IBM Support

PI65413: IBM MQ V900 WHEN USING CONNAUTH, ENABLED USERIDS ARE NOT FORCED TO UPPERCASE.

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • IBM MQ V900  When using CONNAUTH, enabled Userids are not forced
    to uppercase.
    .
    Additional keywords:
    2035 MQRC_NOT_AUTHORIZED
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * All users of IBM MQ for z/OS Version 9 Release 0             *
    * Modification 0.                                              *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * Client connection authorisation check fails with RACF        *
    * message ICH408I USER NOT RACF-DEFINED because the userid is  *
    * passed in lower case.                                        *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * n/a                                                          *
    ****************************************************************
    A queue manager can be configured to use a supplied user ID and
    password to check if a connecting client has authority to access
    resources. With AUTHINFO attributes AUTHTYPE(IDPWOS) and
    CHCKCLNT set as OPTIONAL or REQUIRED, and if the security sub
    system in use is RACF, then when a lower case userid is passed
    by the client, application verification fails. The RACF profile
    for the userid cannot be found since userids in RACF must be
    upper case.
    

Problem conclusion

  • Code has been added to CSQMCUWT to convert the userid to upper
    case on a client connection, when a new service parameter is
    active. Additionally if RACF is not using mixed case passwords
    the password will also be converted to upper case. Contact IBM
    support for information on how to activate this new capability.
    

Temporary fix

Comments

  • ×**** PE18/05/18 FIX IN ERROR. SEE APAR PI98134  FOR DESCRIPTION
    

APAR Information

  • APAR number

    PI65413

  • Reported component name

    MQ Z/OS V9

  • Reported component ID

    5655MQ900

  • Reported release

    000

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2016-07-06

  • Closed date

    2016-08-18

  • Last modified date

    2018-06-26

  • APAR is sysrouted FROM one or more of the following:

    PI63228

  • APAR is sysrouted TO one or more of the following:

    UI40216 010PC2Ÿ

Modules/Macros

  • CSQMCUWT
    

Fix information

  • Fixed component name

    MQ Z/OS V9

  • Fixed component ID

    5655MQ900

Applicable component levels

  • R000 PSY UI40216

       UP16/10/14 P F610

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSYHRD","label":"IBM MQ"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"9.0","Edition":"","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]

Document Information

Modified date:
26 June 2018