IBM Support

PM94288: WMQ WHEN CHLAUTH ARE CREATED THE COMMAND SERVER IS RETURNED AN AUTHORIZATION ERROR OF MQRC 2035

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • SYSTEM.CHLAUTH.DATA.QUEUE is a queue that is accessed
    internally (for browse, get and put) by the queue manager and
    it should not require the QMGR UserId to have RACF explicit
    permissions to access it.
    

Local fix

  • As temporary fix to get CHLAUTH working is to give the queue
    manager UserId UPDATE permissions to access the queue.  The
    permissions can be removed after this fix is applied.
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: All users of WebSphere MQ for z/OS Version 7 *
    *                 Release 1 Modification 0.                    *
    ****************************************************************
    * PROBLEM DESCRIPTION: When queue security is active, issuing  *
    *                      SET CHLAUTH commands or the generation  *
    *                      of configuration event messages may     *
    *                      result in a MQRC2035,                   *
    *                      MQRC_NOT_AUTHORIZED on the relevant     *
    *                      SYSTEM queue.                           *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    When using or administering CHLAUTH objects in WebSphere MQ, the
    channel initiator will need access to the internal
    SYSTEM.CHLAUTH.DATA.QUEUE. If queue security has been enabled in
    the queue manager but explicit access to this queue has not been
    granted, the an MQRC 2035 MQRC_NOT_AUTHORIZED error may occur.
    
    This can also occur when CONFIGEV (configuration events) are
    enabled. In this case the MQRC 2035 will occur when opening the
    SYSTEM.ADMIN.CONFIG.EVENT queue.
    

Problem conclusion

  • Processing has been amended to ensure that the appropriate
    access is granted when internal tasks are opening the system
    queues.
    100Y
    CSQMOPNW
    

Temporary fix

Comments

APAR Information

  • APAR number

    PM94288

  • Reported component name

    WMQ Z/OS V7

  • Reported component ID

    5655R3600

  • Reported release

    100

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2013-08-01

  • Closed date

    2013-08-30

  • Last modified date

    2013-10-04

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UK97169

Modules/Macros

  • CSQMOPNW
    

Fix information

  • Fixed component name

    WMQ Z/OS V7

  • Fixed component ID

    5655R3600

Applicable component levels

  • R100 PSY UK97169

       UP13/09/27 P F309

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.1","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
04 October 2013