ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » unable to connect to config mgr

Post new topic  Reply to topic
 unable to connect to config mgr « View previous topic :: View next topic » 
Author Message
Jenney
PostPosted: Thu Sep 13, 2007 11:22 am    Post subject: unable to connect to config mgr Reply with quote

Voyager

Joined: 25 Apr 2007
Posts: 83
Location: Melbourne

Hi All,

Config manager V6, Toolkit V 6.0.2 with DDomain Aware=0, I have created view only acl entry for the user name abc.

When i try to connect to the config manager with the abc user, i get error desktop-name/abc is not authorize to view config manager proxy.

Help is highly appreciated.

Thanks
Back to top
View user's profile Send private message
jefflowrey
PostPosted: Thu Sep 13, 2007 11:23 am    Post subject: Reply with quote

Grand Poobah

Joined: 16 Oct 2002
Posts: 19981

Did you create an ACL for the machine-name? or for all machines?
_________________
I am *not* the model of the modern major general.
Back to top
View user's profile Send private message
Jenney
PostPosted: Thu Sep 13, 2007 11:29 am    Post subject: Reply with quote

Voyager

Joined: 25 Apr 2007
Posts: 83
Location: Melbourne

no not for the machine name
Back to top
View user's profile Send private message
jefflowrey
PostPosted: Thu Sep 13, 2007 11:31 am    Post subject: Reply with quote

Grand Poobah

Joined: 16 Oct 2002
Posts: 19981

I mean, did you specify -m or -a when you mqsicreateaclentry ?
_________________
I am *not* the model of the modern major general.
Back to top
View user's profile Send private message
Jenney
PostPosted: Thu Sep 13, 2007 11:33 am    Post subject: Reply with quote

Voyager

Joined: 25 Apr 2007
Posts: 83
Location: Melbourne

yes i did specify computer name -m
Back to top
View user's profile Send private message
jefflowrey
PostPosted: Thu Sep 13, 2007 11:36 am    Post subject: Reply with quote

Grand Poobah

Joined: 16 Oct 2002
Posts: 19981

Does it match "desktop-name"? or did you specify something different?

Did you grant -x V on -p? You may need to do this as well.
_________________
I am *not* the model of the modern major general.
Back to top
View user's profile Send private message
Jenney
PostPosted: Thu Sep 13, 2007 11:45 am    Post subject: Reply with quote

Voyager

Joined: 25 Apr 2007
Posts: 83
Location: Melbourne

-x V
Back to top
View user's profile Send private message
jefflowrey
PostPosted: Thu Sep 13, 2007 12:24 pm    Post subject: Reply with quote

Grand Poobah

Joined: 16 Oct 2002
Posts: 19981

So you said something like

mqsicreateaclentry ConfigMgr -u abc -m desktop-name -x V -p

And you are getting an error that you can't view the configmgr proxy?
_________________
I am *not* the model of the modern major general.
Back to top
View user's profile Send private message
max power
PostPosted: Sun Sep 16, 2007 12:09 am    Post subject: Reply with quote

Apprentice

Joined: 06 Sep 2007
Posts: 31

I can't seem to find it in the documentation but how do you specify a user id of 'firstname.lastname' in the mqsicreateaclentry command?
I've tried it in single and doule quotes, breackets and without but it doesn't appear to like any of those.
The ConfigMgr is on AIX and I want to connect to it from a toolkit on windows.
Back to top
View user's profile Send private message
jefflowrey
PostPosted: Sun Sep 16, 2007 6:03 am    Post subject: Reply with quote

Grand Poobah

Joined: 16 Oct 2002
Posts: 19981



I wouldn't *think* that ConfigMgr would care about the period and the only thing that should matter is, potentially, protecting it from the shell.

What happens if you don't put in any quotes or etc at all, just firstname.lastname?

You may need to open a PMR...
_________________
I am *not* the model of the modern major general.
Back to top
View user's profile Send private message
max power
PostPosted: Sun Sep 16, 2007 9:04 am    Post subject: Reply with quote

Apprentice

Joined: 06 Sep 2007
Posts: 31

When I tried the command without any quotes or brackets, I recevied an error so assumed I needed something in order to use the period. I'll have to try it again tomorrow and hope that I just typed something wrong the first time as I don't really want to raise a PMR if I can help it
Back to top
View user's profile Send private message
fjb_saper
PostPosted: Sun Sep 16, 2007 10:08 am    Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20696
Location: LI,NY

try firstname\.lastname and let us know how this will work...
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
max power
PostPosted: Tue Sep 18, 2007 2:08 am    Post subject: Reply with quote

Apprentice

Joined: 06 Sep 2007
Posts: 31

Still not working unfortunately.
I am typing this command:
mqsicreateaclentry CONFIGMGR -u firstname.lastname -a -x F
and the following error is returned:

BIP8843W: Creates a security Access Control Entry in the Configuration Manager repository. Syntax: mqsicreateaclentry configMgrName (-f fileName | ((-g groupName | (-u userName (-m machineName | -a))) -x accessLevel ((-b broker (-e executionGroup)) | -s | -t | -r | -p))) [-n connectionFile] [-w timeoutValue]
Command Options:
'configMgrName' name of the Configuration Manager (may be omitted on Windows)
'-f fileName' File containing list of Access Control Entries to create.
'-g groupName' Add Access Control Entry for the specified group
'-u userName' Add Access Control Entry for the specified user (must be accompanied by either -a or -m)
'-m machineName' Add the Access Control Entry for the user for this specific machine/domain name only
'-a' Add an Access Control Entry for the user for all machines/domains
'-x accessLevel' Level of authority to grant (F, E, D, V)
'-b broker' Add access to the specified broker
'-e executionGroup' Add access to the specified execution group (must be accompanied by -b)
'-s' Add access to the subscriptions table
'-t' Add access to the pub/sub topology
'-r' Add access to the root topic
'-p' Add access to the ConfigManagerProxy. Also known as the "All resources" Access Control Entry.
'-w timeoutValue' value in seconds to wait for responses.
'-n connectionFile' Optional "connection file" to allow the command to communicate with a remote ConfigMgr.
Note: On Windows platforms, if the Configuration Manager name is omitted 'ConfigMgr' will be used.

BIP8002E: Selected flags incompatible.
When using this command interface the user should only select the supported flags.
Correct and reissue the command.

I get the same error if I try: mqsicreateaclentry CONFIGMGR -u firstname\.lastname -a -x F

I don't see what flag I am missing or using incorrectly.
Back to top
View user's profile Send private message
jefflowrey
PostPosted: Tue Sep 18, 2007 2:18 am    Post subject: Reply with quote

Grand Poobah

Joined: 16 Oct 2002
Posts: 19981

You need at least one of {-p,-b,-e,-s,-t,-r}, to provide the object to which you are granting permissions....
_________________
I am *not* the model of the modern major general.
Back to top
View user's profile Send private message
max power
PostPosted: Tue Sep 18, 2007 3:14 am    Post subject: Reply with quote

Apprentice

Joined: 06 Sep 2007
Posts: 31

Yes, of course I do. Completely forgot the -p option.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » unable to connect to config mgr
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.