| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Error "you are not authorized" when trying to show |
« View previous topic :: View next topic » |
| Author |
Message
|
| Guava72 |
 Posted: Thu Jun 19, 2003 9:34 am Post subject: Error "you are not authorized" when trying to show |
 |
|
Apprentice
Joined: 06 Jun 2003
Posts: 46
Location: Champaign, IL
|
Hi, I'm using MQSeries Explorer 5.2.1 on my PC running Windows 2000. I'm trying to show a remote queue manager on a Sun machine running OS 5.8 and MQSeries 5.3. I can show other Queue Managers on this box, but not a particular one I want.
I've read some other posts here, but I'm confused about how a user on a Windows 2000 box has something to do with a user on a Sun box. When I try to connect to the remote QM, is it using my own personal Windows 2000 user, or is it MUSR_MQADMIN? I need to know what setup changes I need to make on which machines to do this. I don't have Admin access on either box, so I will have to ask someone else at work to do this. Thanks for clearing this up for me so I can show the QM in MQSeries Explorer. |
|
| Back to top |
|
 |
| mqonnet |
| Posted: Thu Jun 19, 2003 10:20 am Post subject: |
|
|
Grand Master
Joined: 18 Feb 2002
Posts: 1114
Location: Boston, Ma, Usa.
|
Whenever you connect to a remote queue manager that is not hosted on your system, the userid that you logged in as on your system is passed in for authentication purposes. Now if you do not have a principal/user on the remote system as the one that you used to login on your local system, you would get 2035.
To resolve this, you need to define a principal/user with the same name(including case) on the remote system as the one you used to login your local system.
Cheers
Kumar |
|
| Back to top |
|
|
| Guava72 |
| Posted: Thu Jun 19, 2003 11:06 am Post subject: |
|
|
Apprentice
Joined: 06 Jun 2003
Posts: 46
Location: Champaign, IL
|
| Thanks for your reply. But how is it that I can connect to other QM's on this machine, but just not this particular one I want? To others I can show fine using MQSeries Explorer, but for this one I get "Access is not authorized. You are not authorized to perform this operation. AMQ4036" I would think that if I needed some user set up, I wouldn't be able to connect to any QM's on this machine. It's as if there is some setting, particular to each QM, that allows or inhibits connections... ?? I didn't create this QM that I'm trying to show, but I did all the other ones and they seem fine. I've looked for differences between them but haven't found any so far. I know I'm close, but not quite there! |
|
| Back to top |
|
|
| mqonnet |
| Posted: Thu Jun 19, 2003 11:28 am Post subject: |
|
|
Grand Master
Joined: 18 Feb 2002
Posts: 1114
Location: Boston, Ma, Usa.
|
If you do not have a principal on the remote queue manager then you must have used MCAUSER('mqm') on the svrconn channels for all the other qm's except the one thats failing.
What userid is on w2k and what is it on sun system.
Cheers
Kumar |
|
| Back to top |
|
|
| mqonnet |
| Posted: Thu Jun 19, 2003 11:30 am Post subject: |
|
|
Grand Master
Joined: 18 Feb 2002
Posts: 1114
Location: Boston, Ma, Usa.
|
I did not mention what happens when you use MCAUSER('mqm') or MCAUSER('guava'), assuming that you logged in as guava on sun.
Since you have a user named guava or mqm defined by default for you on sun, any user coming in to sun would use this userid for authentication purposes and hence irrespective of any userid you use from w2k you can get in. Most likely this is the other probablity.
Cheers
Kumar |
|
| Back to top |
|
|
| Guava72 |
| Posted: Fri Jun 20, 2003 8:02 am Post subject: [resolved] Access is not authorized. You are not authorized |
|
|
Apprentice
Joined: 06 Jun 2003
Posts: 46
Location: Champaign, IL
|
I have to admit I don't fully understand why, but when I changed the parameter mcauser in the SYSTEM.ADMIN.SVRCONN channel from null to "mqm", it started working. The other SVRCONN channels still have null for their mcauser parameters.
Thanks for your help mgonnet! |
|
| Back to top |
|
|
| mqonnet |
| Posted: Fri Jun 20, 2003 8:19 am Post subject: |
|
|
Grand Master
Joined: 18 Feb 2002
Posts: 1114
Location: Boston, Ma, Usa.
|
There is always an explaination for everything and there would be one for this too.
If you still want to pursue this, post the outputs of the following.
1) dspmqusr from the qm's for which your nt userid works and for the one that it doesnt.
2) svrconn channel defs from all the qms.
3) the userid that is being used on nt
4) mqerrlog error, if logged, complaining 2035.
Let us see where we go from here.
Cheers
Kumar |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
