Are DB2 Connect dcs database entries required?

Jim Tonchick

Are DB2 Connect dcs database entries required?
I have to admit to being a novice with DB2 LUW and Connect. My experience is with z/OS and IBMi.

My AIX teammates just installed a new DB2 Connect 10.2 instance to replace a 9.5 instance. I dug through some old notes from my predicessor who installed the 9.5 instance. He included cataloging dcs database entries with no special parameters and no comments. Since the 9.5 instance has run for over a decade with no issues and no special parameters on the dcs entries, are they really necessary?

Thanks in advance, Jim Tonchick.
<div id="AOLMsgPart_2_cdfcc9e3-21b6-4519-bb48-6620bcb92fe8">

</div>

Nadir Doctor

Are DB2 Connect dcs database entries required?
(in response to Jim Tonchick)
Hi Jim,

They are needed - the dcs database entry creates a correlation with the db2
subsystem location name and therefore, one could possibly connect to any
database in that subsystem assuming requisite privileges granted to user on
the unix/linux flavor. The corresponding tcpip catalog entry would
reference the drda port # for that db2 subsystem and database catalog entry
would need a suffix clause of "authentication dcs" respectively for the
mainframe database to be accessible from distributed platforms.

Raul explains this well with an illustrative example in his article -

https://www.ibm.com/developerworks/data/library/techarticle/0301chong/0301chong2-pdf.pdf


Best Regards,
Nadir



On Wed, Feb 14, 2018 at 10:47 PM, Jim Tonchick <[login to unmask email]> wrote:

> I have to admit to being a novice with DB2 LUW and Connect. My experience
> is with z/OS and IBMi.
>
> My AIX teammates just installed a new DB2 Connect 10.2 instance to replace
> a 9.5 instance. I dug through some old notes from my predicessor who
> installed the 9.5 instance. He included cataloging dcs database entries
> with no special parameters and no comments. Since the 9.5 instance has run
> for over a decade with no issues and no special parameters on the dcs
> entries, are they really necessary?
>
> Thanks in advance, Jim Tonchick.
>
> -----End Original Message-----
>

J&#248;rn Thyssen

RE: Are DB2 Connect dcs database entries required?
(in response to Jim Tonchick)

Hi Jim,

Note that it has been recommended for many years to get rid of your Db2 Connect gateways, and use direct connections from your applications to Db2 for z/OS. 

 

Best regards,

Jørn Thyssen

Rocket Software
77 Fourth Avenue • Waltham, MA • 02451 • USA
E: [login to unmask email] • W: www.rocketsoftware.com 

Views are personal. 

Charles Brown

Are DB2 Connect dcs database entries required?
(in response to Jørn Thyssen)
Db2 connect gateway deployment provides a single point of connecting applications to db2 z/os databases. While its topology presents some level of complexity, yet this method is relatively quite easy to maintain and also provides a cost effective method of connecting to db2 running on z o/s. For instance, you wouldn’t need SCCM folks to assist with patch (fix packs) deployment.
On the other hand, the IBM Data server products, (referring to Db2 connect client) being licensed products, require a license file. A license file must be deployed on each workstation using db2 client. Because of its simple topology, less network traffic and smaller footprint, this method of connecting your applications to z o/s databases performs much better than the server method.
Hope this helps

Chas/b
NZ dba

Sent from my iPhone

> On Feb 15, 2018, at 12:47 PM, Jørn Thyssen <[login to unmask email]> wrote:
>
> Hi Jim,
> Note that it has been recommended for many years to get rid of your Db2 Connect gateways, and use direct connections from your applications to Db2 for z/OS.
>
>
>
> Best regards,
>
> Jørn Thyssen
>
> Rocket Software
> 77 Fourth Avenue • Waltham, MA • 02451 • USA
> E: [login to unmask email] • W: www.rocketsoftware.com
>
> Views are personal.
>
>
> Site Links: View post online View mailing list online Start new thread via email Unsubscribe from this mailing list Manage your subscription
>
> This email has been sent to: [login to unmask email]
> ** ** ** IDUG DB2 Data and Analytics Technical Summit in Chennai, India 2018 ** ** **
> ---> Chennai, India, March 29, 2018 <---
> http://ibm.biz/IDUGChennai2018
>
> Use of this email content is governed by the terms of service at:
> http://www.idug.org/p/cm/ld/fid=2
>

J&#248;rn Thyssen

RE: Are DB2 Connect dcs database entries required?
(in response to Charles Brown)


Hi Charles,

If you have Db2 Connect Unlimited you can deploy the license on the z/OS side. 

With a Db2 Connect Gateway architecture you have drivers installed at the clients (workstation or app server), so for upgrades you still need the SCCM folks.

For some applications the gateway may cost you up to 100% overhead in elapsed time. In addition, you have the cost and support of an additional server, in fact, probably multiple servers; otherwise you have a single point of failure. 

There is one type of licenses where the gateway is required and there a few exotic application types where you need the gateway. 

Apart from that one license type you are just adding costs by adding a gateway since the licensing required is the same.

Best regards,

Jørn Thyssen

Rocket Software
77 Fourth Avenue • Waltham, MA • 02451 • USA
E: [login to unmask email] • W: www.rocketsoftware.com 

Views are personal. 

Jim Tonchick

Are DB2 Connect dcs database entries required?
(in response to Jørn Thyssen)

I'd like to find those recommendations. Would you please print me towards any documents or presentations with this information?

FYI, these DB2 Connect servers have been around a long time. I was able to uncover a project back to 2010 when they were upgraded from v8.x to v9.5. I'm sure their history goes back further than that.

-----Original Message-----
From: Jørn Thyssen <[login to unmask email]>
To: DB2-L <[login to unmask email]>
Sent: Thu, Feb 15, 2018 12:48 PM
Subject: [DB2-L] - RE: Are DB2 Connect dcs database entries required?



