APF authorization error on load library

william giannelli

APF authorization error on load library

We have had our DSNEXIT load library as needed for a long time. But now when we try to execute the WLM_REFRESH stored procedure we get an error "**** DSN8ED6: Sample caller of WLM_REFRESH stored procedure (DSNTWR)
*
* Results: WLM_REFRESH returned code 995 and the following message:
* DSNT530I DSNTWR COULD NOT BE RUN BECAUSE IT WAS NOT INVOKED FROM AN APF-AUTHORIZED LIBRARY

I have opened a PMR but IBM states this is a "usage" issue requiring Software Excel.

We have checked the sysparm, linklist and APF authorizations.

Any help would be very much appreciated.

thanks

Bill

william giannelli

RE: APF authorization error on load library
(in response to william giannelli)

Also, we have BOTH DSNEXIT and DSNLOAD APF authorized.

thanks

Bill

Lizette Koehler

APF authorization error on load library
(in response to william giannelli)
If you have SDSF and v2.1 and higher use the APF on the command line and check for your library



If not, then in SYSLOG issue command D PROG,APF



If not, then in ISPF issue command TSO ISRDDN, then on command line APF – check for your library



Lizette





From: william giannelli <[login to unmask email]>
Sent: Friday, June 29, 2018 9:36 AM
To: [login to unmask email]
Subject: [DB2-L] - APF authorization error on load library



We have had our DSNEXIT load library as needed for a long time. But now when we try to execute the WLM_REFRESH stored procedure we get an error "**** DSN8ED6: Sample caller of WLM_REFRESH stored procedure (DSNTWR)
*
* Results: WLM_REFRESH returned code 995 and the following message:
* DSNT530I DSNTWR COULD NOT BE RUN BECAUSE IT WAS NOT INVOKED FROM AN APF-AUTHORIZED LIBRARY

I have opened a PMR but IBM states this is a "usage" issue requiring Software Excel.

We have checked the sysparm, linklist and APF authorizations.

Any help would be very much appreciated.

thanks

Bill



-----End Original Message-----

Lizette Koehler

APF authorization error on load library
(in response to william giannelli)
Ensure that program-name is link-edited with option AC(1) and resides in an APF-authorized library. Ensure that all libraries in the STEPLIB and JOBLIB concatenation for the job that invokes program-name are APF authorized. If program-name is an external module for a Db2® stored procedure or user-defined function, ensure that the corresponding SYSIBM.SYSROUTINES entry specifies a WLM-established address space.



See if this thread in IDUG.org can help



https://www.idug.org/p/fo/et/thread=13534



Lizette





From: william giannelli <[login to unmask email]>
Sent: Friday, June 29, 2018 9:36 AM
To: [login to unmask email]
Subject: [DB2-L] - APF authorization error on load library



We have had our DSNEXIT load library as needed for a long time. But now when we try to execute the WLM_REFRESH stored procedure we get an error "**** DSN8ED6: Sample caller of WLM_REFRESH stored procedure (DSNTWR)
*
* Results: WLM_REFRESH returned code 995 and the following message:
* DSNT530I DSNTWR COULD NOT BE RUN BECAUSE IT WAS NOT INVOKED FROM AN APF-AUTHORIZED LIBRARY

I have opened a PMR but IBM states this is a "usage" issue requiring Software Excel.

We have checked the sysparm, linklist and APF authorizations.

Any help would be very much appreciated.

thanks

Bill



-----End Original Message-----

Kenny Fogarty

APF authorization error on load library
(in response to william giannelli)
Are you 100% certain that the version of DSNTWR being invoked when you run your refresh job is in your APF-authorised SDSNEXIT dataset?



If it is, then check the following;



DSN8ED6 should be written to RUNLIB.LOAD by DSNTEJ6W because that’s just a sample program and doesn’t need to be APF authorised.

DSNTWR does need APF authorisation and should be written to SDSNEXIT by the DSNTEJ6W job that will build the module.



Check that the modules are being written to the correct datasets by your DSNTEJ6W job, and then check to make sure you don’t have RUNLIB.LOAD, or any other non-APF authorised dataset concatenated to your JOBLIB/STEPLIB when you are executing the REFRESH.



From: william giannelli <[login to unmask email]>
Sent: 29 June 2018 17:36
To: [login to unmask email]
Subject: [DB2-L] - APF authorization error on load library



We have had our DSNEXIT load library as needed for a long time. But now when we try to execute the WLM_REFRESH stored procedure we get an error "**** DSN8ED6: Sample caller of WLM_REFRESH stored procedure (DSNTWR)
*
* Results: WLM_REFRESH returned code 995 and the following message:
* DSNT530I DSNTWR COULD NOT BE RUN BECAUSE IT WAS NOT INVOKED FROM AN APF-AUTHORIZED LIBRARY

I have opened a PMR but IBM states this is a "usage" issue requiring Software Excel.

We have checked the sysparm, linklist and APF authorizations.

Any help would be very much appreciated.

thanks

Bill



-----End Original Message-----

william giannelli

RE: APF authorization error on load library
(in response to Kenny Fogarty)

all that was checked and found to be correct.

DSNTEJ6W was not run recently at all.

what could have been done to "break" this?

our DSNEXIT and DSNLOAD are aliases to a DSNEXIT.B and DSNLOAD.B version which also checks out correctly.

our z/OS have been preparing for v2.2. Is it possible some v2.2 pre migration requirement caused this?

thanks

Bill

Kenny Fogarty

APF authorization error on load library
(in response to william giannelli)
I don’t know how z/OS migration preparation could break this, unless it removes DB2 run-time datasets from the APFLIST.

