IT29743: MQSI COMMANDS STRIP OUT EMBEDDED QUOTES AROUND PASSWORD BOX IN A JDBC CONNECTION URL TEMPLATE.

APAR status

• Closed as requirement.

Error description

• Double quotes around a password box in the connection URL
  template property of a JDBC Configurable Service are stripped
  out by the commandline handler, when configured using the
  mqsicreateconfigurableservice or mqsichangeproperties commands.
  .
  This results in a failed connection for the JDBC Configurable
  Service.
  

Local fix

• (1) Perform the configuration via the Web Administration
      Console, which allows embedded quotes.
  .
  (2) Use a backward slash to escape the quote character in the
      JDBC connection URL template when using the mqsi
      commandline, as in the following example:
  .
  mqsichangeproperties  -c JDBCProviders -o
   -n connectionUrlFormat -v "jdbc:oracle:thin:[user]/\
  "[password]\"@[serverName]:[portNumber]/
  [connectionUrlFormatAttr1]"
  .
    Where :
         DSN is the JDBC datasource name.
  .
         The escape \" characters surround the [password] box. At
         runtime the escape characters are replaced by single "
         quotes characters.
  .
         The secure password with embedded special characters will
         be configured in the normal way using mqsisetdbparms.
         This creates the securityIdentity property for the JDBC
         Configurable Service.
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All users of JDBCProviders Configurable Services where special
  characters need to be embedded in the connectionUrlFormat and
  related attribute properties.
  
  
  Platforms affected:
  z/OS, MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  Double quotes around a password box in the connection URL
  template property of a JDBC Configurable Service are stripped
  out by the mqsi commandline handler, when configured using the
  mqsicreateconfigurableservice or mqsichangeproperties commands.
  .
  This results in a failed connection for the JDBC Datasource
  associated with the JDBC Configurable Service.
  
  Although a backward slash can be used to escape the quote
  characters in the JDBC connection URL template, such as "\"",
  this does not always make the intention explicit, nor is it easy
  to maintain.
  

Problem conclusion

• The product now allows XML/HTML style substitution strings as an
  alternative escaping for special characters in a JDBCProviders
  connectionUrlFormat property,  and also all the other
  connectionUrlFormatAttr.. properties.
  
  XML/HTML style substitution strings are used to enable special
  characters to be embedded in the JDBCProviders property values
  using the mqsichangeproperties and mqsicreateconfigurableservice
  commands.
  
  This table shows the substitution strings supported by this
  change. The strings in the Substitutes column can be used in
  place of the corresponding strings in the Actuals column, when
  constructing the connectionUrlFormat value.
  
  Substitutes        Actuals
  
  "                  "
  &                 &
  >                      >
  <                       <
  &apos;                 '
  &tilde;                 &#126;
  
  To  embed double quotes around the password box in the value for
  a connectionUrlFormat property the following syntax can be used
  instead the default escaping mechanism. ( An Oracle Datasource
  is used in this example).
  
  > mqsichangeproperties <Broker> -c JDBCProviders -o Oracle -n
  connectionUrlFormat
       -v
  "jdbc:oracle:thin:[user]/"[password]"@[serverName]:[portNumber]:
  [connectionUrlFormatAttr1]"
  
  Where the product runtime is required to use a
  connectionUtlFormat with the format:
  
  
  jdbc:oracle:thin:[user]/"[password]";@[serverName]:[portNumber]:
  [connectionUrlFormatAttr1]
  
  Note that the -v value must be wrapped with double quotes to be
  accepted by the mqsi commands.
  

Temporary fix

Comments

• IT29743 closed as requirement
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels