IBM Support

IC59077: Non MQM users not able to connect to the queue managers on Windows Vista and Windows 2008 Server.

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Non-mqm users fail to connect to windows vista and Windows 2008
    Server even though the user has required OAM permissions to
    connect to the queue manager. An FDC with the following
    information is created during an application's connection
    attempt.
    Probe Id            ZI016207
    Component           ziiConnectToAgent
    Major Errorcode     xecF_E_UNEXPECTED_RC
    Minor Errorcode     xecX_E_SUBPOOL_INVALID
    

Local fix

Problem summary

  • ****************************************************************
    USERS AFFECTED:
    MQ users on Windows Vista and Windows 2008 Server who want to us
    non-mqm user accounts to work with queue manager.
    
    Platforms affected:
    Windows
    
    ****************************************************************
    PROBLEM SUMMARY:
    Due to the security architecture modifications on Windows Vista
    and Windows 2008 Server platforms, an attempt to connect to the
    shared memory server on behalf of a non mqm or non administrator
    user fails as the Microsoft OpenProcess API fails with not
    authorized error. This failure will happen even though the user
    has required OAM authorities to connect to the queue manager as
    the OpenProcess API is called prior to MQ OAM security
    validations.
    

Problem conclusion

  • On Windows Vista and Windows 2008 Server, the required access to
    open the process has been reduced to avoid OpenProcess failure
    during the shared memory server connection attempt.
    
    ---------------------------------------------------------------
    The fix is targeted for delivery in the following PTFs:
    
                       v7.0
    Platform           Fix Pack 7.0.0.2
    --------           --------------------
    Windows            U200302
    
    The latest available maintenance can be obtained from
    'Websphere MQ Recommended Fixes'
    http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
    
    If the maintenance level is not yet available, information on
    its planned availability can be found in 'Websphere MQ
    Planned Maintenance Release Dates'
    http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
    ---------------------------------------------------------------
    

Temporary fix

Comments

APAR Information

  • APAR number

    IC59077

  • Reported component name

    WMQ WINDOWS V7

  • Reported component ID

    5724H7220

  • Reported release

    700

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2008-11-26

  • Closed date

    2008-12-18

  • Last modified date

    2009-01-16

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WMQ WINDOWS V7

  • Fixed component ID

    5724H7220

Applicable component levels

  • R700 PSY

       UP

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSCPQ63","label":"APAR \/ Maintenance"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.0","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
16 January 2009