PI64232: WEBSPHERE MESSAGE BROKER: SECURITY IDENTITY VALUES DEFINED BY MQSIETDBPARMS INACCESSIBLE

APAR status

• Closed as program error.

Error description

• Despite having successfully issued mqsisetdbparms to set a
  security identity to define a userid and password for the email
  server, the following error was reported on an attempt to deploy
  a messageflow that was accessing the server:
  
  +BIP4975E MQ01BRK EG2 17 EITHER THE EMAILINPUT NODE
  'Email Input' IN MESSAGE FLOW 'EmailInput' HAS BEEN CONFIGURED
  WITH SECURITY IDENTITY PROPERTY VALUE 'ReceiveEmail', OR THE
  EMAILSERVER CONFIGURABLE SERVICE HAS BEEN CONFIGURED WITH
  SECURITYIDENTITY PROPERTY VALUE 'ReceiveEmail', WHICH HAS NOT
  BEEN DEFINED BY USING THE MQSISETDBPARMS COMMAND.
  
  The mqsisetdbparms command will create the security identity
  UserId and Password in files under the brokers registry
  directory: DSN/<securityIdentity>. These values are read in and
  stored during start up of the Execution Group. If there are any
  errors reading in these values from the files, then we do not
  currently report the file errors and the values are not stored.
  Subsequent attempts to use these values during runtime, results
  in errors such as the one above, but there is no indication of
  the fact that they are not stored because of the initial failure
  to access the registry DSN files. This makes diagnosis of the
  underlying issue difficult.
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All users of WebSphere Message Broker v8 and IBM Integration Bus
  v9 and v10 using Security Identities.
  
  
  Platforms affected:
  z/OS, MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  Despite having successfully issued mqsisetdbparms to set a
  security identity to define a userid and password for the email
  server, the following error was reported on an attempt to deploy
  a messageflow that was accessing the server:
  
  +BIP4975E MQ01BRK EG2 17 EITHER THE EMAILINPUT NODE
  'Email Input' IN MESSAGE FLOW 'EmailInput' HAS BEEN CONFIGURED
  WITH SECURITY IDENTITY PROPERTY VALUE 'ReceiveEmail', OR THE
  EMAILSERVER CONFIGURABLE SERVICE HAS BEEN CONFIGURED WITH
  SECURITYIDENTITY PROPERTY VALUE 'ReceiveEmail', WHICH HAS NOT
  BEEN DEFINED BY USING THE MQSISETDBPARMS COMMAND.
  
  The mqsisetdbparms command will create the security identity
  UserId and Password in files under the brokers registry
  directory: DSN/<securityIdentity>. These values are read in and
  stored during start up of the Execution Group. If there are any
  errors reading in these values from the files, then we do not
  currently report the file errors and the values are not stored.
  Subsequent attempts to use these values during runtime, results
  in errors such as the one above, but there is no indication of
  the fact that they are not stored because of the initial failure
  to access the registry DSN files. This makes diagnosis of the
  underlying issue difficult.
  
  
  There are a number of resource name changes between WebSphere
  Message Broker and IBM Integration Bus Version 9.0.  For details
  visit
  http://pic.dhe.ibm.com/infocenter/wmbhelp/v9r0m0/topic/com.ibm.e
  tools.mft.doc/bb23814_.htm
  

Problem conclusion

• The product has been modified so that any Security Identity file
  error that occurs during initialisation is reported in stdout.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v10.0      10.0.0.6
  v8.0       8.0.0.8
  v9.0       9.0.0.7
  
  The latest available maintenance can be obtained from:
  http://www-01.ibm.com/support/docview.wss?rs=849&uid=swg27006041
  
  If the maintenance level is not yet available,information on
  its planned availability can be found on:
  http://www-1.ibm.com/support/docview.wss?rs=849&uid=swg27006308
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEB MB Z/OS

• Fixed component ID

  5697P4400

Applicable component levels

• R800 PSY

     UP