IV35845: RC 2035 from MQSUB when subscribing to a remotely hosted cluster topic object. A local generic profile exists but is ignored.

WebSphere MQ V7.5 Fix Pack 7.5.0.2
WebSphere MQ V7.0 Fix Pack 7.0.1.11
Fix Pack 7.1.0.4 for WebSphere MQ V7.1
WebSphere MQ v7.5.0.2 Hypervisor for RHEL

APAR status

• Closed as program error.

Error description

• The non MQ administrator gets an error return from MQSUB with
  reason code 2035 (MQRC_NOT_AUTHORIZED) when trying to subscribe
  to a remote clustered topic.  A generic profile (example:
  'T1.**') exists locally, and is expected to grant authority for
  this user. However, the queue manager ignored this generic
  profile, and instead returned from the MQSUB with reason code
  2035.
  
  For example, using the sample program amqssubc to subscribe to
  a topic that is clustered and exists on a remote queue manager
  QMA:
  amqssubc t1/2/3 QMB
  Sample AMQSSUBA start
  MQSUB ended with reason code 2035
  unable to subscribe to topic
  Sample AMQSSUBA end
  
  This APAR only applies when generic profiles are created
  locally and are expected to be used to grant authority to this
  user for a remotely defined clustered topic object.
  

Local fix

• The MQ Administrator for QMB can issue a more specific setmqaut
  command:
    setmqaut -m QMB -n 'T1.2.3' -t topic -g mqusers +pub +sub
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  Users who are operating a pub/sub cluster, who want to use
  generic profiles to manage authorities for applications to
  access the topic objects.
  
  Platforms affected:
  All Distributed (iSeries, all Unix and Windows)
  ****************************************************************
  PROBLEM SUMMARY:
  Generic profiles were being ignored when evaluating whether a
  user has the authority to open (or subscribe) to a clustered
  topic object.
  

Problem conclusion

• The WebSphere MQ product code has been updated to perform the
  necessary checks on generic profiles when evaluating whether a
  user has the authority to open (or subscribe) to a clustered
  topic object.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
                     v7.0
  Platform           Fix Pack 7.0.1.11
  --------           --------------------
  Windows            7.0.1.11
  AIX                7.0.1.11
  HP-UX (PA-RISC)    7.0.1.11
  HP-UX (Itanium)    7.0.1.11
  Solaris (SPARC)    7.0.1.11
  Solaris (x86-64)   7.0.1.11
  iSeries            7.0.1.11
  Linux (x86)        7.0.1.11
  Linux (x86-64)     7.0.1.11
  Linux (zSeries)    7.0.1.11
  Linux (Power)      7.0.1.11
  
                     v7.1
  Platform           Fix Pack 7.1.0.4
  --------           --------------------
  Windows            7.1.0.4
  AIX                7.1.0.4
  HP-UX (Itanium)    7.1.0.4
  Solaris (SPARC)    7.1.0.4
  Solaris (x86-64)   7.1.0.4
  iSeries            7.1.0.4
  Linux (x86)        7.1.0.4
  Linux (x86-64)     7.1.0.4
  Linux (zSeries)    7.1.0.4
  Linux (Power)      7.1.0.4
  
  Platform           v7.5
  --------           --------------------
  Multiplatforms     7.5.0.2
  
  The latest available maintenance can be obtained from
  'WebSphere MQ Recommended Fixes'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
  
  If the maintenance level is not yet available information on
  its planned availability can be found in 'WebSphere MQ
  Planned Maintenance Release Dates'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WMQ LIN X86-64

• Fixed component ID

  5724H7230

Applicable component levels

• R701 PSY

     UP