| Author |
Message
|
| samsam007 |
 Posted: Wed Dec 03, 2008 7:53 pm Post subject: Insufficient authority to access queue |
 |
|
Centurion
Joined: 30 Oct 2008
Posts: 107
|
Dear all masters,
I just upgraded to WMQ v7 from WMQ v6.00
I repopulated the Qmgr with is server-connection channel, input/output queues, and executed the following auth command in the MQ server:
c:\setmqaut -m QM.MQT2 -t qmgr -g TESTGROUP +dsp +chg
when I retest the server-connection channel with a remote client, server event log received the following error:
Entity 'master_mq' has insufficient authority to access object 'NY.TD.INPUT'.
I have added master_mq into the TESTGROUP using Windows admin control panel.
What is the problem with my setup? and how can I further look into the problem?
Thanks |
|
| Back to top |
|
 |
| samsam007 |
| Posted: Wed Dec 03, 2008 8:02 pm Post subject: Re: Insufficient authority to access queue |
|
|
Centurion
Joined: 30 Oct 2008
Posts: 107
|
| samsam007 wrote: |
Dear all masters,
I just upgraded to WMQ v7 from WMQ v6.00
I repopulated the Qmgr with is server-connection channel, input/output queues, and executed the following auth command in the MQ server:
c:\setmqaut -m QM.MQT2 -t qmgr -g TESTGROUP +dsp +chg
when I retest the server-connection channel with a remote client, server event log received the following error:
Entity 'master_mq' has insufficient authority to access object 'NY.TD.INPUT'.
I have added master_mq into the TESTGROUP using Windows admin control panel.
What is the problem with my setup? and how can I further look into the problem?
Thanks |
This is the output from checking the permission of user master_mq:
C:\Documents and Settings\Administrator>dspmqaut -m QM.MQT2 -t qmgr -p master_
mq
Entity master_mq has the following authorizations for object QM.MQT2:
inq
set
connect
altusr
dlt
chg
dsp
setid
setall
C:\Documents and Settings\Administrator> |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Wed Dec 03, 2008 8:50 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
So what does the following command show as output:
| Code: |
| dspmqaut -m QM.MQT2 -t q -n NY.TD.INPUT -g TESTGROUP |
Don't know which os we are talking about but if this is not zOS I would ask why is the group name in capitals? Remember case matters. 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| samsam007 |
| Posted: Thu Dec 04, 2008 2:32 pm Post subject: |
|
|
Centurion
Joined: 30 Oct 2008
Posts: 107
|
| fjb_saper wrote: |
So what does the following command show as output:
| Code: |
| dspmqaut -m QM.MQT2 -t q -n NY.TD.INPUT -g TESTGROUP |
Don't know which os we are talking about but if this is not zOS I would ask why is the group name in capitals? Remember case matters. |
I just figured out that I must use the following syntax command to set the permission:
setmqaut -m QM.MQT2 -t queue -n NY.TD.INPUT -g TESTGROUP +get +put
It is running on Windows. I created a group called TESGROUP (in Cap) in windows.
Thanks |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Thu Dec 04, 2008 2:56 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
In fact you need both.
You need
- the right to connect to the qmgr
- the rights to access the queue
- If a JMS app you need to add the rights to inquire on the objects
Enjoy
_________________
MQ & Broker admin |
|
| Back to top |
|
|
|
|
