| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Error obtaining Client connection from RFHUtilc |
« View previous topic :: View next topic » |
| Author |
Message
|
| Y75 |
 Posted: Thu Apr 10, 2014 7:33 am Post subject: Error obtaining Client connection from RFHUtilc |
 |
|
Apprentice
Joined: 29 Jul 2013
Posts: 32
|
We have a QM in domain 1 and most of the users are in domain 2. Majority of the users in domain 2 can access QM in domain 1 using RFHutilc. Couple of users can't.
Authentication against Channel Auth records is disabled on QM. Not sure what could be the reason. This is what I see in QM logs.
Any pointers are appreciated.
| Code: |
----- amqrmrsa.c : 898 --------------------------------------------------------
4/10/2014 10:41:01 - Process(16552.1711) User(z-mqmbanking) Program(amqzlaa0.exe)
Host(CSCAPPNOR007) Installation(Installation1)
VRMF(7.5.0.1) QMgr(NOR007QMGR)
AMQ8077: Entity 'rchunduri@asiapac' has insufficient authority to access object
'NOR007QMGR'.
EXPLANATION:
The specified entity is not authorized to access the required object. The
following requested permissions are unauthorized: connect
ACTION:
Ensure that the correct level of authority has been set for this entity against
the required object, or ensure that the entity is a member of a privileged
group.
----- amqzfubn.c : 515 --------------------------------------------------------
4/10/2014 10:41:01 - Process(27440.189) User(z-mqmbanking) Program(amqrmppa.exe)
Host(CSCAPPNOR007) Installation(Installation1)
VRMF(7.5.0.1) QMgr(NOR007QMGR)
AMQ9557: Queue Manager User ID initialization failed.
EXPLANATION:
The call to initialize the User ID failed with CompCode 2 and Reason 2035.
ACTION:
Correct the error and try again.
----- cmqxrsrv.c : 1972 -------------------------------------------------------
4/10/2014 10:41:01 - Process(27440.189) User(z-mqmbanking) Program(amqrmppa.exe)
Host(CSCAPPNOR007) Installation(Installation1)
VRMF(7.5.0.1) QMgr(NOR007QMGR)
AMQ9999: Channel 'NOR007.SRVCONN' to host '20.31.68.196 (20.31.68.196)' ended
abnormally.
EXPLANATION:
The channel program running under process ID 27440(24960) for channel
'NOR007.SRVCONN' ended abnormally. The host name is '20.31.68.196
(20.31.68.196)'; in some cases the host name cannot be determined and so is
shown as '????'.
ACTION:
Look at previous error messages for the channel program in the error logs to
determine the cause of the failure. Note that this message can be excluded
completely or suppressed by tuning the "ExcludeMessage" or "SuppressMessage"
attributes under the "QMErrorLog" stanza in qm.ini. Further information can be
found in the System Administration Guide. |
|
|
| Back to top |
|
 |
| Y75 |
| Posted: Thu Apr 10, 2014 8:10 am Post subject: |
|
|
Apprentice
Joined: 29 Jul 2013
Posts: 32
|
| If I add the users in mqm group on QM, then it does work; but that's not a solution. |
|
| Back to top |
|
|
| Vitor |
| Posted: Thu Apr 10, 2014 8:17 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
The Windows security model claims another victim.....
Enable security events on the queue manager to obtain more details on why the 2035 is being thrown. I would theorise that the affected users are either not part of the domain they think they are, or the credentials being sent do not reflect their domain membership.
It's all better on Unix. Or any other OS. 
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Thu Apr 10, 2014 8:39 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
If you changed OS group membership, remember to issue refresh security against the qmgr... that stuff gets cached... 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
