CA ACF2 Option for DB2 Message Reference Guide

Message Reference Guide r1.3

CA ACF2™ Option for DB2

This Documentation, which includes embedded help systems and electronically distributed materials, (hereinafter referred to as the “Documentation”) is for your informational purposes only and is subject to change or withdrawal by CA at any time.

This Documentation may not be copied, transferred, reproduced, disclosed, modified or duplicated, in whole or in part, without the prior written consent of CA. This Documentation is confidential and proprietary information of CA and may not be disclosed by you or used for any purpose other than as may be permitted in (i) a separate agreement between you and CA governing your use of the CA software to which the Documentation relates; or (ii) a separate confidentiality agreement between you and CA.

Notwithstanding the foregoing, if you are a licensed user of the software product(s) addressed in the Documentation, you may print or otherwise make available a reasonable number of copies of the Documentation for internal use by you and your employees in connection with that software, provided that all CA copyright notices and legends are affixed to each reproduced copy.

The right to print or otherwise make available copies of the Documentation is limited to the period during which the applicable license for such software remains in full force and effect. Should the license terminate for any reason, it is your responsibility to certify in writing to CA that all copies and partial copies of the Documentation have been returned to CA or destroyed.

TO THE EXTENT PERMITTED BY APPLICABLE LAW, CA PROVIDES THIS DOCUMENTATION “AS IS” WITHOUT WARRANTY OF ANY KIND, INCLUDING WITHOUT LIMITATION, ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NONINFRINGEMENT. IN NO EVENT WILL CA BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY LOSS OR DAMAGE, DIRECT OR INDIRECT, FROM THE USE OF THIS DOCUMENTATION, INCLUDING WITHOUT LIMITATION, LOST PROFITS, LOST INVESTMENT, BUSINESS INTERRUPTION, GOODWILL, OR LOST DATA, EVEN IF CA IS EXPRESSLY ADVISED IN ADVANCE OF THE POSSIBILITY OF SUCH LOSS OR DAMAGE.

The use of any software product referenced in the Documentation is governed by the applicable license agreement and such license agreement is not modified in any way by the terms of this notice.

The manufacturer of this Documentation is CA.

Provided with “Restricted Rights.” Use, duplication or disclosure by the United States Government is subject to the restrictions set forth in FAR Sections 12.212, 52.227-14, and 52.227-19(c)(1) - (2) and DFARS Section 252.227-7014(b)(3), as applicable, or their successors.

Copyright © 2006 CA. All rights reserved. All trademarks, trade names, service marks, and logos referenced herein belong to their respective companies.

CA Technologies Product References

This document references the following CA products:

■ eTrust® CA-Top Secret® Security for z/OS (eTrust CA-Top Secret)

■ eTrust® CA-ACF2™ (eTrust CA-ACF2 for DB2)

Contact CA Technologies

Contact CA Support

For your convenience, CA Technologies provides one site where you can access the information that you need for your Home Office, Small Business, and Enterprise CA Technologies products. At http://ca.com/support, you can access the following resources:

■ Online and telephone contact information for technical assistance and customer services

■ Information about user communities and forums

■ Product and documentation downloads

■ CA Support policies and guidelines

■ Other helpful resources appropriate for your product

Providing Feedback About Product Documentation

If you have comments or questions about CA Technologies product documentation, you can send a message to [email protected].

To provide feedback about CA Technologies product documentation, complete our short customer survey which is available on the CA Support website at http://ca.com/docs.

http://www.ca.com/support

mailto:[email protected]

http://ca.com/docs

http://ca.com/docs

Contents 5

Contents

Chapter 1: ACFD2 Messages 7

ACFD2 CA ACF2 for DB2 ............................................................................................................................................... 7

ACFD2010 Compiler Module ............................................................................................................................... 7

ACFD2100 Decompiler Module ......................................................................................................................... 26

ACFD2210 Test Module ..................................................................................................................................... 28

CADB2 CA ACF2 for DB2 Common Code .................................................................................................................... 37

CAD2 Synchronization Utility Messages ..................................................................................................................... 53


Chapter 1: ACFD2 Messages

ACFD2 CA ACF2 for DB2

ACFD2010 Compiler Module

ACFD2010

DB2 COMPILER ENTERED

Reason

The CA ACF2 for DB2 rule compiler is beginning to process.

Action

This message is for information only. No action is required.

Module

ACFD2CML, ACFD2CM4

ACFD2011

SYSID NOT SPECIFIED - COMPILER TERMINATING

Reason

The $SYSID control statement is required in an CA ACF2 for DB2 rule set.

Action

Specify the $SYSID control statement and recompile the rule set.

Module

ACFD2CML, ACFD2CM4


8 Message Reference Guide

ACFD2012

MUTUALLY EXCLUSIVE OPERANDS - $LIDOWNER/$UIDOWNER

Reason

You can specify only one of the $LIDOWNER or $UIDOWNER control statements, not both.

Action

Specify the $LIDOWNER or $UIDOWNER control statement and recompile the rule set.

Module

ACFD2CML, ACFD2CM4

ACFD2014

SERVICE KEYWORD REQUIRED FOR THIS TYPE - COMPILER TERMINATING

Reason

The SERVICE parameter (with appropriate keywords) is required for this type of DB2 resource.

Action

Specify a valid keyword for the SERVICE parameter. See “Writing Rules” for the valid keywords for each type of DB2 resource that requires a SERVICE keyword.

Module

ACFD2CML, ACFD2CM4



ACFD2022

num WARNING - STATEMENT BYPASSED - UNTIL DATE PASSED

Reason

You specified an UNTIL date that is passed. Compilation of the rule is meaningless because rule interpretation would always bypass the rule. The value of num is the sequence number from the input rule with the error. If the input is from the terminal, this field is not present.

Action

Specify a date that is not yet passed and recompile the rule set.

Module

ACFD2CML, ACFD2CM4

ACFD2023

num INVALID COLUMN NAME - col - COMPILER TERMINATING

Reason

You specified a column name that is invalid. Rule compilation cannot continue.

num

The sequence number from the input rule with the error. If the input is from the terminal, this field is not present.

col

The name of the invalid column that you specified.

Action

Specify a valid column name and recompile the rule set.

Module

ACFD2CML, ACFD2CM4



ACFD2024

num WARNING - KEYWORD IGNORED - ACTIVE DATE PAST

Reason

You specified an ACTIVE date that is passed. CA ACF2 for DB2 ignores the ACTIVE keyword and continues compilation. The value of num is the sequence number from the input rule with the warning. If the input is from the terminal, this field is not present.

Action

If the ACTIVE date is correct and is passed, you do not need to do anything. Otherwise, change the ACTIVE keyword to a valid date and recompile the rule set.

Module

ACFD2CM4

ACFD2025

ACTIVE DATE AFTER UNTIL DATE - COMPILER TERMINATING

Reason

The date you specified for ACTIVE comes after the date you specified for UNTIL. Rule compilation is meaningless because rule interpretation always bypasses the rule.

Action

Specify the ACTIVE and UNTIL dates so that the ACTIVE date is before or the same as the UNTIL date. Recompile the rule set.

Module

ACFD2CM4



ACFD2026

MUTUALLY EXCLUSIVE OPERANDS - UNTIL/FOR - COMPILER TERMINATING

Reason

You cannot specify both the UNTIL and FOR keywords in a rule entry. They are synonymous.

Action

Delete the UNTIL or FOR keyword and recompile the rule set.

Module

ACFD2CM4

ACFD2030 INSUFFICIENT STORAGE - COMPILER TERMINATING

Reason

The CA ACF2 for DB2 rule compiler cannot acquire the required storage to process the given rule set.

Action

Allocate more region to your TSO session or batch job.

Module

ACFD2CML, ACFD2CM4



ACFD2031 num BUFFER SIZE EXCEEDED - COMPILER TERMINATING

Reason

The in-storage buffer limits of the CA ACF2 for DB2 rule compiler are exceeded. The CA ACF2 for DB2 rule set cannot be compiled. The value of num is the sequence number from the input rule with the error. If the input is from the terminal, this field is not present.

Action

Use the MAXRULE parameter to increase the buffer size (the default is 250). See the COMPILE subcommand for the RULE setting described in the CA ACF2 Administrator Guide for more information about the MAXRULE parameter.

Module

ACFD2CML, ACFD2CM4

ACFD2032 ERROR IN PARAMETER LIST - COMPILER TERMINATING

Reason

This message indicates an internal error. The compiler received a parameter list that is syntactically invalid or contains an invalid parameter.

Action

Contact CA Technologies Technical Support.

Module

ACFD2CML, ACFD2CM4

ACFD2033 INVALID MAXRULE PARAMETER VALUE - COMPILER TERMINATING

Reason

The value you specified as the maximum number of input rules is an invalid decimal or a zero.

Action

Specify a valid number and recompile the rule set.

Module

ACFD2CML, ACFD2CM4



ACFD2035 INVALID KEYWORD - key

Reason

The keyword you specified for a $ control statement is invalid. Rule compilation cannot continue. The value of key indicates the invalid control keyword.

Action

Specify a valid $ control statement and recompile the rule set.

Module

ACFD2CML, ACFD2CM4

ACFD2036 NO KEY SPECIFIED - THIS IS REQUIRED

Reason

CA ACF2 for DB2 rule sets require the $KEY control statement to indicate the infostorage key under which the rule set is stored.

Action

Specify the $KEY control statement and recompile the rule set. The $KEY is the specific system privilege or utility or the resource name of a database, table, or other DB2 object. See “Writing Rules” for $KEY control statement values.

Module

ACFD2CML, ACFD2CM4



ACFD2037 num ERROR IS % CONTROL STATEMENT - COMPILER TERMINATING

Reason

The % control statement contains an error or is not valid. The value of num is the sequence number from the input rule with the error. If the input is from the terminal, this field is not present.

Action

The control statement can be %CHANGE or %RCHANGE, which specifies a User Identification (UID) string or group of UID strings that can change this rule set. Ensure that the UID strings are valid and %CHANGE or %RCHANGE is specified correctly. Recompile the rule set.

Module

ACFD2CML, ACFD2CM4

ACFD2038 num UID SPECIFICATION ERROR - COMPILER TERMINATING

Reason

The UID string you specified for a %CHANGE control statement is invalid. The value of num is the sequence number from the input rule with the error. If the input is from the terminal, this field is not present.

Action

Determine the UID string specification for your site and respecify it. Recompile the rule set.

Module

ACFD2CML, ACFD2CM4



ACFD2039 num INVALID INPUT CARD - COMPILER TERMINATING

Reason

You specified an invalid input statement to the compiler. The number num is the sequence number from the input rule with the error. If the input is from the terminal, this field is not present.

Action

Recompile the rule set with the correct input statement.

