IBM Support

IT31578: Allow usernames in CHLAUTH rules to be matched case-insensitively

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • Users who have a policy of case-insensitive username matching in
    their organisation found there was no explicit support for this
    in their CHLAUTH rules.
    

Local fix

  • It is recommended that you ensure the usernames in CLNTUSER are
    of the correct case, rather than use this option.
    

Problem summary

  • ****************************************************************
    USERS AFFECTED:
    Users who have a policy of case-insensitive username matching
    for their CHLAUTH rules.
    
    
    Platforms affected:
    MultiPlatform
    
    ****************************************************************
    PROBLEM DESCRIPTION:
    Functionality is added to the MQ code to allow a queue manager
    to make username matching within CHLAUTH rules case-insensitive.
    

Problem conclusion

  • Functionality is added to the MQ code to:
    - Allow the CLNTUSER in CHLAUTH TYPE(USERMAP) rules to be
    matched case-insensitively.
    - Allow the USERLIST in CHLAUTH TYPE(BLOCKUSER) rules to be
    matched case-insensitively.
    
    When this APAR fix has been applied (or a Fix Pack that includes
    it)...
    
    To enable the new behavior, add ChlauthIgnoreUserCase=YES in the
    Channels stanza of the qm.ini file.  If there is no Channels
    stanza, you will have to create one.  Refer to the Knowledge
    Center for details of adding stanzas to the qm.ini file.
    
    To enable the new behavior on the MQ Appliance, issue the
    following command, with your real queue manager name in the
    place of <YOUR-QMNAME>:
    
      setmqini -m <YOUR-QMNAME> -s Channels -k ChlauthIgnoreUserCase
    -v YES
    
    ---------------------------------------------------------------
    The fix is targeted for delivery in the following PTFs:
    
    Version    Maintenance Level
    v9.1 CD    9.1.5
    v9.1 LTS   9.1.0.5
    
    The latest available maintenance can be obtained from
    'WebSphere MQ Recommended Fixes'
    http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
    
    If the maintenance level is not yet available information on
    its planned availability can be found in 'WebSphere MQ
    Planned Maintenance Release Dates'
    http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
    ---------------------------------------------------------------
    

Temporary fix

Comments

APAR Information

  • APAR number

    IT31578

  • Reported component name

    IBM MQ BASE MP

  • Reported component ID

    5724H7271

  • Reported release

    910

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2020-01-20

  • Closed date

    2020-03-19

  • Last modified date

    2020-05-05

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    IBM MQ BASE MP

  • Fixed component ID

    5724H7271

Applicable component levels

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSYHRD","label":"IBM MQ"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
05 May 2020