IBM Support

PI67200: WMQ CLUSRCVR CHANNEL WITH CHLAUTH DOES NOT USE MCAUSER ID

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Messages arriving over a cluster receiver channel are put to
    the dead letter queue with an MQRC 2035 as the USER ID used to
    check authorization is defaulting to the CHIN task authority
    instead of to the MCAUSER ID which was mapped by CHLAUTH rule.
    Change Team finds that the CHLAUTH rule is matched as
    pStatus.MCAUser is set based on the rule however,
    CD.MCAUserIdentifier is blank. This results in MQPUT being
    issued using the CHIN userid. The issue in rriCheckChlAuth
    is that MCAUserIdentifier is not updated in the status entry.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED: All users of WebSphere MQ for z/OS Version 8 *
    *                 Release 0 Modification 0.                    *
    ****************************************************************
    * PROBLEM DESCRIPTION: When using CHLAUTH QMGRMAP              *
    *                      authentication records to set MCAUSERID *
    *                      to receiver channels, incoming          *
    *                      messages are put to dead letter queue   *
    *                      with MQRC 2035 MQRC_NOT_AUTHORIZED.     *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    DISPLAY CHSTATUS shows that the correct MCA userID has been set
    to the channel but messages are discarded to dead letter queue.
    The channel definition control blocks have two fields to set the
    MCA userId: MCAUserID and MCAUserIdentifier. The CHLAUTH MCAUser
    is only copied to MCAUserID and MCAUserIdentifier is left blanks
    resulting in messages put to dead letter queue with MQRC 2035
    MQRC_NOT_AUTHORIZED.
    

Problem conclusion

  • CMQXRMSA (rriCheckChlAuth) has been changed to copy MCAUser to
    MCAUserID and MCAUserIdentifier in the channel definition
    control blocks.
    000Y
    CMQXRMSA
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI67200

  • Reported component name

    WMQ Z/OS 8

  • Reported component ID

    5655W9700

  • Reported release

    000

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2016-08-09

  • Closed date

    2016-09-06

  • Last modified date

    2016-10-03

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    PI68196 UI40650

Modules/Macros

  • CMQXRMSA
    

Fix information

  • Fixed component name

    WMQ Z/OS 8

  • Fixed component ID

    5655W9700

Applicable component levels

  • R000 PSY UI40650

       UP16/09/20 P F609

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSYHRD","label":"IBM MQ"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.0","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
03 October 2016