Author |
Message
|
scnr143 |
Posted: Mon Aug 10, 2020 6:25 pm Post subject: MQRC 2035 Error from Weblogic fusion |
|
|
Newbie
Joined: 10 Aug 2020 Posts: 3
|
We are running the qmgr on MQ V8. Application is connection from Oracle fusion OSB to MQ to get/put the message. The MQ get is successful using the same svrconn channel.However while performing MQ PUT we are getting 2035 error.
Chlauth is disable.
Provided oem +put +get access to the group and added fuion osb id in the group.
Provide all access to the principal user as well. dspmqauth display the user has following access. (get browse put inq sec connect altusr passid passall setid)
Any help would be appreciate.
Thanks, |
|
Back to top |
|
 |
hughson |
Posted: Mon Aug 10, 2020 8:09 pm Post subject: |
|
|
 Padawan
Joined: 09 May 2013 Posts: 1959 Location: Bay of Plenty, New Zealand
|
What does the queue manager AMQERR01.LOG file say about the error. You should get something like this:-
-------
AMQ8077: Entity 'mqgusr1' has insufficient authority to access object 'Q1'.
EXPLANATION:
The specified entity is not authorized to access the required object. The
following requested permissions are unauthorized: put
ACTION:
Ensure that the correct level of authority has been set for this entity against
the required object, or ensure that the entity is a member of a privileged
group.
-------
As you can see it would tell you what authorisation you are missing.
Cheers,
Morag _________________ Morag Hughson @MoragHughson
IBM MQ Technical Education Specialist
Get your IBM MQ training here!
MQGem Software |
|
Back to top |
|
 |
scnr143 |
Posted: Tue Aug 11, 2020 3:42 am Post subject: |
|
|
Newbie
Joined: 10 Aug 2020 Posts: 3
|
I see the similar error in the logs but i see some thing like this :-
The specified entity is not authorized to access the required object. The
following requested permissions are unauthorized: setall
But when i queuery the authorization with dspmqauth for the queue for that id i see full access ((get browse put inq sec connect altusr passid passall setid)) |
|
Back to top |
|
 |
fjb_saper |
Posted: Tue Aug 11, 2020 4:17 am Post subject: |
|
|
 Grand High Poobah
Joined: 18 Nov 2003 Posts: 20756 Location: LI,NY
|
scnr143 wrote: |
I see the similar error in the logs but i see some thing like this :-
The specified entity is not authorized to access the required object. The
following requested permissions are unauthorized: setall
But when i queuery the authorization with dspmqauth for the queue for that id i see full access ((get browse put inq sec connect altusr passid passall setid)) |
As you may have noticed the setall authorization is not in your list. The system is complaining you're missing the setall authorization. What exactly are you trying to do that you would need this authorization?  _________________ MQ & Broker admin |
|
Back to top |
|
 |
scnr143 |
Posted: Tue Aug 11, 2020 4:25 am Post subject: |
|
|
Newbie
Joined: 10 Aug 2020 Posts: 3
|
All i am trying is to put a message in a Q. Not sure why the qmgr is complaining about +set all when i have put and get access to the queue. |
|
Back to top |
|
 |
bruce2359 |
Posted: Tue Aug 11, 2020 6:27 am Post subject: |
|
|
 Poobah
Joined: 05 Jan 2008 Posts: 9469 Location: US: west coast, almost. Otherwise, enroute.
|
scnr143 wrote: |
All i am trying is to put a message in a Q. Not sure why the qmgr is complaining about +set all when i have put and get access to the queue. |
You may only be trying to MQPUT a message on a queue, but the app you are running is attempting to set fields in the MQMD that requires SETALL privilege. Only special apps should have or need setall, like the receiver-side MCA. Normal business apps should not have setall. _________________ I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
Back to top |
|
 |
hughson |
Posted: Tue Aug 11, 2020 8:52 pm Post subject: |
|
|
 Padawan
Joined: 09 May 2013 Posts: 1959 Location: Bay of Plenty, New Zealand
|
scnr143 wrote: |
I see the similar error in the logs but i see some thing like this :-
The specified entity is not authorized to access the required object. The
following requested permissions are unauthorized: setall
But when i queuery the authorization with dspmqauth for the queue for that id i see full access ((get browse put inq set connect altusr passid passall setid)) |
scnr143 wrote: |
Not sure why the qmgr is complaining about +set all when i have put and get access to the queue. |
The error is complaining about "setall" not "set". I see that the list you supply does not include "setall". This is different from "set".
"setall" covers the open option MQOO_SET_ALL_CONTEXT
"set" covers the open option MQOO_SET
These are not the same thing.
scnr143 wrote: |
All i am trying is to put a message in a Q. |
Not entirely - you are trying to put a message AND provide all the context fields in the message header, i.e the user id the message was put by, and the date/time the message was put.
If you're sure that your application should be allowed to bypass the queue manager filling in the context fields, and be allowed to set all the context fields itself, you will need to grant your user "setall" authority on the object mentioned in the error message. You don't show the whole error message or I would have created the full command for you.
Cheers,
Morag _________________ Morag Hughson @MoragHughson
IBM MQ Technical Education Specialist
Get your IBM MQ training here!
MQGem Software |
|
Back to top |
|
 |
|