ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Security » MQRC 3014 on MQCMD_SET_AUTH_REC

Post new topic  Reply to topic Goto page 1, 2, 3, 4, 5, 6, 7  Next
 MQRC 3014 on MQCMD_SET_AUTH_REC « View previous topic :: View next topic » 
Author Message
vignesh1988
PostPosted: Thu Apr 03, 2014 6:07 am    Post subject: MQRC 3014 on MQCMD_SET_AUTH_REC Reply with quote

Acolyte

Joined: 13 Apr 2013
Posts: 62
Location: Chennai

Hello All,
I am not sure, am posting this at the right Index "Websphere MQ Security".

I have the below code snippet returning me 3014 (MQRCCF_CFIN_PARM_ID_ERROR) , I give all the necessary parameters IBM Suggests in there WMQ 7.0 Infocenter.

Code:

  mqAddString(adminBag, MQCACF_AUTH_PROFILE_NAME, MQBL_NULL_TERMINATED, "*", &compCode, &reason);
mqAddInteger(adminBag, MQIACF_OBJECT_TYPE, MQOT_Q, &compCode, &reason);
mqAddInteger(adminBag, MQIACF_AUTH_ADD_AUTHS, MQAUTH_BROWSE, &compCode, &reason);
mqAddString(adminBag, MQCACF_GROUP_ENTITY_NAMES, MQBL_NULL_TERMINATED, "mqm", &compCode, &reason);
   
   mqExecute(hConn,                   /* WebSphere MQ connection handle           */
             MQCMD_SET_AUTH_REC,          /* Command to be executed               */
             MQHB_NONE,               /* No options bag                       */
             adminBag,              /* Handle to bag containing commands    */
             responseBag,             /* Handle to bag to receive the response*/
             MQHO_NONE,               /* Put msg on SYSTEM.ADMIN.COMMAND.QUEUE*/
             MQHO_NONE,               /* Create a dynamic q for the response  */
             &compCode,               /* Completion code from the mqExecute   */
             &reason);     


The above is my code, on which am facing this issue.. Can some people help me out. I wasted 2 days on this..
Back to top
View user's profile Send private message Send e-mail
RogerLacroix
PostPosted: Fri Apr 04, 2014 8:51 am    Post subject: Re: MQRC 3014 on MQCMD_SET_AUTH_REC Reply with quote

Jedi Knight

Joined: 15 May 2001
Posts: 3264
Location: London, ON Canada

vignesh1988 wrote:
I have the below code snippet returning me 3014 (MQRCCF_CFIN_PARM_ID_ERROR) , I give all the necessary parameters IBM Suggests in there WMQ 7.0 Infocenter.

MQAI does not support either an MQCFIL or MQCFSL PCF types.

Go look up your parameters here and make sure that you are not using any of them, if you are, then you will need to switch to sending and receiving raw PCF commands.

Regards,
Roger Lacroix
Capitalware Inc.
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter
Back to top
View user's profile Send private message Visit poster's website
vignesh1988
PostPosted: Fri Apr 04, 2014 9:07 am    Post subject: Reply with quote

Acolyte

Joined: 13 Apr 2013
Posts: 62
Location: Chennai

But IBM Doesn't say it will not support MQAI calls for Authority Records anywhere in it's WMQ 7.0.

I am using WMQ 7.0.1.4 and a Linux System

What do you mean by Raw RCF Command?
Could you please give me a sample code for a RAW PCF Command?

Your response greatly Appreciated
Back to top
View user's profile Send private message Send e-mail
RogerLacroix
PostPosted: Fri Apr 04, 2014 9:12 am    Post subject: Reply with quote

Jedi Knight

Joined: 15 May 2001
Posts: 3264
Location: London, ON Canada

vignesh1988 wrote:
But IBM Doesn't say it will not support MQAI calls for Authority Records anywhere in it's WMQ 7.0.

That's NOT what I said. I said MQAI does not support MQCFIL or MQCFSL PCF types. It supports all of the other PCF types.

Open a PMR with IBM and Level 3 will tell you the same thing.

vignesh1988 wrote:
What do you mean by Raw RCF Command?
Could you please give me a sample code for a RAW PCF Command?

Go download the source code for SupportPac MS03.

Regards,
Roger Lacroix
Capitalware Inc.
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter
Back to top
View user's profile Send private message Visit poster's website
mqjeff
PostPosted: Fri Apr 04, 2014 9:38 am    Post subject: Reply with quote

Grand Master

Joined: 25 Jun 2008
Posts: 17447

The MQAI is the MQ Administrative Interface.

It is a separate application layer on top of PCF messages.

It's, in theory, supposed to be "easier to use" than regular PCF messages.

I've always found it much more confusing. What's a bag? Why am I putting data structures into a bag?

If you want to use something relatively straight forward, use the Java MQ PCF API.