<div id="AOLMsgPart_2_e5b40ad8-0f70-4b5f-bfdf-6545bff4372e">
<div class="aolReplacedBody"><p>Hi Jim,
</p>
<p>Note that it has been recommended for many years to get rid of your Db2 Connect gateways, and use direct connections from your applications to Db2 for z/OS. </p>
<p> </p>
<p>Best regards,</p>
<p>Jørn Thyssen</p>
<p>Rocket Software
77 Fourth Avenue • Waltham, MA • 02451 • USA
E: <a href="mailto:[login to unmask email]">[login to unmask email]</a> <span>• W: <a href="http://www.rocketsoftware.com " target="_blank">www.rocketsoftware.com </a>;</span></p>
<p>Views are personal. </p>
<hr size="1" style="color:#ccc"><div id="aolmail_socfooter" style="font-size:80%"><span style="font-weight:bold">Site Links: </span>
<a target="_blank" rel="noopener noreferrer" href="http://www.idug.org/p/fo/st/?post=184806&anc=p184806#p184806">View post online</a>
<a target="_blank" rel="noopener noreferrer" href="http://www.idug.org/p/fo/si/?topic=19">View mailing list online</a>
<a target="_blank" rel="noopener noreferrer" href="mailto:[login to unmask email]">Start new thread via email</a>
<a target="_blank" rel="noopener noreferrer" href="mailto:[login to unmask email]?Subject=Unsubscribe">Unsubscribe from this mailing list</a>
<a target="_blank" rel="noopener noreferrer" href="http://www.idug.org/p/us/to/">Manage your subscription</a>


This email has been sent to: <a href="mailto:[login to unmask email]">[login to unmask email]</a>
<p>
** ** ** IDUG DB2 Data and Analytics Technical Summit in Chennai, India 2018 ** ** **

---> Chennai, India, March 29, 2018 <---

<a target="_blank" rel="noopener noreferrer" href="http://ibm.biz/IDUGChennai2018">http://ibm.biz/IDUGChennai2018</a>

</p>
<p>
Use of this email content is governed by the terms of service at:
<a target="_blank" rel="noopener noreferrer" href="http://www.idug.org/p/cm/ld/fid=2">http://www.idug.org/p/cm/ld/fid=2</a></p>

<hr size="1" style="color:#ccc"></div>
</div>
</div>

Roy Boxwell

Are DB2 Connect dcs database entries required?
(in response to Jim Tonchick)
IBM have been killing Connect off for years. These days a direct connect with Type 4 driver is the way to go (plus gives you possible ZiiP usage) , especially after the improved DBAT support in Db2 10 came out.

Roy Boxwell

SOFTWARE ENGINEERING GMBH and SEGUS Inc.
-Product Development-

Heinrichstrasse 83-85
40239 Duesseldorf/Germany
Tel. +49 (0)211 96149-675
Fax +49 (0)211 96149-32
Email: [login to unmask email]<mailto:[login to unmask email]>
http://www.seg.de http://www.seg.de

Software Engineering GmbH
Amtsgericht Düsseldorf, HRB 37894
Geschäftsführung: Gerhard Schubert

From: Jim Tonchick [mailto:[login to unmask email]
Sent: Friday, February 16, 2018 12:12 AM
To: [login to unmask email]
Subject: [DB2-L] - RE: Are DB2 Connect dcs database entries required?


I'd like to find those recommendations. Would you please print me towards any documents or presentations with this information?

FYI, these DB2 Connect servers have been around a long time. I was able to uncover a project back to 2010 when they were upgraded from v8.x to v9.5. I'm sure their history goes back further than that.

-----Original Message-----
From: Jørn Thyssen <[login to unmask email]<mailto:[login to unmask email]>>
To: DB2-L <[login to unmask email]<mailto:[login to unmask email]>>
Sent: Thu, Feb 15, 2018 12:48 PM
Subject: [DB2-L] - RE: Are DB2 Connect dcs database entries required?


Hi Jim,

Note that it has been recommended for many years to get rid of your Db2 Connect gateways, and use direct connections from your applications to Db2 for z/OS.



Best regards,

Jørn Thyssen

Rocket Software
77 Fourth Avenue • Waltham, MA • 02451 • USA
E: [login to unmask email]<mailto:[login to unmask email]> • W: www.rocketsoftware.com http://www.rocketsoftware.com  ;

Views are personal.

-----End Original Message-----

Michael Arlebrandt

Are DB2 Connect dcs database entries required?
(in response to Roy Boxwell)
Hi,

With Db2 v12 and the need for Client Application Compatibility settings for Db2 connect clients we’re considering switching back to a central connect server in order to more easily be able to handle the settings for some 1000 Db2 clients… And yes, I know there are alternatives to use a centralized db2dsdriver.cfg or use a Configuration Manager kind of a tool to push changes to the clients.

And a comment regarding Db2 Connect and the need to do catalog of dcs and databases. As we want to use IBM Data Server Driver and use db2dsdriver.cfg for all our settings we have noticed that still Data Studio needs that Db2 CATALOG command has been run in order to automatically import settings from the Db2 client and also Db2 Replication Center requires that.

I know some guy some years ago asked about Data Studio and the import from db2dsdriver.cfg but still I believe it’s missing.

Best regards
Michael Arlebrandt
HCL, Gothenburg, Sweden

From: Boxwell, Roy [mailto:[login to unmask email]
Sent: den 16 februari 2018 8:03
To: [login to unmask email]
Subject: [DB2-L] - RE: Are DB2 Connect dcs database entries required?

IBM have been killing Connect off for years. These days a direct connect with Type 4 driver is the way to go (plus gives you possible ZiiP usage) , especially after the improved DBAT support in Db2 10 came out.

