IBM Support

IT21586: IBM MQ: AMQ8009 authorization errors are still generated for topics after setting MQS_REPORT_NOAUTH to FALSE

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • After setting the MQS_REPORT_NOAUTH environment variable to
    FALSE, as expected, the AMQ8077 authorization errors for MQ
    objects like queues and channels are no longer reported when an
    entity has insufficient authority to access a MQ object.
    However, AMQ8009 authorization errors are still reported when
    an entity has insufficient authority to access a topic.
    

Local fix

Problem summary

  • ****************************************************************
    USERS AFFECTED:
    Users of MQ having insufficient authority for a topic and trying
    to access it.
    
    
    Platforms affected:
    MultiPlatform
    
    ****************************************************************
    PROBLEM DESCRIPTION:
    A logic omission in the IBM MQ queue manager code meant that the
    authorization error suppression logic was not correctly applied
    to AMQ8009 messages.
    

Problem conclusion

  • The IBM MQ code has been extended so that reporting of AMQ8009
    messages is inhibited once MQS_REPORT_NOAUTH is set to "FALSE"
    followed by a queue manager restart.
    
    ---------------------------------------------------------------
    The fix is targeted for delivery in the following PTFs:
    
    Version    Maintenance Level
    v8.0       8.0.0.11
    v9.0 LTS   9.0.0.6
    v9.1 CD    9.1.1
    v9.1 LTS   9.1.0.1
    
    The latest available maintenance can be obtained from
    'WebSphere MQ Recommended Fixes'
    http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
    
    If the maintenance level is not yet available information on
    its planned availability can be found in 'WebSphere MQ
    Planned Maintenance Release Dates'
    http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
    ---------------------------------------------------------------
    

Temporary fix

Comments

APAR Information

  • APAR number

    IT21586

  • Reported component name

    WMQ BASE MULTIP

  • Reported component ID

    5724H7251

  • Reported release

    800

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2017-07-25

  • Closed date

    2018-09-20

  • Last modified date

    2018-09-20

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WMQ BASE MULTIP

  • Fixed component ID

    5724H7251

Applicable component levels

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSYHRD","label":"IBM MQ"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.0.0.0","Edition":"","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]

Document Information

Modified date:
20 September 2018