IT22165: MQ .NET client delay in obtaining SID for specified user on large network

APAR status

• Closed as program error.

Error description

• MQ Dot Net Client connects to queue manager slowly. From the MQ
  Client trace, it could be seen that MQ internally tries to set a
  specific user credentials in to the UID structure and
  MQUID.SetUser(String,String) takes several seconds. This problem
  happens on large network.
  
  17:47:23.833860   6032.1     (10)-----------{
  MQUID.SetUser(String,String) inputs  [usr1] [dom1]
  17:47:32.068386   6032.1      SID for name='usr1' and
  domain='dom1' is
  'S-1-5-21-1111111111-2222222222-3333333333-4444444'
  17:47:32.068386   6032.1     (10)-----------}
  MQUID.SetUser(String,String) rc=OK
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All MQ .Net client users on a large network will be affected
  
  
  Platforms affected:
  Windows
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  MQ internally uses Win32_UserAccount  WMI class which invokes
  the specified WMI Query and returns the SID for the specified
  user .
  
  As per the following MSDN doc
  https://msdn.microsoft.com/en-us/library/aa394507(v=vs.85).aspx
  
  Note: Because both the Name and Domain are key properties,
  enumerating Win32_UserAccount on a large network can negatively
  affect performance.
  

Problem conclusion

• Code has been modified to query for the SID which avoids the
  delay on large network. An environment variable
  "AMQ_COMPUTE_SID" when set to "TRUE", will take a different path
  to retrieve the SID other than using Win32_UserAccount  WMI
  class.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v8.0       8.0.0.10
  v9.0 LTS   9.0.0.5
  v9.1 CD    9.1.1
  v9.1 LTS   9.1.0.1
  
  The latest available maintenance can be obtained from
  'WebSphere MQ Recommended Fixes'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
  
  If the maintenance level is not yet available information on
  its planned availability can be found in 'WebSphere MQ
  Planned Maintenance Release Dates'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WMQ BASE MULTIP

• Fixed component ID

  5724H7251

Applicable component levels