Db2 DSNZPARM AUTHEXIT_CACHEREFRESH impact with ACF2 for Db2

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 - z/OS
• ACF2 - MISC

Issue/Introduction

Does ACF2 use ZPARM AUTHEXIT_CACHEREFRESH and if so what is the recommended setting for ACF2?

Is it AUTHEXIT_CACHEREFRESH=ALL or NONE (the default)?

Environment

Release : 1.3

Component : ACF2 Option for Db2

Db2: V12R1M100 Data Sharing environment

Cause

IBM recommends setting AUTHEXIT_CACHEREFRESH to ALL after applying APAR PI94236 to avoid a storage leak. 

Resolution

The Db2 for z/OS DSNZPARM AUTHEXIT_CACHEREFRESH is for Db2 and is not directly related to the ACF2 for Db2 interface.

If that option is set to ALL, then ENF71 signals will be sent for ACF CHANGE userid SUSPEND/CANCEL or for a DELETE of a userid.

ACF2 does not send out any ENF79 signals as the ACF2 rule structure does not match up well with ENF79 signals.