DB2 sometimes does an autorebind. I am seeing a -904 with ACF01004 for SYSOPR. SYSOPR is a DB2 authorization level, not a LID. What do I do?

book

Article ID: 36475

calendar_today

Updated On:

Products

CA ACF2 CA ACF2 - DB2 Option CA ACF2 for zVM CA ACF2 - z/OS CA ACF2 - MISC

Issue/Introduction

Question:  

 

DB2 sometimes does an autorebind. I am seeing a -904 with ACF01004 for SYSOPR. SYSOPR is a DB2 authorization level, not a LID. What do I do?

Answer:  

CA ACF2 will validate the auto rebind using the authchk id. It will do an info call for the current sqlid, the primary authid and the secondary id's. It is during this process that the ACF01004 message is issued for SYSOPR.

IBM support says, "Sometimes, DB2 switches to a service task to do an automatic REBIND. In that case, the authid for the service task is SYSOPR and there is no ACEE for this user." The resolution in CA ACF2 is to create a SYSOPR LID with RESTRICT to satisfy the SAF call. No special rules or properties are needed for the SYSOPR LID.

Environment

Release:
Component: ACF2DB