PI63883: WMQ Z/OS V800:SET CHLAUTH CLNTUSER PARAMETER IS 12 CHARACTERS WHICH CAUSES CSQY337E

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• Customer is running MQ V8  using ACF2 and wants to map
  CLNTUSER(xxx) to MCAUSER(USER1) from ADDRESS
  ('n.n.*.*').    All the CHLAUTH settings below resulted in the
  following error:
  ACF00076 LOGONID xxx NOT FOUND
  
  These are the CHLAUTH settings in customer environment:
   1) SET CHLAUTH(SYSTEM.ADMIN.SVRCONN) TYPE(USERMAP)
  USERSRC(MAP) CLNTUSER(xxx) MCAUSER(USER1) ADDRESS('n.n.*.*')
  ACTION(REPLACE)
  
  2) SET CHLAUTH(SYSTEM.ADMIN.SVRCONN) TYPE(USERMAP)
  CLNTUSER(xxxx) USERSRC(MAP)
  MCAUSER(USER1) ADDRESS('n.n.*.*') ACTION(REPLACE)
  
  3) SET CHLAUTH(SYSTEM.ADMIN.SVRCONN) TYPE(USERMAP) +
  CLNTUSER(xxx) MCAUSER(USER1)
  
  Customer complained the issue "ACF00076 LOGONID xxxx NOT FOUND"
  when doing the translation from CLNTUSER to MCAUSER with that
  the CHLAUTH is TYPE(USERMAP)
  If the user ID is lower case, quotation marks must enclose
  it, for exampe:
  
  SET CHLAUTH(SYSTEM.ADMIN.SVRCONN) TYPE(USERMAP) USERSRC(MAP)
  CLNTUSER('xxx')  MCAUSER(USER1) ADDRESS('n.n.*'.*)
  ACTION(REPLACE)
  
  However, CSQY337E "+CSQ1 CSQMSCA CLNTUSER value length not
  allowed - restricted functionality" is shown .
  
  The CHIN is passing the long userid which may be up to 64
  characters, when checking CHLAUTH records, but the limit on the
  SET CHLAUTH CLNTUSER parameter is 12 characters which causes
  the problem.
  
  Note that it looks  as though this problem will not occur at MQ
  V8 with NEWFUNC (CLNTUSER may be greater than 12 characters in
  this case).
  

Local fix

• n/a.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of WebSphere MQ for z/OS Version 8 *
  *                 Release 0 Modification 0.                    *
  ****************************************************************
  * PROBLEM DESCRIPTION: "CSQY337E +MQNS CSQMSCA CLNTUSER value  *
  *                      length not allowed - restricted         *
  *                      functionality" is issued when issuing   *
  *                      SET CHLAUTH to define a USERMAP rule to *
  *                      map a client user that is longer than   *
  *                      12 characters (for example, the user    *
  *                      associated with a client connection     *
  *                      from the Windows platform, where the    *
  *                      user can be up to 64 characters long),  *
  *                      and the queue manager is not running    *
  *                      with OPMODE NEWFUNC,800.                *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  On z/OS, the maximum length of the CLNTUSER field when adding a
  channel authentication (CHLAUTH) record was 12 characters.
  However incoming clients were matched against their long user
  ID, not the short user ID.
  This meant it was not possible to correctly map clients which
  reported usernames of longer than 12 characters as it was not
  possible to configure this within the queue manager on z/OS.
  

Problem conclusion

• The maximum length for the CLNTUSER field has been increased on
  z/OS to 64 characters. This is the same length Windows uses,
  and is the maximum length of the long user ID field of an MQMD.
  
  This makes it possible to configure the queue manager such that
  clients reporting user names of longer than 12 characters will
  be correctly mapped.
  
  When running in NEWFUNC,800, the maximum length for the CLNTUSER
  field is unchanged at 1024 characters.
  000Y
  CSQMDCA
  CSQMSCA
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  PI56514

• APAR is sysrouted TO one or more of the following:

  UI38765

Modules/Macros

• CSQMDCA  CSQMSCA
  

Fix information

• Fixed component name

  WMQ Z/OS 8

• Fixed component ID

  5655W9700

Applicable component levels

• R000 PSY UI38765

     UP16/07/06 P F607

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.