Do you have any rogue versions of DSNTWR lingering around in non-APF authorised datasets, which could be called accidentally? Is the REFRESH batch job being run by a user, and would they happen to have any of their own datasets concatenated in the JOBLIB/STEPLIB?



From: william giannelli <[login to unmask email]>
Sent: 29 June 2018 18:26
To: [login to unmask email]
Subject: [DB2-L] - RE: APF authorization error on load library



all that was checked and found to be correct.

DSNTEJ6W was not run recently at all.

what could have been done to "break" this?

our DSNEXIT and DSNLOAD are aliases to a DSNEXIT.B and DSNLOAD.B version which also checks out correctly.

our z/OS have been preparing for v2.2. Is it possible some v2.2 pre migration requirement caused this?

thanks

Bill



-----End Original Message-----

Anthony Ciabattoni

APF authorization error on load library
(in response to william giannelli)

Hello Bill,

Do you have any additional libraries in your steplib/loadlib? If so are
they also APF authorized?


Regards,
Anthony



Anthony Ciabattoni
Senior IT Specialist
Db2 for z/OS Development SWAT Team

Mobile: 305-965-2883
email: [login to unmask email]




Find me on: Twitter Linkedln World of Db2





From: william giannelli <[login to unmask email]>
To: [login to unmask email]
Date: 06/29/2018 01:25 PM
Subject: [DB2-L] - RE: APF authorization error on load library



all that was checked and found to be correct.


DSNTEJ6W was not run recently at all.


what could have been done to "break" this?


our DSNEXIT and DSNLOAD are aliases to a DSNEXIT.B and DSNLOAD.B version
which also checks out correctly.


our z/OS have been preparing for v2.2. Is it possible some v2.2 pre
migration requirement caused this?


thanks


Bill




Site Links: View post online View mailing list online Start new thread
via email Unsubscribe from this mailing list Manage your subscription


This email has been sent to: [login to unmask email]


Faster data refresh is here! The long waits and babysitting of unload/load
jobs is over. Contact
ESAi to learn about BCV5 & XDM. Be a hero to users with fast on-demand
test/QA data provisioning.See
http://www.ESAIGroup.com/idug



Use of this email content is governed by the terms of service at:
http://www.idug.org/p/cm/ld/fid=2








Attachments

  • 17022366.gif (<1k)
  • 17553368.gif (1.4k)
  • 17266769.gif (<1k)
  • graycol.gif (<1k)

Lizette Koehler

APF authorization error on load library
(in response to william giannelli)
Could you post your jcl and which ones are apf
Lizette


Sent from EarthLink Mobile mail
On 6/29/18, 10:25 AM, william giannelli <[login to unmask email]> wrote:

From: william giannelli <[login to unmask email]>
To: [login to unmask email]
Subject: [DB2-L] - RE: APF authorization error on load library
Date: June 29, 2018 at 10:25:38 AM MST
all that was checked and found to be correct.
DSNTEJ6W was not run recently at all.
what could have been done to "break" this?
our DSNEXIT and DSNLOAD are aliases to a DSNEXIT.B and DSNLOAD.B version which also checks out correctly.
our z/OS have been preparing for v2.2. Is it possible some v2.2 pre migration requirement caused this?
thanks
Bill


Site Links: View post online   View mailing list online   Start new thread via email   Unsubscribe from this mailing list   Manage your subscription  

This email has been sent to: [login to unmask email]
Faster data refresh is here! The long waits and babysitting of unload/load jobs is over. Contact
ESAi to learn about BCV5 & XDM. Be a hero to users with fast on-demand test/QA data provisioning.See
http://www.ESAIGroup.com/idug


Use of this email content is governed by the terms of service at:
http://www.idug.org/p/cm/ld/fid=2

James Campbell

APF authorization error on load library
(in response to william giannelli)
Check the steplib on the started task that runs the WLM_REFRESH procedure .

Some of those started tasks (eg the REXX one) must have an un-authorised steplib
concatenation. It is possible that you have accidently switched WLM environments so it is
running (and falling over) in one of those.

The job invoking the procedure has nothing to do with this error.

James Campbell


On 29 2018 at 9:36, william giannelli wrote:

>
> We have had our DSNEXIT load library as needed for a long time. But now when we try to
> execute the WLM_REFRESH stored procedure we get an error "**** DSN8ED6: Sample caller of
> WLM_REFRESH stored procedure (DSNTWR)
> *
> * Results: WLM_REFRESH returned code 995 and the following message:
> * DSNT530I DSNTWR COULD NOT BE RUN BECAUSE IT WAS NOT INVOKED FROM AN
> APF-AUTHORIZED LIBRARY
> I have opened a PMR but IBM states this is a "usage" issue requiring Software Excel.
> We have checked the sysparm, linklist and APF authorizations.
> Any help would be very much appreciated.
> thanks
> Bill
>


---
This email has been checked for viruses by AVG.
https://www.avg.com

Steven Lamb

RE: APF authorization error on load library
(in response to James Campbell)

As James said, your DB2 datasets may be fine in terms of APF-authorisation, but if you've got an un-authorised dataset in a STEPLIB concatenation, that will effectively "remove" authorisation from all datasets in that STEPLIB.

william giannelli

RE: APF authorization error on load library
(in response to James Campbell)

You were correct it was the elm_refresh procedure that needed the steplib corrected not the batch job calling it.

Thank you all for all your help!!!!!!

Bill