| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Application can't connect to MQSeries, 2035. BlockIP OK. |
« View previous topic :: View next topic » |
| Author |
Message
|
| obirenokenobi |
 Posted: Thu Jun 15, 2006 10:39 am Post subject: Application can't connect to MQSeries, 2035. BlockIP OK. |
 |
|
Newbie
Joined: 15 Jun 2006
Posts: 1
|
Hi! I've a problem that I don't know how to fix it. I'm using a C++ application to connect to an MQSeries server. If I run the application in the server, it connects perfectly well and do everything it's suppoused to do. But, if I run the same program from another machine, the event log of Windows says that the program can't connecto to the Queue Manager.
I've activated the BlockIP to see the log, and also the dspmqaut to see the permissions. I will put a bit of the log first:
2006-06-15|12:56:21|ConName is now [192.168.1.98]
2006-06-15|12:56:21|Connection accepted, Channel [CLICHA] ConName [192.168.1.98] Pattern [*;] Flags [ASC=Y ] User [ususario01]
2006-06-15|12:56:21|Channel closed [CLICHA] Connection Name [192.168.1.98]
2006-06-15|13:06:14|ConName is now [192.168.1.50]
2006-06-15|13:06:14|Connection accepted, Channel [CLICHA] ConName [192.168.1.50] Pattern [*;] Flags [ASC=Y ] User [syc]
2006-06-15|13:06:15|Channel closed [CLICHA] Connection Name [192.168.1.50]
Now, the first block is from the remote machine, the one in which the event log says it can't connect. The second one, is from the same server in which MQSeries resides. As I see, both are allowed to connect in exactly the same way.
Then, if I check the permissions of the user that does work (192.168.1.50, user=syc) this is the output:
La entidad syc tiene las autorizaciones siguientes para el objeto MQ.REG06:
inq
set
connect
altusr
crt
dlt
chg
dsp
setid
setall
And the other user, the one who cannot:
La entidad usuario01 tiene las autorizaciones siguientes para el objeto MQ.REG06:
inq
set
connect
altusr
crt
dlt
chg
dsp
setid
setall
I can see that both are exactly the same... so, I don't have any clue of what is going on. The error code that the event log returns is 2035.
Any help will be really appreciated. |
|
| Back to top |
|
 |
| Nigelg |
| Posted: Thu Jun 15, 2006 10:54 am Post subject: |
|
|
Grand Master
Joined: 02 Aug 2004
Posts: 1046
|
Enable qmgr authority events, run the test, and browse the msgs in the system event queue. The msg will tell you the object that the user is not authorised for, and the authority required.
_________________
MQSeries.net helps those who help themselves.. |
|
| Back to top |
|
|
| tleichen |
| Posted: Thu Jun 15, 2006 11:34 am Post subject: |
|
|
Yatiri
Joined: 11 Apr 2005
Posts: 663
Location: Center of the USA
|
Also, why the span(gl)ish? Is it set up like that?
_________________
IBM Certified MQSeries Specialist
IBM Certified MQSeries Developer |
|
| Back to top |
|
|
| LuisFer |
| Posted: Thu Jun 15, 2006 9:02 pm Post subject: |
|
|
Partisan
Joined: 17 Aug 2002
Posts: 302
|
| tleichen wrote: |
| Also, why the span(gl)ish? Is it set up like that? |
Some times it is complicated translate (for me) from Spanish to English an idea or phrase.
I have registred the domain MQSERIES-ES.NET to copy the idea (from Brandon) for create a spanish foro. |
|
| Back to top |
|
|
| belchman |
| Posted: Thu Jul 06, 2006 5:37 am Post subject: |
|
|
Partisan
Joined: 31 Mar 2006
Posts: 386
Location: Ohio, USA
|
I would suspect that user "ususario01" does not have permissions but user "syc" does.
You can prove this out by setting MCAUSER on the SVRCONN that the client app is connecting on to "syc". This causes "ususario01" to connect to server using auth of "syc".
If you leave MCAUSER blank, then connection uses auth of "ususario01" as exists on remote host. You will need to grant "ususario01" appropriate access on remote host.
I am not suggesting an architecture here. I am recommending a means by which you can identify (what I think is) the root cause of the 2035. |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
