IT28666: MQ Client with client-side security exit reports invalid CLNTUSER value in AMQ9777 error

APAR status

• Closed as program error.

Error description

• An MQ Client application used a CLNTCONN channel with a
  client-side exit to connect to queue manager with CONNAUTH
  enabled, CHLAUTH enabled, and the qm.ini setting
  ChlAuthEarlyAdopt=Y set.  The client passed an MQCSP structure
  with no userid and the connection failed (as expected) with the
  error:
  
  = = = = = = = = = = = = = = = = = = = =
    AMQ9777: Channel was blocked
  
  The inbound channel '' was blocked from address
  '' because the active values of the channel matched
  a record configured with USERSRC(NOACCESS). The active values of
  the channel were 'CLNTUSER('mqm').
  = = = = = = = = = = = = = = = = = = = =
  
  The connection *should* have failed in this way but no client
  user
  value had been passed so the CLNTUSER value was incorrect.
  It should have read: "CLNTUSER()"
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  Users of MQ V8 and later who connect client applications with
  client-side exits to qmgrs with CONNAUTH, CHLAUTH and
  ChlAuthEarlyAdopt=Y enabled.
  
  
  Platforms affected:
  MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  A logic error in the MQ channel code was incorrectly setting the
  passed user to either 'mqm' or 'root' when no user ID was passed
  when clients connected to the channel.
  

Problem conclusion

• The logic error has been fixed to ensure the value in the
  message is displayed correctly.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v8.0       8.0.0.13
  v9.0 LTS   9.0.0.8
  v9.1 CD    9.1.3
  v9.1 LTS   9.1.0.3
  
  The latest available maintenance can be obtained from
  'WebSphere MQ Recommended Fixes'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
  
  If the maintenance level is not yet available information on
  its planned availability can be found in 'WebSphere MQ
  Planned Maintenance Release Dates'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  IBM MQ BASE MP

• Fixed component ID

  5724H7251

Applicable component levels