PK91242: MDB LISTENER PORT ON ZOS CONNECTS WITH INSUFFICIENT AUTHORITY WHEN A COMPONENT MANAGED AUTHENTICATION ALIAS IS USED

Fixes are available

APAR status

Closed as program error.

Error description

Using Listener Ports on z/OS, if a component managed
authentication alias is set on the Listener Port's connection
factory, and no container managed authentication alias is set,
the listener port is granted insufficient authority in
WebSphere MQ.

Instead of connecting with the level of authority associated
with the user configured in the component managed
authentication alias, the listener port is granted the default
level of authority provided to a connection created without
providing any authentication information.

This might not be sufficient to browse/get messages from the
queue, and the listener port might fail to deliver messages to
message-driven bean applications.

Local fix

Specify a container managed authentication alias on the
connection factory used by the listener port.

Problem summary

****************************************************************
* USERS AFFECTED:  Users of WebSphere MQ as a messaging        *
*                  provider for WebSphere Application Server   *
*                  for z/OS Version 6.1.                       *
****************************************************************
* PROBLEM DESCRIPTION: Listener ports on z/OS connect to       *
*                      WebSphere MQ with insufficient          *
*                      authority when a component managed      *
*                      authentication alias only is specified  *
*                      in the connection factory               *
****************************************************************
* RECOMMENDATION:                                              *
****************************************************************
This issue affects listener ports that have been configured
to use a connection factory that has a component managed
authentication specified, does not have a container managed
authentication alias specified, and uses a BINDINGS transport.

The level of authority granted by the WebSphere MQ for z/OS
queue manager to the connection made by the listener port
should reflect the level of authority granted to the component
managed authentication alias.

However, the level of authority granted in WebSphere MQ is the
same authority as if no authentication alias had been specified.
This might be insufficient, and prevent the listener port from
browsing/consuming messages for delivery to message-driven
bean applications.

Problem conclusion

The fix for this APAR causes the listener port to correctly
pass the component managed authentication alias from the
connection factory through to WebSphere MQ to perform
authentication.

APAR PK91242 is currently targeted for inclusion in Service
Level (Fix Pack) 6.1.0.29 of WebSphere Application Server V6.1.

Please refer to URL:
//www.ibm.com/support/docview.wss?rs=404&uid=swg27006970
for Fix Pack availability.

Temporary fix

Comments

APAR Information

APAR number
PK91242
Reported component name
WEBSPHERE FOR Z
Reported component ID
5655I3500
Reported release
610
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2009-07-13
Closed date
2009-08-28
Last modified date
2010-02-01

APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:

PK98684

Fix information

Fixed component name
WEBSPHERE FOR Z
Fixed component ID
5655I3500

Applicable component levels

R610 PSY UK53194
UP10/01/15 P F001

Fix is available

Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SS7K4U","label":"WebSphere Application Server for z\/OS"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"6.1","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
29 December 2021

Tips

PK91242: MDB LISTENER PORT ON ZOS CONNECTS WITH INSUFFICIENT AUTHORITY WHEN A COMPONENT MANAGED AUTHENTICATION ALIAS IS USED

Fixes are available

Subscribe

APAR status

Closed as program error.

Error description

Local fix

Problem summary

Problem conclusion

Temporary fix

Comments

APAR Information

APAR number

Reported component name

Reported component ID

Reported release

Status

PE

HIPER

Special Attention

Submitted date

Closed date

Last modified date

APAR is sysrouted FROM one or more of the following:

APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name

Fixed component ID

Applicable component levels

R610 PSY UK53194

Fix is available

Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

Document Information

Share your feedback

Need support?