| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| MQ 2035 MQRC_NOT_AUTHORIZED |
« View previous topic :: View next topic » |
| Author |
Message
|
| JavaDev |
 Posted: Tue Oct 12, 2010 7:19 am Post subject: MQ 2035 MQRC_NOT_AUTHORIZED |
 |
|
Newbie
Joined: 30 Sep 2010
Posts: 8
|
Hi, The issue is with connecting to a remote broker(on AIX) from the WMB Toolkit V7.0 on Windows.
In V6.0, you were able to use the MQSICREATEACLENTRY on the remote system to give your windows userid access to the q manager.
It had no problem with a windows userid of "Administrator".
In V7.0, because of security changes, this command is no longer available.
Instead you have to create a userid on the remote system with the same name as your windows userid and then use the setmqaut command.
The issue is that on AIX, the userid length is restricted to 8 characters!!
Is there a way around this? |
|
| Back to top |
|
 |
| JavaDev |
| Posted: Mon Nov 15, 2010 1:40 am Post subject: |
|
|
Newbie
Joined: 30 Sep 2010
Posts: 8
|
Managed to find a workaround:
Just to recap the problem:
In V6.0, you were able to use the MQSICREATEACLENTRY on the remote system to give
your windows userid access to the q manager.
It had no problem with a windows userid of "Administrator" i.e. length greater than 8 characters.
In V7.0, because of security changes, the MQSICREATEACLENTRY command is gone and you have
to use SETMQAUTH. Now the userid used by the toolkit must match an existing userid on the remote Broker system.
As AIX and MVS limit the userid length to 8 then it may not be possible to match your windows userid.
Workaround:
You have 2 options to get around this:
(1) Setup a new Logon userid on Windows with a userid that will be valid for AIX/MVS i.e. max 8 characters.
Bit of a pain as you will have to keep switiching users when you want to work with WMB.
(2) Override the windows userid by using the -Duser.name property.
To enable the WMB Toolkit client:
Edit the <WMB installation directory>\eclipse.ini
Add -Duser.name=myaixid after the -vmargs line
To enable the CMAPI Exerciser client:
C:\Program Files\IBM\MQSI\7.0\sample\ConfigManagerProxy\StartConfigManagerProxyExerciser.bat
change the line
start "CMPAPI Exerciser Console" "%INSTALLPATH%\jre16\bin\javaw" cmp.exerciser.CMPAPIExerciser %1 %2 %3 %4 %5
to
start "CMPAPI Exerciser Console" "%INSTALLPATH%\jre16\bin\java" -Duser.name=myaixid cmp.exerciser.CMPAPIExerciser %1 %2 %3 %4 %5 |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
