View previous topic :: View next topic |
Author |
Message |
tiggy Beginner
Joined: 23 Mar 2005 Posts: 19 Topics: 6
|
Posted: Tue May 24, 2005 7:56 am Post subject: SQL -922 with on-line programs |
|
|
Hi Guys,
I'm at a loss with this one. Over the weekend I had several programs abend with a -922:
+$ BEGINNING OF IMSABEND DL/I DIAGNOSTIC REPORT . $
+$ MOD=LUC900 PGM=LUC900 PSB=LUC900 $
+$ MSG=PARA=7200-CHECK-DEALER-NUM SQLCODE = $
+$ = 922-SQLERRMC = USER AUTHORIZATION.00 $
+$ =F30058 $
+$ FUNC=GU STATUS= $
+$ MFS=LU0900O PCB=(01)LT212168 / L100TMS $
+$ END OF IMSABEND DL/I DIAGNOSTIC REPORT . . . . $
+AB400A ===== ABEND-AID ===== 732
The DB2 Tables in which they're accessing has not been altered since at least April 1, 1998. The none of the program have been recompiled since at least April 25, 2005 and they're all heavily used.
When I check RC/Query, all of the plans have full access to the tables in question and have been that way for quite some time.
The message would indicate that the programs have had their access revoked but we're unaware why. We're running DB2 V7 on z/OS V1R5.
I've even done a QW on 00F30058 (the SQLERRMC) and got the following:
00F30058
Explanation: Access to DB2 has been denied by the site's authorization
exit.
This reason code is issued by the following CSECTs: DSN3AUCN, DSN3AUSI
System Action: The request is not processed.
User Response: Contact your security administrator and request authority
to access this DB2 subsystem.
System Programmer Response: No action is necessary unless the request
denial was in error. If it was, the authorization exit should be tested to
determine the cause of the error.
I've even checked the Database as all of the tables in question reside on the same database and it hasn't been altered since the day it was created (August 23, 1988)
Does anyone know what might have caused the programs to all of a sudden have lost access to the DB2 Tables? _________________ Robert Tighe
Legacy Systems Analyst
Keane Canada, Inc.
Robert_F_Tighe@keane.com |
|
Back to top |
|
|
kolusu Site Admin
Joined: 26 Nov 2002 Posts: 12376 Topics: 75 Location: San Jose
|
Posted: Tue May 24, 2005 8:08 am Post subject: |
|
|
Quote: |
We're running DB2 V7 on z/OS V1R5.
|
Tiggy,
Did you recently upgrade to DB2 V7?
Kolusu _________________ Kolusu
www.linkedin.com/in/kolusu |
|
Back to top |
|
|
tiggy Beginner
Joined: 23 Mar 2005 Posts: 19 Topics: 6
|
Posted: Tue May 24, 2005 8:11 am Post subject: |
|
|
Kolusu,
We upgraded to DB2 V7 over a year ago, we're presently starting to look at upgrading to V8. The documentation for V8 has been added to QW and talks are starting for the upgrade, although I suspect it will be several months before it happens.
Tiggy _________________ Robert Tighe
Legacy Systems Analyst
Keane Canada, Inc.
Robert_F_Tighe@keane.com |
|
Back to top |
|
|
kolusu Site Admin
Joined: 26 Nov 2002 Posts: 12376 Topics: 75 Location: San Jose
|
Posted: Tue May 24, 2005 8:13 am Post subject: |
|
|
tiggy,
hmm May be an Upgrade to IMS ?
Kolusu _________________ Kolusu
www.linkedin.com/in/kolusu |
|
Back to top |
|
|
tiggy Beginner
Joined: 23 Mar 2005 Posts: 19 Topics: 6
|
Posted: Tue May 24, 2005 8:18 am Post subject: |
|
|
Kolusu,
We're running IMS V7 as well, we upgraded that about a month before we upgraded DB2 to V7. Are you as confused as me yet?
Tiggy _________________ Robert Tighe
Legacy Systems Analyst
Keane Canada, Inc.
Robert_F_Tighe@keane.com |
|
Back to top |
|
|
kolusu Site Admin
Joined: 26 Nov 2002 Posts: 12376 Topics: 75 Location: San Jose
|
Posted: Tue May 24, 2005 8:30 am Post subject: |
|
|
Quote: |
We're running IMS V7 as well, we upgraded that about a month before we upgraded DB2 to V7. Are you as confused as me yet?
|
Tiggy,
I am just wondering as to how the authorization got deleted. I suspected that an upgrade to either IMS or DB2 could be a reason for the deletion of authorizations. However now that you have ruled out both the scenarios , I am now confused.
Kolusu _________________ Kolusu
www.linkedin.com/in/kolusu |
|
Back to top |
|
|
tiggy Beginner
Joined: 23 Mar 2005 Posts: 19 Topics: 6
|
Posted: Tue May 24, 2005 8:37 am Post subject: |
|
|
Kolusu,
I'm as confused as you. I've been doing more research here and here's what I suspect happened. We have thousands of users using a generic username & password to access the screens in question. There's a limit of three attempts on the password and then the password gets locked out and the password needs to be reset.
With that in mind, I suspect that the users which were already logged on had their access to DB2 cut when the password got revoked. Once the DB2 got cut, the next time they tried to do anything with the screen, it then came back with the -922. Since the access had just been revoked, the access to DB2 was cut and therefore denying access to the transaction.
Am I in the ball park? Is my assumption close or am I just off in left field somewhere?
Tiggy _________________ Robert Tighe
Legacy Systems Analyst
Keane Canada, Inc.
Robert_F_Tighe@keane.com |
|
Back to top |
|
|
Bithead Advanced
Joined: 03 Jan 2003 Posts: 550 Topics: 23 Location: Michigan, USA
|
Posted: Tue May 24, 2005 10:36 am Post subject: |
|
|
Do you have your IMS transactions secured? If so, you should have had an error when attempting to run them. If not, then your theory might be correct. |
|
Back to top |
|
|
tiggy Beginner
Joined: 23 Mar 2005 Posts: 19 Topics: 6
|
Posted: Tue May 24, 2005 10:43 am Post subject: |
|
|
I don't think they're secured. Based on that, I believe this would be my root cause. Thanks for the help. _________________ Robert Tighe
Legacy Systems Analyst
Keane Canada, Inc.
Robert_F_Tighe@keane.com |
|
Back to top |
|
|
|
|