When an audit event is generated outside of the db2sysc engine
process, then it must be added to the audit log by forking a
standalone db2aud process. This is needed when the audit event
is generated by a fenced procedure (db2fmp), or an instance
level operation such as db2set, db2start/stop.
When using KRB_SERVER_ENCRYPT authentication and these audit
events are generated, these errors can occur:
2013-10-30-17.38.48.671970-240 I LEVEL:Warning
PID : 9891 TID : 469125596 PROC : db2aud
INSTANCE: db2inst1 NODE : 000
FUNCTION: DB2 UDB, bsu security,
sqlexAuditData::setUnspecifiedFieldsClie, probe:1721
MESSAGE : ZRC=0x805C006D=-2141454227=SQLEX_CA_BUILT
"SQLCA has been built and saved in component specific control
block."
DATA #1 : Hex integer, 4 bytes
0x5000000C
DATA #2 : SQLCA, PD_DB2_TYPE_SQLCA, 136 bytes
sqlcaid : SQLCA sqlcabc: 136 sqlcode: 0 sqlerrml: 0
sqlerrmc:
sqlerrp : SQLEXAUC
sqlerrd : (1) 0x00000000 (2) 0x00000000 (3)
2013-10-30-17.38.48.672146-240 I1082324991E788 LEVEL: Error
PID : 9891 TID : 46912559614016PROC :
db2aud
INSTANCE: db2inst1 NODE : 000
FUNCTION: DB2 UDB, bsu security, sqlexAuditData::logEvent,
probe:976
MESSAGE : ZRC=0x805C006D=-2141454227=SQLEX_CA_BUILT
"SQLCA has been built and saved in component specific control
block."
DATA #1 : SQLCA, PD_DB2_TYPE_SQLCA, 136 bytes
sqlcaid : SQLCA sqlcabc: 136 sqlcode: 0 sqlerrml: 0
sqlerrmc:
sqlerrp : SQLEXAUC
sqlerrd : (1) 0x00000000 (2) 0x00000000 (3)
The error may be seen with these authentication types:
KRB_SERVER_ENCRYPT
GSS_SERVER_ENCRYPT
DATA_ENCRYPT_CMP |
