Running the RACF access control exit routine for one DB2 version with the RACF code and database set up for another DB2 Version is not possible.

Technote (FAQ)


Question

Can I run the RACF version of the exit routine (DSNXRXAC) that is shipped with DB2 Version 8 with a RACF database that was set up to run with the RACF exit routine (IRR@XACS) for DB2 Version 7?
Can I run the RACF version of the exit routine (DSNXRXAC) that is shipped with DB2 9 with a RACF database that was set up to run with the RACF exit routine (DSNXRXAC) for DB2 Version 8?

Answer

Each version of DB2 requires a RACF access control routine that matches the version. This code and data and specific has had changes for every DB2 version. You must match this exit to the version of DB2 running.

You can run multiple DB2® versions against the same RACF database. The key requirement is to have the correct level of the RACF External Security module associated with the correct version of DB2. Both IRR@XACS and DSNXRXAC map resource accesses to the same format RACF resource names in the same classes. The only exception is that if the RACF resource name contains both a schema name and another long name (such as a JAR name), the schema name is truncated. Both DSNXRXAC and IRR@XACS (at the correct service level) has code that ensures that they are not invoked by the incorrect version of DB2.
DB2 9 also has some unique requirements and must match. The SDSNEXIT library can be used to have separate levels for the separate versions.

See the Administration Guide appendix on Exit Routines and the RACF Access Control Module Guide for more information.

Related information

RACF Access Control Module Guide
Administration Guide (DB2 9)

Rate this page:

(0 users)Average rating

Add comments

Document information


More support for:

DB2 for z/OS

Software version:

7.0, 8.0, 9.1

Operating system(s):

OS/390, z/OS

Reference #:

1197010

Modified date:

2011-08-15

Translate my page

Machine Translation

Content navigation