DB2 sometimes does an autorebind. I am seeing a -904 with ACF01004 for SYSOPR. SYSOPR is a DB2 authorization level, not a LID. What do I do?

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC

Issue/Introduction

Question:  

DB2 sometimes does an autorebind. I am seeing a -904 with ACF01004 for SYSOPR. SYSOPR is a DB2 authorization level, not a LID. What do I do?

Answer:  

CA ACF2 will validate the auto rebind using the authchk id. It will do an info call for the current sqlid, the primary authid and the secondary id's. It is during this process that the ACF01004 message is issued for SYSOPR.

IBM support says, "Sometimes, DB2 switches to a service task to do an automatic REBIND. In that case, the authid for the service task is SYSOPR and there is no ACEE for this user." The resolution in CA ACF2 is to create a SYSOPR LID with RESTRICT to satisfy the SAF call. No special rules or properties are needed for the SYSOPR LID.

Environment

Release:
Component: ACF2DB

Resolution

-