IT28397: SET AUTHREC command fails with AMQ8871: Entity, principal or group not known

APAR status

• Closed as program error.

Error description

• If the full DN (Distinguished Name) for a user or group is over
  a certain length, it is accepted by the setmqaut command, but is
  not accepted by the equivalent SET AUTHREC runmqsc command or in
  MQ Explorer.
  
  This error message is seen in the output of the failing command:
  AMQ8871: Entity, principal or group not known
  
  Also, when using amqoamd to dump the authority records, it fails
  to handle the long DN.  The output contains this text:
        User name: 	 FAIL : unresolved account
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  Only queue managers running on Windows that are using LDAP as
  the source of user and group membership.  Within this scenario,
  this APAR affects users of SET AUTHREC, when the DN name is
  long.  It also affects users of amqoamd when displaying records
  in which the principal or group have a long DN.
  
  
  Platforms affected:
  Windows
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  The logic within SET AUTHREC and amqoamd for handling long DNs
  was inadequate.
  

Problem conclusion

• The defects in the SET AUTHREC and amqoamd logic for handling
  long DNs has been corrected.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v9.0 LTS   9.0.0.8
  v9.1 CD    9.1.3
  v9.1 LTS   9.1.0.3
  
  The latest available maintenance can be obtained from
  'WebSphere MQ Recommended Fixes'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
  
  If the maintenance level is not yet available information on
  its planned availability can be found in 'WebSphere MQ
  Planned Maintenance Release Dates'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  IBM MQ BASE M/P

• Fixed component ID

  5724H7261

Applicable component levels