IT34368: Defining MQ RDQM HA cluster using 'rdqmadm -c" might fail with AMQ6118 error

APAR status

• Closed as program error.

Error description

• When defining MQ RDQM HA cluster using the 'rdqmadm -c' command,
  the command might
  fail with the following error and repeated messages:
  
  [mqm@xxxx root]$ sudo /opt/mqm/bin/rdqmadm -c
  AMQ6118S: An internal IBM MQ error has occurred (0)
  Command '/opt/mqm/bin/rdqmadm' run with sudo.
  Command '/opt/mqm/bin/rdqmadm' run with sudo.
  Command '/opt/mqm/bin/rdqmadm' run with sudo.
  Command '/opt/mqm/bin/rdqmadm' run with sudo.
  Command '/opt/mqm/bin/rdqmadm' run with sudo.
  Command '/opt/mqm/bin/rdqmadm' run with sudo.
  Command '/opt/mqm/bin/rdqmadm' run with sudo.
  ...
  
  The error is breaking the process that creates the HA cluster
  across the
  three RDQM nodes.
  
  If traced, the following lines may be seen while performing
  authorization checks:
  
   20:38:17.679776     6622.1           :       ---}
  rdaGetAdmArgs rc=OK
   20:38:17.679784     6622.1           :       --{
  zslRDCheckAuthorization
   20:38:17.679791     6622.1           :            ruid(0)
  euid(988) suid(988)
   20:38:17.679796     6622.1           :            rgid(982)
  egid(1001) sgid(1001)
  
  The rgid likely to show a non zero value in the trace snippet.
  

Local fix

• Manually changing the rgid for root user to zero and login back
  using root and then retrying the operation may resolve the
  issue.
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  MQ RDQM users who have set real group id of the root user as
  non-zero.
  
  
  Platforms affected:
  Linux on x86-64
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  The IBM MQ administrative logic incorrectly assumed that the
  real group id (rgid) for the root user is always zero.
  If the real group id of the root user was set to non-zero then
  RDQM commands failed and entered a recursive loop.
  

Problem conclusion

• Code change was made to the RDQM administrative utilities to
  remove the assumption that the real group ID of the root user is
  always zero.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v9.2 LTS   9.2.0.5
  v9.x CD    9.2.2
  
  The latest available maintenance can be obtained from
  'WebSphere MQ Recommended Fixes'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
  
  If the maintenance level is not yet available information on
  its planned availability can be found in 'WebSphere MQ
  Planned Maintenance Release Dates'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  IBM MQ BASE MP

• Fixed component ID

  5724H7271

Applicable component levels