| Author |
Message
|
| Bert |
 Posted: Tue May 18, 2004 1:05 am Post subject: MQ aut problem |
 |
|
Newbie
Joined: 20 Apr 2004
Posts: 6
|
Hello,
I want to do the following command:
C:\>setmqaut -m QMSDA20 -p DAN001-ACC\supersd -t queue -n SD.DMFA.LA.NT.PERSO -put
AMQ7047: An unexpected error was encountered by a command.
I think the reason is the - sign in the domain name, is it possible to do this in another way?
_________________
Regards,
Bert |
|
| Back to top |
|
 |
| JasonE |
| Posted: Tue May 18, 2004 1:39 am Post subject: |
|
|
Grand Master
Joined: 03 Nov 2003
Posts: 1220
Location: Hursley
|
Possibly, but I dont get the same error here testing with a (non-existing) similar syntax. Do you get any fdc's?
What version, release, platform etc? |
|
| Back to top |
|
|
| Bert |
| Posted: Tue May 18, 2004 1:47 am Post subject: |
|
|
Newbie
Joined: 20 Apr 2004
Posts: 6
|
I do this on a Windows 2000 advanced server with Mqseries server v5.2
When I try to put with this user I get the following reason code: 2063
Kind regards
_________________
Regards,
Bert |
|
| Back to top |
|
|
| JasonE |
| Posted: Tue May 18, 2004 2:06 am Post subject: |
|
|
Grand Master
Joined: 03 Nov 2003
Posts: 1220
Location: Hursley
|
Check the amqerr01.log file for errors, such as amq8079 or amq8135.
Is your w2k machine part of an active directory doomain? If so you probably need to use a different userid to run mq under (a domain id) and grant it delegate authority on the domain controller. |
|
| Back to top |
|
|
| Bert |
| Posted: Tue May 18, 2004 3:01 am Post subject: |
|
|
Newbie
Joined: 20 Apr 2004
Posts: 6
|
This is the content of the d:\Program Files\MQSeries\errors\AMQ01860.0.FDC file:
| MQSeries First Failure Symptom Report |
| ===================================== |
| |
| Date/Time :- di mei 18 10:05:40 Romance Daylight Time 2004 |
| Host Name :- ACC904 (NT Version 5.0 Build 2195: Service Pack 3) |
| PIDS :- 5639B43 |
| LVLS :- 5200 |
| Product Long Name :- MQSeries for Windows NT and Windows 2000 |
| Vendor :- IBM |
| Probe Id :- ZF077020 |
| Application Name :- MQM |
| Component :- zfu_as_GetGroupSidList |
| Build Date :- Aug 2 2002 |
| CMVC level :- p520-CSD05G |
| Build Type :- IKAP - (Production) |
| UserID :- MUSR_MQADMIN |
| Process Name :- D:\PROGRA~1\MQSeries\bin\amqzlaa0.exe |
| Process :- 00001860 |
| Thread :- 00003936 |
| QueueManager :- QMSDA20 |
| Major Errorcode :- xecF_E_UNEXPECTED_SYSTEM_RC |
| Minor Errorcode :- OK |
| Probe Type :- MSGAMQ6119 |
| Probe Severity :- 2 |
| Probe Description :- AMQ6119: An internal MQSeries error has occurred |
| (rc=1722: NetUserGetLocalGroups: (null) |
| Comment1 :- rc=1722: NetUserGetLocalGroups: (null): |
_________________
Regards,
Bert |
|
| Back to top |
|
|
| JasonE |
| Posted: Tue May 18, 2004 4:45 am Post subject: |
|
|
Grand Master
Joined: 03 Nov 2003
Posts: 1220
Location: Hursley
|
1722 - Yuck (The RPC server is unavailable). Are you sure you get this every time one of these commands fails?
Are you a machine in a domain, and if so, is there an account musr_mqadmin on the domain controller which is locked by any chance? |
|
| Back to top |
|
|
| Bert |
| Posted: Tue May 18, 2004 8:39 am Post subject: |
|
|
Newbie
Joined: 20 Apr 2004
Posts: 6
|
Yes, I always get this error when I try it for this user, when I try the command for a user which is in the domain where the MQSeries server is in it works.
In the domain where the MQSeries server is in I don't have that mqseries admin user.
Is it a problem that I want to give a user of another domain put rights to a queue?
_________________
Regards,
Bert |
|
| Back to top |
|
|
| JasonE |
| Posted: Wed May 19, 2004 1:09 am Post subject: |
|
|
Grand Master
Joined: 03 Nov 2003
Posts: 1220
Location: Hursley
|
Do you have a trust relationship between the domains?
If MQ is in domain A, and you can authotize local users and users in domain A ok, but ones from domain B fail, then you need to ensure you have a trust relationship (so SIDs / users from Domain B become valid in domain A), and the MQ userid needs to have delegate authority for domain B as well (if it is an active directory domain). |
|
| Back to top |
|
|
|
|
