ACF2- ACF01200 INVALID PASSWORD when running DB2 Admin server task.

Products

• ACF2 - z/OS

Issue/Introduction

The following message is found in the log while running replication job using Oracle tables in DB2 Admin server:

ACF01200 INVALID PASSWORD/AUTHORITY FOR ID logonid FROM STCINRDR

Environment

Release : 16.0

Component : ACF2 for z/OS

Resolution

ACF01200 INVALID PASSWORD message is fixed by giving a logonid RESTRICT privilege. A restricted LOGONID does not require a password for user verification. CA ACF2 logs all jobs submitted with RESTRICTED LOGONIDs.

ACF
SET LID
CHANGE logonid RESTRICT 

It is recommended to give RESTRICT attribute along with PROGRAM, SUBAUTH and/or SOURCE restrictions to limit the use of this logonid.

SOURCE(sourceid)
Specifies the one- to eight-character logical or physical input source name or source group name from which a user must access the system.

SUBAUTH | NOSUBAUTH
Indicates that jobs that specify this LOGONID can be submitted only by APF-authorized programs.

PROGRAM(program)
Specifies a one- to eight-character program name or name mask. The specified program must be used to submit jobs for this LOGONID; if the LOGONID has SUBAUTH, this program must also be APF-authorized.

ACFRPTJL report can be run to show the SOURCE and PROGRAM information that can be used to specify on the logonid privileges as shown below:

//REPORT  EXEC PGM=ACFRPTJL                                      
//SYSPRINT DD SYSOUT=*                                            
//HEXDUMP  DD SYSOUT=*                                            
//RECMAN1  DD DISP=SHR,DSN=SYS1.MAN1                              
//RECMAN2  DD DISP=SHR,DSN=SYS1.MAN2                              
//RECMAN3  DD DISP=SHR,DSN=SYS1.MAN3                                                                   
//SYSIN  DD *                                                     
MASK(logonid)                                                                                                                       
/*                                                                
//*                                                          

 

Additional Information

DB2 Administrative server task:
//*********************************************************************
//* JCL FOR PROCEDURE FOR THE STARTUP OF
//* THE DB2 ADMINISTRATIVE SCHEDULER ADDRESS SPACE.
//*
//* ASSIGNMENT GROUP IN CASE OF ERRORS:Z-DB2
//*
//* INSTALLATION MAY CHANGE PROGRAM LIBRARY
//* NAMES IN STEPLIB DD STATEMENT TO THE
//* LIBRARY IN WHICH DB2 MODULES ARE
//* LOADED USING THE PROCEDURE VARIABLE:
//* LIB
//*
//* Before using this proc
//* - Locate and review the settings for the following
//* parameters:
//* - DB2SSID: The name of this DB2 subsystem
//* - DFLTUID: The default ID used by Administrative Scheduler
//* to execute its tasks. Must differ from
//* the ID used to start this address space
//* - TRACE : Whether to activate tracing for the Admin-
//* istrative Scheduler (OFF or ON, default is OFF)
//*
//* Command to turn trace on: MODIFY DB2SADMT,APPL=TRACE=ON
//* Command to turn trace off: MODIFY DB2SADMT,APPL=TRACE=OFF
//* Command to stop task : MODIFY DB2SADMT,APPL=SHUTDOWN
//* Command to start task : START DB2SADMT
//*
//*********************************************************************
//DB2SADMT PROC LIB1='SYSD.DB2.DB2S.SDSNLOAD',
// LIB2='SYSD.DB2.OGG.AUTHLOAD',
// DB2SSID=DB2S,
// DFLTUID=ORDATA,
// TRACE=OFF,
// MAXTHD=10
//STARTADM EXEC PGM=DSNADMT0,DYNAMNBR=100,REGION=0K,
// PARM=('DB2SSID=&DB2SSID',
// ' DFLTUID=&DFLTUID',
// ' TRACE=&TRACE',
// ' MAXTHD=&MAXTHD',
// ' ERRFREQ=1440',
// ' STOPONDB2STOP')
//STEPLIB DD DISP=SHR,DSN=&LIB1
// DD DISP=SHR,DSN=&LIB2
//ADMTDD1 DD DISP=SHR,DSN=DSNDB2S.TASKLIST