Roy Boxwell

SOFTWARE ENGINEERING GMBH and SEGUS Inc.
-Product Development-

Heinrichstrasse 83-85
40239 Duesseldorf/Germany
Tel. +49 (0)211 96149-675
Fax +49 (0)211 96149-32
Email: [login to unmask email]<mailto:[login to unmask email]>
http://www.seg.de https://apac01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.seg.de%2F&data=02%7C01%7Cmichael.arlebrandt%40hcl.com%7C86ece0ae30ac44855ddf08d5750b542e%7C189de737c93a4f5a8b686f4ca9941912%7C0%7C0%7C636543613904608804&sdata=kC5hF6li5yJBYVmatHWAJjzYtRx9zzqRhPc0l4skd2c%3D&reserved=0

Software Engineering GmbH
Amtsgericht Düsseldorf, HRB 37894
Geschäftsführung: Gerhard Schubert

From: Jim Tonchick [mailto:[login to unmask email]
Sent: Friday, February 16, 2018 12:12 AM
To: [login to unmask email]<mailto:[login to unmask email]>
Subject: [DB2-L] - RE: Are DB2 Connect dcs database entries required?


I'd like to find those recommendations. Would you please print me towards any documents or presentations with this information?

FYI, these DB2 Connect servers have been around a long time. I was able to uncover a project back to 2010 when they were upgraded from v8.x to v9.5. I'm sure their history goes back further than that.

-----Original Message-----
From: Jørn Thyssen <[login to unmask email]<mailto:[login to unmask email]>>
To: DB2-L <[login to unmask email]<mailto:[login to unmask email]>>
Sent: Thu, Feb 15, 2018 12:48 PM
Subject: [DB2-L] - RE: Are DB2 Connect dcs database entries required?

Hi Jim,

Note that it has been recommended for many years to get rid of your Db2 Connect gateways, and use direct connections from your applications to Db2 for z/OS.



Best regards,

Jørn Thyssen

Rocket Software
77 Fourth Avenue • Waltham, MA • 02451 • USA
E: [login to unmask email]<mailto:[login to unmask email]> • W: www.rocketsoftware.com http://www.rocketsoftware.com  ;

Views are personal.

-----End Original Message-----

-----End Original Message-----
::DISCLAIMER::
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
The contents of this e-mail and any attachment(s) are confidential and intended for the named recipient(s) only. E-mail transmission is not guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or may contain viruses in transmission. The e mail and its contents (with or without referred errors) shall therefore not attach any liability on the originator or HCL or its affiliates. Views or opinions, if any, presented in this email are solely those of the author and may not necessarily reflect the views or opinions of HCL or its affiliates. Any form of reproduction, dissemination, copying, disclosure, modification, distribution and / or publication of this message without the prior written consent of authorized representative of HCL is strictly prohibited. If you have received this email in error please delete it and notify the sender immediately. Before opening any email and/or attachments, please check them for viruses and other defects.
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Myron Miller

Are DB2 Connect dcs database entries required?
(in response to Roy Boxwell)
That's very true, but there are still a number of products and tools out there that require a type 2 connection (ODBC drivers). Type 4 drivers are way easier to setup connectivity but if the programmer doesn't proper close things like statements, resultsets, cursors in the proper order before closing the connection then you get all kinds of hanging threads with locks still around. And that becomes a contention nightmare.


And unfortunately that's a very common problem with JAVA code. So type 4 may be much easier to set up but it comes with its own set of issues down the line.


Thanks Myron W. Miller


-----End Original Message-----

Philip Sevetson

Are DB2 Connect dcs database entries required?
(in response to Myron Miller)
Myron,

Okay, you're scaring me here.

ODBC was abandoned at my employer several years ago for reasons of security. You can spoof an ODBC connection and it can't be secured in any modern fashion. Anyone who's using an ODBC connection in the current decade is leaving the castle gates wide open when we already know there are malicious operators out there who'll take advantage of it.

JDBC Type 3 (obsolete) and 4 can use SSH connections, requiring secure key exchange, between application server (or workstation) and database (z/OS) port. This would seem to me to trump (sorry!) any other considerations and require that the IT team do whatever is needed to clean up the Java code to work well in a Type 4 connection.

Given the hideously public consequences of a successful information theft, upon any company which has not sufficiently protected its financial and PII information assets, I can't understand why _anyone_ would still be using ODBC in an industrial environment.

--Phil Sevetson

From: Myron Miller [mailto:[login to unmask email]
Sent: Friday, February 16, 2018 8:39 AM
To: [login to unmask email]
Subject: [DB2-L] - RE: Are DB2 Connect dcs database entries required?


That's very true, but there are still a number of products and tools out there that require a type 2 connection (ODBC drivers). Type 4 drivers are way easier to setup connectivity but if the programmer doesn't proper close things like statements, resultsets, cursors in the proper order before closing the connection then you get all kinds of hanging threads with locks still around. And that becomes a contention nightmare.



And unfortunately that's a very common problem with JAVA code. So type 4 may be much easier to set up but it comes with its own set of issues down the line.


Thanks Myron W. Miller

-----End Original Message-----
**This e-mail, including any attachments, may be confidential, privileged, or otherwise legally protected. It is intended only for the addressee. If you received this e-mail in error or from someone who was not authorized to send it to you, do not disseminate, copy, or otherwise use this e-mail or its attachments. Please notify the sender immediately by reply e-mail and delete the e-mail from your system.**

J&#248;rn Thyssen

RE: Are DB2 Connect dcs database entries required?
(in response to Jim Tonchick)

Hi Jim,

It is mentioned it any presentations on Db2 Connect the last 5-6 years. Here's one: http://www.bwdb2ug.org/PDF/DB2_DriversV17_2015Dec.pdf

The strategy is to move customers to direct connections.

