IBM Support

PI63228: WMQ V800 WHEN USING CONNAUTH, ENABLED USERIDS ARE NOT FORCED TOUPPERCASE.

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • WMQ V800  When using CONNAUTH, enabled Userids are not forced to
    uppercase.
    .
    Additional keywords:
    2035 MQRC_NOT_AUTHORIZED
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED: All users of WebSphere MQ for z/OS Version 8 *
    *                 Release 0 Modification 0.                    *
    ****************************************************************
    * PROBLEM DESCRIPTION: Client connection authorisation check   *
    *                      fails with RACF message ICH408I USER    *
    *                      NOT RACF-DEFINED because the userid is  *
    *                      passed in lower case.                   *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    A queue manager can be configured to use a supplied user ID and
    password to check if a connecting client has authority to access
    resources. With AUTHINFO attributes AUTHTYPE(IDPWOS) and
    CHCKCLNT set as OPTIONAL or REQUIRED, and if the security sub
    system in use is RACF, then when a lower case userid is passed
    by the client, application verification fails. The RACF profile
    for the userid cannot be found since userids in RACF must be
    upper case.
    

Problem conclusion

  • Code has been added to CSQMCUWT to convert the userid to upper
    case on a client connection, when a new service parameter is
    active. Additionally if RACF is not using mixed case passwords
    the password will also be converted to upper case.
    Contact IBM support for information on how to activate this new
    capability.
    000Y
    CSQMCUWT
    

Temporary fix

Comments

  • ×**** PE18/05/09 FIX IN ERROR. SEE APAR PI97781  FOR DESCRIPTION
    

APAR Information

  • APAR number

    PI63228

  • Reported component name

    WMQ Z/OS 8

  • Reported component ID

    5655W9700

  • Reported release

    000

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2016-05-27

  • Closed date

    2016-07-21

  • Last modified date

    2018-05-29

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    PI65413 UI39542 010PC2Ÿ

Modules/Macros

  • CSQMCUWT
    

Fix information

  • Fixed component name

    WMQ Z/OS 8

  • Fixed component ID

    5655W9700

Applicable component levels

  • R000 PSY UI39542

       UP16/08/25 P F608

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSYHRD","label":"IBM MQ"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.0","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
29 May 2018