IT45501: PROBLEM EXECUTING THE COMMANDS AS SUPER.USER OR SUDO ON BOTH HPNS X86V8.1.X + ITANIUM SYSTEMS

APAR status

• Closed as program error.

Error description

• Issue running commands as SUPER.SUPER or sudo appears to bring
  down a QMgr on both HPNS x86v8.1.x + Itanium Systems
  

Local fix

• Move the opt/mqm/bin/dltmqm binary and then delete it to prevent
  spawning new instances.
  Don't execute dltmqm as SUPER.SUPER (i.e. sudo).
  

Problem summary

• On HPE NonStop dltmqm will spawn child processes on all other
  CPUs of the system to remove shared memory segments referenced
  by the queue manager to be deleted.
  SUPER.SUPER user can execute dltmqm without being part of the
  mqm admin group, which causes the initial authorization check
  to correctly fail and set and internal error code.
  This skips the evaluation of the processes arguments letting
  all processes run under the assumption that they were the
  initial dltmqm instance. The subsequent path responsible for
  spawning the child processes will then be run through.
  

Problem conclusion

• Error checking has been added to the affected path.
  ---------------------------------------------------------------
  The fix is targeted for delivery in maintenance level 8.1.0.20
  of IBM MQ for HPE NonStop 8.1.
  The latest available maintenance can be obtained from
  'WebSphere MQ Recommended Fixes'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
  If the maintenance level is not yet available information on
  its planned availability can be found in 'WebSphere MQ
  Planned Maintenance Release Dates'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
  ---------------------------------------------------------------
  

Temporary fix

• Move the opt/mqm/bin/dltmqm binary and then delete it to prevent
  spawning new instances.
  Don't execute dltmqm as SUPER.SUPER (i.e. sudo).
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  MQ FOR HPE NS O

• Fixed component ID

  5724A3904

Applicable component levels