PI14743: IF ALTERNATE ID CANNOT ACCESS BROKER DIRECTORIES THE EG ABENDS.

APAR status

• Closed as program error.

Error description

• PM85404 introduces the ability to start an execution group
  address space using a different user ID to the broker. If this
  alternate ID does not have access to the broker directories, the
  EG
  abends and dumps with the following stack trace:
  
  ImbNamedMutex::ImbNamedMutex(const ImbWstring&)
  ImbConfigStore::initialise(const ImbWstring&,const ImbWstrin
  ImbConfigStore::ImbConfigStore(ImbStartParameters&,ImbNamedL
  ImbMain::start(ImbStartParameters&)
  
  In addition the JOBLOG reports RACF ICH408I messages, for
  example:
  
  ICH408I USER(MQ91UID ) GROUP(TSOUSER ) NAME( FRED) 947
   /u/wmqi91/broker/common/log/MQ91BRK.14fb8e0a-4301-0000-0080-a
   fac3b0e2ab2.trace.bin.0
   CL(DIRACC ) FID(0000005F000000080000000000000000)
   INSUFFICIENT AUTHORITY TO OPEN
   ACCESS INTENT(-W-) ACCESS ALLOWED(GROUP R-X)
   EFFECTIVE UID(0000000375) EFFECTIVE GID(0000000005)
  
  The admin agent will continue to try to start the EG and
  results in an excessive number of dumps.
  
  
  
  Additional Symptom(s) Search Keyword(s):
  

Local fix

• Correct the alternate user IDs access to the relevant broker
  directories.
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All users of WebSphere Message Broker or IBM Integration Bus
  using an alternate ID to start an Execution Group.
  
  
  Platforms affected:
  z/OS
  
  ****************************************************************
  PROBLEM SUMMARY:
  PM85404 introduces the ability to start a z/OS execution group
  address space using a different user ID to the broker. If this
  alternate ID does not have access to the broker directories, the
  EG abends.
  
  There are a number of resource name changes between WebSphere
  Message Broker and IBM Integration Bus Version 9.0. For details
  visit
  http://pic.dhe.ibm.com/infocenter/wmbhelp/v9r0m0/topic/com.ibm.e
  tools.mft.doc/bb23814_.htm
  

Problem conclusion

• The product logs a message, rather than abends, when the
  alternate ID does not have permission to access the required
  broker directories.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v7.0       7.0.0.8
  v8.0       8.0.0.5
  v9.0       9.0.0.3
  
  The latest available maintenance can be obtained from:
  http://www-01.ibm.com/support/docview.wss?rs=849&uid=swg27006041
  
  If the maintenance level is not yet available, information on
  its planned availability can be found on:
  http://www-1.ibm.com/support/docview.wss?rs=849&uid=swg27006308
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEB MB Z/OS

• Fixed component ID

  5655V6000

Applicable component levels

• R700 PSY

     UP