failure connecting CICS to DB2

Jim McAlpine

failure connecting CICS to DB2
I'm doing some testing with CICS in z/OS 1.7 for the first time. When I
start up CICS I get the following -

DFHDB2042 12/04/2008 17:18:10 Z30D Connection not authorized to DB2Z

I'm using a copy of the same RACF database. Has something changed that I'm
not aware of.

Jim McAlpine

______________________________________________________________________

* IDUG 2009 Denver, CO, USA * May 11-15, 2009 * http://IDUG.ORG/lsNA *
______________________________________________________________________



The IDUG DB2-L Listserv is only part of your membership in IDUG. The DB2-L list archives, FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms

Mike Turner

Re: failure connecting CICS to DB2
(in response to Jim McAlpine)
Hi Jim

Looks like a known problem with RACF and DB2 on z/OS 1.7. There was a thread
in March 2007 titled 'DSNR entries for z/OS v1.7'. The following is an
answer to that thread from Ulrich Boche:

>>>>>>>
In z/OS V1R7 the ICHRFR01 RACF Router table is no longer required for all
classes where you want RACF to handle the router calls. By default, RACF is
called for all classes. So, if you just do nothing when you migrate to RACF
the following will happen:

- For those DB2 subsystems that you had defined in your ICHRFR01 table
before and where you had profiles in class DSNR defined, things will go
normal. Users who were allowed to connect to DB2 will still be able to, the
others will be rejected.

- For those DB2 subsystems that you had not defined in your ICHRFR01 table
before, you will likely run into problems. If you have no profiles defined
in class DSNR that cover these subsystems, users will not be able to connect
to DB2.

Probably the best thing to do is to define profiles in DSNR for all your DB2
subsystems before you migrate to z/OS V1R7.

<<<<<<<<
Regards
Mike Turner
Email: [login to unmask email]
Tel: +44 (0)1565 873702
web: www.michael-turner.ltd.uk
----------------------------------------------------------------------------
------------
Michael Turner Ltd. Registered in England and Wales No. 1433722. Registered
Office: 131 King Street, Knutsford, Cheshire, WA16 6EJ. VAT Reg. No. GB 338
4159 44.

-----Original Message-----
From: [login to unmask email]
[mailto:[login to unmask email]On Behalf Of Jim McAlpine
Sent: Thursday, 04 December 2008 16:52
To: [login to unmask email]
Subject: [DB2-L] failure connecting CICS to DB2


I'm doing some testing with CICS in z/OS 1.7 for the first time. When I
start up CICS I get the following -

DFHDB2042 12/04/2008 17:18:10 Z30D Connection not authorized to DB2Z

I'm using a copy of the same RACF database. Has something changed that
I'm not aware of.

Jim McAlpine



----------------------------------------------------------------------------
--

IDUG 2009 - North America * May 11-15, 2009 * Denver, CO, USA

The IDUG DB2-L Listserv is only part of your membership in IDUG. The DB2-L
list archives, FAQ, and delivery preferences are at IDUG.ORG under the
Listserv tab. While at the site, you can also access the IDUG Online
Learning Center, Tech Library and Code Place, see the latest IDUG conference
information, and much more. If you have not yet signed up for Basic
Membership in IDUG, available at no cost, click on Member Services

______________________________________________________________________

* IDUG 2009 Denver, CO, USA * May 11-15, 2009 * http://IDUG.ORG/lsNA *
______________________________________________________________________



The IDUG DB2-L Listserv is only part of your membership in IDUG. The DB2-L list archives, FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms

Jim McAlpine

Re: failure connecting CICS to DB2
(in response to Mike Turner)
On Thu, Dec 4, 2008 at 5:48 PM, Mike Turner
<[login to unmask email]>wrote:

> Hi Jim
>
> Looks like a known problem with RACF and DB2 on z/OS 1.7. There was a
> thread in March 2007 titled 'DSNR entries for z/OS v1.7'. The following is
> an answer to that thread from Ulrich Boche:
>
> >>>>>>>
>
> In z/OS V1R7 the ICHRFR01 RACF Router table is no longer required for all classes
> where you want RACF to handle the router calls. By default, RACF is called
> for all classes. So, if you just do nothing when you migrate to RACF the
> following will happen:
>
> - For those DB2 subsystems that you had defined in your ICHRFR01 table before
> and where you had profiles in class DSNR defined, things will go normal.
> Users who were allowed to connect to DB2 will still be able to, the others
> will be rejected.
>
> - For those DB2 subsystems that you had not defined in your ICHRFR01 table before,
> you will likely run into problems. If you have no profiles defined in
> class DSNR that cover these subsystems, users will not be able to connect
> to DB2.
>
> Probably the best thing to do is to define profiles in DSNR for all your DB2
> subsystems before you migrate to z/OS V1R7.
> <<<<<<<<
>
> Regards
> Mike Turner
> Email: [login to unmask email]
> Tel: +44 (0)1565 873702
> web: www.michael-turner.ltd.uk
>
> ----------------------------------------------------------------------------------------
> Michael Turner Ltd. Registered in England and Wales No. 1433722. Registered
> Office: 131 King Street, Knutsford, Cheshire, WA16 6EJ. VAT Reg. No. GB 338
> 4159 44.
>
>
>
> Thanks Mike. I had read that and forgotten it.

Jim McAlpine

______________________________________________________________________

* IDUG 2009 Denver, CO, USA * May 11-15, 2009 * http://IDUG.ORG/lsNA *
______________________________________________________________________



The IDUG DB2-L Listserv is only part of your membership in IDUG. The DB2-L list archives, FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms