A fix is available
APAR status
Closed as fixed if next.
Error description
Userid's sent via the network through a client connection are limited to 12 characters or if the id is not recognizable, the userid of the connection process is used which negatively impacts security.
Local fix
The workaround is to limit the userids to 12 characters or use the MCAUSER parameter of the server connection channel to set the userid.
Problem summary
USERS AFFECTED: All users PLATFORMS AFFECTED: All supported platforms SUMMARY: When WebSphere MQ File Transfer Edition (WMQFTE) connects to an MQ queue manager in client mode a user ID is not passed on the connect. This causes MQ to grant the connect attempt a default user ID which could lead to connection attempts being rejected with the following error in the MQ log: AMQ8075: Authorization failed because the SID for entity <userID> cannot be obtained This will also happen when connecting to MQ in client mode using the WMQFTE MQ Explorer GUI extensions or WMQFTE remote tools
Problem conclusion
Temporary fix
An iFix is available on request.
Comments
APAR Information
APAR number
IC62161
Reported component name
WMQ FILE TRANSF
Reported component ID
5724R1000
Reported release
701
Status
CLOSED FIN
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2009-07-23
Closed date
2009-08-05
Last modified date
2009-08-05
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Applicable component levels
R700 PSN
UP
R701 PSN
UP
R702 PSN
UP
[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSEP7X","label":"WebSphere MQ File Transfer Edition"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.0.1","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]
Document Information
Modified date:
05 August 2009