IBM Support

IT29743: MQSI COMMANDS STRIP OUT EMBEDDED QUOTES AROUND PASSWORD BOX IN A JDBC CONNECTION URL TEMPLATE.

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as requirement.

Error description

  • Double quotes around a password box in the connection URL
    template property of a JDBC Configurable Service are stripped
    out by the commandline handler, when configured using the
    mqsicreateconfigurableservice or mqsichangeproperties commands.
    .
    This results in a failed connection for the JDBC Configurable
    Service.
    

Local fix

  • (1) Perform the configuration via the Web Administration
        Console, which allows embedded quotes.
    .
    (2) Use a backward slash to escape the quote character in the
        JDBC connection URL template when using the mqsi
        commandline, as in the following example:
    .
    mqsichangeproperties  -c JDBCProviders -o
     -n connectionUrlFormat -v "jdbc:oracle:thin:[user]/\
    "[password]\"@[serverName]:[portNumber]/
    [connectionUrlFormatAttr1]"
    .
      Where :
           DSN is the JDBC datasource name.
    .
           The escape \" characters surround the [password] box. At
           runtime the escape characters are replaced by single "
           quotes characters.
    .
           The secure password with embedded special characters will
           be configured in the normal way using mqsisetdbparms.
           This creates the securityIdentity property for the JDBC
           Configurable Service.
    

Problem summary

  • ****************************************************************
    USERS AFFECTED:
    All users of JDBCProviders Configurable Services where special
    characters need to be embedded in the connectionUrlFormat and
    related attribute properties.
    
    
    Platforms affected:
    z/OS, MultiPlatform
    
    ****************************************************************
    PROBLEM DESCRIPTION:
    Double quotes around a password box in the connection URL
    template property of a JDBC Configurable Service are stripped
    out by the mqsi commandline handler, when configured using the
    mqsicreateconfigurableservice or mqsichangeproperties commands.
    .
    This results in a failed connection for the JDBC Datasource
    associated with the JDBC Configurable Service.
    
    Although a backward slash can be used to escape the quote
    characters in the JDBC connection URL template, such as "\"",
    this does not always make the intention explicit, nor is it easy
    to maintain.
    

Problem conclusion

  • The product now allows XML/HTML style substitution strings as an
    alternative escaping for special characters in a JDBCProviders
    connectionUrlFormat property,  and also all the other
    connectionUrlFormatAttr.. properties.
    
    XML/HTML style substitution strings are used to enable special
    characters to be embedded in the JDBCProviders property values
    using the mqsichangeproperties and mqsicreateconfigurableservice
    commands.
    
    This table shows the substitution strings supported by this
    change. The strings in the Substitutes column can be used in
    place of the corresponding strings in the Actuals column, when
    constructing the connectionUrlFormat value.
    
    Substitutes        Actuals
    
    "                  "
    &                 &
    >                      >
    <                       <
    &apos;                 '
    &tilde;                 &#126;
    
    To  embed double quotes around the password box in the value for
    a connectionUrlFormat property the following syntax can be used
    instead the default escaping mechanism. ( An Oracle Datasource
    is used in this example).
    
    > mqsichangeproperties <Broker> -c JDBCProviders -o Oracle -n
    connectionUrlFormat
         -v
    "jdbc:oracle:thin:[user]/"[password]"@[serverName]:[portNumber]:
    [connectionUrlFormatAttr1]"
    
    Where the product runtime is required to use a
    connectionUtlFormat with the format:
    
    
    jdbc:oracle:thin:[user]/"[password]";@[serverName]:[portNumber]:
    [connectionUrlFormatAttr1]
    
    Note that the -v value must be wrapped with double quotes to be
    accepted by the mqsi commands.
    

Temporary fix

Comments

  • IT29743 closed as requirement
    

APAR Information

  • APAR number

    IT29743

  • Reported component name

    INTEGRATION BUS

  • Reported component ID

    5724J0540

  • Reported release

    A00

  • Status

    CLOSED REQ

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2019-07-16

  • Closed date

    2020-02-14

  • Last modified date

    2020-02-14

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSNQK6","label":"IBM Integration Bus"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"10.0","Edition":"","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]

Document Information

Modified date:
14 February 2020