| Author |
Message
|
| Jenney |
 Posted: Thu Sep 13, 2007 11:22 am Post subject: unable to connect to config mgr |
 |
|
Voyager
Joined: 25 Apr 2007
Posts: 83
Location: Melbourne
|
Hi All,
Config manager V6, Toolkit V 6.0.2 with DDomain Aware=0, I have created view only acl entry for the user name abc.
When i try to connect to the config manager with the abc user, i get error desktop-name/abc is not authorize to view config manager proxy.
Help is highly appreciated.
Thanks |
|
| Back to top |
|
 |
| jefflowrey |
| Posted: Thu Sep 13, 2007 11:23 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
Did you create an ACL for the machine-name? or for all machines?
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| Jenney |
| Posted: Thu Sep 13, 2007 11:29 am Post subject: |
|
|
Voyager
Joined: 25 Apr 2007
Posts: 83
Location: Melbourne
|
| no not for the machine name |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Thu Sep 13, 2007 11:31 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
I mean, did you specify -m or -a when you mqsicreateaclentry ?
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| Jenney |
| Posted: Thu Sep 13, 2007 11:33 am Post subject: |
|
|
Voyager
Joined: 25 Apr 2007
Posts: 83
Location: Melbourne
|
| yes i did specify computer name -m |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Thu Sep 13, 2007 11:36 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
Does it match "desktop-name"? or did you specify something different?
Did you grant -x V on -p? You may need to do this as well.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| Jenney |
| Posted: Thu Sep 13, 2007 11:45 am Post subject: |
|
|
Voyager
Joined: 25 Apr 2007
Posts: 83
Location: Melbourne
|
|
| Back to top |
|
|
| jefflowrey |
| Posted: Thu Sep 13, 2007 12:24 pm Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
So you said something like
mqsicreateaclentry ConfigMgr -u abc -m desktop-name -x V -p
And you are getting an error that you can't view the configmgr proxy?
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| max power |
| Posted: Sun Sep 16, 2007 12:09 am Post subject: |
|
|
Apprentice
Joined: 06 Sep 2007
Posts: 31
|
I can't seem to find it in the documentation but how do you specify a user id of 'firstname.lastname' in the mqsicreateaclentry command?
I've tried it in single and doule quotes, breackets and without but it doesn't appear to like any of those.
The ConfigMgr is on AIX and I want to connect to it from a toolkit on windows. |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Sun Sep 16, 2007 6:03 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
I wouldn't *think* that ConfigMgr would care about the period and the only thing that should matter is, potentially, protecting it from the shell.
What happens if you don't put in any quotes or etc at all, just firstname.lastname?
You may need to open a PMR... 
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| max power |
| Posted: Sun Sep 16, 2007 9:04 am Post subject: |
|
|
Apprentice
Joined: 06 Sep 2007
Posts: 31
|
When I tried the command without any quotes or brackets, I recevied an error so assumed I needed something in order to use the period. I'll have to try it again tomorrow and hope that I just typed something wrong the first time as I don't really want to raise a PMR if I can help it  |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Sun Sep 16, 2007 10:08 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
try firstname\.lastname and let us know how this will work...
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| max power |
| Posted: Tue Sep 18, 2007 2:08 am Post subject: |
|
|
Apprentice
Joined: 06 Sep 2007
Posts: 31
|
Still not working unfortunately.
I am typing this command:
mqsicreateaclentry CONFIGMGR -u firstname.lastname -a -x F
and the following error is returned:
BIP8843W: Creates a security Access Control Entry in the Configuration Manager repository. Syntax: mqsicreateaclentry configMgrName (-f fileName | ((-g groupName | (-u userName (-m machineName | -a))) -x accessLevel ((-b broker (-e executionGroup)) | -s | -t | -r | -p))) [-n connectionFile] [-w timeoutValue]
Command Options:
'configMgrName' name of the Configuration Manager (may be omitted on Windows)
'-f fileName' File containing list of Access Control Entries to create.
'-g groupName' Add Access Control Entry for the specified group
'-u userName' Add Access Control Entry for the specified user (must be accompanied by either -a or -m)
'-m machineName' Add the Access Control Entry for the user for this specific machine/domain name only
'-a' Add an Access Control Entry for the user for all machines/domains
'-x accessLevel' Level of authority to grant (F, E, D, V)
'-b broker' Add access to the specified broker
'-e executionGroup' Add access to the specified execution group (must be accompanied by -b)
'-s' Add access to the subscriptions table
'-t' Add access to the pub/sub topology
'-r' Add access to the root topic
'-p' Add access to the ConfigManagerProxy. Also known as the "All resources" Access Control Entry.
'-w timeoutValue' value in seconds to wait for responses.
'-n connectionFile' Optional "connection file" to allow the command to communicate with a remote ConfigMgr.
Note: On Windows platforms, if the Configuration Manager name is omitted 'ConfigMgr' will be used.
BIP8002E: Selected flags incompatible.
When using this command interface the user should only select the supported flags.
Correct and reissue the command.
I get the same error if I try: mqsicreateaclentry CONFIGMGR -u firstname\.lastname -a -x F
I don't see what flag I am missing or using incorrectly. |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Tue Sep 18, 2007 2:18 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
You need at least one of {-p,-b,-e,-s,-t,-r}, to provide the object to which you are granting permissions....
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| max power |
| Posted: Tue Sep 18, 2007 3:14 am Post subject: |
|
|
Apprentice
Joined: 06 Sep 2007
Posts: 31
|
 Yes, of course I do. Completely forgot the -p option. |
|
| Back to top |
|
|
|
|
