A fix is available
APAR status
Closed as program error.
Error description
Message ICH408I is being issued if a message is being sent to MQ on z/OS V8 and contains a PASSTICKET in the MQIIH. The application name specified in PTKTAPPL for the STGCLASS is not handled correctly. . Additional symptoms: This fix applies to any MQ IMS Bridge or CICS Bridge application using passtickets. For the CICS-MQ Bridge: DFHMQ0749 <cics> CKBR nnnnn Authentication error. EIBRESP=70 EIBRESP2=2 Userid=<id> . The CICS Bridge message goes to the Dead Letter Queue (DLQ) with MQDLH_REASON F'402' (X'192') MQFB_CICS_NOT_AUTHORIZED . If the security manager is ACF2: ACF01006 A PASSWORD IS NOT ALLOWED FOR LOGONID <lid>
Local fix
A ++APAR is available.
Problem summary
**************************************************************** * USERS AFFECTED: All users of WebSphere MQ for z/OS Version 8 * * Release 0 Modification 0. * **************************************************************** * PROBLEM DESCRIPTION: Applications using passtickets when * * putting to an IMS Bridge queue get * * RACF message ICH408I indicating that * * the userid of the application has * * specified an invalid password. * * Message CSQ2005I with FEEDBACK=298 is * * also issued. * * This problem also affects the MQ-CICS * * Bridge. * **************************************************************** * RECOMMENDATION: * **************************************************************** An incorrect RACF check is being made against applications putting to an IMS Bridge queue residing on a STGCLASS which specifies a passticket application. The error only happens if the application's userid has READ access to the IMSXCF facility profile in RACF.
Problem conclusion
CSQHVRFY has been changed so that the correct RACF check is made against applications using passtickets for IMS Bridge queues. 000Y CSQHVRFY
Temporary fix
Comments
APAR Information
APAR number
PI51985
Reported component name
WMQ Z/OS 8
Reported component ID
5655W9700
Reported release
000
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2015-11-06
Closed date
2016-01-18
Last modified date
2016-03-02
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UI34510
Modules/Macros
CSQHVRFY
Fix information
Fixed component name
WMQ Z/OS 8
Fixed component ID
5655W9700
Applicable component levels
R000 PSY UI34510
UP16/02/03 P F602
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSYHRD","label":"IBM MQ"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.0","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]
Document Information
Modified date:
02 March 2016