Module

ACFD2CML, ACFD2CM4

ACFD2040 NO TYPE SPECIFIED - THIS IS REQUIRED

Reason

The $TYPE control statement is required in an CA ACF2 for DB2 rule set.

Action

Specify the $TYPE control statement and recompile the rule set.

Module

ACFD2CML, ACFD2CM4



ACFD2042 num INVALID PARAMETER - parm - COMPILER TERMINATING

Reason

You specified an invalid parameter for an CA ACF2 for DB2 rule.

num


parm

The invalid parameter that you specified.

Action

Specify the correct parameter and recompile the rule set.

Module

ACFD2CML, ACFD2CM4

ACFD2043 DUPLICATE RULES SPECIFIED - ino/lno - COMPILER TERMINATING

Reason

While sorting a rule, the compiler found two rules that specified the same environment. These rules conflict and are invalid.

ino

The input number of the rule that is duplicated

lno

The line number of the duplicate specification.

Action

Delete one of the rule entries and recompile the rule set.

Module

ACFD2CML, ACFD2CM4



ACFD2044 RULE RECORD LARGER THAN MAXIMUM SIZE ALLOWED - COMPILER TERMINATING

Reason

The rule object record exceeds the 4K maximum rule size. This CA ACF2 for DB2 rule set cannot be compiled.

Action

Specify the rule in a format that is stored more efficiently. Contact CA Technologies Technical Support for assistance.

Module

ACFD2CML, ACFD2CM4

ACFD2045 SERVICE KEYWORD INVALID FOR THIS RULE TYPE - COMPILER TERMINATING

Reason

The keyword that you specified for the SERVICE parameter is invalid for this type of DB2 resource.

Action

Specify a valid keyword for the SERVICE parameter. See “Writing Rules” for the valid keywords for each type of DB2 resource that requires a SERVICE keyword.

Module

ACFD2CML, ACFD2CM4

ACFD2046 num INVALID PARAMETER VALUE FOR KEYWORD - val - COMPILER TERMINATING

Reason

You specified an invalid parameter for a particular keyword.

nnn


val

The invalid parameter.



This message is issued for one of the following reasons:

■ The type code you specified does not match the type of resource you specified. For example,

– You did not specify a database, application plan, or table name when you specified a type code of DBS, PLN, or TBL.

– You did not specify a system privilege or utility when you specified a type code of SYS.

– You did not specify a buffer pool name (for example, BP0, BP1, and so on) when you specified a type code of BPL.

■ You specified an invalid entry record name (SOURCE).

■ You specified an invalid $LIDOWNER or $UIDOWNER control statement.

■ You specified an invalid shift record name.

■ The $USERDATA control statement or DATA parameter contains over 84 characters.

Action

Recompile the CA ACF2 for DB2 rule with the correct parameters.

Module

ACFD2CML, ACFD2CM4

ACFD2047 num PROTOTYPE BUFFER SIZE EXCEEDED

Reason

The rule mask buffer overflowed. Rule compilation cannot continue. The value of num is the sequence number from the input rule with the error. If the input is from the terminal, this field is not present.

Action

Use the MAXRULE parameter to increase the size of this buffer (default is 250). See the COMPILE subcommand for the RULE setting described in the CA ACF2 Administrator Guide for more information about the MAXRULE parameter.

Module

ACFD2CML, ACFD2CM4



ACFD2048 NO INPUT RECORDS IN DATA SET

Reason

The compiler input data set is empty.

Action

Edit the data set by entering an CA ACF2 for DB2 rule set into the data set. After you save the data set, recompile the rule set.

Module

ACFD2CML, ACFD2CM4

ACFD2049 KEY TOO LONG FOR THIS RULE TYPE - COMPILER TERMINATING

Reason

The $KEY for this rule set is too long for this type of DB2 resource. Rule compilation cannot continue.

Action

Modify the $KEY for this rule set so that it does not exceed the maximum number of characters. See “Writing Rules" CA ACF2 for the proper length for each type of resource.

Module

ACFD2CML, ACFD2CM4



ACFD2051 TOTAL RECORD LENGTH = num BYTES, pct PERCENT UTILIZED

Reason

The compiler built the rule object record, its length is given in decimal notation. The percent used tells you how much of the maximum rule size is used.

num

The decimal length of the record

pct

The percentage of the maximum rule size that is used. The maximum rule size is about 4K.

Action


Module

ACFD2CML, ACFD2CM4

ACFD2052 DICTIONARY SIZE EXCEEDED - COMPILER TERMINATING

Reason

The compiler mask dictionary buffer overflowed. The number of unique eight-character masks specified in the input determines the amount of dictionary space used. If you use more than 255 different masks in one rule set, the buffer overflows.

Action

You cannot increase this dictionary space, simplify the input rule set.

Module

ACFD2CML, ACFD2CM4



ACFD2053 num WARNING - NO OPERANDS SPECIFIED

Reason

You entered a %CHANGE control statement with no UID strings. CA ACF2 for DB2 ignores the control statement. The value of num is the sequence number from the input rule with the error. If the input is from the terminal, this field is not present.

Action

Enter the %CHANGE control statement with a valid UID string or group of UID strings. Recompile the rule set.

Module

ACFD2CML, ACFD2CM4

ACFD2054 num USER/RULE DATA DOES NOT CONFORM TO INSTALLATION STANDARDS - COMPILER TERMINATING

Reason

The site-specific validation exit determined that the string specified for the $USERDATA control statement or DATA parameter is invalid. The value of num is the sequence number from the input rule with the error. If the input is from the terminal, this field is not present.

Action

Obtain the information to specify for the $USERDATA control statement or DATA parameter from your technical support staff. Recompile the rule set.

Module

ACFD2CML, ACFD2CM4



ACFD2055 num DITTO FUNCTION INVALID ON FIRST RULE ENTRY - COMPILER TERMINATING

Reason

You entered the ditto (“) function as an operand value for the first rule entry in this rule set. This is invalid because no rule entry exists before the ditto mark to copy. The value of num is the sequence number from the input rule with the error. If the input is from the terminal, this field is not present.

Action

Specify the first rule entry and recompile the rule set.

Module

ACFD2CML, ACFD2CM4

ACFD2058 COLUMN KEYWORD INVALID FOR THIS RULE TYPE - COMPILER TERMINATING

Reason

You specified the COLUMN parameter for the wrong type of DB2 resource. COLUMN is valid only with tables (or views).

Action

Change the type of DB2 resource to TBL or delete the COLUMN parameter and recompile the rule.

Module

ACFD2CML, ACFD2CM4



ACFD2059 num WARNING - ALL USERS MAY CHANGE THIS RULE SET

Reason

The %CHANGE specification for this rule set lets all users change the rule set. To do this, you specified the %CHANGE control statement as an asterisk (*) or a dash (–) for the UID pattern. The value of num is the sequence number from the input rule with the error. If the input is from the terminal, this field is not present.

Action

This message is a warning only, no action is required. You can make the UID string more specific to prevent fewer users from changing the rule set. Then recompile the rule.

Module

ACFD2CML, ACFD2CM4

ACFD2061 $LIDOWNER/$UIDOWNER KEYWORD INVALID FOR THIS RULE TYPE - COMPILER TERMINATING

Reason

The type of resource that you specified in the $TYPE control statement cannot be owned. Resources that can be owned are databases, application plans, tables (or views), storage groups, and table spaces.

Action

Recompile the CA ACF2 for DB2 rule without the $LIDOWNER or $UIDOWNER control statement.

Module

ACFD2CML, ACFD2CM4



ACFD2062 num WARNING - $NOSORT NOT ALLOWED BY INSTALLATION STANDARDS - $NOSORT IGNORED

Reason

You specified the $NOSORT control statement for the rule set, but the Global System Option (GSO) RULEOPTS record specified NO$NOSORT. CA ACF2 for DB2 ignores the $NOSORT control statement and sorts the rule set normally. The value of num is the sequence number from the input rule with the keyword. If the input is from the terminal, this field is not present.

Action

No action is needed. The CA ACF2 for DB2 compiler continues to sort the rules as described in the CA ACF2 for DB2 Administrator Guide.

Module

ACFD2CML, ACFD2CM4

ACFD2063 num WARNING - $NOSORT SPECIFIED, CHECK RULE ENTRY ORDER CAREFULLY

Reason

You specified the $NOSORT control statement for the rule set and the Global System Option (GSO) RULEOPTS record specified $NOSORT. Therefore, the compiler does not sort the rule set. This can affect rule interpretation. The value of num is the sequence number from the input rule with the keyword. If the input is from the terminal, this field is not present.

Action

Check the rule sequence carefully to determine if the rules control the access as you want. It is possible that a less specific rule is placed before a more specific one, preventing the more specific rule from ever matching.

Module

ACFD2CML, ACFD2CM4



ACFD2063 COLUMN KEYWORD IS VALID ONLY WHEN THE SERVICE PARAMETER INCLUDES THE UPDATE KEYWORD

Reason

You specified the COLUMN parameter but did not specify the UPDATE keyword with the SERVICE parameter.

Action

Change the SERVICE parameter to include the UPDATE keyword or delete the COLUMN parameter, and recompile the rule.

Module

ACFD2CML, ACFD2CM4

ACFD2069 DUPLICATE KEYWORD - key

Reason

You specified the same keyword more than once. The value of key indicates the duplicate keyword.

Action

Delete one of the keywords and recompile the rule set.

Module

ACFD2CML, ACFD2CM4

ACFD2090 LOAD FAILED FOR mod, ACFCMD TERMINATING

Reason

CA ACF2 for DB2 cannot find the load module, or an error occurred while trying to load it. The value of mod is the specified load module.

Action


Module

ACFD2CML, ACFD2CM4



ACFD2100 Decompiler Module

ACFD2101 TOTAL RECORD LENGTH= num BYTES, pct PERCENT UTILIZED

Reason

The CA ACF2 for DB2 decompiler built the rule object record, the length of the record is given in decimal notation. The percent use tells you how much of the maximum rule size is used.

num

The decimal length of the record

pct

The percentage of the maximum rule size this rule object record used. The maximum rule size is about 4K.

Action


Module

ACFD2DCM, ACFD2DC4

ACFD2102 DB2 RULE key FOR SYSID sysid STORED BY lid ON date

Reason

CA ACF2 for DB2 gives this response when you decompile a rule set. It tells you which user last updated this rule set.

key

The $KEY of the CA ACF2 for DB2 rule set processed

sysid

The DB2 subsystem ID to which this rule applies

lid

The logonid of the user who last stored this rule set

date

The date that the rule was stored.



Action


Module

ACFD2DCM, ACFD2DC4

ACFD2103 DB2 RULE key FOR SYSID sysid NEVER STORED

Reason

CA ACF2 for DB2 gives this response when you decompile a rule set from the in-core rule buffer in the ACF command. This rule set was never stored in the CA ACF2 for DB2 infostorage database, even though it was compiled during this ACF command session.

key

The $KEY of the CA ACF2 for DB2 rule set being processed

sysid

The DB2 subsystem ID to which this rule applies.

