|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
 |
|
Windows WMQ authorization |
« View previous topic :: View next topic » |
Author |
Message
|
mqbrk_newbie |
Posted: Wed Aug 31, 2005 8:16 am Post subject: Windows WMQ authorization |
|
|
 Acolyte
Joined: 13 Sep 2004 Posts: 70
|
This is what i want to do , at my workplace i would like to have a Queue manager running on my desktop which i should be work if i log in using my domain user id into that desktop.
I have admin access on my desktop , so i installed and configured ( if i remember well i said to NO are there any windows 2000 Domain controller) a queue manager.
1) I cant add my Network logon domain user id into local group , neither the local user that MQ is running under couldnt validate my domain user id.
2) So i created a local userid which is same as my network user id (except that it doesnt have domain tied to it) and added that to mqm group , now is it possible to tweak MQ to validate only the userid but not the domainid part even though the user id accessing is userid@domain. In short can the domain awareness be disabled for MQ ?
3) When i read the windows quick beginnings , there is a mention about special domain user account only when using windows 2000 domain controller. So my question is like , if the domain controller runs on any other version of windows , should the localuserid will be able to query the domain user id ?
Atlast is there way to go back & look what have you answered for Are there any windows 2000 domain controllers in your network in the registry or some place where it will be stored ?
Thanks .. |
|
Back to top |
|
 |
jefflowrey |
Posted: Wed Aug 31, 2005 9:37 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002 Posts: 19981
|
Basically, the special account comes in whenever any controller (for the most part) in your domain is running ActiveDirectory.
As a quick test, you could try running the Prepare MQ Wizard again, and using your domain Id as the special user for login.
If it doesn't work, you'll have to get assistance from your domain administrators. _________________ I am *not* the model of the modern major general. |
|
Back to top |
|
 |
SAFraser |
Posted: Wed Aug 31, 2005 10:52 am Post subject: |
|
|
 Shaman
Joined: 22 Oct 2003 Posts: 742 Location: Austin, Texas, USA
|
Try, as Jeff suggested, to reset with your own domain ID.
If that doesn't work, another thing to try is: When you launch MQExplorer or MQServices (or a DOS window for runmqsc & other command line stuff), right click and select "Run As". Use the local ID that you created to run these tools. If you don't see "Run As" in the menu, check to be sure the Run As service is running.
I would be curious to know how this turns out.
Shirley |
|
Back to top |
|
 |
fjb_saper |
Posted: Wed Aug 31, 2005 6:14 pm Post subject: |
|
|
 Grand High Poobah
Joined: 18 Nov 2003 Posts: 20756 Location: LI,NY
|
did you add your user to the mqm group.
Not just the username but qualified with domain.?
Don't forget mq does not resolve embedded groups.!!
Enjoy  |
|
Back to top |
|
 |
hguapluas |
Posted: Thu Sep 01, 2005 7:09 am Post subject: |
|
|
Centurion
Joined: 05 Aug 2004 Posts: 105 Location: San Diego
|
Oh the joys of sometimes having to work with HOSTS files! |
|
Back to top |
|
 |
|
|
 |
|
Page 1 of 1 |
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|
|
|