JR30952: EXTENDED SECURITY USED BY IBM DATA SERVER DRIVER WHERE IT SHOULD NOT

DB2 Version 9.5 Fix Pack 4  for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 4a for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 5 for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 6a for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 7 for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 8 for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 9 for Linux, UNIX, and Windows
DB2 Version 9.5 Fix Pack 10 for Linux, UNIX, and Windows

APAR status

• Closed as program error.

Error description

• You might encounter situations where the IBM Data Server Driver
  for ODBC and CLI is using extended security feature although it
  should not. This might result in unpredictable application
  behaviour.
  
  This issue happens if the following conditions are meet:
  - the IBM Data Server Driver for ODBC and CLI package is being
    used
  - there is no other DB2 product installed or no installed DB2
    product is using the extended security feature. (no DB2USERS
    and DB2ADMNS Windows user groups have been created on the
    system)
  - DB2 Connect Server license files are used to enable direct
    host connectivity for the IBM Data Server Driver
  
  This APAR enhances the code to distinguish between the client,
  that is coming with a full installation, and the client
  that was just unzipped and run.
  

Local fix

• There a three possible workarounds:
  - use DB2 Connect Personal Edition License file instead of
    DB2 Conect Server License files
  - set DB2_EXTSECURITY=NO in Windows environment
  - create the Windows User groups 'DB2USERS' and 'DB2ADMNS'
  

Problem summary

• USERS AFFECTED: ALL using the  IBM DATA SERVER DRIVER
  
  PROBLEM DESCRIPTION:
  see ERROR DESCRIPTION
  
  PROBLEM CONCLUSION:
  see ERROR DESCRIPTION
  

Problem conclusion

• Problem was first fixed in Version 9.5 Fix Pack 5
  

Temporary fix

• see LOCAL FIX
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  IC63971

Fix information

• Fixed component name

  DB2 CEE WINDOWS

• Fixed component ID

  5765F3001

Applicable component levels

• R810 PSN

     UP

• R820 PSN

     UP

• R910 PSN

     UP

• R950 PSN

     UP