Datacom OAM DB02817E and IGD17061I INSUFFICIENT SECURITY

Products

• Datacom
• DATACOM - AD
• CIS
• COMMON SERVICES FOR Z/OS
• 90S SERVICES
• DATABASE MANAGEMENT SOLUTIONS FOR DB2 FOR Z/OS
• COMMON PRODUCT SERVICES COMPONENT
• Common Services
• CA ECOMETER SERVER COMPONENT FOC
• Easytrieve Report Generator for Common Services
• INFOCAI MAINTENANCE
• IPC
• UNICENTER JCLCHECK COMMON COMPONENT
• Mainframe VM Product Manager
• CHORUS SOFTWARE MANAGER
• CA ON DEMAND PORTAL
• CA Service Desk Manager - Unified Self Service
• PAM CLIENT FOR LINUX ON MAINFRAME
• MAINFRAME CONNECTOR FOR LINUX ON MAINFRAME
• GRAPHICAL MANAGEMENT INTERFACE
• WEB ADMINISTRATOR FOR TOP SECRET
• Xpertware

Issue/Introduction

What is causing Datacom Online Area Move (OAM) to fail with DB02817E messages with ERROR RENAME and ERROR CLOSE DISPOSITION 13(11)?
This was accompanied by IEC331I 042-002(04100800) and IGD17061I INSUFFICIENT SECURITY AUTHORIZATION 
 

Environment

Release:
Component: DB

Resolution

Datacom Online Area Move (OAM) encountered an error during the process of the internal close rename/delete handling.

Per CA Datacom Core - 15.1 section "Perform an Online Area Move for Index and Data Areas" topic "MUF must have RENAME and SCRATCH authority"
https://docops.ca.com/ca-datacom/15-1/en/reference/dbutlty-reference/perform-an-online-area-move-for-index-and-data-areas#PerformanOnlineAreaMoveforIndexandDataAreas-MUFmusthaveRENAMEandSCRATCHauthority

MUF must have RENAME and SCRATCH authority
The OAM process runs inside of MUF as an internal task. Therefore, it is the MUF that requests the z/OS dataset renames and optionally deletes of the source dataset after the move has completed.
The security ID associated with the MUF region must have authority (security) to issue the dataset renames and optionally dataset deletes.
This is the first time that RENAME and DELETE (SCRATCH) authority has been required for the MUF region.
Important! Before attempting to use the OAM process, ensure that the submitter ID of the MUF region has the appropriate authority as noted previously.
 

Additional Information

In the case noted, the following messages were seen in the Datacom MUF jeslog:

DB02817E - ONLINE_AREA_MOVE 300 G10 ERROR RENAME RC=00000008 
DB02817E - ONLINE_AREA_MOVE 300 G10 ERROR RENAME VOLSER TX30DH 
DB02405I - PXX START ***MOVDS 0 PATCH ONLAM-300-G10 D-1 CONSOLE ON 
DB02406I - PXX END - PATCH COM 8014 
DB02817E - ONLINE_AREA_MOVE 300 G10 ERROR CLOSE DISPOSITION 13(11) 
   ...  along with ...
IEC331I 042-002(04100800),TX4MUFF ,TXH4MUFF ,RNAM,IGG0CLH2         
IEC331I VOL,TX0DH,NAME,HXXDBF.DO.DB300.G10                       
IGD17061I INSUFFICIENT SECURITY AUTHORIZATION FOR  571            
DATA SET HXXDBF.DO.DB300.G10                                      
ON VOLUME TX0DH HISTORIC RETURN CODE IS 8                        
DIAGNOSTIC INFORMATION IS 04100800                                
IEC614I RENAME FAILED - RC 008, DIAGNOSTIC INFORMATION IS (04100800)