The MQAI does not support the commands you are trying to run, because it does not support the parameters you need to set on the commands you are trying to run.
Back to top
View user's profile Send private message
vignesh1988
PostPosted: Fri Apr 04, 2014 10:37 am    Post subject: Reply with quote

Acolyte

Joined: 13 Apr 2013
Posts: 62
Location: Chennai

Ok. I am going to follow Raw PCF commands, I dont know Java.. If you could provide me the code in Java i can appreciate it.

Below is what i wrote for "Raw PCF Message"

Code:

AdminMsgLen = MQCFH_STRUC_LENGTH
              + MQCFST_STRUC_LENGTH_FIXED + MQ_AUTH_PROFILE_NAME_LENGTH
              + MQCFIN_STRUC_LENGTH + MQCFIL_STRUC_LENGTH_FIXED + MQCFSL_STRUC_LENGTH_FIXED + MQ_ENTITY_NAME_LENGTH
              ;

pAdminMsg   = (MQBYTE *)malloc( AdminMsgLen );
 
  pPCFHeader  = (MQCFH *)pAdminMsg;
 
  pPCFString  = (MQCFST *)(pAdminMsg
                          + MQCFH_STRUC_LENGTH
                          );
 
  pPCFInteger = (MQCFIN *)( pAdminMsg
                          + MQCFH_STRUC_LENGTH
                          + MQCFST_STRUC_LENGTH_FIXED
                          );
 

pPCFHeader->Type           = /*MQCFT_COMMAND*/MQCFT_COMMAND_XR;
  pPCFHeader->StrucLength    = MQCFH_STRUC_LENGTH;
  pPCFHeader->Version        = MQCFH_VERSION_1;
  pPCFHeader->Command        = MQCMD_SET_AUTH_REC;
  pPCFHeader->MsgSeqNumber   = MQCFC_LAST;
  pPCFHeader->Control        = MQCFC_LAST;
  pPCFHeader->ParameterCount = 4;
 
  /* Setup parameter block */
  pPCFString->Type           = MQCFT_STRING;
  pPCFString->StrucLength    = MQCFST_STRUC_LENGTH_FIXED + MQ_AUTH_PROFILE_NAME_LENGTH;
  pPCFString->Parameter      = MQCACF_AUTH_PROFILE_NAME;
  pPCFString->CodedCharSetId = MQCCSI_DEFAULT;
  pPCFString->StringLength   = MQ_AUTH_PROFILE_NAME_LENGTH;
  memset( pPCFString->String, ' ', MQ_AUTH_PROFILE_NAME_LENGTH );
  strcpy(pPCFString->String,"XBBJ605.SET.TEST.QUEUE\0");
 printf("%s\n",pPCFString->String);
  /* Setup parameter block */
  pPCFInteger->Type        = MQCFT_INTEGER;
  pPCFInteger->StrucLength = MQCFIN_STRUC_LENGTH;
  pPCFInteger->Parameter   = MQIACF_OBJECT_TYPE;
  pPCFInteger->Value       = MQOT_Q;
 
  pPCFInteger->Type        = MQCFT_INTEGER;
  pPCFInteger->StrucLength = MQCFIL_STRUC_LENGTH_FIXED;
  pPCFInteger->Parameter   = MQIACF_AUTH_ADD_AUTHS;
  pPCFInteger->Value       = MQAUTH_BROWSE;
 
  pPCFString->Type           = MQCFT_STRING;
  pPCFString->StrucLength    = MQCFSL_STRUC_LENGTH_FIXED + MQ_ENTITY_NAME_LENGTH;
  pPCFString->Parameter      = MQCACF_GROUP_ENTITY_NAMES;
  pPCFString->CodedCharSetId = MQCCSI_DEFAULT;
  pPCFString->StringLength   = MQ_AUTH_PROFILE_NAME_LENGTH;
  memset( pPCFString->String, ' ', MQ_ENTITY_NAME_LENGTH );
  strcpy(pPCFString->String,"wigc01\0");
 printf("%s\n",pPCFString->String);
 
  PutMsg(  hConn                    /* Queue manager handle             */
        ,  MQFMT_ADMIN              /* Format of message                */
        ,  hAdminQ                  /* Handle of command queue          */
        ,  "XBBJ605.MODEL.QUEUE\0" /* reply to queue                   */
        ,  (MQBYTE *)pAdminMsg      /* Data part of message to put      */
        ,  AdminMsgLen
        );


Can you please check and advise if it's all correct? Since I dont see any response message (or) Neither an Error if i run this code.

Will Set-Authority give any responses? I dont see any response page for SET_AUTH_REC_CMD in IBM WMQ 7 Infocenter.

Please assist
Back to top
View user's profile Send private message Send e-mail
fjb_saper
PostPosted: Fri Apr 04, 2014 8:28 pm    Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY

You're talking about 7.0 but I don't remember AUTHREC's being available before 7.1... Maybe it's time to take a breath and go back to setmqaut?
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
vignesh1988
PostPosted: Sat Apr 05, 2014 2:21 am    Post subject: Reply with quote

Acolyte

Joined: 13 Apr 2013
Posts: 62
Location: Chennai

Isn't SET AUTREC MQSC command is only revealed above 7.1 Versions??...

