PI97331: MQ Z/OS V9:CLIENT RECEIVES MQRC 2035 WHEN SET CONNAUTH - BASE MQ

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• The credentials are not correctly passed when using
  CHCKLOCL(REQUIRED). A REST client got
  MQRC=2035(MQRC_NOT_AUTHORIZED) when they set
  CONNAUTH.
  

Local fix

• To modify the AUTHINFO object to remove the CHCKLOCL(REQUIRED).
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of IBM MQ for z/OS Version 9       *
  *                 Release 0 Modification 0 and Release 1       *
  *                 Modification 0.                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: When a client, for example the MQ       *
  *                      Service Provider with z/OS Connect EE,  *
  *                      is connecting using local bindings mode *
  *                      and RRS batch, to a z/OS queue manager  *
  *                      that has CHCKLOCL(REQUIRED) and         *
  *                      CONNAUTH AUTHTYPE(IDPWOS), it fails to  *
  *                      connect with MQRC=2035 (MQRC_NOT_       *
  *                      AUTHORIZED), even when the userid and   *
  *                      password supplied are correct.          *
  ****************************************************************
  Every call through the Java native libraries does an initial
  MQCONN before actually driving the relevant verb, for example
  MQCONNX does MQCONN then MQCONNX. MQCONN does not take an MQCNO,
  and hence an MQCSP, so the userid and password cannot be passed
  causing the connection attempt to be rejected.
  

Problem conclusion

• Code has been updated to allow userid and password information
  to be passed to JNI calls. This APAR delivers the fix to the MQ
  base component. For complete functionality it is necessary to
  also install the fix for APAR PH07886 for the java component.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI64008 UI64023

Modules/Macros

• CSQB6432 CSQBAS1X CSQBAS2X CSQBASTB CSQBCON  CSQBLB46 CSQBLB4X
  CSQBLB56 CSQBLB5X CSQBMB1X CSQBMB2X CSQBRRSI CSQBRSTB CSQBSTUB
  CSQBWSTB CSQMCUWT IMQS23D6 IMQS23DM IMQS23DR
  

Fix information

• Fixed component name

  IBM MQ Z/OS V9

• Fixed component ID

  5655MQ900

Applicable component levels

• R000 PSY UI64008

     UP19/07/23 P F907

• R100 PSY UI64023

     UP19/07/23 P F907

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.