[zos] DB2 components for first install of NETVIEW SA

Avram Friedman

[zos] DB2 components for first install of NETVIEW SA

I have a team installing NETVIEW / SA
When they attempt a -STOP DB2  they receive a not authorized message.
I assume there Netview SA ' User IDs need SYSOPER, STOP and Display authority.
What IDs
Anything else, for example does something need to be set up in the CDB?

Can some one point me to a summary of DB2 requirements?

The team doing the installs is not cooperating with my request.

Avram Friedman
DB2-L hall of fame contributor
DB2-L 'past' administrator

[login to unmask email]

Jørn Thyssen

RE: [zos] DB2 components for first install of NETVIEW SA
(in response to Avram Friedman)

Hi Avram,

I am not an expert in neither consoles nor authorizations, but I usually have problems unless my console is created with AUTH=MASTER.

For example, if I issues command through SDSF they work because SDSF creates a console with AUTH=MASTER, but when I use z/OSMF restconsole API I get auth errors because the console is created with AUTH=INFO.

In Reply to Avram Friedman:

I have a team installing NETVIEW / SA
When they attempt a -STOP DB2  they receive a not authorized message.
I assume there Netview SA ' User IDs need SYSOPER, STOP and Display authority.
What IDs
Anything else, for example does something need to be set up in the CDB?

Can some one point me to a summary of DB2 requirements?

The team doing the installs is not cooperating with my request.

Avram Friedman
DB2-L hall of fame contributor
DB2-L 'past' administrator

[login to unmask email]



 

Best regards,

Jørn Thyssen

Rocket Software
77 Fourth Avenue • Waltham, MA • 02451 • USA
E: [login to unmask email] • W: www.rocketsoftware.com 

2019 IBM Champion.

Views are personal. 

Avram Friedman

RE: [zos] DB2 components for first install of NETVIEW SA
(in response to Jørn Thyssen)

Thank you for your reply.
It is not a console issue (i thaink) as SA can start / stop most other things as it stands today.
DB2 however has its additional security that controls who can issue commands (we control this with DB2 Grants and not with RACF)  Some of these grants and DB2 configurations need to be done for SA,  I am hopping to find out what.

Avram Friedman
DB2-L hall of fame contributor
DB2-L 'past' administrator

[login to unmask email]

Jørn Thyssen

RE: [zos] DB2 components for first install of NETVIEW SA
(in response to Avram Friedman)

Hi Avram,

I can run any console command through z/OSMF restconsole API except for Db2 commands, because Db2 for some reason requires the console to be created with AUTH=MASTER. I can't even run DIS DDF.

I suggest you check that they create the console with AUTH=MASTER



In Reply to Avram Friedman:

Thank you for your reply.
It is not a console issue (i thaink) as SA can start / stop most other things as it stands today.
DB2 however has its additional security that controls who can issue commands (we control this with DB2 Grants and not with RACF)  Some of these grants and DB2 configurations need to be done for SA,  I am hopping to find out what.

Avram Friedman
DB2-L hall of fame contributor
DB2-L 'past' administrator

[login to unmask email]



 

Best regards,

Jørn Thyssen

Rocket Software
77 Fourth Avenue • Waltham, MA • 02451 • USA
E: [login to unmask email] • W: www.rocketsoftware.com 

2019 IBM Champion.

Views are personal.