EXTSEC—Extended security


Use the Modify Extended Security panel or the EXTSEC command to specify the content of the error message returned to a network client when a DDF connection request fails because of a security error. This command also specifies whether DDF permits end users to update their RACF password by using the DRDA password change function. This element can be useful if third-party products require the extended security ZPARM to be enabled to provide detailed security-related error messages from DRDA.

Modify Extended Security panel

DDTG DBI1 Modify Extended Security
Command ===> _________________________________________________________________

 Command: CURRENT
Description . . . . . . . . : EXTENDED SECURITY

Type the new Extended Security value you wish to change to. Then press Enter.

Extended Security Parameter
Enabled . . . . . . . . . . _ ( Y or N )

Command syntax and parameters

image2018-12-21_13-56-47.png

Value

Description

DB2ssid

Db2 subsystem ID or the name of the Db2 data sharing group to which the command applies.

opertuneID

OPERTUNE system profile name (if OPERTUNE is running as a started task) or the batch job name (if OPERTUNE is running as a batch job).

Y

Extended security is enabled. DDF returns a detailed error code and allows the user to update the RACF password through DRDA.

N

Extended security is disabled. DDF returns a generic error code and does not allow the user to update the RACF password through DRDA.

NORESET

The changes you request remain in effect until the Db2 subsystem is cycled.

Db2 parameter values

Field

Installation panel

CLIST parameter

ZPARM macro

ZPARM parameter

Enabled

DSNTIPR

EXTSEC

DSN6SYSP

EXTSEC

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

OPERTUNE for DB2 13.1