Action

To store the rule in the Infostorage database, issue the STORE subcommand.

Module

ACFD2DCM, ACFD2DC4


Reason

CA ACF2 for DB2 cannot find the load module, or an error occurred while trying to load it. The value of mod is the specified load module.

Action


Module

ACFD2DCM, ACFD2DC4



ACFD2210 Test Module

ACFD2210 INVALID INPUT - parm

Reason

The input parameter (parm) on the TEST subcommand is invalid.

Action

Enter the correct parameter and retry the TEST subcommand.

Module

ACFD2TST

ACFD2211 INVALID VALUE FOR KEY - key

Reason

You specified an invalid input value (key) for the keyword.

Action

Enter the correct value and retry the TEST subcommand.

Module

ACFD2TST

ACFD2212 INVALID VALUE FOR SERVICE KEYWORD

Reason

You specified an invalid keyword for the SERVICE parameter.

Action

Enter a valid keyword and retry the TEST subcommand.

Module

ACFD2TST



ACFD2214 THE FOLLOWING PARAMETERS ARE IN EFFECT:

Reason

This message signals that the TEST subcommand is interpreting the rule set. The access test environment displays after this message.

Action


Module

ACFD2TST

ACFD2215 USERDATA CONTENTS: text

Reason

The TEST subcommand found that user data exists for this rule set. The contents of the $USERDATA control statement text of the rule set displays.

Action


Module

ACFD2TST

ACFD2216 NO CA ACF2 RULE FOUND IN STORAGE

Reason

The TEST subcommand could not find the rule in your private storage area.

Action

Decompile the CA ACF2 for DB2 rule set or specify the resource by name on the TEST subcommand, and retry the TEST subcommand.

Module

ACFD2TST



ACFD2217 CA ACF2 RULE IN STORAGE INVALID

Reason

When you specify the TEST subcommand with no parameters or only an asterisk, it tests the rule already in your private storage area. However, when you issue the TEST subcommand under the CA ACF2 for DB2 rule setting, CA ACF2 for DB2 does not recognize the rule that is in storage. This can mean you compiled or decompiled an access rule or resource rule, and it is still in storage.

Action

Decompile the CA ACF2 for DB2 rule set that you want to test or specify the resource by name on the TEST subcommand and retry the TEST subcommand.

Module

ACFD2TST

ACFD2218 CA ACF2 RULE NAME INVALID

Reason

The name of the table that you entered with the TEST subcommand is too long. Table names are a maximum of 27 characters.

Action

Reenter the table name with the correct number of characters and retry the TEST subcommand.

Module

ACFD2TST




Reason

CA ACF2 for DB2 cannot find the load module or an error occurred while trying to load it. The value of mod is the specified load module.

Action

Notify your security administrator of this error so he can take appropriate action, including notifying CA Technologies Technical Support.

Module

ACFD2TST

ACFD2298 ERROR IN COMPILED RULE, CALL YOUR LOCA CA ACF2 VENDOR SUPPORT REPRESENTATIVE

Reason

The TEST subcommand detected an error while interpreting the rule.

Action

Notify your security administrator of this error so he can take appropriate action, including notifying CA Technologies Technical Support.

Module

ACFD2TST

ACFD2299 CA-ACF2 NOT IN SYSTEM, RULE CANNOT BE INTERPRETED

Reason

CA ACF2 was not initialized on the system. The required CA ACF2 system facilities are not available for rule testing.

Action

Initialize CA ACF2 and retest the rule.

Module

ACFD2TST



ACFD2301 INTERNAL ERROR; DB2 CVT COULD NOT BE FOUND

Reason

This message indicates an internal error. CA ACF2 for DB2 rejects the request.

Action


Module

ACFD2INT, ACFD2IN4

ACFD2401 NO ACF2/DB2 OPTS RECORD FOUND FOR THIS SUBSYSTEM

Reason

CA ACF2 for DB2 could not find an OPTS record that corresponds to this DB2 subsystem. CA ACF2 for DB2 does not protect the DB2 subsystem.

Action


Module

CADB2ACF

ACFD2402 ACF2/DB2 OPTS RECORD MARKED “NOACTIVE”

Reason

The control parameter in the OPTS record for this DB2 subsystem was set to NOACTIVE. CA ACF2 for DB2 does not protect the DB2 subsystem.

Action


Module

CADB2ACF



ACFD2403 EXIT MODULE mod NOT FOUND

Reason

CA ACF2 for DB2 cannot locate the module (mod) specified in the EXITS record for this DB2 subsystem. CA ACF2 for DB2 continues, but the exit is not invoked.

Action

CA ACF2 for DB2 exits must be available in the system link pack area. Consult the CA ACF2 for DB2 Planning and Installation Guide for information on how to implement an CA ACF2 for DB2 exit.

Module

CADB2ACF

ACFD2404 UNABLE TO CREATE ACF2 RECORD DIRECTORY

Reason

CA ACF2 for DB2 cannot build the directory that it needs to find the appropriate OPTS and EXITS records for this DB2 subsystem. This is most likely to occur if the APPLDEF was not created properly during the CA ACF2 for DB2 installation process. CA ACF2 for DB2 does not protect the DB2 subsystem.

Action

Check the APPLDEF definitions created for the OPTS and EXITS records during CA ACF2 for DB2 installation. If they appear to be correct, contact CA Technologies Technical Support for assistance.

Module

CADB2ACF



ACFD2405 CA ACF2 for z/OS and OS/390 SECURITY SYSTEM IS UNAVAILABLE

Reason

CA ACF2 is not active in this system. CA ACF2 for DB2 needs CA ACF2 to properly secure the DB2 subsystem. CA ACF2 for DB2 does not protect the DB2 subsystem.

Action

Shut down the DB2 subsystem. Start CA ACF2 for DB2 before starting the DB2 subsystem.

Module

CADB2ACF

ACFD2406 INSUFFICIENT STORAGE FOR ACF2/DB2 INITIALIZATION

Reason

The storage needed for CA ACF2 for DB2 to initialize was not available. CA ACF2 for DB2 initialization terminates and CA ACF2 for DB2 does not protect the DB2 subsystem.

Action

Increase the REGION parameter of the address space that issues the message.

Module

CADB2ACF

ACFD2407 INVALID CALL TYPE RECEIVED

Reason

This message indicates an internal error. CA ACF2 for DB2 initialization terminates and CA ACF2 for DB2 does not protect the DB2 subsystem.

Action


Module

CADB2ACF



ACFD2408 UNRESOLVED EXTERNAL REFERENCE - INSTALLATION ERROR

Reason

CA ACF2 for DB2 was unable to find a service routine that should be available. This is an indication that CA ACF2 for DB2 was not installed correctly. CA ACF2 for DB2 initialization terminates and CA ACF2 for DB2 does not protect the DB2 subsystem.

Action

Review the linkage editor output from the CA ACF2 for DB2 installation. If this appears to be correct, contact CA Technologies Technical Support for assistance.

Module

CADB2ACF

ACFD2409 OPTS record is back-level. New MODES are set to ABORT

Reason

You have upgraded your maintenance and have back-leveled your opts record.

Action

Delete and reinsert the DB2 OPTS record or do a CHANGE to the new fields for 6.1 or 7.1, depending upon what level of DB2 you are running. The 6.1 fields in the OPTS record are, FNCMODE, PRCMODE, SCHMODE, TYPMODE. The new 7.1 field is JARMODE

Module

CADB2ACF

ACFD2410 ERROR READING SAFELIST RECORD

Reason

There was an error reading the directory for the safelist records.

Action

Verify an appldef record has been inserted to declare the safelist records.

Module

CADB2ACF



ACFD2201 COLUMN ONLY VALID WITH CLASS DB2TABLE

Reason

A column was specified while inserting or changing a SAFELIST record and the class specified was not DB2TABLE.

Action

Remove column name or leave column name but change the class to DB2TABLE.

Module

ACSV3SAF

ACFD2202 INVALID CLASS

Reason

The class entered is not one of the DB2 resource classes.

Action

Verify the class that was entered.

Modify

ACSV3SAF

ACFD2203 INVALID SERVICE FOR CLASS SPECIFIED

Reason

The service entered is not a valid service for the class entered.

Action

Verify the service and/or the class entered.

Module

ACSV3SAF

CADB2 CA ACF2 for DB2 Common Code


ACFD2204 COLUMN ONLY VALID WITH SERVICE UPDATE OR REFER

Reason

Only enter a column name if DB2TABLE is the specified class and REFER or UPDATE is the specified service.

Action

Verify the service entered.

Module

ACSV3SAF


CADB2001 DB2 SUBSYSTEM sub WILL NOT BE PROTECTED BY EXTERNAL SECURITY

Reason

A DB2 subsystem started that CA ACF2 for DB2 is not protecting. A DB2 OPTS record was not defined for this DB2 subsystem ID or NOACTIVE is specified for the DB2 OPTS record. The value of sub is the subsystem.

Action


Module

CADB2EN3



CADB2002 DB2 SUBSYSTEM sub NOW PROTECTED BY CA-ACF2 1.1

Reason

CA ACF2 for DB2 is protecting the DB2 indicated subsystem. The value of sub is the subsystem ID.

Action


Module

CADB2EN3

CADB2003 CA-ACF2 INITIALIZATION ROUTINE COULD NOT BE LOCATED

Reason

The CA ACF2 for DB2 initialization routine could not load the CADB2ACF module. CA ACF2 for DB2 does not protect this subsystem.

Action


Module

CADB2EN3



CADB2004 CA-DB2 MODULE CADB2ENR COULD NOT BE LOADED

Reason

An error occurred while loading an CA ACF2 for DB2 processing module. The most likely reasons for this are that the module is not in a library accessible to CA ACF2 for DB2, an I/O error occurred during the load process, or there was not enough storage available in ECSA for the module. CA ACF2 for DB2 initialization terminates, and CA ACF2 for DB2 does not protect the system.

Action

Ensure that the module is in a library available to CA ACF2 for DB2, that the module is accessible without an I/O error, and that sufficient storage is available in ECSA for the module. If you cannot determine the reason for the load error, contact CA Technologies Technical Support.

Module

CADB2EN3

CADB2005 CA-ACF2 TERMINATION ROUTINE COULD NOT BE LOCATED

Reason

The CA ACF2 for DB2 termination program could not load the CADB2ACF module. Processing continues.

Action


Module

CADB2EN4



CADB2006 INSUFFICIENT CSA/ECSA FOR CA-DB2 INITIALIZATION

Reason

Not enough storage was available in CSA or ECSA for CA ACF2 for DB2 to initialize. CA ACF2 for DB2 initialization terminates, and CA ACF2 for DB2 does not protect the DB2 subsystem.

Action

Contact your z/OS and OS/390 systems programmer. The space reserved for CSA and ECSA must be increased.

