Batch Processor is failing during connection with message PTIDB-CAF user not authorized to use Db2 subsystem

Products

• Database Management for DB2 for z/OS - Administration Suite
• Database Management for DB2 for z/OS - Performance Suite
• Database Management for DB2 for z/OS - Recovery Suite
• Database Management for DB2 for z/OS - SQL Performance Suite
• Database Management for DB2 for z/OS - Utilities Suite
• DATABASE MANAGEMENT SOLUTIONS FOR DB2 FOR Z/OS
• Batch Processor

Issue/Introduction

During a Database Management for Db2 for z/OS Batch Processor execution the connection is failing with messages:

PTIDB2-CAF: USER xxxxxxx NOT AUTHORIZED TO USE DB2 SUBSYSTEM ssid
BPA0010E: CONNECTION TO DB2 SSID ssid HAS FAILED USING PLAN xxxxxxxx.

Environment

Site utilizing RACF with CONNECT(AUTO) specified within highlvl.CDBAPARM member SETUPxx.

Cause

It appears that the CAF error may be related to a RACF resource error.

Resolution

Modify the SETUPxx member in highlvl.CDBAPARM to specify the following:

CONNECT (CAF)

 

The CONNECT option has the following note from the help online panels:
Field: DB2 Connection Type

Description: Enter CAF or AUTO to indicate
the connection type. The default is CAF.

AUTO - Products may conditionally switch to an
RRSAF connection in order to support certain RRSAF
connection exploitive capabilities. Specifying
AUTO may also require additional systems security
setup in order to use the facility.