PH14681: AMS PRIVACY POLICY NOT WORKING AS EXPECTED.

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• When opening a queue protected by an AMS privacy policy, an
  incorrect optimisation can cause messages to be protected with
  an unexpected DN, preventing them being read by the intended
  recipients.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of IBM MQ for z/OS Version 9       *
  *                 Release 1 Modification 0.                    *
  ****************************************************************
  * PROBLEM DESCRIPTION: When attempting to get a message from a *
  *                      queue protected by an AMS policy using  *
  *                      the Java client, the intended           *
  *                      recipients are not able to get the      *
  *                      message despite having the correct      *
  *                      certificate and DN.                     *
  ****************************************************************
  An optimisation added between the Java client and AMS was
  incorrectly setting the recipient DN. This results in an MQRC
  2063 (MQRC_SECURITY_ERROR) being returned to the application
  despite the application providing the correct certificate.
  

Problem conclusion

• The code has been changed to set the correct recipient DN.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI67932

Modules/Macros

• CSQMOPNI
  

Fix information

• Fixed component name

  IBM MQ Z/OS V9

• Fixed component ID

  5655MQ900

Applicable component levels

• R100 PSY UI67932

     UP20/03/11 P F003

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.