Module

CADB2EN3

CADB2010 UNAVAILABLE TO IDENTIFY CALL TYPE

Reason

The CA DB2 event router cannot identify the type of processing that is occurring. CA ACF2 for DB2 rejects the DB2 request.

Action


Module

CADB2ENR

CADB2012 SYSTEM SERVICE, NOT CREATE OR TERM

Reason

The CA DB2 event router detected an invalid system service call.

Action


Module

CADB2ENR



CADB2013 DBSERV REQUEST CALL DETECTED

Reason

The CA DB2 event router has detected an unsupported call type.

Action


Module

CADB2ENR

CADB2014 STATCALL REQUEST CALL DETECTED

Reason

The CA DB2 event router detected an unsupported call type.

Action


Module

CADB2ENR

CADB2020 NO AVAILABLE THREAD TABLE ENTRIES

Reason

The internal CA DB2 thread table is full. CA ACF2 for DB2 rejects the DB2 request.

Action

Take a dump of the CAIENF address space including the common storage area (CSA), and contact CA Technologies Technical Support for assistance.

Module

CADB2CTH



CADB2030 NO THREAD TOKEN PASSED

Reason

There is an internal error. An SVC dump is taken. CA ACF2 for DB2 rejects the DB2 request.

Action


Module

CADB2SEC

CADB2031 TOKEN NOT FOUND IN THREAD TABLE

Reason

There is an internal error. An SVC dump is taken. CA ACF2 for DB2 rejects the DB2 request.

Action


Module

CADB2SEC

CADB2032 GETMAIN FAILED - USER CANNOT BE SIGNED ON

Reason

The storage needed to issue an internal sign-on call was not available. CA ACF2 for DB2 rejects the DB2 request.

Action

Increase the REGION parameter of the address space that issues this message.

Module

CADB2SEC



CADB2033 UNEXPECTED RETURN CODE FROM #SECUR RESCHECK

Reason

This message indicates an internal error. CA ACF2 for DB2 rejects the DB2 request. Message CADB2035 follows.

Action


Module

CADB2SEC

CADB2034 REQUEST UNDEFINED OR SECURITY IS INACTIVE

Reason

The security system is unavailable or an internal error occurred. CA ACF2 for DB2 rejects the DB2 request. Message CADB2035 follows.

Action

If the security system is unavailable, start it. Otherwise, contact CA Technologies Technical Support for assistance.

Module

CADB2SEC

CADB2035 RC=xx DRC=yy

Reason

This message supplies return codes that give more detailed information about the nature of the error. CA ACF2 for DB2 rejects the DB2 request.

Action


Module

CADB2SEC



CADB2040 NO THREAD TOKEN PASSED

Reason

This message indicates an internal error. An SVC dump is taken. CA ACF2 for DB2 rejects the DB2 request.

Action


Module

CADB2TTH

CADB2041 TOKEN NOT FOUND IN THREAD TABLE

Reason


Action


Module

CADB2TTH

CADB2042 INTERNAL AUTHID MISMATCH

Reason

An internal error has occurred. An SVC dump is taken. CA ACF2 for DB2 rejects the request. Message CADB2043 follows.

Action


Module

CADB2TTH



CADB2043 authid/authid

Reason

This message displays the authorization IDs referred to in message CADB2042.

Action


Module

CADB2TTH

CADB2050 GETMAIN FAILED - USER NOT SIGNED OFF

Reason

The storage needed to issue an internal sign-off call is not available.

Action

You can increase the REGION parameter of the address space that issues this message to avoid future storage problems.

Module

CADB2ATR

CADB2060 GETMAIN FAILED - USER NOT SIGNED ON

Reason

The storage needed to issue an internal sign-on call is not available. CA ACF2 for DB2 rejects the DB2 request.

Action


Module

CADB2LAB




Reason


Action


Module

CADB2LAM


Reason


Action


Module

CADB2LAS

CADB2090 INTERNAL ERROR - INVALID DB2CLASS PARAMETER

Reason


Action


Module

CADB2BLD



CADB2091 INTERNAL ERROR - INVALID DB2SERV

Reason


Action


Module

CADB2BLD

CADB2900 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Reason

This message echoes the EXEC PARM for the current CADB2TRC execution.

Action


Module

CADB2TRC

CADB2901 GLOBAL DIAGNOSTIC TRACE TURNED ON

Reason

Diagnostic tracing for all threads for the DB2 subsystem specified in message CADB2900 is turned on.

Action


Module

CADB2TRC



CADB2902 ALL DIAGNOSTIC TRACING TURNED OFF

Reason

All diagnostic tracing for the DB2 subsystem specified in message CADB2900 is turned off.

Action


Module

CADB2TRC

CADB2903 DIAGNOSTIC TRACE IS ON FOR:

Reason

Diagnostic tracing is turned on for the DB2 subsystem specified in message CADB2900 for the threads specified in the CADB2904 messages that follow this message.

Action


Module

CADB2TRC



CADB2904 type name

Reason

This message follows message CADB2903 to report what threads are traced.

type

The type of threads to trace, such as USER.

name

The name or mask of the thread type to trace, such as DOEJO01.

Action


Module

CADB2TRC

CADB2905 TRACE NOT ACTIVE

Reason

This message follows message CADB2900 and indicates that you tried to turn off a trace that was not active.

Action

Verify that you correctly spelled the values for TYPE and NAME. If the values were correct, the trace was already turned off. Otherwise, correct the spelling and return the CADB2TRC job.

Module

CADB2TRC



CADB2906 INSUFFICIENT CSA/ESCA FOR ADDITIONAL TRACE ENTRIES

Reason

There was not enough storage available in CSA or ECSA to build another trace entry. The trace request was ignored.

Action

Wait for storage to free up and return the CADB2TRC job or run a CADB2TRC job to turn an existing trace request off, then return the request that failed.

Module

CADB2TRC

CADB2911 NO CA-SECURITY SYSTEM ACTIVE

Reason

Neither CA ACF2 nor CA Top Secret were active. The trace request is ignored.

Action

Start your CA security system.

Module

CADB2TRC

CADB2912 CA Top Secret IS UNAVAILABLE

Reason

CA Top Secret is not active. The trace request is ignored.

Action

Wait for CA Top Secret to become active.

Module

CADB2TRC



CADB2913 REQUESTED DB2 SUBSYSTEM IS EITHER NOT STARTED OR IS NOT PROTECTED BY EXTERNAL SECURITY

Reason

The requested trace was for a DB2 subsystem that is not started, has not finished its startup procedure, or is not protected by a CA security system.

Action

You can only trace DB2 subsystems that CA security protects. If a CA security system is protecting the DB2 subsystem, start or wait for the DB2 subsystem to be active and then request the trace again.

Module

CADB2TRC

CADB2921 KEYWORD STARTING WITH value IS TOO LONG

Reason

You specified in invalid keyword. The keyword you specified is longer than the maximum CADB2TRC accepts.

Action

Check for incorrect spelling or other keyword errors. Correct the keyword and rerun CADB2TRC.

Module

CADB2TRC

CADB2922 VALUE FOR value KEYWORD IS NOT VALID

Reason

You specified an invalid value for the keyword.

Action

Correct the value for the keyword and rerun CADB2TRC.

Module

CADB2TRC



CADB2923 keyword IS NOT A VALID KEYWORD

Reason

The keyword you specified is not valid for CADB2TRC.

Action

Correct the keyword and rerun CADB2TRC.

Module

CADB2TRC

CADB2924 keyword KEYWORD WAS SPECIFIED MORE THAN ONCE

Reason

You can only specify a keyword once per CADB2TRC execution.

Action

Delete the duplicate keyword and rerun CADB2TRC.

Module

CADB2TRC

CADB2925 NO VALUE SPECIFIED FOR KEYWORD keyword

Reason

You must specify a value for the keyword.

Action

Add a value for the keyword and rerun CADB2TRC.

Module

CADB2TRC

CAD2 Synchronization Utility Messages


CADB2926 keyword KEYWORD WAS NOT SPECIFIED

Reason

A required keyword is missing.

Action

Add the keyword and rerun CADB2TRC.

Module

CADB2TRC

CADB2927 keyword KEYWORD IS NOT VALID FOR THIS TRACE REQUEST

Reason

You specified an extraneous keyword.

Action

Correct the EXEC PARM and rerun CADB2TRC.

Module

CADB2TRC


CAD2001E CADB2SMP UNKNOWN MSG ERROR CODE=xxxxx

Reason

A module that is part of the CA ACF2 for DB2 synchronization utility attempted to issue a message that the message processor program cannot locate. This can be an internal logic error or an installation error. The code xxxxx indicates the message number that was issued.

Action

Contact CA Technologies Technical Support for assistance. Have available the contents of this message, plus any job logs, report output, and dumps that were produced.



CAD2002I CA-Security/DB2 synchronization utility in progress

Reason

This message is issued during execution of the CADB2SY2 and CADB2SY3 synchronization programs.

Action

This is an informational message only, no action is required.

CAD2006E CA-Security/DB2 component not active

Reason

The CA ACF2 for DB2 synchronization utility requires that CA ACF2 for DB2 be installed and active. The synchronization utility determined that CA ACF2 for DB2 was not active and thus terminates execution.

Action

Ensure that CA ACF2 for DB2 is active before running the synchronization utility. Rerun this job once it is started.

CAD2007E CA-Security (CA ACF2 or CA Top Secret) not active

Reason

Execution of the CA ACF2 for DB2 synchronization utility requires that the host CA security solution (CA ACF2) be active. The synchronization utility determined that CA ACF2 was not active on your system and terminates processing.

Action

Ensure that CA ACF2 was started and is active on your system before executing the CA ACF2 for DB2 synchronization utility.



CAD2008E Unable to OPEN input control file (SYSIN)

Reason

The CA ACF2 for DB2 synchronization utility was unable to open the input control file with a ddname of SYSIN. This input file is required. Synchronization processing terminates.

Action

Review any other messages that were issued with the OPEN of the SYSIN file. Review your execution JCL to ensure that this file was properly specified. Correct your JCL and resubmit.

CAD2009E Unable to OPEN output report file (SYSOUT)

Reason

The CA ACF2 for DB2 synchronization utility was unable to open the output report file with a ddname of SYSOUT. This output file is required. Synchronization processing terminates.

Action

Review any other messages that were issued with the OPEN of the SYSOUT file. Review your execution JCL to ensure that this file was properly specified. Correct your JCL and resubmit.

CAD2018E *Error* input-parameter

Reason

An error occurred while processing input parameters for the CA ACF2 for DB2 synchronization utility. The incorrect parameter is displayed as part of this message. Accompanying messages further identify the source of the processing error.

Action

Review other messages that might be issued with this message to ascertain the exact reason for the error. Make corrections to input parameters as appropriate and retry execution of the failing CA ACF2 for DB2 synchronization utility function.



