IT09948: MQ 8.0 EXPLORER FAILS TO ACCESS A QUEUE MANAGER WHEN THE DOMAIN USER IS SET USING THE USER IDENTIFICATION SETTING DIALOG.

APAR status

• Closed as program error.

Error description

• MQ 8.0 Explorer fails to access a queue manager when the
  user@domain is set using the user identification setting dialog
  and
  when connection authentication is configured.
  .
  Configure Connection authentication as mentioned in the below
  page
  http://www-01.ibm.com/support/knowledgecenter/SSFKSJ_8.0.0/com.i
  bm.mq.sec.doc/q113250_.htm
  .
  Configure User Identification in MQ Explorer according to the
  IBM Knowledge
  Center topic below
  http://www.ibm.com/support/knowledgecenter/SSFKSJ_8.0.0/com.ibm.
  mq.explorer.doc/e_user_identification.htm
  .
  When MQ Explorer tries to connect it receives MQRC 2035
  MQRC_NOT_AUTHORIZED, and the following messages can be seen in
  the error log, AMQERR01.LOG :
  .
  AMQ8075: Authorization failed because the SID for entity
   'user@domain' cannot be obtained.
  AMQ9557: Queue Manager User ID initialization failed for
   'user@domain'
  .
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  Users who are attempting to connect after enabling connection
  authentication on a queue manager to validate a Windows domain
  user name (Eg: user@domain)
  
  
  Platforms affected:
  Windows
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  An omission in the connection authentication logic in the MQ
  queue manager meant that Windows domain user credentials were
  not processed correctly, and these requests were always blocked
  by the queue manager, even if the credentials were valid and
  expected to permit access.
  

Problem conclusion

• The queue manager connection authentication code has been
  updated to correctly handle Windows domain users.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v8.0       8.0.0.5
  
  The latest available maintenance can be obtained from
  'WebSphere MQ Recommended Fixes'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
  
  If the maintenance level is not yet available information on
  its planned availability can be found in 'WebSphere MQ
  Planned Maintenance Release Dates'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WMQ BASE MULTIP

• Fixed component ID

  5724H7251

Applicable component levels

• R800 PSY

     UP