IBM Support

IC98033: DB2AUDIT ERRORS FROM DB2AUD PROCESS WHEN USING KRB_SERVER_ENCRYPT, GSS_SERVER_ENCRYPT OR DATA_ENCRYPT_CMP

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as fixed if next.

Error description

  • When an audit event is generated outside of the db2sysc engine
    process, then it must be added to the audit log by forking a
    standalone db2aud process. This is needed when the audit event
    is generated by a fenced procedure (db2fmp), or an instance
    level operation such as db2set, db2start/stop.
    When using KRB_SERVER_ENCRYPT authentication and these audit
    events are generated, these errors can occur:
    
    2013-10-30-17.38.48.671970-240 I     LEVEL:Warning
    PID     : 9891         TID  : 469125596  PROC : db2aud
    INSTANCE: db2inst1            NODE : 000
    FUNCTION: DB2 UDB, bsu security,
    sqlexAuditData::setUnspecifiedFieldsClie, probe:1721
    MESSAGE : ZRC=0x805C006D=-2141454227=SQLEX_CA_BUILT
    "SQLCA has been built and saved in component specific control
    block."
    DATA #1 : Hex integer, 4 bytes
    0x5000000C
    DATA #2 : SQLCA, PD_DB2_TYPE_SQLCA, 136 bytes
     sqlcaid : SQLCA     sqlcabc: 136   sqlcode: 0   sqlerrml: 0
     sqlerrmc:
     sqlerrp : SQLEXAUC
     sqlerrd : (1) 0x00000000      (2) 0x00000000      (3)
    
    2013-10-30-17.38.48.672146-240 I1082324991E788     LEVEL: Error
    PID     : 9891                 TID  : 46912559614016PROC :
    db2aud
    INSTANCE: db2inst1             NODE : 000
    FUNCTION: DB2 UDB, bsu security, sqlexAuditData::logEvent,
    probe:976
    MESSAGE : ZRC=0x805C006D=-2141454227=SQLEX_CA_BUILT
    "SQLCA has been built and saved in component specific control
    block."
    DATA #1 : SQLCA, PD_DB2_TYPE_SQLCA, 136 bytes
     sqlcaid : SQLCA     sqlcabc: 136   sqlcode: 0   sqlerrml: 0
     sqlerrmc:
     sqlerrp : SQLEXAUC
     sqlerrd : (1) 0x00000000      (2) 0x00000000      (3)
    
    The error may be seen with these authentication types:
    
    KRB_SERVER_ENCRYPT
    GSS_SERVER_ENCRYPT
    DATA_ENCRYPT_CMP
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * All                                                          *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * See Error Description                                        *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * Upgrade to inclusive fixpack.                                *
    ****************************************************************
    

Problem conclusion

Temporary fix

Comments

APAR Information

  • APAR number

    IC98033

  • Reported component name

    DB2 FOR LUW

  • Reported component ID

    DB2FORLUW

  • Reported release

    970

  • Status

    CLOSED FIN

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2013-12-01

  • Closed date

    2014-11-10

  • Last modified date

    2015-04-23

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    IC98578 IC98581

Fix information

Applicable component levels

  • R970 PSY

       UP

  • RA10 PSY

       UP

  • RA50 PSY

       UP



Document information

More support for: DB2 for Linux, UNIX and Windows

Software version: 9.7

Reference #: IC98033

Modified date: 23 April 2015