CAD2019I Keyword *

Reason

This message is issued with message CAD2018E. The asterisk (*) points to the keyword that is in error in message CAD2018E.

Action

This message is informational only. Respond to the CAD2018E message.

CAD2020I Value: *

Reason

This message is issued with message CAD2018E. The asterisk (*) points to the value that is in error in message CAD2018E.

Action

This message is informational only. Respond to the CAD2018E message.

CAD2021E Synchronization control statement parse error RC=cc xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Reason

An error occurred while processing input parameters for the CA ACF2 for DB2 synchronization utility.

The value of cc is the return code. The value of xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx contains text describing the exact nature of the error. This information (return code and accompanying text) is for internal use only and might be helpful to you in problem diagnosis.

Note: The return codes, described below, do not correspond to the return codes that the CADB2SYx utility programs issued, and that are documented elsewhere.

Return Code Description

04 KEYWORD VALUE ERROR A value for a supplied keyword was invalid.

08 INVALID KEYWORD An invalid keyword was encountered.

12 VALUE COUNT ERROR An illegal number of values were specified for a keyword.

20 TYPE VALIDATION ERROR Data supplied as a keyword value was inappropriate for the keyword.



Return Code Description

24 LENGTH VALIDATION ERROR Keyword value data was of an illegal length.

28 UNPAIRED PAREN OR QUOTE A single parenthesis or quotation mark was encountered.

32 DUPLICATE KEYWORD FOUND A keyword was found twice in the input data.

xx UNKNOWN RETURN CODE An error occurred while parsing this input data string. Contact CA Technologies Technical Support staff for assistance.

Action

Review other messages that might be issued with this message to ascertain the exact reason for the error. Make corrections to input parameters as appropriate and retry execution of the failing CA ACF2 for DB2 synchronization utility function.

CAD2022I Synchronization control statement scan successful

Reason

The CA ACF2 for DB2 synchronization utility has successfully scanned all input control statements.

Action

This message is informational only, no action is required.

CAD2023I Output DB2 SQL generation successful

Reason

The CADB2SY2 program of the CA ACF2 for DB2 synchronization utility has successfully processed all input statements and has successfully generated output SQL statements. These are written to the GRANTS and REVOKES files and are to be used as input to the CADB2SY3 program.

Action




CAD2024I Synchronization in progress for CA Security system CA-xxxx

Reason

This is an informational message that indicates the CA security solution (xxxx) that is installed and active on your system, in this case, the value is CA ACF2.

Action


CAD2025I Synchronization in progress for DB2 subsystem xxxx

Reason

This is an informational message that indicates the name of the DB2 subsystem (xxxx) for which synchronization is being performed.

Action


CAD2026E Unrecoverable error in report writer

Reason

An unrecoverable error occurred during CA ACF2 for DB2 synchronization utility processing while writing report data. Synchronization processing is terminated.

Action


CAD2027E Message generation failed

Reason

An unrecoverable error occurred during CA ACF2 for DB2 synchronization utility processing while attempting to format a message. This is due to an internal error or an installation error. Synchronization processing is terminated.

Action




CAD2028E Conflicting command keywords detected in input control statement

Reason

Synchronization control statements for the CA ACF2 for DB2 synchronization utility contain conflicting commands. Synchronization processing is terminated.

Action

Remove the conflicting keyword from the input control statements and rerun the job.

CAD2029E Duplicate DB2 SYSTEM keyword

Reason

The SYSTEM keyword was found more than once in the input control statements for the CA ACF2 for DB2 synchronization utility. Synchronization processing is terminated.

Action

Remove the duplicate SYSTEM keyword from the input control statements and rerun the job.

CAD2030E Missing DB2 SYSTEM keyword

Reason

The SYSTEM keyword was not found in the input control statements for the CA ACF2 for DB2 synchronization utility. This keyword is required. Synchronization processing is terminated.

Action

Update the input control statements for the CADB2SY2 execution and add the appropriate SYSTEM keyword and value. Rerun the job after making appropriate changes.



CAD2031E Errors detected in input control statement scan, execution terminated

Reason

The CA ACF2 for DB2 synchronization utility encountered one or more errors in the input control statements. Synchronization processing is terminated.

Action

Review any other pertinent messages associated with the errors and make appropriate corrections to the input control statements. Rerun the job after making appropriate changes.

CAD2032E SYNC control statement required before INCLUDE/EXCLUDE/VIEW/GO

Reason

The CA ACF2 for DB2 synchronization utility encountered an INCLUDE, EXCLUDE, VIEW, or GO control statement before a SYNC control statement. The SYNC control statement must be the first statement of any batch. Synchronization processing is terminated.

Action

Correct the input control statements and rerun the job.

CAD2033E Invalid keyword for current CA Security system CA-xxxx

Reason

The CA ACF2 for DB2 synchronization utility encountered a keyword or value that CA ACF2 for DB2 does not support. Synchronization processing is terminated. The CA xxxx value names your CA security product, in this case the value is CA ACF2.

Action

Review the product documentation for input control statements CA ACF2 for DB2 supports. Make appropriate corrections to your input control statements and rerun the synchronization.



CAD2034E Missing action keyword: SYNC/INCLUDE/EXCLUDE/VIEW/GO

Reason

The CA ACF2 for DB2 synchronization utility encountered an input control statement that did not have a required action keyword. Synchronization processing is terminated.

Action

Review the product documentation for input control statement syntax, make appropriate corrections to your input control statements, and rerun the synchronization.

CAD2035E Unable to obtain required storage for xxxxxxxxxxxxxxxxxxxxxxxx

Reason

The CA ACF2 for DB2 synchronization utility was unable to obtain storage to perform synchronization functions. The xxxxxxxxxxxxxxxxxxxxx indicates the internal processing that was unable to obtain the storage. The amounts of storage required vary, depending on the number of user definitions, resource controls, and DB2 resource definitions that exist. Synchronization processing is terminated.

Action

Update your execution JCL to specify a larger region size and rerun the job. If a larger region size is not possible, you might alternatively consider limiting the scope of the synchronization, perhaps by running multiple jobs instead of one larger job.

CAD2036E Error validating DB2 subsystem ssss xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Reason

The CA ACF2 for DB2 synchronization utility was unable to verify the existence and attributes of the DB2 subsystem ssss. The named DB2 subsystem must not only be defined to the system but must also be active at the time that the synchronization job is run.

The xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx provides additional information relating to the DB2 validation failure. Reasons include the following:

DB2 SUBSYSTEM NOT FOUND

The named subsystem ID was not found. Check your input control statements and cross-check these against your system definitions.

DB2 SUBSYSTEM NOT ACTIVE



An entry for the named DB2 subsystem was found in the subsystem name table, but the CA ACF2 for DB2 synchronization utility determined that the subsystem was inactive. The named DB2 subsystem must be active to run the synchronization utility.

DB2 SUBSYSTEM VALIDATION ERROR

An internal error occurred while validating the named DB2 subsystem ID. This might be due to an internal or an environmental error. Gather job log information, job output, and any dumps and contact CA Technologies Technical Support for assistance. Be prepared to provide a system dump if requested.

APF AUTHORIZATION REQUIRED

The CA ACF2 for DB2 synchronization utility must run from an APF-authorized library. An authorization check failed. Ensure that the synchronization utility is run from an APF-authorized library.

UNKNOWN ERROR

An internal error occurred while validating the DB2 subsystem name. This might be due to an internal or an environmental error. Gather job log information, job output, and any dumps, and contact CA Technical Support for assistance. Be prepared to provide a system dump if requested.

Action

See the reason code description above.

CAD2037E Error RC=cc attempting to extract userid data from CA-xxxx

Reason

The CA ACF2 for DB2 synchronization utility encountered an error while attempting to extract user ID information from CA ACF2. The return code (cc) indicates the CA ACF2 return code. The CA-xxxx value names your CA security product, in this case the value is CA ACF2.

Action

Examine your input control statements for the synchronization job run. If specific user IDs are specified in INCLUDE or EXCLUDE statements, ensure that they are defined to CA ACF2. If a masked user ID specification is specified, ensure that at least one definition in that range exists. If these definitions check out, then contact CA Technologies Technical Support for assistance. Be prepared to have all job output, including any dumps, available for documentation.



CAD2038E xxxxxxxx DB2 SQL error, R15=yyyy, SQLCODE=zzzzzzzz

Reason

An error occurred while DB2 was processing generated SQL statements. Here are what the variables mean:

xxxxxxxx

Indicates the command being executed

yyyy

Indicates the value from R15

zzzzzzzz

Indicates the SQ Code.

Processing is terminated.

Action

Review the return code and SQ Code for obvious errors. Review any other pertinent messages issued with the error. Contact CA Technologies Technical Support as appropriate for assistance. Be prepared to have all job output, including any dumps, available for documentation.

CAD2039E xxxxxxxx Error rc=yyyy from DSNTIAR

Reason

An unexpected error was received from the DB2 message interface module DSNTIAR.

Action

Review the return code for obvious errors. Review any other pertinent messages issued with the error. Contact CA Technologies Technical Support as appropriate for assistance. Be prepared to have all job output, including any dumps, available for documentation.



CAD2040E xxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Reason

An error in DB2 processing occurred. Message contains a DB2 message prefix with text obtained from the DSNTIAR interface. For example, if an SQL error occurs during the execution of the synchronization utility and the utility does not trap it, the SQL error information is displayed in one or more CAD2040E messages.

Action

Review the message description for obvious errors. Review any other pertinent messages issued with the error. Contact CA Technologies Technical Support as appropriate for assistance. Be prepared to have all job output, including any dumps, available for documentation.

CAD2041E xxxxxxxxxx DB2 CAF error, R15=yyyy, R0=zzzzzzzz

Reason

An error occurred while DB2 was processing generated SQL statements.

xxxxxxxxxx

Indicates the command being executed

yyyy

Indicates the value from R15

zzzzzzzz

Indicates the R0 value.

Processing is terminated. In most cases, message CAD2040E follows this message with a detailed reason for the error.

Action

Review the R15 and R0 values for obvious errors. Review any other pertinent messages issued with the error. CAF reason codes beginning with 00F3 and 00C10 are described in the IBM Database 2 Messages and Codes guide. Contact CA Technologies Technical Support as appropriate for assistance. Be prepared to have all job output, including any dumps, available for documentation.



CAD2043E #SECUR xxxxxxxx failed, user=uuuuuuuu, RC=yyyy, DRC=zzzz

Reason

An internal CA Standard Security Facility (CAISSF, also known as #SECUR) request has failed. The xxxxxxxx indicate the type of request being performed. The return codes, yyyy and zzzz, provide additional information pertaining to the failure.

Action

Review any other pertinent messages issued with the error. Contact CA Technologies Technical Support for assistance. Be prepared to have all job output, including any dumps, available for documentation.

