A fix is available
APAR status
Closed as program error.
Error description
SYSTEM.CHLAUTH.DATA.QUEUE is a queue that is accessed internally (for browse, get and put) by the queue manager and it should not require the QMGR UserId to have RACF explicit permissions to access it.
Local fix
As temporary fix to get CHLAUTH working is to give the queue manager UserId UPDATE permissions to access the queue. The permissions can be removed after this fix is applied.
Problem summary
**************************************************************** * USERS AFFECTED: All users of WebSphere MQ for z/OS Version 7 * * Release 1 Modification 0. * **************************************************************** * PROBLEM DESCRIPTION: When queue security is active, issuing * * SET CHLAUTH commands or the generation * * of configuration event messages may * * result in a MQRC2035, * * MQRC_NOT_AUTHORIZED on the relevant * * SYSTEM queue. * **************************************************************** * RECOMMENDATION: * **************************************************************** When using or administering CHLAUTH objects in WebSphere MQ, the channel initiator will need access to the internal SYSTEM.CHLAUTH.DATA.QUEUE. If queue security has been enabled in the queue manager but explicit access to this queue has not been granted, the an MQRC 2035 MQRC_NOT_AUTHORIZED error may occur. This can also occur when CONFIGEV (configuration events) are enabled. In this case the MQRC 2035 will occur when opening the SYSTEM.ADMIN.CONFIG.EVENT queue.
Problem conclusion
Processing has been amended to ensure that the appropriate access is granted when internal tasks are opening the system queues. 100Y CSQMOPNW
Temporary fix
Comments
APAR Information
APAR number
PM94288
Reported component name
WMQ Z/OS V7
Reported component ID
5655R3600
Reported release
100
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2013-08-01
Closed date
2013-08-30
Last modified date
2013-10-04
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UK97169
Modules/Macros
CSQMOPNW
Fix information
Fixed component name
WMQ Z/OS V7
Fixed component ID
5655R3600
Applicable component levels
R100 PSY UK97169
UP13/09/27 P F309
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.1","Edition":"","Line of Business":{"code":"","label":""}}]
Document Information
Modified date:
04 October 2013