As mentioned there are only a one licensing model where the gateway is required, and there are a few exotic technical reasons. For the majority of the users it is advantageous  to use direct connections. You will likely have to adjust you Zparms and maybe look at Db2 Profiles.

Also note that there are no licensing differences between using a gateway or not. The gateway is an optional component of your Db2 Connect license.

 

Best regards,

Jørn Thyssen

Rocket Software
77 Fourth Avenue • Waltham, MA • 02451 • USA
E: [login to unmask email] • W: www.rocketsoftware.com 

Views are personal. 

J&#248;rn Thyssen

RE: Are DB2 Connect dcs database entries required?
(in response to Jim Tonchick)

and yes, the Db2 Connect gateways have been around for a long time. If you go back 10-15 years they were *mandatory* and later they were required if you wanted sysplex failover. None of this is true today, and my guess is that gateways will be deprecated and removed in the future.

Best regards,

Jørn Thyssen

Rocket Software
77 Fourth Avenue • Waltham, MA • 02451 • USA
E: [login to unmask email] • W: www.rocketsoftware.com 

Views are personal. 

J&#248;rn Thyssen

RE: Are DB2 Connect dcs database entries required?
(in response to Michael Arlebrandt)

Hi Michael,

Out of curiosity: how will a Db2 Connect Gateway help you with APPLCOMPAT?

Also, have you looked at Db2 Profiles? You can use profiles to set special registers like "CURRENT APPLICATION COMPATIBILITY" based on various attributes like IP address or the client application name field.  

Best regards,

Jørn Thyssen

Rocket Software
77 Fourth Avenue • Waltham, MA • 02451 • USA
E: [login to unmask email] • W: www.rocketsoftware.com 

2018 IBM Champion.

Views are personal. 

Michael Arlebrandt

Are DB2 Connect dcs database entries required?
(in response to Jørn Thyssen)
Hi Jørn,

I’m talking about Client Application Compatibility which is we now have to deal with when Db2 is running at V12R1M501 and higher. It is set on the client level and has to be same or lower than the Applcompat setting of the package.

<dsn alias="DB2T" name="xxx" host="123.456.789" port="446">
<parameter name="Authentication" value="SERVER_ENCRYPT_AES"/>
<parameter name="ClientApplCompat" value="V12R1M501"/>
<parameter name="CurrentPackageSet" value="NULLID_V12R1M501"/>
</dsn>

I haven’t checked if it also can be set using Db2 profiles

Best regards
Michael

From: Jørn Thyssen [mailto:[login to unmask email]
Sent: den 16 februari 2018 3:44
To: [login to unmask email]
Subject: [DB2-L] - RE: Are DB2 Connect dcs database entries required?


Hi Michael,

Out of curiosity: how will a Db2 Connect Gateway help you with APPLCOMPAT?

Also, have you looked at Db2 Profiles? You can use profiles to set special registers like "CURRENT APPLICATION COMPATIBILITY" based on various attributes like IP address or the client application name field.

Best regards,

Jørn Thyssen

Rocket Software
77 Fourth Avenue • Waltham, MA • 02451 • USA
E: [login to unmask email]<mailto:[login to unmask email]> • W: www.rocketsoftware.com http://www.rocketsoftware.com

2018 IBM Champion.

Views are personal.

-----End Original Message-----
::DISCLAIMER::
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
The contents of this e-mail and any attachment(s) are confidential and intended for the named recipient(s) only. E-mail transmission is not guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or may contain viruses in transmission. The e mail and its contents (with or without referred errors) shall therefore not attach any liability on the originator or HCL or its affiliates. Views or opinions, if any, presented in this email are solely those of the author and may not necessarily reflect the views or opinions of HCL or its affiliates. Any form of reproduction, dissemination, copying, disclosure, modification, distribution and / or publication of this message without the prior written consent of authorized representative of HCL is strictly prohibited. If you have received this email in error please delete it and notify the sender immediately. Before opening any email and/or attachments, please check them for viruses and other defects.
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Kenneth Lee

Are DB2 Connect dcs database entries required?
(in response to Philip Sevetson)
Phil,
I know where you are going and agree Type 4 support is much easier too, but ODBC and JDBC are so different like black and white.
What do you do with all the existing MicroSoft based applications that use ODBC?
It can be daunting task to convert to JDBC based ones or cost-inefficient.

Ken Lee

From: Sevetson, Phil [mailto:[login to unmask email]
Sent: Friday, February 16, 2018 8:56 AM
To: '[login to unmask email]'
Subject: [DB2-L] - RE: Are DB2 Connect dcs database entries required?

Myron,

Okay, you're scaring me here.

ODBC was abandoned at my employer several years ago for reasons of security. You can spoof an ODBC connection and it can't be secured in any modern fashion. Anyone who's using an ODBC connection in the current decade is leaving the castle gates wide open when we already know there are malicious operators out there who'll take advantage of it.

JDBC Type 3 (obsolete) and 4 can use SSH connections, requiring secure key exchange, between application server (or workstation) and database (z/OS) port. This would seem to me to trump (sorry!) any other considerations and require that the IT team do whatever is needed to clean up the Java code to work well in a Type 4 connection.

Given the hideously public consequences of a successful information theft, upon any company which has not sufficiently protected its financial and PII information assets, I can't understand why _anyone_ would still be using ODBC in an industrial environment.

--Phil Sevetson

From: Myron Miller [mailto:[login to unmask email]<mailto:[login to unmask email]>]
Sent: Friday, February 16, 2018 8:39 AM
To: [login to unmask email]<mailto:[login to unmask email]>
Subject: [DB2-L] - RE: Are DB2 Connect dcs database entries required?