If the MQCMD_SET_AUTH_REC PCF calls are not supported by IBM WebSphere 7.0 , for what reason they have specified those information's in there WMQ 7.0 Info center and wasting everyone's time here..
Back to top
View user's profile Send private message Send e-mail
mqjeff
PostPosted: Sat Apr 05, 2014 6:55 am    Post subject: Reply with quote

Grand Master

Joined: 25 Jun 2008
Posts: 17447

The command is documented in the v7 info center, so it should be applicable to v7.0.

It is only documented to return an error, if an error occurs.

If you don't receive an error, you can assume that the command has completed.

If you want to verify that the command has completed, you can either use mqsc or a different PCF message to inquire about the existence of an authority record.
Back to top
View user's profile Send private message
fjb_saper
PostPosted: Sat Apr 05, 2014 9:57 am    Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY

mqjeff wrote:
The command is documented in the v7 info center, so it should be applicable to v7.0.

It is only documented to return an error, if an error occurs.

If you don't receive an error, you can assume that the command has completed.

If you want to verify that the command has completed, you can either use mqsc or a different PCF message to inquire about the existence of an authority record.

You mean to say that the pcf version was available before the mqsc version and is supposed to work in 7.0.1.x ?
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
mqjeff
PostPosted: Sat Apr 05, 2014 10:50 am    Post subject: Reply with quote

Grand Master

Joined: 25 Jun 2008
Posts: 17447

fjb_saper wrote:
mqjeff wrote:
The command is documented in the v7 info center, so it should be applicable to v7.0.

It is only documented to return an error, if an error occurs.

If you don't receive an error, you can assume that the command has completed.

If you want to verify that the command has completed, you can either use mqsc or a different PCF message to inquire about the existence of an authority record.

You mean to say that the pcf version was available before the mqsc version and is supposed to work in 7.0.1.x ?


http://publib.boulder.ibm.com/infocenter/wmqv7/v7r0/topic/com.ibm.mq.csqzac.doc/pc14090_.htm

Note that this is NOT CHLAUTH. It's AUTHREC.
Back to top
View user's profile Send private message
fjb_saper
PostPosted: Sun Apr 06, 2014 11:21 am    Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY

I understood you the first time. I realize this is not chlauth but authrec.
However in this version there is no SET AUTHREC command described in MQSC. The command is only described in pcf at version 7.0. Which was my point for it being available in pcf but not in mqsc... Hence the additional question about it <maybe> being an "advanced / hidden" feature in 7.0?

See http://publib.boulder.ibm.com/infocenter/wmqv7/v7r0/topic/com.ibm.mq.csqzaj.doc/sc10340_.htm

The MQSC SET AUTHREC command is described (for the 1st time) in the 7.1 MQSC reference:
http://pic.dhe.ibm.com/infocenter/wmqv7/v7r1/topic/com.ibm.mq.doc/sc15060_.htm

Note that in the 7.5 documentation the MQSC command SET AUTHREC is present in the list in the left pane, omitted in the list in the right pane, but present in the subtopic list in the right pane (just below the right pane list) ...
http://pic.dhe.ibm.com/infocenter/wmqv7/v7r5/topic/com.ibm.mq.ref.adm.doc/q085130_.htm



_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
bruce2359
PostPosted: Sun Apr 06, 2014 12:00 pm    Post subject: Reply with quote

Poobah

Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.

vignesh1988 wrote:
I am using WMQ 7.0.1.4 and a Linux System

So, you are compiling and executing your code on 7.0.1.4 libraries; and you are trying to PCF-wrap commands for WMQ features available on 7.1 and newer?

7.0.1.4 libraries do not support features implemented and supported at newer versions of the software.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live.
Back to top
View user's profile Send private message
mqjeff
PostPosted: Sun Apr 06, 2014 2:21 pm    Post subject: Reply with quote

Grand Master

Joined: 25 Jun 2008
Posts: 17447

Don't get me started on the documentation for PCF and MQSC messages.

vignesh1988 is running the PCf program successfully - it compiles and sends a PCF message to the command server queue. The command server fails to return a fault response.

I'd call that "it's supported as PCF at v7.x".

Whether the command actually produces the correct authorization record is a second question, and only answerable by either running vignesh1988's program yourself, or by vignesh1988 issuing a dmpmqaut or otherwise confirming that the authorization record was created.
Back to top
View user's profile Send private message
bruce2359
PostPosted: Sun Apr 06, 2014 5:27 pm    Post subject: Reply with quote

Poobah

Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.

Is the OP targeting the output from the app to a 7.1+ or some other qmgr - remote administration?
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Goto page 1, 2, 3, 4, 5, 6, 7  Next Page 1 of 7

MQSeries.net Forum Index » IBM MQ Security » MQRC 3014 on MQCMD_SET_AUTH_REC
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.