IBM Support

PI09330: DURING XA_RECOVER REQUEST BETWEEN MEMBERS OF A QGS RECEIVED AN 'XA_RECOVER' HAS FAILED WITH ERRORCODE '-3'.

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • During the handling of xa_recover requests between
    members of a QSG (queue-sharing group), WMQ
    inadvertently required authorization for its processing.
    The security checks were incorrectly being made for
    the Inquire Connection PCF command when they were
    issued by the internal processes.
    .
    The error was recorded in the WebSphere AppServer
    Servant Region (SR) job log and ffdc log as:
    .
    WTRN0037W: The transaction service encountered an error
    on an xa_recover operation.
    .
    The Servant Region  logs show the WTRN0037W errors and
    have associated FFDC logs:
    
    Trace: 2014/01/06 13:46:53.236 01 t=9BDE88 c=UNK
       ThreadId: 0000001c
       FunctionName: com.ibm.ws.Transaction.JTA.XARminst
       SourceId: com.ibm.ws.Transaction.JTA.XARminst
       Category: SEVERE
       ExtendedMessage:
       BBOO0220E: WTRN0037W: The transaction service
    encountered an error on an xa_recover operation.
    The resource was
    com.ibm.ejs.jms.JMSManagedSession$JMSXAResource@55fe55fe.
    The error code was XAER_RMERR. The exception stack
    trace follows:
    javax.tra nsaction.xa.XAException:
    The method 'xa_recover' has failed with errorCode '-3'.
    at com.ibm.mq.jmqi.JmqiXAResource.recover
       (JmqiXAResource.java:676)
    at com.ibm.ejs.jms.JMSManagedSession$JMSXAResource.recover
      (JMSManagedSession.java:1465)
    at com.ibm.ws.Transaction.JTA.XARminst.recover
       (XARminst.java:141)
    at com.ibm.ws.Transaction.JTA.XARecoveryData.recover
       (XARecoveryData.java:630)
    at com.ibm.ws390.tx.XARecoveryAgentImpl.
        rollbackUnknownTransactions
     (XARecoveryAgentImpl.java:732)
    at com.ibm.ws390.tx.XARecoveryAgentImpl$
        XARecoveryAgentThread.run
      (XARecoveryAgentImpl.java:359)
    ..
    Additional Symptom(s) Search Keyword(s):
    .
    javax.tra nsaction.xa.XAException
    BBOO0220E
     WTRN0037W
    XAER_RMERR
    

Local fix

  • Define the hlq.DISPLAY.CONNPCF profile to allow the
    Inquire Connection commands to complete.
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: All users of WebSphere MQ for z/OS Version 7 *
    *                 Release 1 Modification 0.                    *
    ****************************************************************
    * PROBLEM DESCRIPTION: XA_RECOVER requests for Group Units of  *
    *                      recovery fail if the queue manager      *
    *                      userid does not have authority to issue *
    *                      DISPLAY CONN PCF commands.              *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    If an application has connected to a QSG and left in-doubt units
    of work, then it should be possible to resolve these units of
    work from another queue manager in the QSG.
    The second queue manager will query all other queue managers in
    the QSG to see if they have in-doubt units of work by issuing
    each one with a MQCMD_INQUIRE_CONNECTION PCF message.
    However this command will fail with a security error if a
    profile of the type  hlq.DISPLAY.CONNPCF has been defined on
    the target queue manager.
    It isn't necessary to check for security between queue managers
    in the same queue sharing group.
    

Problem conclusion

  • When a MQCMD_INQUIRE_CONNECTION originates from CSQMCRGG, the
    Group Units of Recovery service task, then the security check
    will be bypassed.
    100Y
    CSQMCRGG
    CSQ9SCNN
    CSQ9SCNP
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI09330

  • Reported component name

    WMQ Z/OS V7

  • Reported component ID

    5655R3600

  • Reported release

    100

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2014-01-10

  • Closed date

    2014-02-20

  • Last modified date

    2014-05-02

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UI15331

Modules/Macros

  • CSQMCRGG CSQ9SCNN CSQ9SCNP
    

Fix information

  • Fixed component name

    WMQ Z/OS V7

  • Fixed component ID

    5655R3600

Applicable component levels

  • R100 PSY UI15331

       UP14/04/08 P F404

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.1","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
02 May 2014