That's very true, but there are still a number of products and tools out there that require a type 2 connection (ODBC drivers). Type 4 drivers are way easier to setup connectivity but if the programmer doesn't proper close things like statements, resultsets, cursors in the proper order before closing the connection then you get all kinds of hanging threads with locks still around. And that becomes a contention nightmare.



And unfortunately that's a very common problem with JAVA code. So type 4 may be much easier to set up but it comes with its own set of issues down the line.


Thanks Myron W. Miller

-----End Original Message-----

This message is confidential and subject to terms at: http://www.jpmorgan.com/emaildisclaimer including on confidentiality, legal privilege, viruses and monitoring of electronic messages. If you are not the intended recipient, please delete this message and notify the sender immediately. Any unauthorized use is strictly prohibited.

David Baldon

Are DB2 Connect dcs database entries required?
(in response to Kenneth Lee)
I know management doesn't always consider it, but what's cheaper if a data breach occurs? The fines plus loss of business due to broken trust or spending the time and money to fix things and prevent the data breach? You can just about guarantee that is far more expensive than fixing things.

Are you familiar with GDPR (general data protection regulation) which goes into effect this May in the EU? Companies will no longer "get away" with shoddy protection practices. GDPR applies to any company within or without the EU if that company collects the personal data of an EU citizen. Given the global economy, that's pretty much every company in the world expect for Mom & Pop type companies (of course enforcement of GDPR violations for non-EU companies is another matter). I expect that eventually these types of regulation will be implemented in the US as well.

Something to think about and maybe bring to management's attention.

...David

From: Lee, Kenneth [mailto:[login to unmask email]
Sent: Friday, February 16, 2018 2:18 PM
To: [login to unmask email]
Subject: [DB2-L] - RE: Are DB2 Connect dcs database entries required?

Phil,
I know where you are going and agree Type 4 support is much easier too, but ODBC and JDBC are so different like black and white.
What do you do with all the existing MicroSoft based applications that use ODBC?
It can be daunting task to convert to JDBC based ones or cost-inefficient.

Ken Lee

From: Sevetson, Phil [[login to unmask email]<mailto:[login to unmask email]>]
Sent: Friday, February 16, 2018 8:56 AM
To: '[login to unmask email]<mailto:[login to unmask email]>'
Subject: [DB2-L] - RE: Are DB2 Connect dcs database entries required?

Myron,

Okay, you're scaring me here.

ODBC was abandoned at my employer several years ago for reasons of security. You can spoof an ODBC connection and it can't be secured in any modern fashion. Anyone who's using an ODBC connection in the current decade is leaving the castle gates wide open when we already know there are malicious operators out there who'll take advantage of it.

JDBC Type 3 (obsolete) and 4 can use SSH connections, requiring secure key exchange, between application server (or workstation) and database (z/OS) port. This would seem to me to trump (sorry!) any other considerations and require that the IT team do whatever is needed to clean up the Java code to work well in a Type 4 connection.

Given the hideously public consequences of a successful information theft, upon any company which has not sufficiently protected its financial and PII information assets, I can't understand why _anyone_ would still be using ODBC in an industrial environment.

--Phil Sevetson

From: Myron Miller [mailto:[login to unmask email]<mailto:[login to unmask email]>]
Sent: Friday, February 16, 2018 8:39 AM
To: [login to unmask email]<mailto:[login to unmask email]>
Subject: [DB2-L] - RE: Are DB2 Connect dcs database entries required?


That's very true, but there are still a number of products and tools out there that require a type 2 connection (ODBC drivers). Type 4 drivers are way easier to setup connectivity but if the programmer doesn't proper close things like statements, resultsets, cursors in the proper order before closing the connection then you get all kinds of hanging threads with locks still around. And that becomes a contention nightmare.



And unfortunately that's a very common problem with JAVA code. So type 4 may be much easier to set up but it comes with its own set of issues down the line.


Thanks Myron W. Miller

________________________________
From: Boxwell, Roy <[login to unmask email]<mailto:[login to unmask email]>>
Sent: Friday, February 16, 2018 2:02 AM
To: [login to unmask email]<mailto:[login to unmask email]>
Subject: [DB2-L] - RE: Are DB2 Connect dcs database entries required?


IBM have been killing Connect off for years. These days a direct connect with Type 4 driver is the way to go (plus gives you possible ZiiP usage) , especially after the improved DBAT support in Db2 10 came out.



Roy Boxwell

SOFTWARE ENGINEERING GMBH and SEGUS Inc.
-Product Development-

Heinrichstrasse 83-85
40239 Duesseldorf/Germany
Tel. +49 (0)211 96149-675
Fax +49 (0)211 96149-32
Email: [login to unmask email]<mailto:[login to unmask email]>
http://www.seg.de https://urldefense.proofpoint.com/v2/url?u=http-3A__www.seg.de_&d=DwMFAw&c=UrUhmHsiTVT5qkaA4d_oSzcamb9hmamiCDMzBAEwC7E&r=KigCN-TlaQoAQDZrna0ZVLUX9H9vZpSibySEyujWvHQ&m=gcUJw5yfm1JNTzX4MCSm9AlbtbnlTXjeSUxoYggAIt8&s=YHxa-Vi1FgKMD3MmaSc3OI6dsbmrNmB4gCQKP-7mGUI&e=

Software Engineering GmbH
Amtsgericht Düsseldorf, HRB 37894
Geschäftsführung: Gerhard Schubert



From: Jim Tonchick [mailto:[login to unmask email]
Sent: Friday, February 16, 2018 12:12 AM
To: [login to unmask email]<mailto:[login to unmask email]>
Subject: [DB2-L] - RE: Are DB2 Connect dcs database entries required?



I'd like to find those recommendations. Would you please print me towards any documents or presentations with this information?



FYI, these DB2 Connect servers have been around a long time. I was able to uncover a project back to 2010 when they were upgraded from v8.x to v9.5. I'm sure their history goes back further than that.

