DB2 FOR LUW / DB2FORLUW / 950 - DB2

The audit log file can become corrupt if the pre-Fixpak 6 
version of db2set is ran against against an instance that is at 
Fixpack 6 or higher (or vice versa).  This also affects any 
other commands that happen to run db2set as part of it's 
processing (such as the db2ilist command). 
 
The following sequence of commands is an example of how the 
corruption may occur. 
1) Two instances on the same box. One is on Fixpak 6 or higher 
and one is at Fixpak 5 or lower. 
2) Configure the Fixpak 6 instance to do instance auditing on 
SYSADMIN category 
3) From the Fixpak 5 instance, set DB2INSTANCE to point to the 
Fixpak 6 instance 
4) From Fixpak 5, run db2set. Because DB2INSTANCE is pointing to 
the Fixpak 6 instance, db2set will read the audit config from 
Fixpak 6 and write to the audit log in Fixpak 6. Note the Fixpak 
5 db2set is running, not Fixpak 6 
5) The Fixpak 6 audit log will be corrupted as a result.

**************************************************************** 
* USERS AFFECTED:                                              * 
* ALL                                                          * 
**************************************************************** 
* PROBLEM DESCRIPTION:                                         * 
* "AUD0022N  THE AUDIT LOG FILE IS CORRUPTED" DUE TO RUNNING   * 
* DB2SET FROM PRE-FIXPAK 6 AGAINST FIXPACK 6 OR HIGHER (OR     * 
* VICE VERSA)                                                  * 
**************************************************************** 
* RECOMMENDATION:                                              * 
* Upgrade to DB2 Version 9.5 Fix Pack 9                        * 
****************************************************************

Ensure the db2set command being ran is from the same Fixpack 
version as the instance to avoid corrupting the audit log.

DB2 Version 9.5 Fix Pack 9 for Linux, UNIX, and Windows
 DB2 Version 9.5 Fix Pack 10 for Linux, UNIX, and Windows
 

First fixed in DB2 Version 9.5 Fix Pack 9

not known / see Local fix

forerunner  : APAR is sysrouted TO one or more of the following: IC76025 
follow-up : 

Date  - problem reported    :
Date  - problem closed      :
Date  - last modified       :

19.04.2011
22.03.2012
22.03.2012

9.5.FP9