PM94288: WMQ WHEN CHLAUTH ARE CREATED THE COMMAND SERVER IS RETURNED AN AUTHORIZATION ERROR OF MQRC 2035

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• SYSTEM.CHLAUTH.DATA.QUEUE is a queue that is accessed
  internally (for browse, get and put) by the queue manager and
  it should not require the QMGR UserId to have RACF explicit
  permissions to access it.
  

Local fix

• As temporary fix to get CHLAUTH working is to give the queue
  manager UserId UPDATE permissions to access the queue.  The
  permissions can be removed after this fix is applied.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of WebSphere MQ for z/OS Version 7 *
  *                 Release 1 Modification 0.                    *
  ****************************************************************
  * PROBLEM DESCRIPTION: When queue security is active, issuing  *
  *                      SET CHLAUTH commands or the generation  *
  *                      of configuration event messages may     *
  *                      result in a MQRC2035,                   *
  *                      MQRC_NOT_AUTHORIZED on the relevant     *
  *                      SYSTEM queue.                           *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  When using or administering CHLAUTH objects in WebSphere MQ, the
  channel initiator will need access to the internal
  SYSTEM.CHLAUTH.DATA.QUEUE. If queue security has been enabled in
  the queue manager but explicit access to this queue has not been
  granted, the an MQRC 2035 MQRC_NOT_AUTHORIZED error may occur.
  
  This can also occur when CONFIGEV (configuration events) are
  enabled. In this case the MQRC 2035 will occur when opening the
  SYSTEM.ADMIN.CONFIG.EVENT queue.
  

Problem conclusion

• Processing has been amended to ensure that the appropriate
  access is granted when internal tasks are opening the system
  queues.
  100Y
  CSQMOPNW
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UK97169

Modules/Macros

• CSQMOPNW
  

Fix information

• Fixed component name

  WMQ Z/OS V7

• Fixed component ID

  5655R3600

Applicable component levels

• R100 PSY UK97169

     UP13/09/27 P F309

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.