| Author |
Message
|
| anveshita |
 Posted: Fri Feb 20, 2009 8:27 am Post subject: MQ Explorer 6.0 "anuthorized access error" |
 |
|
Master
Joined: 27 Sep 2004
Posts: 254
Location: Jambudweepam
|
| I have an id to connect to the queue manager. The id works fine connecting from a stand-alone java program. However if I sign on to the my PC with the same ID and use MQ Explorer to connect to the queue manager, I get a "Unauthorized access error". Please let me know what could be happenning here. |
|
| Back to top |
|
 |
| bruce2359 |
| Posted: Fri Feb 20, 2009 8:58 am Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9470
Location: US: west coast, almost. Otherwise, enroute.
|
What was the ReasonCode or error message number? Did you look it up in the WMQ Messages manual?
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| anveshita |
| Posted: Mon Feb 23, 2009 7:35 am Post subject: |
|
|
Master
Joined: 27 Sep 2004
Posts: 254
Location: Jambudweepam
|
Ok. It was a pop-up message when I tried connecting to the queue manager. It says:
"Access not permitted.You are not authorized to perform this operation(AMQ4036)"
Please let m eknow |
|
| Back to top |
|
|
| Gaya3 |
| Posted: Mon Feb 23, 2009 7:41 am Post subject: |
|
|
Jedi
Joined: 12 Sep 2006
Posts: 2493
Location: Boston, US
|
|
| Back to top |
|
|
| anveshita |
| Posted: Mon Feb 23, 2009 7:58 am Post subject: |
|
|
Master
Joined: 27 Sep 2004
Posts: 254
Location: Jambudweepam
|
Gayatri:
Thanks for the links. Infact I have gone through the links sometime back when I had the issue. following is the revision to my issue:
1. I have created a local id : unixuser1 and password :unixpwd1 on my windows machine. The user unizuesr1 and unizpwd1 are defined on unix box where the queue manger I am trying to connect exists. So in order for me to connect I have to logoff from my current "us/winuser1" account and login as login as unixuser1 on my windows machine. This is a hassle but I could connect
2. I do not want to logoff from my windows logon session. So I have asked the admin to create an account for "winuser1" on unix box and asked them to grant the same privelages as "unixuser1". Ideally this should allow me to connect to the queue manager without logging off from my current "us/winuser1" session. Right? But still I get the MQ4036 error.
Can you help me with this? |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Mon Feb 23, 2009 8:03 am Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9470
Location: US: west coast, almost. Otherwise, enroute.
|
| Quote: |
| and asked them to grant the same privelages as "unixuser1". |
Did they do it? I'd guess not.
Have them look at the error logs for the qmgr you are connecting to.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| anveshita |
| Posted: Mon Feb 23, 2009 8:13 am Post subject: |
|
|
Master
Joined: 27 Sep 2004
Posts: 254
Location: Jambudweepam
|
| bruce2359 wrote: |
| Quote: |
| and asked them to grant the same privelages as "unixuser1". |
Did they do it? I'd guess not.
Have them look at the error logs for the qmgr you are connecting to. |
Well I have checked the groups in which winuser1 and unixuser1 are there. They are in the same group. Not sure why you suspect. Anyways I tried to look at the logs and apperently the logs were locked down to mqm group only. The ids i mentioned are in the mqusers group which is a custom group created for the application users. But one id is able to connect and the other one is unable. Weird... |
|
| Back to top |
|
|
| mqjeff |
| Posted: Mon Feb 23, 2009 8:18 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
| Did you REFRESH SECURITY after changing the OS level security on the queue manager server machine? |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Mon Feb 23, 2009 8:21 am Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9470
Location: US: west coast, almost. Otherwise, enroute.
|
| Quote: |
| Have them look at the error logs |
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| anveshita |
| Posted: Mon Feb 23, 2009 8:21 am Post subject: |
|
|
Master
Joined: 27 Sep 2004
Posts: 254
Location: Jambudweepam
|
| Hmm. Let me check with the admin. |
|
| Back to top |
|
|
| SAFraser |
| Posted: Mon Feb 23, 2009 12:28 pm Post subject: |
|
|
Shaman
Joined: 22 Oct 2003
Posts: 742
Location: Austin, Texas, USA
|
You do not need to logoff windows to use a different user ID to connect to a unix machine from MQExplorer.
Follow these instructions to create an appdata variable and set it in a batch file:
http://www.mqseries.net/phpBB2/viewtopic.php?t=25576&highlight=eclipse+user
Then use "contact admin" to launch the resulting batch file, launching it as the local user "unixuser1". The password you have assigned to "unixuser1" on the Windows machine is irrelevant to MQ on unix. I use this approach daily.
I believe that creating a winuser1 account on the unix box will not work as Windows is passing your entire domain ID (us/winuser1) to MQ.
Things are working from the java program because (unless you specify otherwise) it connects as user "mqm". |
|
| Back to top |
|
|
|
|
