IBM MQ

Expand all | Collapse all

xcsGetpwuid got password entry with user name too long

  • 1.  xcsGetpwuid got password entry with user name too long

    Posted Mon April 15, 2019 10:19 AM
    Hi,

    I'm have IBM WebSphere MQ 8.0.0.7 Client installed. 

    Currently I'm connecting to a server using SSL connection. 

    in the keystore (key.kdb) I have 

    *- ibmwebspheremqaaa.bbbb.ccccc

    When I try to establish a SSL connection I'm getting 

    | Probe Description :- AMQ6125: An internal WebSphere MQ error has occurred.  |
    | FDCSequenceNumber :- 0                                                      |
    | Comment1          :- xcsGetpwuid got password entry with user name too long |
    |   (more than 13 characters).                                                |
    | Comment2          :- Details: getuid() returned 1005; getpwuid_r(1005)      |
    |   found user name "aaa.bbbb.ccccc".                                         |
    | Comment3          :- A user name of "UNKNOWN" will be used, which will      |
    |   likely cause later authorisation failures. Note this FFST can be turned   |
    |   off by exporting env var AMQ_NOFFST_PROCESS_UID.                          |
    |                                                                             |
    +-----------------------------------------------------------------------------+​

    I have tried another userid which is 12 characters long and SSL connection works (after renaming the the cert label to new userid).

    So my question is why IBM MQ client imposed this restriction? Is there a way around it so I can use "aaa.bbbb.ccccc" user account? Is this restriction exists in newer version (v9)?

    Thanks,

    Yong


  • 2.  RE: xcsGetpwuid got password entry with user name too long

    Posted Mon April 15, 2019 05:51 PM

    You no longer need to be restricted by the label pattern that was originally required by IBM MQ:

    ibmwebspheremq<userid>

    From V8 and later you are able to use any label you want for your certificate and then tell IBM MQ what label you are using.

    export MQCERTLABL=the-label-of-your-choosing

    If you do this it won't trip over the length of your user id when locating the certificate label.

    Cheers,

    Morag



    ------------------------------
    Morag Hughson
    MQ Technical Education Specialist
    MQGem Software Limited
    ------------------------------



  • 3.  RE: xcsGetpwuid got password entry with user name too long

    Posted Tue April 16, 2019 05:50 AM
    Thanks Morag, it works now.

    ------------------------------
    Chee Yong Teh
    ------------------------------