Queue access authorisation problems after installation of PTF UK90261

Flash (Alert)


Abstract

The introduction of MQ 7.1 support in with WBI-FN PTF UK90261 leads to queue access authorisation problems for the queues used by the CIN if MQ security is enabled.

This impacts the following functionality of WBI-FN 3.11:
MSIF
RMA
RM Import and ASP import
Message Management printing

Content

WBI-FN Base PTF UK90261 provides support for WMQ 7.1 (when used with Message Broker 7.0).

When MQ security is enabled for the WBI-FN queues (either using RACF or other methods), the access authorisation for the queues used by the CIN are no longer sufficient.
All queues, which are used by the CIN currently need ALTER authorisations.
However, the related *.def files (sample scripts to set RACF authorisations for the WBI-FN queues) have not been adjusted, nor is the change mentioned in the PTF readme.

  • DNIvQPFX.DNF_L_IMP (RMA- and ASP import input queue)
  • DNIvQPFX.DNF_L_TR (RMA Transfer input queue)
  • DNIvQPFX.DNF_O_FT (MSIF input queue)
  • DNIvQPFX.DNF_O_FTTMH (MSIF input queue)
  • DNIvQPFX.DNF_O_FTTML (MSIF input queue)
  • DNIvQPFX.DNF_O_FTUMH (MSIF input queue)
  • DNIvQPFX.DNQ_P_PRT (Message Management Printing input queue)
  • DNIvQPFX.DNI_SYSOP
  • DNIvINST.SYSOU.DNI_R_EVENT
  • DNIvINST.DNFSYSOU.DNF_BACKOUT
  • DNIvQPFX.DNF_L_IMP.CTRL
  • DNIvQPFX.DNF_L_TRCMD
  • DNIvQPFX.DNF_L_TRERR
  • DNIvQPFX.DNF_O_FTRST
  • DNIvQPFX.DNF_O_FTERR
  • DNIvQPFX.DNQ_P_RST
As a consequence, RMA, MSIF, RM import and ASP import as well as MER printing don't work any more as soon as the post installation actions for PTF UK90261 are completed.

To work around the problem, you may decide to change the access authorisations for the above mentioned queues to ALTER rights.
If this is not possible, please wait with installation of PTF UK90261, until a fix for Base APAR PM80558 (and related MSIF and MM PTFs) is available.

The PTFs will provide the following:
  1. changed *.def files to change access authorisations for the CIN input queues to ALTER.
  2. changed CIN to use MQOpen options for the non-input queues, where UPDATE authorisation is sufficient.

We'll provide an update as soon as the PTFs are available.

Rate this page:

(0 users)Average rating

Add comments

Document information


More support for:

WebSphere Business Integration for Financial Networks
PTFs

Software version:

3.1.1

Operating system(s):

z/OS

Reference #:

1622409

Modified date:

2013-02-04

Translate my page

Machine Translation

Content navigation