IT24805: Profile name '**' created on Appliance/UNIX platforms prevents MQ Console authentication records from displaying

APAR status

• Closed as program error.

Error description

• After running the following 'runmqsc' commands:
  
  DELETE AUTHREC OBJTYPE(CHANNEL) PROFILE('**')
  GROUP('<someGroup>')
  
  SET AUTHREC OBJTYPE(CHANNEL) PROFILE('**') GROUP('<someGroup>')
  AUTHADD(dsp)
  
  REFRESH SECURITY
  
  on an MQ Appliance's queue manager, only the group specified in
  the above runmqsc command will be shown in the MQ Console.  No
  other groups are displayed, such as the 'mqm' or 'mqsystem' from
  the Local Queue Managers widget on MQ appliance's MQ Console.
  
  
  In addition, is not possible to save any 'create authorities'
  for the other groups that are still shown on the list, as
  attempting to fails with the error message:
  
      Failed to update object(s)'
  
  MQ Console trace contains the following error occurred when
  trying to modify the 'create permissions' for the groups that
  are still shown on the list:
  
  [4/3/18 14:37:36:188 CEST] 0006e862 id=
  com.ibm.mq.ui.api.resources.OAMResource                      1
  setCRTOAMRecord ENTRY - (@9653ea58) {1} {2} {3} {4} {5}
                                         CUNDR
                                         MQOT_AUTH_INFO
                                         @CLASS
  com.ibm.mq.ui.api.json.oam.AuthorityRecord@17f25877
                                         false
  ....
  [4/3/18 14:37:36:306 CEST] 0006e862 id=
  com.ibm.mq.ui.conn.MQConnectionHelper                        1
  submitPCFRequest EXIT - (@static) [<PCFMessage>]
  [4/3/18 14:37:36:307 CEST] 0006e862 id=
  com.ibm.mq.ui.api.resources.OAMResource                      1
  setCRTOAMRecord THROW - (@9653ea58)
  com.ibm.mq.exceptions.MQRCErrorException: WMQWB0013E: MQRC2085:
  WebSphere MQ call failed with compcode '2' ('MQCC_FAILED')
  reason
  '2085' ('MQRC_UNKNOWN_OBJECT_NAME')
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  MQ Users who are using the MQ Console either on the MQ
  Appliance, or AIX, HP-UX, Linux, Solaris systems.
  
  
  
  Platforms affected:
  MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  When a user defined a new authority record for a user group
  using profile name '**' on a channel object, for example by
  using the runmqsc command:
  
  SET AUTHREC OBJTYPE(CHANNEL) PROFILE('**') GROUP('<someGroup>')
  AUTHADD(dsp)
  
  and then used the MQ Console to use the function:
    "Manager create authority records"
  
  for a selected Queue Manager, two problems were encountered:
  
  1. Not all relevant user groups were displayed in the MQ Console
  Authority Records list
  
  2. Updated Authorities on a selected Entity could not be saved
  using the MQ Console
  

Problem conclusion

• The MQ Console has been updated such that "Manager create
  authority records" function for a selected Queue Manager will
  now:
  
    1. Display all relevant user groups
  
    2. Enable updating Authorities on any selected Entity
  
  regardless of which authority records have been defined on the
  queue manager.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v8.0       8.0.0.12
  v9.0 LTS   9.0.0.7
  v9.1 CD    9.1.3
  v9.1 LTS   9.1.0.3
  
  The latest available maintenance can be obtained from
  'WebSphere MQ Recommended Fixes'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
  
  If the maintenance level is not yet available information on
  its planned availability can be found in 'WebSphere MQ
  Planned Maintenance Release Dates'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  IBM MQ APPL M20

• Fixed component ID

  5725Z0900

Applicable component levels