-----Original Message-----
From: Jørn Thyssen <[login to unmask email]<mailto:[login to unmask email]>>
To: DB2-L <[login to unmask email]<mailto:[login to unmask email]>>
Sent: Thu, Feb 15, 2018 12:48 PM
Subject: [DB2-L] - RE: Are DB2 Connect dcs database entries required?

Hi Jim,

Note that it has been recommended for many years to get rid of your Db2 Connect gateways, and use direct connections from your applications to Db2 for z/OS.



Best regards,

Jørn Thyssen

Rocket Software
77 Fourth Avenue * Waltham, MA * 02451 * USA
E: [login to unmask email]<mailto:[login to unmask email]> * W: www.rocketsoftware.com https://urldefense.proofpoint.com/v2/url?u=http-3A__www.rocketsoftware.com-25C2-25A0&d=DwMFAw&c=UrUhmHsiTVT5qkaA4d_oSzcamb9hmamiCDMzBAEwC7E&r=KigCN-TlaQoAQDZrna0ZVLUX9H9vZpSibySEyujWvHQ&m=gcUJw5yfm1JNTzX4MCSm9AlbtbnlTXjeSUxoYggAIt8&s=ICfKsyDLEuMv3rLly4PHXvEs6nnye9aZ7nG7EZ-Ux4o&e= ;

Views are personal.


-----End Original Message-----

-----End Original Message-----
**This e-mail, including any attachments, may be confidential, privileged, or otherwise legally protected. It is intended only for the addressee. If you received this e-mail in error or from someone who was not authorized to send it to you, do not disseminate, copy, or otherwise use this e-mail or its attachments. Please notify the sender immediately by reply e-mail and delete the e-mail from your system.**
-----End Original Message-----

This message is confidential and subject to terms at: http://www.jpmorgan.com/emaildisclaimer https://urldefense.proofpoint.com/v2/url?u=http-3A__www.jpmorgan.com_emaildisclaimer&d=DwMFAw&c=UrUhmHsiTVT5qkaA4d_oSzcamb9hmamiCDMzBAEwC7E&r=KigCN-TlaQoAQDZrna0ZVLUX9H9vZpSibySEyujWvHQ&m=gcUJw5yfm1JNTzX4MCSm9AlbtbnlTXjeSUxoYggAIt8&s=Jw5K7_LnU15Lu5KIg7ZDrnahhDvqHCrqviamDMc5bCI&e= including on confidentiality, legal privilege, viruses and monitoring of electronic messages. If you are not the intended recipient, please delete this message and notify the sender immediately. Any unauthorized use is strictly prohibited.

-----End Original Message-----

Charles Brown

Are DB2 Connect dcs database entries required?
(in response to Jørn Thyssen)
Re: With a Db2 Connect Gateway ...so for upgrades you still need the SCCM folks.

Hello Jorn,
Good catch!!
Yes — you’re quite correct. Either way, we need the SCCM folks — too bad.
However if I may add this — db2 connect gateway when configured appropriately to do Connection Concentrator. This is when having max_connection > max_coordagents. What you have here is, you’re essentially allowing db2 connect to off load your DDF and thus reduce the number of DBATS threads in db2 z o/s. Now, watch your DDF address space runs cooler and faster. Db2 connect Connection Concentrator reduces z resources. Having this configuration, DDF sees fewer threads — which is a good thing. The business of thread reuse management — ops!! Off loaded to the gateway server. Mind you, this feature can be reasonably exploited if you’re doing the db2 connect gateway deployment. Check it out.

Thx!!

Sent from my iPhone

> On Feb 15, 2018, at 3:59 PM, Jørn Thyssen <[login to unmask email]> wrote:
>
>
> Hi Charles,
>
> If you have Db2 Connect Unlimited you can deploy the license on the z/OS side.
>
> With a Db2 Connect Gateway architecture you have drivers installed at the clients (workstation or app server), so for upgrades you still need the SCCM folks.
>
> For some applications the gateway may cost you up to 100% overhead in elapsed time. In addition, you have the cost and support of an additional server, in fact, probably multiple servers; otherwise you have a single point of failure.
>
> There is one type of licenses where the gateway is required and there a few exotic application types where you need the gateway.
>
> Apart from that one license type you are just adding costs by adding a gateway since the licensing required is the same.
>
> Best regards,
>
> Jørn Thyssen
>
> Rocket Software
> 77 Fourth Avenue • Waltham, MA • 02451 • USA
> E: [login to unmask email] • W: www.rocketsoftware.com
>
> Views are personal.
>
>
> Site Links: View post online View mailing list online Start new thread via email Unsubscribe from this mailing list Manage your subscription
>
> This email has been sent to: [login to unmask email]
> ** ** ** IDUG DB2 Data and Analytics Technical Summit in Chennai, India 2018 ** ** **
> ---> Chennai, India, March 29, 2018 <---
> http://ibm.biz/IDUGChennai2018
>
> Use of this email content is governed by the terms of service at:
> http://www.idug.org/p/cm/ld/fid=2
>

Roy Boxwell

Are DB2 Connect dcs database entries required?
(in response to David Baldon)
Yep! 10 million and then 20 million Euros as starting points should be enough to “raise awareness” of issues like this!

Roy Boxwell
SOFTWARE ENGINEERING GmbH and SEGUS Inc.
-Product Development-
Heinrichstrasse 83-85
40239 Düsseldorf/Germany
Tel. +49 (0)211 96149-675
Fax +49 (0)211 96149-32
Email: [login to unmask email]<mailto:[login to unmask email]>
http://www.seg.de

Software Engineering GmbH
Amtsgericht Düsseldorf, HRB 37894
Geschäftsführung: Gerhard Schubert

On 16 Feb 2018, at 21:35, Baldon, David <[login to unmask email]<mailto:[login to unmask email]>> wrote:

I know management doesn’t always consider it, but what’s cheaper if a data breach occurs? The fines plus loss of business due to broken trust or spending the time and money to fix things and prevent the data breach? You can just about guarantee that is far more expensive than fixing things.

