IBM Support

IC77487: ERROR REPORTING BY THE CRTMQM COMMAND RUN BY A DOMAIN USERID WITH INSUFFICIENT PERMISSION IS UNINFORMATIVE.

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • When a crtmqm command is issued by a domain user who does
    not have sufficient read permissions on the domain controller,
    it reports the following MQ error:
    AMQ8101: WebSphere MQ error (893) has occurred.
    
    This error is not informative enough for the user to understand
    reason for failure.
    

Local fix

Problem summary

  • ****************************************************************
    USERS AFFECTED:
    All users of WebSphere MQ v6 and v7 who issue crtmqm command
    under a domain user-id will be affected with this error.
    
    Platforms affected:
    Windows
    
    ****************************************************************
    PROBLEM SUMMARY:
    There are 2 parts to this problem:
    1 - If a domain user without sufficient permission tries to run
    the crtmqm command, then WebSphere MQ throws an error which is
    not informative enough to users about what is actually causing
    the problem.
    
    2 - If a domain user named 'mqm' with all necessary permissions
    tries to run the crtmqm command, then WebSphere MQ throws an
    error which is not informative enough to users about what is
    actually causing the problem.
    

Problem conclusion

  • The code change ensures that we now output an FDC with more
    information about the specific error that has occurred, so that
    the user can easily identify the error and take appropriate
    actions to resolve it. Following are notable changes:
    
    1 - If a domain user with insufficient permissions runs the
    crtmqm command then we output an FDC with the message "The local
    or domain user this WebSphere MQ command is running under
    is not authorized, if running as domain user then please ensure
    this user has all appropriate privileges on domain controller
    such as query group membership" (Probe ID: KN000002)
    
    2 - If a domain user named 'mqm' is used to run the crtmqm
    command then we output an FDC with the error message "You
    cannot use domain user 'mqm' on Windows" (Probe ID: AO066009)
    
    ---------------------------------------------------------------
    The fix is targeted for delivery in the following PTFs:
    
                       v6.0
    Platform           Fix Pack 6.0.2.12
    --------           --------------------
    Windows            U200331
    
                       v7.0
    Platform           Fix Pack 7.0.1.8
    --------           --------------------
    Windows            U200335
    
                       v7.1
    Platform           Fix Pack 7.1.0.1
    --------           --------------------
    Windows            7.1.0.1
    
    The latest available maintenance can be obtained from
    'WebSphere MQ Recommended Fixes'
    http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
    
    If the maintenance level is not yet available information on
    its planned availability can be found in 'WebSphere MQ
    Planned Maintenance Release Dates'
    http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
    ---------------------------------------------------------------
    

Temporary fix

Comments

APAR Information

  • APAR number

    IC77487

  • Reported component name

    WMQ WINDOWS V7

  • Reported component ID

    5724H7220

  • Reported release

    701

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2011-07-12

  • Closed date

    2011-10-24

  • Last modified date

    2012-01-16

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WMQ WINDOWS V7

  • Fixed component ID

    5724H7220

Applicable component levels

  • R701 PSY

       UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSDEZSF","label":"IBM WebSphere MQ Managed File Transfer for z\/OS"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.0.1","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
31 March 2023