Implementing Security for Non-CA Products › DB2 › DDF Support

DDF Support

If you are using the DB2 2.3 DDF function, you should associate the address space DB2DIST with a DB2 facility using a MASTFAC. The users must be granted access to the facility with the appropriate connection resources- DSNR.subsys.DIST. Your steps to properly set up the DB2 facility are:

• Define the DB2DIST started procedure to the STC record and associate it with an ACID
• Define a facility for DB2/DDF
• Give the DB2DIST ACID a MASTFAC of the defined facility

A sample facility definition is provided below:

INITPGM=***    id=33  TYPE=100

ATTRIBUTES=IN‑USE,ACTIVE,SHRPRF,ASUBM,NOABEND,MULTIUSER,NOXDEF
ATTRIBUTES=LUMSG,STMSG,SIGN(M),INSTDATA,RNDPW,AUTHINIT
ATTRIBUTES=NOPROMPT,NOAUDIT,RES,WARNPW,NOTSOC,LCFTRANS
ATTRIBUTES=MSGLC,NOTRACE,NOEODINIT,IJU,NODORMPW,NONPWR
MODE=WARN DOWN=GLOBAL LOGGING=INIT,SMF,MSG,SEC9
UIDACID=8  LOCKTIME=000  DEFACID=*NONE*  KEY=8
MAXUSER=03000 PRFT=003
MODIFY  FUNCTION  SUCCESSFUL

Note: Remember to specify TYPE=DB2 in the Facility Matrix Table to display the correct type of 100.