Are you familiar with GDPR (general data protection regulation) which goes into effect this May in the EU? Companies will no longer “get away” with shoddy protection practices. GDPR applies to any company within or without the EU if that company collects the personal data of an EU citizen. Given the global economy, that’s pretty much every company in the world expect for Mom & Pop type companies (of course enforcement of GDPR violations for non-EU companies is another matter). I expect that eventually these types of regulation will be implemented in the US as well.

Something to think about and maybe bring to management’s attention.

...David

From: Lee, Kenneth [mailto:[login to unmask email]
Sent: Friday, February 16, 2018 2:18 PM
To: [login to unmask email]<mailto:[login to unmask email]>
Subject: [DB2-L] - RE: Are DB2 Connect dcs database entries required?

Phil,
I know where you are going and agree Type 4 support is much easier too, but ODBC and JDBC are so different like black and white.
What do you do with all the existing MicroSoft based applications that use ODBC?
It can be daunting task to convert to JDBC based ones or cost-inefficient.

Ken Lee

From: Sevetson, Phil [[login to unmask email]<mailto:[login to unmask email]>]
Sent: Friday, February 16, 2018 8:56 AM
To: '[login to unmask email]<mailto:[login to unmask email]>'
Subject: [DB2-L] - RE: Are DB2 Connect dcs database entries required?

Myron,

Okay, you’re scaring me here.

ODBC was abandoned at my employer several years ago for reasons of security. You can spoof an ODBC connection and it can’t be secured in any modern fashion. Anyone who’s using an ODBC connection in the current decade is leaving the castle gates wide open when we already know there are malicious operators out there who’ll take advantage of it.

JDBC Type 3 (obsolete) and 4 can use SSH connections, requiring secure key exchange, between application server (or workstation) and database (z/OS) port. This would seem to me to trump (sorry!) any other considerations and require that the IT team do whatever is needed to clean up the Java code to work well in a Type 4 connection.

Given the hideously public consequences of a successful information theft, upon any company which has not sufficiently protected its financial and PII information assets, I can’t understand why _anyone_ would still be using ODBC in an industrial environment.

--Phil Sevetson

From: Myron Miller [mailto:[login to unmask email]<mailto:[login to unmask email]>]
Sent: Friday, February 16, 2018 8:39 AM
To: [login to unmask email]<mailto:[login to unmask email]>
Subject: [DB2-L] - RE: Are DB2 Connect dcs database entries required?


That's very true, but there are still a number of products and tools out there that require a type 2 connection (ODBC drivers). Type 4 drivers are way easier to setup connectivity but if the programmer doesn't proper close things like statements, resultsets, cursors in the proper order before closing the connection then you get all kinds of hanging threads with locks still around. And that becomes a contention nightmare.



And unfortunately that's a very common problem with JAVA code. So type 4 may be much easier to set up but it comes with its own set of issues down the line.


Thanks Myron W. Miller

________________________________
From: Boxwell, Roy <[login to unmask email]<mailto:[login to unmask email]>>
Sent: Friday, February 16, 2018 2:02 AM
To: [login to unmask email]<mailto:[login to unmask email]>
Subject: [DB2-L] - RE: Are DB2 Connect dcs database entries required?


IBM have been killing Connect off for years. These days a direct connect with Type 4 driver is the way to go (plus gives you possible ZiiP usage) , especially after the improved DBAT support in Db2 10 came out.



Roy Boxwell

SOFTWARE ENGINEERING GMBH and SEGUS Inc.
-Product Development-

Heinrichstrasse 83-85
40239 Duesseldorf/Germany
Tel. +49 (0)211 96149-675
Fax +49 (0)211 96149-32
Email: [login to unmask email]<mailto:[login to unmask email]>
http://www.seg.de https://urldefense.proofpoint.com/v2/url?u=http-3A__www.seg.de_&d=DwMFAw&c=UrUhmHsiTVT5qkaA4d_oSzcamb9hmamiCDMzBAEwC7E&r=KigCN-TlaQoAQDZrna0ZVLUX9H9vZpSibySEyujWvHQ&m=gcUJw5yfm1JNTzX4MCSm9AlbtbnlTXjeSUxoYggAIt8&s=YHxa-Vi1FgKMD3MmaSc3OI6dsbmrNmB4gCQKP-7mGUI&e=

Software Engineering GmbH
Amtsgericht Düsseldorf, HRB 37894
Geschäftsführung: Gerhard Schubert



From: Jim Tonchick [mailto:[login to unmask email]
Sent: Friday, February 16, 2018 12:12 AM
To: [login to unmask email]<mailto:[login to unmask email]>
Subject: [DB2-L] - RE: Are DB2 Connect dcs database entries required?



I'd like to find those recommendations. Would you please print me towards any documents or presentations with this information?



FYI, these DB2 Connect servers have been around a long time. I was able to uncover a project back to 2010 when they were upgraded from v8.x to v9.5. I'm sure their history goes back further than that.

-----Original Message-----
From: Jørn Thyssen <[login to unmask email]<mailto:[login to unmask email]>>
To: DB2-L <[login to unmask email]<mailto:[login to unmask email]>>
Sent: Thu, Feb 15, 2018 12:48 PM
Subject: [DB2-L] - RE: Are DB2 Connect dcs database entries required?

Hi Jim,

Note that it has been recommended for many years to get rid of your Db2 Connect gateways, and use direct connections from your applications to Db2 for z/OS.



