DB2 for OS/390 and DB2 for MVS manage inbound and outbound security via a set of tables called the communications database (CDB). Inbound security validation for APPC/LU 6.2 DRDA clients is managed by the SYSIBM.SYSLUNAMES (DB2/MVS) or SYSIBM.LUNAMES (DB2/OS390) table. To implement the simplest security model, enter a blank row in this table:
INSERT into SYSIBM.LUNAMES (LUNAME) VALUES (‘ ‘ );
When table SYSIBM.(SYS)LUNAMES contains a blank row, DB2 forwards the userid/password combination sent by the DRDA client (CONNX) to the system-installed security component, such as RACF, ACF/VTAM, or TopSecret.
For TCP/IP-based connections, the SYSIBM.(SYS)LUNAMES tables is bypassed, so it need not be populated.
This table represents sample output from SELECT * from SYSIBM.LUNAMES:
SELECT sample output
APPC Security |
CONNX Option |
Values sent from client to host |
Same |
UserID |
UserID only. |
Program |
UserID & Password |
User ID and password. |
None |
None |
None, but DB2 for OS/390 and MVS reject this option. |