PH59144: CSQUTIL JOB USING COMMAND WITH SET CHLAUTH WILL NOT ALWAYS CATCH INVALID IP ADDRESS RANGES

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• Testing has shown, that a CSQUTIL Job using COMMAND with SET
  CHLAUTH, will not always catch invalid IP address ranges.
  For example -
  In the correctly  WORKING  case, if we enter:
    SET CHLAUTH ....  ADDRESS('this is an invalid address'), we
  receive the proper exception:
        CSQM192I  +XXXX CSQMSCA ADDRESS ('THIS IS AN INVALID
  ADDRESS') IS INVALID
  .
  However, if we put in a mixed-case ADDRESS parm, like:
         ADDRESS('10.57.xyz24.1-10.57.227.254')
  ( which should be invalid, as IP Addresses typically are ALL
  numeric ) it succeeds, contrary to MQ documentation for the
  ADDRESS parm.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of IBM MQ for z/OS Version 9       *
  *                 Release 2 Modification 0,                    *
  *                 Release 3 Modification 0 and                 *
  *                 Release 4 Modification 0.                    *
  ****************************************************************
  * PROBLEM DESCRIPTION: Some invalid address values are not     *
  *                      rejected when using the 'SET CHLAUTH'   *
  *                      command.                                *
  *                                                              *
  *                      For example:                            *
  *                      ADDRESS('10.57.xyz24.1-10.57.227.254')  *
  *                      or                                      *
  *                      ADDRESS('1.2.3.4-1.2.3.5')              *
  ****************************************************************
  Some invalid address values are not rejected when using the
  'SET CHLAUTH' command.
  
  For example:
  ADDRESS('10.57.xyz24.1-10.57.227.254')
  or
  ADDRESS('1.2.3.4-1.2.3.5')
  
  After determining that the ADDRESS value is not a valid IP
  address MQ will check if the value is a valid hostname address.
  Currently MQ does not correctly check that any digits in the
  top-level domain ADDRESS value have been correctly escaped with
  'XN--'. This leads to many invalid hostname addresses being
  accepted by MQ.
  

Problem conclusion

• Additional checking has been added to prevent invalid hostname
  addresses being accepted by the 'SET CHLAUTH' MQ command.
  The 'XN--' escape sequence must be used for hostname addresses
  containing digits in the top level domain.
  

Temporary fix

Comments

• ×**** PE24/12/23 FIX IN ERROR. SEE APAR PH64639  FOR DESCRIPTION
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI98788 UI98789 UI98790

Modules/Macros

• CMQXRSCL CSQXRSCL
  

Fix information

• Fixed component name

  IBM MQ Z/OS V9

• Fixed component ID

  5655MQ900

Applicable component levels

• R200 PSY UI98790

     UP24/11/16 P F411

• R300 PSY UI98789

     UP24/11/16 P F411

• R400 PSY UI98788

     UP24/11/16 P F411

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.