Best regards,

Jørn Thyssen

Rocket Software
77 Fourth Avenue • Waltham, MA • 02451 • USA
E: [login to unmask email]<mailto:[login to unmask email]> • W: www.rocketsoftware.com https://urldefense.proofpoint.com/v2/url?u=http-3A__www.rocketsoftware.com-25C2-25A0&d=DwMFAw&c=UrUhmHsiTVT5qkaA4d_oSzcamb9hmamiCDMzBAEwC7E&r=KigCN-TlaQoAQDZrna0ZVLUX9H9vZpSibySEyujWvHQ&m=gcUJw5yfm1JNTzX4MCSm9AlbtbnlTXjeSUxoYggAIt8&s=ICfKsyDLEuMv3rLly4PHXvEs6nnye9aZ7nG7EZ-Ux4o&e= ;

Views are personal.


-----End Original Message-----

-----End Original Message-----
**This e-mail, including any attachments, may be confidential, privileged, or otherwise legally protected. It is intended only for the addressee. If you received this e-mail in error or from someone who was not authorized to send it to you, do not disseminate, copy, or otherwise use this e-mail or its attachments. Please notify the sender immediately by reply e-mail and delete the e-mail from your system.**
-----End Original Message-----

This message is confidential and subject to terms at: http://www.jpmorgan.com/emaildisclaimer https://urldefense.proofpoint.com/v2/url?u=http-3A__www.jpmorgan.com_emaildisclaimer&d=DwMFAw&c=UrUhmHsiTVT5qkaA4d_oSzcamb9hmamiCDMzBAEwC7E&r=KigCN-TlaQoAQDZrna0ZVLUX9H9vZpSibySEyujWvHQ&m=gcUJw5yfm1JNTzX4MCSm9AlbtbnlTXjeSUxoYggAIt8&s=Jw5K7_LnU15Lu5KIg7ZDrnahhDvqHCrqviamDMc5bCI&e= including on confidentiality, legal privilege, viruses and monitoring of electronic messages. If you are not the intended recipient, please delete this message and notify the sender immediately. Any unauthorized use is strictly prohibited.

-----End Original Message-----

-----End Original Message-----

Myron Miller

Are DB2 Connect dcs database entries required?
(in response to Kenneth Lee)
And COGNOS, an IBM supported BI product last time i checked only supported ODBC.


Personally I don't like ODBC connections at all. Security wise they are a disaster. I know of so many ways to hack into on it frightens me. But since as others said, Microsoft apps (especially Excell and Access) require ODBC connections, it's a fact of life that I have to live with.


JDBC connections are seriously easier to configure to say the least. And it's easy to say that you can force the JAVA coders to properly handle connections. But with so many JAVA tools that know nothing of proper JDBC thread handling, such as closing the result set, statement and cursor in that order always before doing a close.conn. And with some of the tools doing this automatically and some manually and many Java coders not knowing or having a clue when each happens, its very hard to get things changed once the app is running in production.


Hell getting Java coders to use host variables is almost impossible. That's why statement concentration was implemented and there are issues with that.


It's taken me to almost 10 years to eliminate SELECT COUNT(*) from sysibm.systables from the test SqL from the Weblogics/webspheres/glassfish connection testing. Mostly i get now is select count(*) from sysibm.sysdummy1 where 1 = 0 now. At least it's pruned usually. And those that do the test for every SQL statement or every minute for every server in the cluster eats CPU to limited avail. To be honest Security seems to be an after thought for many of our java coders. Rant over.


Thanks Myron W. Miller


________________________________
From: Lee, Kenneth <[login to unmask email]>
Sent: Friday, February 16, 2018 3:17 PM
To: [login to unmask email]
Subject: [DB2-L] - RE: Are DB2 Connect dcs database entries required?


Phil,

I know where you are going and agree Type 4 support is much easier too, but ODBC and JDBC are so different like black and white.

What do you do with all the existing MicroSoft based applications that use ODBC?

It can be daunting task to convert to JDBC based ones or cost-inefficient.



Ken Lee



From: Sevetson, Phil [[login to unmask email]<mailto:[login to unmask email]>]
Sent: Friday, February 16, 2018 8:56 AM
To: '[login to unmask email]<mailto:[login to unmask email]>'
Subject: [DB2-L] - RE: Are DB2 Connect dcs database entries required?



Myron,



Okay, you’re scaring me here.



ODBC was abandoned at my employer several years ago for reasons of security. You can spoof an ODBC connection and it can’t be secured in any modern fashion. Anyone who’s using an ODBC connection in the current decade is leaving the castle gates wide open when we already know there are malicious operators out there who’ll take advantage of it.



JDBC Type 3 (obsolete) and 4 can use SSH connections, requiring secure key exchange, between application server (or workstation) and database (z/OS) port. This would seem to me to trump (sorry!) any other considerations and require that the IT team do whatever is needed to clean up the Java code to work well in a Type 4 connection.



Given the hideously public consequences of a successful information theft, upon any company which has not sufficiently protected its financial and PII information assets, I can’t understand why _anyone_ would still be using ODBC in an industrial environment.



--Phil Sevetson



From: Myron Miller [mailto:[login to unmask email]<mailto:[login to unmask email]>]
Sent: Friday, February 16, 2018 8:39 AM
To: [login to unmask email]<mailto:[login to unmask email]>
Subject: [DB2-L] - RE: Are DB2 Connect dcs database entries required?



That's very true, but there are still a number of products and tools out there that require a type 2 connection (ODBC drivers). Type 4 drivers are way easier to setup connectivity but if the programmer doesn't proper close things like statements, resultsets, cursors in the proper order before closing the connection then you get all kinds of hanging threads with locks still around. And that becomes a contention nightmare.



And unfortunately that's a very common problem with JAVA code. So type 4 may be much easier to set up but it comes with its own set of issues down the line.



Thanks Myron W. Miller



-----End Original Message-----