IBM Support

IT04736: MS0T WMQ 8.0.0.1 EXPLORER REPORTS AUTHENTICATION ERRORS WHEN ATTEMPTING TO AUTHENTICATE A USERNAME AND PASSWORD

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Using MQ Explorer V8.0.0.1 or MQ Classes for Java V8.0.0.1 and
    attempting to create a connection to a MQ Queue Manager using
    the correct username and password, failed throwing back an
    authentication error.
    
    MQ Explorer Message: Access not permitted. You are not
    authorized to perform this operation (AMQ4036)
    .
    Additional symptoms:
    2035 MQRC_NOT_AUTHORIZED
    .
    On z/OS:
    ICH408I USER(userid  ) GROUP(TSOUSER ) NAME(name)
                 LOGON/JOB INITIATION - INVALID PASSWORD
    IRR013I  VERIFICATION FAILED. INVALID PASSWORD GIVEN.
    

Local fix

  • The MQ administrator needs to configure the AUTHINFO object to
    CHKCLNT=NONE by using the following runmqsc commands:
    .
    ALTER AUTHINFO(SYSTEM.DEFAULT.AUTHINFO.IDPWOS)
    AUTHTYPE(IDPWOS) CHCKCLNT(NONE)
    .
    REFRESH SECURITY TYPE(CONNAUTH)
    

Problem summary

  • ****************************************************************
    USERS AFFECTED:
    This issue affects all users of V8.0.0.1 MQ Explorer and
    V8.0.0.1 MQ Classes for Java.
    
    
    Platforms affected:
    Windows, Linux on x86-64, Linux on x86, Solaris x86-64, Solaris
    SPARC, Linux on zSeries, Linux on S390, IBM iSeries, HP-UX
    OpenVMS, HP-UX PA-RISC, HP-UX Itanium, AIX, Linux on Power, z/OS
    
    ****************************************************************
    PROBLEM DESCRIPTION:
    Tracing for MQ handles passwords by sanitizing them so passwords
    are not traced in plain text. However, after applying APAR
    IT04760, a coding error lead to the original user password being
    overwritten with the sanitized password.
    
    This resulted of the incorrect password string being used for
    negotiating the connection to the Queue Manager.
    

Problem conclusion

  • The WebSphere MQ code has been updated so that the tracing
    continues to sanitize the user password along with connecting to
    Queue Managers using the correct password string.
    
    
    
    | MDVREGR 8.0.0-WS-MQ-AixPPC64-FP0001 |
    | MDVREGR 8.0.0-WS-MQ-HpuxIA64-FP0001 |
    | MDVREGR 8.0.0-WS-MQ-HpuxPaRISC64-FP0001 |
    | MDVREGR 8.0.0-WS-MQ-LinuxIA32-FP0001 |
    | MDVREGR 8.0.0-WS-MQ-LinuxPPC64-FP0001 |
    | MDVREGR 8.0.0-WS-MQ-LinuxS390X-FP0001 |
    | MDVREGR 8.0.0-WS-MQ-LinuxX64-FP0001 |
    | MDVREGR 8.0.0-WS-MQ-SolarisSparc64-FP0001 |
    | MDVREGR 8.0.0-WS-MQ-SolarisX64-FP0001 |
    | MDVREGR 8.0.0-WS-MQ-Windows-FP0001 |
    
    ---------------------------------------------------------------
    The fix is targeted for delivery in the following PTFs:
    
    Version    Maintenance Level
    v8.0       8.0.0.2
    
    The latest available maintenance can be obtained from
    'WebSphere MQ Recommended Fixes'
    http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
    
    If the maintenance level is not yet available information on
    its planned availability can be found in 'WebSphere MQ
    Planned Maintenance Release Dates'
    http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
    ---------------------------------------------------------------
    

Temporary fix

Comments

APAR Information

  • APAR number

    IT04736

  • Reported component name

    WMQ BASE MULTIP

  • Reported component ID

    5724H7251

  • Reported release

    800

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2014-10-03

  • Closed date

    2014-10-10

  • Last modified date

    2015-03-06

  • APAR is sysrouted FROM one or more of the following:

    XX00229

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WMQ BASE MULTIP

  • Fixed component ID

    5724H7251

Applicable component levels

  • R800 PSY

       UP

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSYHRD","label":"IBM MQ"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.0.0.0","Edition":"","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]

Document Information

Modified date:
06 March 2015