| Author |
Message
|
| jackd |
 Posted: Thu Feb 06, 2014 2:03 am Post subject: amq4036 error for windows server |
 |
|
Novice
Joined: 05 Feb 2014
Posts: 12
|
Hi folks ,
We have an issue while connecting to the remote queue manager which sits on Windows 2008 server.
Error is : AMq4036 . access not permitted .
i can see that Queue manager was Up in the window 2008 Server.
But not able to connect.
Need to set the permissions On this Queue Manager.
I tried adding a group to the local MQM group.
please help me how to add that group with proper parameter.
Thanks in Advance. |
|
| Back to top |
|
 |
| exerk |
| Posted: Thu Feb 06, 2014 2:15 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
You don't state which version of WMQ you're using and if you're using V7.1 upward there may be Channel Authentication Records blocking you, in which case adding users to the mqm group is going to be of no benefit whatsoever. From the manual:
AMQ4036
Access not permitted. You are not authorized to perform this pperation.
Severity
10: Warning
Explanation
The security mechanism of the queue manager has indicated that the user ID associated with this request is not authorized to access the object.
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| jackd |
| Posted: Thu Feb 06, 2014 3:11 am Post subject: |
|
|
Novice
Joined: 05 Feb 2014
Posts: 12
|
WMQ Version 6.0.2.
For this how to connect as remote Queue Manager.
What ever you Quoted the error description was correct.
In this scenario how should i fix the issue.
Your suggestions really helps alot for me.
Thanks in advance |
|
| Back to top |
|
|
| exerk |
| Posted: Thu Feb 06, 2014 5:33 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
Speak to your Windows Sys Admins and enlist their help, and while your at it, plan your upgrade to a supported version of WMQ.
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| jackd |
| Posted: Mon Feb 10, 2014 2:44 am Post subject: |
|
|
Novice
Joined: 05 Feb 2014
Posts: 12
|
Hi Exerk,
My windows 2008 sever has MQ 7.5 Client Explorer .
I tried to set the authorization by right clicking on the Queue Manager->Object Authorities -> add role based authorities.
on this particular window i have added my group as administrator.n
Please let me know how to set the authorizations to my group to access that Queue manager remotely.
Still am getting AMQ4036 error.
Thanks In advance. |
|
| Back to top |
|
|
| Vitor |
| Posted: Mon Feb 10, 2014 6:09 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| jackd wrote: |
| My windows 2008 sever has MQ 7.5 Client Explorer . |
And you're trying to use this to administer a WMQv6.0.2 queue manager? And you're wondering why it's not working?
| jackd wrote: |
| I tried to set the authorization by right clicking on the Queue Manager->Object Authorities -> add role based authorities. |
WMQv7.5 has a different security model to previous versions. It's one of the things which is new on 7.5.
| jackd wrote: |
| Please let me know how to set the authorizations to my group to access that Queue manager remotely. |
None of the currently available graphical tools will have a lot of luck administering a queue manager which is out of support, because they're not built to do it.
Get whoever owns that queue manager to make the changes their end; either by the WMQv6 GUI they've kept preserved or from the command line. And get them to update it.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| jackd |
| Posted: Fri Mar 07, 2014 1:15 am Post subject: |
|
|
Novice
Joined: 05 Feb 2014
Posts: 12
|
Exerck,
Please let me know where i went wrong in the process to creating a Queue Manager in Windows Server.
1. Created A Queue Manager in Windows server with custom Portnumber. ex.12345
2. By default a listener was created.
3. when i was trying to access that queue manager remotely through other server giving the host name and Queue manager and port number . i was getting an error.
4 even in windows we can give commands using cmd prompt . i tried creating new listner and channel svrconn .
Let me know is there any other things to add.
Error :
AMQ4036 : Access Not Permitted. You are not Authorized to perform this operation. |
|
| Back to top |
|
|
| exerk |
| Posted: Fri Mar 07, 2014 1:34 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
| jackd wrote: |
Exerck,
Please let me know where i went wrong in the process to creating a Queue Manager in Windows Server... |
I'd say you went wrong by not reading the sections of the Info Centre relevant to security, especially security in a Windows environment, and my previous post.
Read, learn, assimilate, and apply...
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| jackd |
| Posted: Fri Mar 07, 2014 6:44 am Post subject: |
|
|
Novice
Joined: 05 Feb 2014
Posts: 12
|
Hi Exerk,
Earlier i have created Queue Managers in Linux. Where i can set the authorizations with command setmqaut command.
So let me know what are the scenario i should follow in Windows server.
Mqver - 7.5.0
I have created Queue Manager using GUI , with port number12435, and TCP/ip also in running state.
but still getting same error. |
|
| Back to top |
|
|
| Vitor |
| Posted: Fri Mar 07, 2014 6:47 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| jackd wrote: |
| So let me know what are the scenario i should follow in Windows server. |
The setmqauth command works on Windows. You're not compelled to use the GUI.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Fri Mar 07, 2014 6:54 am Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
Can you connect using one of the supplied sample programs -amqsput or amqsputc?
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| jackd |
| Posted: Fri Mar 07, 2014 7:40 am Post subject: |
|
|
Novice
Joined: 05 Feb 2014
Posts: 12
|
Vitor,
I was using command prompt in windows too.
But still the issue was not fixed.
Bruce,
amqsput and amqsget was connected using command prompt .
Let me know how to fix the issue for this AMQ4036 .Authority issue.
Thanks in Advance. |
|
| Back to top |
|
|
| exerk |
| Posted: Fri Mar 07, 2014 7:48 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
| jackd wrote: |
Vitor,
I was using command prompt in windows too.
But still the issue was not fixed.
Bruce,
amqsput and amqsget was connected using command prompt .
Let me know how to fix the issue for this AMQ4036 .Authority issue.
Thanks in Advance. |
| exerk wrote: |
| I'd say you went wrong by not reading the sections of the Info Centre relevant to security, especially security in a Windows environment, and my previous post. |
Windows Domains, and how you run WMQ under them is well worth a read...
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Fri Mar 07, 2014 8:59 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
|
| Back to top |
|
|
| exerk |
| Posted: Fri Mar 07, 2014 9:03 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
| jackd wrote: |
| WMQ Version 6.0.2. |
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
|
|
