PI51985: IBM MQ V8 - ICH408I IS BEING ISSUED IF A PASSTICKET IS BEING USED IN AN MQIIH OR MQCIH.

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• Message ICH408I is being issued if a message is being sent to
  MQ on z/OS V8 and contains a PASSTICKET in the MQIIH.
  The application name specified in PTKTAPPL for the STGCLASS is
  not handled correctly.
  .
  Additional symptoms:
  This fix applies to any MQ IMS Bridge or CICS Bridge application
  using passtickets.
  For the CICS-MQ Bridge:
  DFHMQ0749 <cics> CKBR nnnnn Authentication error. EIBRESP=70
  EIBRESP2=2 Userid=<id>
  .
  The CICS Bridge message goes to the Dead Letter Queue (DLQ) with
  MQDLH_REASON F'402' (X'192') MQFB_CICS_NOT_AUTHORIZED
  .
  If the security manager is ACF2:
  ACF01006 A PASSWORD IS NOT ALLOWED FOR LOGONID <lid>
  

Local fix

• A ++APAR is available.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of WebSphere MQ for z/OS Version 8 *
  *                 Release 0 Modification 0.                    *
  ****************************************************************
  * PROBLEM DESCRIPTION: Applications using passtickets when     *
  *                      putting to an IMS Bridge queue get      *
  *                      RACF message ICH408I indicating that    *
  *                      the userid of the application has       *
  *                      specified an invalid password.          *
  *                      Message CSQ2005I with FEEDBACK=298 is   *
  *                      also issued.                            *
  *                      This problem also affects the MQ-CICS   *
  *                      Bridge.                                 *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  An incorrect RACF check is being made against applications
  putting to an IMS Bridge queue residing on a STGCLASS which
  specifies a passticket application.
  The error only happens if the application's userid has READ
  access to the IMSXCF facility profile in RACF.
  

Problem conclusion

• CSQHVRFY has been changed so that the correct RACF check is made
  against applications using passtickets for IMS Bridge queues.
  000Y
  CSQHVRFY
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI34510

Modules/Macros

• CSQHVRFY
  

Fix information

• Fixed component name

  WMQ Z/OS 8

• Fixed component ID

  5655W9700

Applicable component levels

• R000 PSY UI34510

     UP16/02/03 P F602

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.