Archive log authority

frankzhang2000

Archive log authority
Hi all,
I have a question about the authority for command:archive log,during the installation of db2,I have assigned ibmuser as sysadm,sysadm2,sysopr1 and sysopr2,but when I try to execute command:-archive log,db2 prompts me that due to lack of enough authority,the command failed.Only after I use spufi grant achive to public,can I execute the command,I want to know what's the function of sysadm,sysadm2,sysopr1 and sysopr2 in dsnzapxxx load module?

Thanks
Victor
______________________________________

===================
ÐÂÀËÃâ·Ñµç×ÓÓÊÏä http://mail.sina.com.cn

ÄãÑ¡ÊÖ»úÎÒÂòµ¥£¡(http://mall.sina.com.cn/yesmobile/)



Sanjeev (CTS) S

Re: Archive log authority
(in response to frankzhang2000)
Hi Victor,
As per the command reference if i can recall correctly, You need one of
the following authorities to execute the Archive log Command :

1) ARCHIVE privilege
2) Installation SYSOPR authority
3) SYSCTRL authority
4) SYSADM authority
DB2 commands issued from an MVS console are not associated with any
secondary authorization IDs.

Where are you executing this command from ? Did you try granting it to a
particular userid. For getting the functions of the mentioned userid, you
can have a look at a diagram at Chapter 3.2 - Controlling Access to DB2
Objects. This diagram is a complete picture of all the authrizations and
privelleges.

HTH
Regards,
Sanjeev

> -----Original Message-----
> From: frankzhang2000 [SMTP:[login to unmask email]
> Sent: Thursday, January 11, 2001 12:52 PM
> To: [login to unmask email]
> Subject: Archive log authority
>
> Hi all,
> I have a question about the authority for command:archive log,during the
> installation of db2,I have assigned ibmuser as sysadm,sysadm2,sysopr1 and
> sysopr2,but when I try to execute command:-archive log,db2 prompts me that
> due to lack of enough authority,the command failed.Only after I use spufi
> grant achive to public,can I execute the command,I want to know what's the
> function of sysadm,sysadm2,sysopr1 and sysopr2 in dsnzapxxx load module?
>
> Thanks
> Victor
> ______________________________________
>
> ===================
> ÐÂÀËÃâ·Ñµç×ÓÓÊÏä http://mail.sina.com.cn
>
> ÄãÑ¡ÊÖ»úÎÒÂòµ¥£¡(http://mall.sina.com.cn/yesmobile/)
>
>
> visit
>
>
-----------------------------------------------------------------------------------------------------------------------------------------
-----------------------------------------------------------------------------------------------------------------------------------------
This e-mail and any files transmitted with it are for the sole use
of the intended recipient(s) and may contain confidential and privileged information.
If you are not the intended recipient, please contact the sender by reply e-mail and
destroy all copies of the original message. Any unauthorised review, use, disclosure,
dissemination, forwarding, printing or copying of this email or any action taken in
reliance on this e-mail is strictly prohibited and may be unlawful.

Visit us at http://www.cognizant.com
----------------------------------------------------------------------------------------------------------------------------------------
----------------------------------------------------------------------------------------------------------------------------------------



Eric Pearson

Re: Archive log authority
(in response to Sanjeev (CTS) S)
Victor,
sysadm...sysopr2 should be RACF ids, not a literal like 'ibmuser'.
These RACF ids will then have the desired access.
Or is your RACF id in fact 'ibmuser'?
If that is your RACF id and you cannot do the command,
something has gone very wrong with the install and you should contact IBM.

regards,

eric pearson
NS ITO Database Support


-----Original Message-----
From: frankzhang2000 [mailto:[login to unmask email]
Sent: Thursday, January 11, 2001 2:22 AM
To: [login to unmask email]
Subject: Archive log authority


Hi all,
I have a question about the authority for command:archive log,during the
installation of db2,I have assigned ibmuser as sysadm,sysadm2,sysopr1 and
sysopr2,but when I try to execute command:-archive log,db2 prompts me that
due to lack of enough authority,the command failed.Only after I use spufi
grant achive to public,can I execute the command,I want to know what's the
function of sysadm,sysadm2,sysopr1 and sysopr2 in dsnzapxxx load module?

Thanks
Victor
______________________________________

===================
ÐÂÀËÃâ·Ñµç×ÓÓÊÏä http://mail.sina.com.cn

ÄãÑ¡ÊÖ»úÎÒÂòµ¥£¡(http://mall.sina.com.cn/yesmobile/)


visit the





John Hardy

Re: Archive log authority
(in response to Eric Pearson)
I have a question too:

- When I try to execute command.....

- Only after I use spufi grant archive.....

Which userid are you using in each of these cases?

Are you saying that 'ibmuser' (the install sysadm/sysopr!) was unable to
issue the ARCHIVE LOG command, but could give itself the privilege to do so
by GRANTing ARCHIVE to public?



On Thu, 11 Jan 2001 01:21:34 -0600, frankzhang2000
<[login to unmask email]> wrote:

>Hi all,
> I have a question about the authority for command:archive log,during the
installation of db2,I have assigned ibmuser as sysadm,sysadm2,sysopr1 and
sysopr2,but when I try to execute command:-archive log,db2 prompts me that
due to lack of enough authority,the command failed.Only after I use spufi
grant achive to public,can I execute the command,I want to know what's the
function of sysadm,sysadm2,sysopr1 and sysopr2 in dsnzapxxx load module?
>
>Thanks
>Victor
>______________________________________
>
>===================
>ÐÂÀËÃâ·Ñµç×ÓÓÊÏä http://mail.sina.com.cn
>
>ÄãÑ¡ÊÖ»úÎÒÂòµ¥£¡(http://mall.sina.com.cn/yesmobile/)
>
>
>





tim malamphy

Re: Archive log authority
(in response to John Hardy)
ibmuser used to be (an maybe still is) a default id
that comes with MVS, that is not secure (no password
needed). Most sysprogs would delete it as soon as
they got their MVS system operational.

My guess is that you are trying to do the archive log
from and MVS console (SDSF, OPER, etc). In this case,
you will have to grant archive to that facility
(SYSOPR). If you use the DB2I interface to submit the
command, it should run under your tso id.

--- "Pearson, Eric L," <[login to unmask email]>
wrote:
> Victor,
> sysadm...sysopr2 should be RACF ids, not a literal
> like 'ibmuser'.
> These RACF ids will then have the desired access.
> Or is your RACF id in fact 'ibmuser'?
> If that is your RACF id and you cannot do the
> command,
> something has gone very wrong with the install and
> you should contact IBM.
>
> regards,
>
> eric pearson
> NS ITO Database Support
>
>
> -----Original Message-----
> From: frankzhang2000
> [mailto:[login to unmask email]
> Sent: Thursday, January 11, 2001 2:22 AM
> To: [login to unmask email]
> Subject: Archive log authority
>
>
> Hi all,
> I have a question about the authority for
> command:archive log,during the
> installation of db2,I have assigned ibmuser as
> sysadm,sysadm2,sysopr1 and
> sysopr2,but when I try to execute command:-archive
> log,db2 prompts me that
> due to lack of enough authority,the command
> failed.Only after I use spufi
> grant achive to public,can I execute the command,I
> want to know what's the
> function of sysadm,sysadm2,sysopr1 and sysopr2 in
> dsnzapxxx load module?
>
> Thanks
> Victor
> ______________________________________
>
>
===================
> ÐÂÀËÃâ·Ñµç×ÓÓÊÏä http://mail.sina.com.cn
>
> ÄãÑ¡ÊÖ»úÎÒÂòµ¥£¡(http://mall.sina.com.cn/yesmobile/)
>
>
> To change your subscription options or to cancel
> your subscription visit the
> DB2-L webpage at http://www.ryci.com/db2-l. The
> owners of the list can be
>
>
> =======================To
> change your subscription options or to cancel your
> subscription visit the DB2-L webpage at
> http://www.ryci.com/db2-l. The owners of the list
> can


__________________________________________________
Do You Yahoo!?
Yahoo! Photos - Share your holiday photos online!
http://photos.yahoo.com/