Re: v6r1 ptfs chg security requiremnt setting QAQQINI lib

[J Franz <franz400@xxxxxxx>]

I'm assuming chgqrya has the same security requirement, either *jobctl or 
QIBM_DB_SQLADM. 

Jim




________________________________
From: Jack Kingsley <iseriesflorida@xxxxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Sent: Tue, May 8, 2012 10:57:02 AM
Subject: Re: v6r1 ptfs chg security requiremnt setting QAQQINI lib

Is it possible to utilize chgqrya for these.

On Tue, May 8, 2012 at 10:08 AM, J Franz <franz400@xxxxxxx> wrote:

> In some of the recent ptfs, IBM has added an error msg in a QZDASOINIT job
> (pc
> client, odbc) where setting the QAQQINI lib in the dsn caused a CPF9898
> error
> that allows process to run, but QAQQINI lib not changed & used default.
>
> I understand why IBM is adding this, and Scott Forstie wrote a great
> article:
>
> http://www-03.ibm.com/systems/resources/systems_i_db2_navigator_security_controls.pdf
> f
>
>
> but short of giving user *jobctl auth (not going to happen) or the
> QIBM_DB_SQLADM function usage for each user(lot's of users & changes
> often), it
> seems cannot easily point a job to a diff QAQQINI.
>
> We have lot's of client code written in diff tools, not easily changed,
> and need
> to force certain work thru CQE (it still works there..), while others need
> SQE
> for performance.
>
> Is there an alternative method to point to various QAQQINI's from various
> apps?
> (btw-i'm not the pc client developer..)
> Jim Franz
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.