APAR status
Closed as program error.
Error description
The fteMigrateAgent command is failing on z/OS with error BFGCL0502E. . BPXM023I (xxxxxx) BFGCL0502E: You are not authorized to perform the requested operation. The command did not check whether the user was a member of the group named in the BFG_GROUP_NAME environment variable; When trace was activated no trace files were written. Additional Symptom(s) Search Keyword(s):
Local fix
The problem can be avoided by adding the user into the mqm group or (if practical) removing the mqm group from the system.
Problem summary
**************************************************************** USERS AFFECTED: This issue affects users of IBM MQ Managed File Transfer (MFT) V8.0 on z/OS who are migrating from an installation of MQ WebSphere MQ File Transfer Edition (FTE) V7.0.4 or earlier in the circumstance where a group named mqm (or MQM) is defined on the system, and the user who is running the fteMigrateAgent command is not a member of the mqm group. Platforms affected: z/OS **************************************************************** PROBLEM DESCRIPTION: There were two parts to the problem. First: Trace was not initialised until after the fteMigrateAgent command had checked to see if the user was an administrator, which meant the check was not traced. Second: When the fteMigrateAgent command checked to see if the user was an administrator it detected that the mqm group existed and because the user was not a member of the group the command incorrectly issued error BFGCL0502E and terminated. The problem was caused by a logic error which prevented the command from going on to check whether the user was a member of the group named in the BFG_GROUP_NAME environment variable and then proceeding with the migration. There is no requirement to have a mqm group for MFT on z/OS so this checking was unnecessarily strict.
Problem conclusion
Firstly the command has been updated to ensure that the check to see if the user is an administrator is traced. The command has also been updated so that if the user is not a member of the mqm group (or if there is no mqm group) then the command will go on to check to whether a group has been named in the BFG_GROUP_NAME environment variable, and whether the user is a member of that group. In summary, after applying this fix the user must satisfy (at least) one of these conditions in order to run the migrate command on z/OS: - Be a member of the mqm group (if the mqm group exists); - Be a member of the group named in the BFG_GROUP_NAME environment variable (if one is named); - Have no value set in the BFG_GROUP_NAME environment variable. --------------------------------------------------------------- The fix is targeted for delivery in the following PTFs: Version Maintenance Level v8.0 8.0.0.6 v9.0 CD 9.0.1 v9.0 LTS 9.0.0.1 The latest available FTE maintenance can be obtained from 'Fix List for WebSphere MQ File Transfer Edition 7.0' http://www-01.ibm.com/support/docview.wss?uid=swg27015313 The latest available MQ maintenance can be obtained from 'WebSphere MQ Recommended Fixes' http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037 If the maintenance level is not yet available information on its planned availability can be found in 'WebSphere MQ Planned Maintenance Release Dates' http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309 ---------------------------------------------------------------
Temporary fix
Comments
APAR Information
APAR number
PI61361
Reported component name
WMQ MFT Z/OS
Reported component ID
5655MFT00
Reported release
800
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2016-04-25
Closed date
2016-05-24
Last modified date
2017-06-01
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
WMQ MFT Z/OS
Fixed component ID
5655MFT00
Applicable component levels
R800 PSY
UP
[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSYHRD","label":"IBM MQ"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.0","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]
Document Information
Modified date:
01 June 2017