CAD2044I Connect in progress for DB2 subsystem xxxx

Reason

The CA ACF2 for DB2 synchronization utility is beginning the connect process to the DB2 subsystem named xxxx.

Action


CAD2045E CA ACF2 Environmental Processing Error, processing terminated

Reason

An error occurred during incremental processing while attempting to validate information pertaining to the CA ACF2 environment.

Action

Ensure that CA ACF2 is up and active on your system. Review any other pertinent messages that might appear on the job log. Contact CA for assistance as appropriate.

CAD2046E CA ACF2 Address Space Logonid is not unscoped AUDIT or SECURITY

Reason

Use of the CA ACF2 for DB2 synchronization utility requires that the address space logonid must have the AUDIT or SECURITY privilege, and must be unscoped. The address space logonid for this execution did not match these criteria.

Action

Select a proper logonid for use with this utility and rerun the job.



CAD2047E CA ACF2 IF field xxxxxxxxxx is undefined, processing terminated

Reason

The IF keyword on an INCLUDE or an EXCLUDE statement specified the name xxxxxxxxxx. The named field is not defined to the CA ACF2 security system.

Action

Correct the input parameters to specify a correct CA ACF2 logonid field name. Check with your site security management as appropriate to verify the external field names.

CAD2048E CA ACF2 IF field xxxxxxxxxxxx is not a bit field, processing terminated

Reason

The IF keyword specifies the name xxxxxxxxxxxx on an INCLUDE or an EXCLUDE statement. The named field was found to be defined, but it was not defined as a bit field. The synchronization utility cannot use this field for testing.

Action

Correct the input parameters to specify a correct CA ACF2 logonid field name that is defined as a bit field. Check with your site security management as appropriate to verify the field name and attributes.

CAD2049E Required SYNC statement not specified, processing terminated

Reason

The SYNC statement must be the first input statement for the CADB2SY2 utility program. No such statements were found.

Action

Correct the input parameters to specify the SYNC statement as the first statement. See the CA ACF2 for DB2 Administrator Guide for further information about parameter syntax.



CAD2050E Required INCLUDE/EXCLUDE data is missing, processing terminated

Reason

An INCLUDE or EXCLUDE statement was encountered that did not have any keyword values specified.

Action

Correct the input parameters.

CAD2051I Userid xxxxxxxx contains invalid DB2 characters, excluding userid from processing

Reason

The named user ID xxxxxxxx was found to contain characters that did not conform with DB2 naming standards for names. The user ID is excluded from further processing.

If you specified any INCLUDE or EXCLUDE statement with the UID, IF, or USER keyword that specified a masked name, the utility builds the list using logonids from the Logonid database. The users in this list are matched with the criteria specified in the INCLUDE and EXCLUDE statements later (at the beginning of each batch). You can, therefore, receive this message for users that were not included for this run of the utility.

Action

This message is issued for informational purposes only. No action is required.

CAD2052E Unable to OPEN output data file (GRANTS)

Reason

The CADB2SY2 utility program was unable to open the output GRANTS file.

Action

Review any other pertinent messages that might appear on the job log. Ensure that the GRANTS DD statement is properly defined. Make appropriate corrections and rerun the job.



CAD2053E Unable to OPEN output data file (REVOKES)

Reason

The CADB2SY2 utility program was unable to open the output REVOKES file.

Action

Review any other pertinent messages that might appear on the job log. Ensure that the REVOKES DD statement is properly defined. Make appropriate corrections and rerun the job.

CAD2054I Unable to use CA-ACF2 logonid xxxxxxxx, review preceding message for failure reason

Reason

The CA ACF2 for DB2 synchronization utility (CADB2SY2) attempted to sign on the CA ACF2 for DB2 logonid xxxxxxxx for validation processing. The attempt failed because the logonid was invalid. Invalid logonids include those that are canceled, suspended, expired, or are not yet active. No additional synchronization processing is performed for this logonid.

Action

See the message preceding this message for the reason that the signon failed. Contact your site security administrator to help determine and correct the problem with the logonid. When the problem is corrected, rerun the synchronization for that logonid.

CAD2055I Connect complete for DB2 subsystem xxxx (vrrr)

Reason

The CA ACF2 for DB2 synchronization utility has finished the connect process to the DB2 subsystem named xxxx. The variable vrrr indicates the release of DB2 this subsystem is running.

Action




CAD2056I Connection to DB2 ended normally

Reason

The CA ACF2 for DB2 synchronization utility has successfully terminated its DB2 thread and disconnected from DB2.

Action


CAD2057I xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Reason

This message might be issued with message CAD2043E or CAD2054I and is used to return messages (if any) issued by the host security system with the error documented by the CAD2043E or CAD2054I message.

Action

This message is issued for informational purposes only. Review the contents along with other messages and consult your site security management as appropriate about the problem (if any).

CAD2059E SELECT(nn) input parameter is required.

Reason

The input control statement SELECT(nn) is required, but was not supplied or was in error for this execution of the incremental function of the synchronization utility. Processing is terminated.

Action

Correct the input control statements and resubmit this job.



CAD2060E Unable to OPEN input grant to public file (PUBLIC)

Reason

The CA ACF2 for DB2 synchronization utility was unable to open the GRANT TO PUBLIC file with a ddname of PUBLIC. This input file is required. Synchronization processing terminates.

Action

Review any other messages that were issued with the OPEN of the PUBLIC file. Review your execution JCL to ensure that this file was properly specified. Correct your JCL and resubmit.

CAD2061E Invalid name for xxx resource

Reason

The value xxx identifies a resource name that is not a valid DB2 resource name. Too many characters were specified in the first qualifier of the name.

Action

Correct the xxx resource name and rerun the job.

CAD2064E Duplicate DB2 VIEW Keyword

Reason

The VIEW keyword was found more than once in the input control statements for the CA ACF2 for DB2 synchronization utility. Synchronization processing is terminated.

Action

Remove the duplicate VIEW keyword from the input control statements and rerun the job.

CAD2065E xxx resource is invalid for this release of DB2

Reason

A resource keyword was found in a control statement for a resource that does not exist in the DB2 release of the DB2 subsystem being synchronized. Synchronization processing is terminated.

Action

Remove the invalid resource keyword from the control statement and rerun the job.



CAD2101I xxxxxxxxxxxxxxxxxx Task ended normally

Reason

The CA ACF2 for DB2 synchronization utility has successfully completed processing an internal task or function named xxxxxxxxxxxxxxxxxxxx. Processing continues to the next task.

Action


CAD2102E xxxxxxxxxxxxxxxxxx Task ended abnormally, compcode=yyyyyyyy

Reason

The CA ACF2 for DB2 synchronization utility has unsuccessfully completed processing an internal task or function. Processing errors were encountered and processing might terminate at this step.

xxxxxxxxxxxxxxxxxxxx

The internal task or function

yyyyyyyy

The completion code from the internal task or function.

Action

Review any other pertinent message issued with this error. Correct input JCL, control statements, and so on, as appropriate and rerun the job.

CAD2103E xxxxxxxxxxxxxxxxxx Task recovery retry count exhausted

Reason

The module name in the message encountered an unrecoverable error. The subtask manager module attempted to restart the failed task, but halted after a of unsuccessful attempts.

Action

Contact CA Technologies Technical Support personnel.



CAD2104E xxxxxxxxxxxxxxxxxx Task recovery in progress

Reason

The module name in the message encountered an error that the subtask manager attempted to recover from by restarting the task.

Action

None required unless this message persists or recurs often. If message CAD2103E is issued, contact CA Technologies Technical Support.

CAD2105E xxxxxxxxxxxxxxxxxx Attach failed, rc=rrrrrrrr

Reason

An error was encountered in attempting to attach (initialize) the subtask named xxxxxxxxxxxxxxxxxxxx. Return code rrrrrrrr might be helpful in diagnosing the problem.

Action


CAD2106I xxxxxxxxxxxxxxxxxx now available

Reason

The function or facility named by xxxxxxxxxxxxxxxxxxxxxxxx is now available for use by the CA ACF2 for DB2 synchronization utility.

Action


CAD2107E Extr error-xxxxxxxxxxxxxxxxxxxxxxxxxxx

Reason

An error was encountered in initializing a subtask. The EXTR error code xxxxxxxxxxxxxxxxxxxx might be helpful in diagnosing the problem.

Action




CAD2111I Number of new xxx resources in the DB2 catalog extracted for incremental synchronization = nnnnnnnnnnnnnnnnnn

Reason

This message indicates the number of resources that were created in the DB2 catalog in the time period you specified in the SELECT parameter. The type of resource is xxx. The number of resources for the xxx resource type is nnnnnnnnnnnnnnnnnn. See “Using the Catalog Synchronization Utility” for a list of resource type values.

Action


CAD2200E Unable to load xxxxxxxx module, terminating processing

Reason

The CA ACF2 for DB2 synchronization utility was unable to load the module named xxxxxxxx. Processing cannot continue without this module, so processing is terminated.

Action

This might be due to an internal or installation error. Ensure the library updated during installation is available in the STEPLIB or JOBLIB concatenation. Review the jobs run during installation for any link-edit failures.

CAD2201E CA-Security is not active on this system, terminating processing

Reason

The CA ACF2 for DB2 synchronization utility was unable to determine if CA ACF2 was active on this system. Processing is terminated.

Action

Ensure that CA ACF2 was started and is active before running the CA ACF2 for DB2 synchronization utility.

CAD2202I CADB2SY0 CA-DB2 Incremental preprocessor is active

Reason

The CADB2SY0 program of the CA ACF2 for DB2 synchronization utility is active.

Action




CAD2203E Error parsing incremental parameters, terminating processing

Reason

Errors were encountered in the input control statements for the CADB2SY0 or CADB2SY1 program. Processing is terminated.

Action

Review other messages issued with the error and follow the action for each message.

CAD2204E Error reading input incremental RECMANxx record, terminating processing

Reason

An error occurred while reading a record from one of the input RECMANxx input files. Processing is terminated.

Action


CAD2205E Error in incremental extract processing for input RECMANxx file, terminating processing

Reason

An error occurred while the incremental function (CADB2SY0 and CADB2SY1 jobs) of the CA ACF2 for DB2 synchronization utility was performing extract processing. Processing is terminated.

Action

Review other messages issued with the error and follow the action for each message. Contact CA Technologies Technical Support for assistance. Have available the contents of this message, plus any job logs, report output, and dumps that were produced.



CAD2206E Error rewriting incremental extracted record, terminating processing

Reason

An error occurred while the incremental function (CADB2SY0 and CADB2SY1 jobs) of the CA ACF2 for DB2 synchronization utility was writing an extracted record to the RECOUT file. Processing is terminated.

Action

Review other messages issued with the error and follow the action for each message. If these check out, contact CA Technologies Technical Support for assistance. Have available the contents of this message, plus any job logs, report output, and dumps that were produced.

