Center, Tech Library and Code
Place, see the latest IDUG conference < http://www.idug.org/lsconf >
information, and much more. If you have not yet signed up for Basic
Membership in IDUG, available at no cost, click on Member Services
< http://www.idug.org/lsms >


______________________________________________________________________

* IDUG 2009 Denver, CO, USA * May 11-15, 2009 * http://IDUG.ORG/lsNA *
______________________________________________________________________



The IDUG DB2-L Listserv is only part of your membership in IDUG. The DB2-L list archives, FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms