Fixes are available
APAR status
Closed as program error.
Error description
WebSphere MQ V7.1 runs on Windows 7, Vista or Server 2008 and it participates in transactions coordinated by MSDTC (Microsoft Distributed Transaction Coordinator). The MSDTC service account is "NETWORK SERVICE". When running a COM+ server application, it fails with error MQRC=2354 (MQRC_UOW_ENLISTMENT_ERROR). In addition the following error message is written in AMQERRxx.LOG: ================================================================ AMQ8074: Authorization failed as the SID 'S-1-5-20' does not match the entity 'MACHINE_NAME$'. EXPLANATION: The Object Authority Manager received inconsistent data - the supplied SID does not match that of the supplied entity information. ACTION: Ensure that the application is supplying valid entity and SID information. ================================================================
Local fix
1. Replace "NETWORK SERVICE" account of MSDTC service with another account. 2. Set +connect authority for the account of MSDTC: setmqaut -m qmgrname -t qmgr -p MSDTC_account +connect
Problem summary
**************************************************************** USERS AFFECTED: Users of MSDTC as a transaction coordinator on Windows 7, Vista or Server 2008. Platforms affected: Windows **************************************************************** PROBLEM SUMMARY: The user name returned by the operating system for a process running under the "NETWORK SERVICE" user changed in Windows 7, Vista and Server 2008 to "MACHINE_NAME$" where MACHINE_NAME is the name of the machine the process is running on. This caused MQ authority checking to fail for the MSDTC process.
Problem conclusion
MQ has been modified to recalculate the user name from the returned SID, when the "MACHINE_NAME$" user name is returned. The SID correctly resolves to "NETWORK SERVICE" and results in the same behaviour running on earlier Windows versions. --------------------------------------------------------------- The fix is targeted for delivery in the following PTFs: v7.0 Platform Fix Pack 7.0.1.9 -------- -------------------- Windows U200337 v7.1 Platform Fix Pack 7.1.0.1 -------- -------------------- Windows U200338 The latest available maintenance can be obtained from 'WebSphere MQ Recommended Fixes' http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037 If the maintenance level is not yet available information on its planned availability can be found in 'WebSphere MQ Planned Maintenance Release Dates' http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309 ---------------------------------------------------------------
Temporary fix
Comments
APAR Information
APAR number
IC81688
Reported component name
WMQ WINDOWS V7
Reported component ID
5724H7220
Reported release
710
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2012-02-28
Closed date
2012-03-26
Last modified date
2012-03-28
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
WMQ WINDOWS V7
Fixed component ID
5724H7220
Applicable component levels
R710 PSY
UP
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSDEZSF","label":"IBM WebSphere MQ Managed File Transfer for z\/OS"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"710","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]
Document Information
Modified date:
31 March 2023