CAD2207E Error during incremental initialization, terminating processing

Reason

An error occurred while the incremental function (CADB2SY0 and CADB2SY1 components) of the CA ACF2 for DB2 synchronization utility was performing initialization processing. Processing is terminated.

Action


CAD2208E Error in message format processing, terminating processing

Reason

An error occurred while formatting an error message.

Action




CAD2209E CADB2SY1 Error adding table entry for userid definition/change/delete

Reason

An internal error occurred.

Action


CAD2210E CADB2SY1 Error generating CADB2SY2 input control statements, terminating processing

Reason

An error occurred while generating CADB2SY2 input control statements.

Action


CAD2211I Total input incremental record count = xxxxxxxxxxxxxxxxxx

Reason

The value xxxxxxxxxxxxxxxxxx is the number of input records read from the input files by the CADB2SY0 or CADB2SY1 synchronization utility incremental preprocessor program.

Action




CAD2212I Total extract incremental record count = xxxxxxxxxxxxxxxxxx

Reason

The value xxxxxxxxxxxxxxxxxx is the number of input records selected from the input files by the CADB2SY0 or CADB2SY1 synchronization utility incremental preprocessor program. This number can be different from the actual number of output records the CADB2SY1 program writes to the GRANTS file. Either of the following reasons can account for this difference:

1. Duplicate checking for INCLUDE statements is performed so that duplicate INCLUDE statements are not generated

2. SMF records pertaining to changed DB2 resource rule records are ignored if they do not fit the DB2 subsystem ID that the SYSTEM keyword specified.

Action


CAD2213E Error parsing incremental parameters, terminating processing

Reason

Errors were encountered in the input control statements for the CADB2SY0 or CADB2SY1 program. Processing is terminated.

Action


CAD2214I CA-DB2 Security CADB2SY1 Preprocessor is active

Reason

The CADB2SY1 program of the CA ACF2 for DB2 synchronization utility is active.

Action




CAD2220E ACFD2S0A Unable to access CA ACF2 ACCVT, terminating processing

Reason

The CA ACF2 for DB2 synchronization utility incremental processing programs were unable to access a critical CA ACF2 control block to extract CA ACF2 specific processing information. This normally indicates that CA ACF2 was not started. Processing is terminated.

Action

Ensure that CA ACF2 is started before running the synchronization.

CAD2221E ACFD2S0A Unable to access CA ACF2 ACUCB, terminating processing

Reason

The CA ACF2 for DB2 synchronization utility incremental processing programs were unable to access a critical CA ACF2 control block to extract CA ACF2 specific processing information. This normally results from incorrect CA ACF2 options. Processing is terminated.

Action

If you are running the synchronization utility as a started task, ensure that the STC option in the GSO OPTS record was activated. Make corrections and rerun the job.

CAD2222E ACFD2S0A Address space logonid does not have SECURITY privilege, terminating processing.

Reason

The CA ACF2 for DB2 synchronization utility incremental processing programs requires that the address space logonid must have the SECURITY or AUDIT privilege and must be unscoped. The address space logonid for this execution does not match these criteria. Processing is terminated.

Action

Make appropriate changes to the address space logonid and rerun the job.



CAD2223E ACFD2S0A Address space is not unscoped security officer, terminating processing

Reason

The CA ACF2 for DB2 synchronization utility incremental processing programs requires that the address space logonid must have the SECURITY or AUDIT privilege and must be unscoped. The address space logonid for this execution does not match these criteria. Processing is terminated.

Action

Make appropriate changes to the address space logonid and rerun the job.

CAD2224E ACFD2S0A Error opening SYSOUT file, terminating processing

Reason

The CA ACF2 for DB2 synchronization utility could not open the SYSOUT file. This is required. Processing is terminated.

Action

Review other messages that might be pertinent. Correct any obvious errors. Ensure that you specified the SYSOUT ddname properly.

CAD2225E ACFD2S0A Error opening RECOUT file, terminating processing

Reason

The CA ACF2 for DB2 synchronization utility could not open the RECOUT file. This is required. Processing is terminated.

Action

Review other messages that might be pertinent. Correct any obvious errors. Ensure that you specified the RECOUT ddname properly.



CAD2226E ACFD2S0A Error opening xxxxxxxx file, terminating processing

Reason

The CA ACF2 for DB2 synchronization utility could not open the xxxxxxxx file. This is required. Processing is terminated.

Action

Review other messages that might be pertinent. Correct any obvious errors. Ensure that you properly specify the xxxxxxxx ddname.

CAD2227E ACFD2S0A Error opening SYNCHOUT file, terminating processing

Reason

The CA ACF2 for DB2 synchronization utility could not open the SYNCHOUT file. This is required. Processing is terminated.

Action

Review other messages that might be pertinent. Correct any obvious errors. Ensure that you properly specify the SYNCHOUT ddname.

CAD2228I ACFD2S0A Using CA ACF2 SMF number xxx for this execution

Reason

Through the CA ACF2 Field Definition Record (ACFFDR), CA ACF2 users specify the SMF record numbers that are used to record CA ACF2 for DB2 activity. This message is issued to report on the SMF number or numbers the CA ACF2 for DB2 synchronization utility uses. The incremental function uses these numbers to select input records for future processing.

Action




CAD2229I ACFD2S0A Processing input RECMAN DDNAME=xxxxxxxx for this execution

Reason

Any file with a ddname beginning with RECMAN is reserved for possible input file use by the CA ACF2 for DB2 synchronization utility incremental function. This message simply reports on each such input file selected for input use.

Action


CAD2230I ACFD2S0E No synchronization will be done for deleted userid uuuuuuuu

Reason

During processing of input data, the CA ACF2 for DB2 synchronization utility incremental function identified a user ID definition that was deleted. No INCLUDE control statement is generated for this user ID definition. Therefore, CADB2SY2 does not generate any mass REVOKE statements for this user ID and no synchronization is done. To remove deleted user IDs from DB2 catalogs, run a synchronization using the REVOKEALL option and include all resources this user has authorization to access.

Action

This message is informational only. Ensure that a synchronization specifying REVOKEALL is run at some future time to perform deleted user ID cleanup.

CAD2231I ACFD2S0E Execute a synchronization with REVOKEALL to remove DB2 catalog privileges for user uuuuuuuu

Reason

During processing of input data, the CA ACF2 for DB2 synchronization utility incremental function identified a user ID definition that was deleted. No INCLUDE control statement is generated for this user ID definition. Therefore, CADB2SY2 does not generate any mass REVOKE statements for this user ID and no synchronization is done. To remove deleted user IDs from DB2 catalogs, run a synchronization using the REVOKEALL option and include all resources this user has authorization to access.

Action

This message is informational only. Ensure that a synchronization specifying REVOKEALL is run at some future time to perform deleted user ID cleanup.



CAD2232I CADB2SY1 Generating CADB2SY2 input statements for DB2 release rrr

Reason

CADB2SY1 processing is now generating input control statements for the CADB2SY2 program. The DB2 release rrr is reported because the DB2 release affects construction of the CADB2SY2 control statements.

Action

This message is informational only.

CAD2233I CADB2SY1 SYSTEM(ssss) input parameter is required

Reason

The input control statement SYSTEM is required, but was not supplied for this execution of the CA ACF2 for DB2 synchronization utility incremental function. Processing is terminated.

Action

Correct input control statements and resubmit this job.

CAD2237E Value specified for SELECT not within bounds

Reason

Data supplied by the SELECT keyword for the CADB2SY0 and CADB2SY1 utility programs was found to be invalid. It was not in the required range of values, or the data contained invalid characters.

Action

Correct the input statement and rerun the job.



CAD2238E Error processing DB2 resource xxx, RC=cccc

Reason

An error occurred in a subroutine in module CADB2SED. A message describing the subroutine should have preceded this message. The xxx indicates the type of resource CADB2SED was processing at the time of the error The cccc indicates the return code from the subroutine in CADB2SED.

Action

Review any other pertinent messages issued before this message. If you cannot resolve the problem based on the related messages, contact CA Technologies Technical Support for assistance. Be prepared to have all job output, including any dumps, available for documentation.

CAD2239I Duplicate SMF data for USERID xxxxxxxx has been bypassed

Reason

CADB2SY0 or CADB2SY1 found multiple SMF records for the xxxxxxxx user ID. The user was already marked for synchronization.

Action


CAD2240I Duplicate SMF data has been bypassed for DB2 resource xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Reason

CADB2SY0 or CADB2SY1 found multiple SMF records for the xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx resource. The resource was already marked for synchronization.

Action




CAD2241E ACFxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Reason

An error occurred while building resident directories. The internal error message CA ACF2 for DB2 returned is displayed here.

Action

See the CA ACF2 Messages Guide for information about the CA ACF2 for DB2 message.

CAD2242I Requested ttt rrrrrrrrrrrrrrrrrrrrrrrrrrr not fffffff

Reason

This message indicates that a requested resource could not be found or matched. This might occur when you use the same GRANT TO PUBLIC file for all synchronization runs and the selection criteria for the runs vary.

ttt

A DB2 resource type: BPL, COL, DBS, PKG, PLN, STG, SYS, TBL, or TBS

rrrrrrrrrrrrrrrrrrrrrrrrrrr

The name of or mask for a DB2 resource

fffffff

Displays whether the resource was not found or not matched.

Action

None required. Check the GRANT TO PUBLIC statement for any obvious errors. This message is informational only.

CAD2243E Missing action keyword for resource type

Reason

The CA ACF2 for DB2 synchronization utility encountered a GRANT TO PUBLIC statement that did not have a required action keyword for the DB2 resource type. Synchronization processing is terminated.

Action

Review the product documentation for GRANT TO PUBLIC statement syntax and make any appropriate corrections. Rerun the synchronization.



CAD2244E xxxxxxxxxxxxxxxx is not a valid system privilege or mask

Reason

The specified system privilege is not a valid IBM DB2 or CA ACF2 for DB2 system privilege name. Synchronization processing is terminated.

Action

See the CA ACF2 for DB2 documentation for a list of valid system privileges and make appropriate corrections to your GRANT TO PUBLIC statements. Rerun the synchronization.

CAD2245E PRIV keyword is invalid for SYS resource type

Reason

The PRIV keyword was used to specify a privilege name for system privileges. The synchronization utility does not support this. You must use the SYS keyword and specify the privilege as a resource name. Synchronization processing is terminated.

Action

See the CA ACF2 for DB2 documentation for a list of valid system privileges and for the syntax of the SYS keyword in the GRANT TO PUBLIC statement. Make appropriate corrections to your GRANT TO PUBLIC statements and rerun the synchronization.

CAD2246E PRIV keyword missing

Reason

The PRIV keyword is required for the resource type specified on the GRANT TO PUBLIC statement, but none was provided. Synchronization processing is terminated.

