APAR status
Closed as program error.
Error description
After an upgrade to IBM MQ V9.3.0, the following error sequence occurred in the CHIN job log: CSQT975I CSQXDPSC Distributed Pub/Sub Fan Out Task has started CSQT975I CSQXDPSC Distributed Pub/Sub Command Task has started CSQT975I CSQXDPSC Distributed Pub/Sub Publish Task has started CSQX053E CSQXFFST Error information recorded in CSQSNAP data set CSQX053E CSQXFFST Error information recorded in CSQSNAP data set CSQT976I CSQXDPSC Distributed Pub/Sub Fan Out Task has stopped The eyecatcher for the CSQSNAP information includes: * X...XFFS* *psiInquireTopicString...........* *MOVR...$...3... X...XINS...3....* *lpiSPIInquireProxyTopicStrings..* ... * X...XFFSpsiProcessProxyS* *ubs.............MOVR...!...l...{* The CSQSNAP hex data includes 000007F3, which is hexadecimal for reason code 2035 MQRC_NOT_AUTHORIZED. The MSTR job log had: ACF04056 ACCESS TO RESOURCE ssid.SUBSCRIBE.SYSTEM.BASE.TOPIC TYPE RMQT BY ssidCHIN NOT AUTHORIZED A comparable RACF error is: ICH408I USER(ssidCHIN) GROUP(TASK ) NAME(MQ CHANNEL INITIATOR) ssid.SUBSCRIBE.SYSTEM.BASE.TOPIC CL(MXTOPIC ) PROFILE NOT FOUND - REQUIRED FOR AUTHORITY CHECKING ACCESS INTENT(READ ) ACCESS ALLOWED(NONE ) The same security error occurred at a prior MQ version, but it did not cause CSQT976I. The error handling was improved in V9.2.3 and higher. The task ending is working as designed. The part that is not working correctly is that the code does not handle the MQRC_NOT_AUTHORIZED return code correctly and instead issues multiple FFSTs. The root cause would be much easier to determine if an appropriate error message is issued instead. This APAR is to better handle this error. The documentation also needs an update to make the resource access requirements for SUBSCRIBE.SYSTEM.BASE.TOPIC more clear. Even after this APAR, you will need to give the CHIN read access to the SUBSCRIBE.SYSTEM.BASE.TOPIC resource. Additional keywords: ------------------- XFFSpsiInquireTopicString XFFSpsiProcessProxySubs
Local fix
N/A
Problem summary
**************************************************************** * USERS AFFECTED: All users of IBM MQ for z/OS Version 9 * * Release 3 Modification 0. * **************************************************************** * PROBLEM DESCRIPTION: When starting the channel initiator, * * two FFST's are produced in the job log * * and the distributed Pub/Sub fan out * * task ends shortly after starting. * **************************************************************** The code which handles the startup of the distributed Pub/Sub fan out task doesn't handle return code MQRC_NOT_AUTHORIZED from an associated MQI call, which causes FFST's to be produced.
Problem conclusion
The code has been changed to handle this scenario and output message CSQX036E in the channel initiator job log stating what the problem is. As a result, FFST's are no longer produced.
Temporary fix
Comments
APAR Information
APAR number
PH54416
Reported component name
IBM MQ Z/OS V9
Reported component ID
5655MQ900
Reported release
300
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2023-05-09
Closed date
2024-03-26
Last modified date
2024-03-26
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UI96246
Modules/Macros
CMQXZMUC CSQXSGET
Fix information
Fixed component name
IBM MQ Z/OS V9
Fixed component ID
5655MQ900
Applicable component levels
[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSYHRD","label":"IBM MQ"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"300","Line of Business":{"code":"LOB67","label":"IT Automation \u0026 App Modernization"}}]
Document Information
Modified date:
04 April 2024