IT17234: MQ hangs, reports failures from MQCONN, and memory exceptions when using LDAP authentication or authorization services

APAR status

• Closed as program error.

Error description

• MQ v8 configured with LDAP authentication or authorization, gets
  the following errors intermittently.
  
  AMQ5530: Error from LDAP authentication and authorization
  service
  EXPLANATION:
  The LDAP authentication and authorization service has failed.
  The  'ldap_search' call returned error -1 : 'Unknown error'.
  The context string is  'userid'.  Additional code is 0.
  
  In some observed cases, connection attempt appears to hang for a
  minute or so.
  
  In some observed cases, a Failure Data Capture (FDC) is
  generated with:
  
  Probe Id          :- XC515091
  Component         :- xlsRWMutexRelease
  Major Errorcode   :- xecL_W_LONG_LOCK_WAIT
  MQM Function Stack
  zlaMainThread
  zlaProcessMessage
  zlaProcessSPIRequest
  zlaSPIAdoptUser
  zsqSPIAdoptUser
  kpiSPIAdoptUser
  kqiAuthenticateUserForAdopt
  kqiAuthenticateUser
  gpiAuthenticateUser
  zfu_as_AuthenticateUser
  xlsRWMutexRelease
  xcsFFST
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  Queue managers configured to use LDAP authentication or
  authorization via AUTHINFO objects, where apps are connecting or
  using the authentication/authorization services concurrently.
  
  
  Platforms affected:
  MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  The queue manager was calling LDAP services concurrently,
  without adequate serialization between threads making those
  calls.
  
  Also, sometimes calls were being made to LDAP services with a
  null context handle, which caused SIGSEGV memory exceptions.
  

Problem conclusion

• The queue manager code has been improved so that LDAP services
  are called with adequate serialization between threads making
  those calls.  Also, some extra code has been added to ensure
  that the context handle is always initialized before calling the
  LDAP services.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v8.0       8.0.0.7
  v9.0 CD    9.0.3
  v9.0 LTS   9.0.0.2
  
  The latest available maintenance can be obtained from
  'WebSphere MQ Recommended Fixes'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
  
  If the maintenance level is not yet available information on
  its planned availability can be found in 'WebSphere MQ
  Planned Maintenance Release Dates'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WMQ BASE MULTIP

• Fixed component ID

  5724H7251

Applicable component levels

• R800 PSY

     UP