IT36438: IBM MQ AMQ8079 warning message "ACTION" section is incomplete

APAR status

• Closed as program error.

Error description

• Currently the AMQ8079 displays this text
  
  MESSAGE:
  Access was denied when attempting to retrieve group membership
  information for
  user '<insert one>'.
  
  EXPLANATION:
  IBM MQ, running with the authority of user '<insert two>', was
  unable to retrieve group membership information for the
  specified user.
  ACTION:
  Ensure Active Directory access permissions allow user '<insert
  two>' to read group memberships for user '<insert one>'.
   To retrieve group membership information for a domain user, MQ
  must run with the authority of a domain user and a domain
  controller must be available.
  
  It omits another potential cause relating to the trust between
  cross
  domain users and network access policy.
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All IBM MQ users on Windows configuring domain users for MQ
  Service
  
  
  Platforms affected:
  Windows
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  AMQ8079 message omits other potential causes.
  

Problem conclusion

• AMQ8079 message now includes 2 other potential causes.
  1) When the user configured in MQ Service is from one domain
  (e.g: dom1\user1) and when the user attempting to administer MQ
  is from other domain (e.g: dom2\user2), if required trust
  between them are not available AMQ8079 could be reported. Ensure
  trust required between these two domains (between dom1 and dom2)
  are in place.
  2) Computers beginning with Windows 10 version 1607 and Windows
  Server 2016 are more restrictive when clients are restricted
  remote calls to SAM AMQ8079 could be reported. Ensure clients
  are allowed to make remote calls to SAM.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v9.1 LTS   9.1.0.11
  v9.2 LTS   9.2.0.5
  v9.x CD    9.2.5
  
  The latest available maintenance can be obtained from
  'WebSphere MQ Recommended Fixes'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
  
  If the maintenance level is not yet available information on
  its planned availability can be found in 'WebSphere MQ
  Planned Maintenance Release Dates'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  IBM MQ BASE MP

• Fixed component ID

  5724H7271

Applicable component levels