Action

See the CA ACF2 for DB2 documentation for the syntax of the GRANT TO PUBLIC statement and make appropriate corrections to your statements. Rerun the synchronization.



CAD2247E xxxxxxxxxxxxxxxx is not a valid privilege

Reason

The privilege specified in the PRIV keyword is not valid for the resource type specified on the GRANT TO PUBLIC statement. Synchronization processing is terminated.

Action

See the CA ACF2 for DB2 documentation for a list of valid privileges for the specified resource type. Make appropriate corrections to your GRANT TO PUBLIC statements and rerun the synchronization.

CAD2248W No GRANT or REVOKE statements were generated

Reason

No GRANT or REVOKE statements were generated for this batch. This can occur when any of these conditions is in effect:

■ Selected resources and users are already in sync

■ Selected users have no privileges in CA ACF2 for DB2 or the DB2 catalog

■ Selected resources do not exist in CA ACF2 for DB2 or the DB2 catalog.

If no statements are generated for any batch in the run, CADB2SY2 generates a return code of 4.

Action

None required. If you believe the synchronization should have generated GRANT and REVOKE statements, review the input control statements listed in the CADB2SSV report. If you specified OPTIONS(TRACE) in the SYNC control statement, review the CADB2SED and CADB2SUA reports for possible discrepancies.

CAD2250E CADB2SY1 Error extracting names of new resources from DB2 catalog

Reason

An error occurred while extracting names of new resources from the DB2 catalog.

Action




CAD2260I Revoke of aaaaaaaa from uuuuuuuuu was not generated

Reason

The revoke of administrative authority (aaaaaaaa) from the specified user (uuuuuuuu) was not generated because it could result in dropping a view.

Action

This message is information only, no action is required. To determine if any views would be dropped, rerun the synchronization and specify VIEW ACTION(WARN,REVOKEADMIN). The synchronization utility evaluates the affect of executing a revoke of the administrative authority. It determines whether the administrative authority, or any privilege that would be cascade revoked by DB2 as a result of revoking the administrative authority, was required to create a view. The evaluation of the affects of a cascade revoke can require executing several DB2 queries and can, therefore, result in significantly longer run times.

CAD2261I Revoke of DBADM on database dddddddd from uuuuuuuu was not generated

Reason

This message is informational only, no action is required. To determine if any views would be dropped, rerun the synchronization and specify VIEW ACTION(WARN,REVOKEADMIN). This causes the synchronization utility to evaluate the affect of executing the revoke of DBADM from the user. It determines whether the DBADM privilege, or any privilege that would be cascade revoked by DB2 as a result of revoking the DBADM privilege, was required to create a view. The evaluation of the affects of a cascade revoke can require executing several DB2 queries and can, therefore, result in significantly longer run times.



CAD2262I Revoke of SYSOPR from SYSOPR not generated

Reason

A revoke of SYSOPR from SYSOPR was requested, but not generated. This request was made because the user SYSOPR does not exist, the user does not have the SYSOPR system privilege in CA ACF2 for DB2, or SYSOPR was not included for synchronization of system privileges and REVOKEALL was specified.

SYSOPR is the default user ID DB2 assigns for commands issued from the console. The SYSOPR ID must have the SYSOPR system privilege in the DB2 catalog to execute DB2 console commands. Therefore, the Catalog Synchronization Utility suppressed the revoke of SYSOPR from SYSOPR.

Action

This message is informational only. No action is required.

CAD2265I Revoke of SELECT on table xxxxxxxx.xxxxxxxxxxxxxxxxxx from uuuuuuuu wil Cause following views to be dropped

Reason

The CA ACF2 for DB2 synchronization utility is generating a REVOKE statement for the table (xxxxxxxx.xxxxxxxxxxxxxxxxxx) and authorization ID (uuuuuuuu) named in the message. One or more CAD2268I, CAD2269I, or CAD2270I messages follow to indicate which views are dropped if the generated REVOKE statement is executed.

Action

This message is informational only. If you specify a control statement of VIEW(WARN,DROP), this message is produced and a REVOKE statement for the table and authorization ID is generated and written to the REVOKES file for execution. If you specify a control statement of VIEW(WARN), then only this message is produced.



CAD2266I Revoke of pppppppp from uuuuuuuu wil Cause the following views to be dropped

Reason

The CA ACF2 for DB2 synchronization utility is generating a REVOKE statement for the DB2 administrative privilege (pppppppp) and authorization ID (uuuuuuuu) named in the message. One or more CAD2268I, CAD2269I, or CAD2270I messages follow to indicate which views are dropped if the generated REVOKE statement is executed.

Action

This message is informational only. If you specify a control statement of VIEW(WARN,DROP), this message is produced and a REVOKE statement for the DB2 administrative privilege and authorization ID is generated and written to the REVOKES file for execution. If you specify a control statement of VIEW(WARN), then only this message is produced.

CAD2267I Revoke of pppppppp on database dddddddd from uuuuuuuu will cause the following views to be dropped

Reason

The CA ACF2 for DB2 synchronization utility is generating a REVOKE statement for the DB2 administrative privilege (pppppppp) or database name (dddddddd) and authorization ID (uuuuuuuu) named in the message. One or more CAD2268I, CAD2269I, or CAD2270I messages follow to indicate which views are dropped if the generated REVOKE statement is executed.

Action

This message is informational only. If you specify a control statement of VIEW(WARN,DROP), this message is produced and a REVOKE statement for the DB2 administrative privilege and authorization ID is generated and written to the REVOKES file for execution. If you specify a control statement of VIEW(WARN), then only this message is produced.



CAD2268I ..xxxxxxxx.xxxxxxxxxxxxxxxxxx

Reason

This message gives the name of a dependent view that is dropped if the REVOKE statement indicated by message CAD2265I, CAD2266I, CAD2269I, or CAD2280I is executed. The number of paired leading periods (..) indicates the number of levels the dependent view is from the base table or view that is subject to the REVOKE statement. Two periods are used for each level.

The viewname in this message can also appear in other CAD2236I, CAD2269I, or CAD2270I messages because of multiple dependencies required to support the VIEW.

Action


CAD2269I uuuuuuuu.vvvvvvvvvvvvvvvvvv due to authnam of authrty from creator on base uuuuuuuu.tttttttttttttttttt

Reason

This message provides the name of a view that is dropped if the REVOKE statement indicated in message CAD2266I or CAD2267I is executed.

uuuuuuuu.vvvvvvvvvvvvvvvvvv

The name of the view that is dropped.

authrty

The name of the administrative authority on the base table or view the creator lost. DB2 requires this authority to create the view.

uuuuuuuu.tttttttttttttttttt

The name of the base table or view.

authnam

REVOKE or CASCADE. REVOKE indicates the revoke statement identified in message CAD2266I or CAD2267I is the reason the view is dropped. CASCADE indicates that DB2 wil Cascade revoke the administrative authority identified in this message when the REVOKE statement in message CAD2266I or CAD2267I is executed.

creator

The name of the creator of the view who is losing the administrative authority.

Action

This message is for information only, no action is required.



CAD2270I uuuuuuuu.vvvvvvvvvvvvvvvv due to authnam authrty on database from creator. Base uuuuuuuu.ttttttttttttttttt

Reason

This message provides the name of a view that is dropped if the REVOKE statement indicated in message CAD2266I or CAD2267I is executed.

uuuuuuuu.vvvvvvvvvvvvvvvvvv

The name of the view that is dropped.

authrty

The name of the administrative authority on the base table or view the creator lost. DB2 requires this authority to create the view.

uuuuuuuu.tttttttttttttttttt

The name of the base table or view.

authnam

REVOKE or CASCADE. REVOKE indicates the revoke statement identified in message CAD2266I or CAD2267I is the reason the view is dropped. CASCADE indicates that DB2 will cascade revoke the administrative authority identified in this message when the REVOKE statement in message CAD2266I or CAD

2267I is e xecuted.

creator

The name of the creator of the view who is losing the administrative authority.

database

The name of the database where the authority is being lost.

Action


CAD2280I Revoke of USAGE on distinct type xxxxxxxx.xxxxxxxxxxxxxxxxxx was not generated

Reason

In synchronizing the DB2 subsystem, the Catalog Synchronization Utility is processing a request to revoke the usage of a distinct type. The user from whom the access is being revoked used the distinct type in creating an existing function or stored procedure. In these circumstances, DB2 will not allow the privilege to be revoked. The Catalog Synchronization Utility suppresses the generation of the REVOKE.

Action




CAD2300W Grant failed, grant was for user running this job

Reason

The grant statement preceding this message was for the user who is executing this job. DB2 does not allow any users to grant privileges to themselves. Synchronization processing continues.

Action


CAD2301W Revoke failed, revoke was for user running this job

Reason

The revoke statement preceding this message was for the user who is running this job. DB2 does not allow any users to revoke privileges from themselves. Synchronization processing continues.

Action


CAD2302W Grant failed, resource name specified in grant statement does not exist

Reason

The grant statement preceding this message was for a resource that does not exist in the DB2 catalog. This occurs, for example, during a synchronization when a resource is deleted between the time CADB2SY2 and CADB2SY3 were run. It also occurs for views that were dropped because the select privilege needed to create the view was revoked earlier. You also get this message when the DSNDB01 database is included for synchronization. See the “DB2 Directory and Catalog Databases” section for more information regarding the DSNDB01 database. Synchronization processing continues.

Action

This message is informational only. No action is required. You might, however, want to keep track of the resource named in the GRANT statement and run a selective synchronization for this resource after it is created in the DB2 catalog. The resource also gets synchronized during the next full synchronization after it is created in the DB2 catalog.



CAD2303W Revoke failed, revokee owns the resource, revokee does not have privilege or revoker did not grant privilege

Reason

The revoke statement preceding this message failed for one of three reasons:

1. The revokee is the owner of the resource. DB2 grants the creator of a resource all privileges for that resource, these privileges cannot be revoked. This is probably the reason the revoke failed.

2. The revokee no longer holds the privilege. This might occur if any catalog maintenance was performed between the time CADB2SY2 was run and the time the revoke was executed.

3. The revoker did not grant the privilege. This occurs only if you created your own input to CADB2SY3 and did not include the “BY ALL” clause on the revoke, or if you modified the output from CADB2SY2 and removed the “BY ALL” clause.

Action


CAD2304E No grant or revoke statement in SYSIN file

Reason

The SYSIN input file for CADB2SY3 created by CADB2SY2 did not contain any GRANT or REVOKE statements. Processing is terminated.

Action

Review the output from CADB2SY2 to determine if any GRANT or REVOKE statements were generated. If these statements should have been generated, determine why they were not and rerun both CADB2SY2 and CADB2SY3.

If CADB2SY2 was successful and no grants or revokes were generated because the selected users and resource were already synchronized, then you did not have to run CADB2SY3 and you can ignore this message.

Documents

CA ACF2 Option for DB2 Message Reference Guide