IC76579: MQ V7 GETS 2035 MQRC_NOT_AUTHORIZED WHEN STARTING AN AUTO-DEFINED CHANNEL

WebSphere MQ V7.0 Fix Pack 7.0.1.6
WebSphere MQ V7.0.1 for i5/OS Fix Pack 7.0.1.6

APAR status

• Closed as program error.

Error description

• A WebSphere MQ v7 queue manager using a channel auto-definition
  exit (CHADEXIT) gets 2035 MQRC_NOT_AUTHORIZED when starting an
  auto-defined channel. The same userid was able to start
  auto-defined channels before migrating from MQ v6 to v7.
  
  When the error occurs the following error messages are
  generated:
  AMQ8077: Entity <userid> has insufficient authority to access
  object SYSTEM.DEF.SVRCONN.
  EXPLANATION: The specified entity is not authorized to access
  the required object. The following requested permissions are
  unauthorized: dsp
  
  AMQ8077: Entity <userid> has insufficient authority to access
  object <Channel Name>.
  EXPLANATION: The specified entity is not authorized to access
  the required object. The following requested permissions are
  unauthorized: crt
  
  AMQ9546: Error return code received.
  EXPLANATION: The program has ended because return code 2035 was
  returned from function lpiSPIDefine(Channel = channel name).
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  Users with non-mqm authorized userIDs connecting as clients to
  auto-defined SVRCONN channels
  
  Platforms affected:
  All Distributed (iSeries, all Unix and Windows)
  ****************************************************************
  PROBLEM SUMMARY:
  The user context was changed to the connecting userID before the
  channel was defined.
  

Problem conclusion

• Delay adopting the new user context until after the channel has
  been defined.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
                     v7.0
  Platform           Fix Pack 7.0.1.6
  --------           --------------------
  Windows            U200328
  AIX                U840698
  HP-UX (PA-RISC)    U841555
  HP-UX (Itanium)    U841560
  Solaris (SPARC)    U841556
  Solaris (x86-64)   U841562
  iSeries            tbc_p700_0_1_6
  Linux (x86)        U841557
  Linux (x86-64)     U841561
  Linux (zSeries)    U841558
  Linux (Power)      U841559
  
  The latest available maintenance can be obtained from
  'WebSphere MQ Recommended Fixes'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
  
  If the maintenance level is not yet available, information on
  its planned availability can be found in 'WebSphere MQ
  Planned Maintenance Release Dates'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  PM41392

Fix information

• Fixed component name

  WMQ WINDOWS V7

• Fixed component ID

  5724H7220

Applicable component levels

• R700 PSY

     UP