| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Problem with PCF command |
« View previous topic :: View next topic » |
| Author |
Message
|
| maha20 |
 Posted: Fri Jul 29, 2005 5:06 pm Post subject: Problem with PCF command |
 |
|
Voyager
Joined: 23 Sep 2003
Posts: 79
|
I am developing a Java application to know the QTYPES and QDepths. I am using PCF commands to achieve this functionality. But my applcation is throwing exceptions when I try to acces the QM with PCF agent. The exection is :
"com.ibm.mq.MQException: MQJE001: Completion Code 2, Reason 2035"
I am executing the application with my UID but when I execute the same with mqm UID the application is not throwing any error codes. I want to know if I could escape the error using my UID. I am issuing the command for all the Q Types. It is not possible to grant my UID mqm permissions. Can I hanlde this in my code itself?.. Any tricks .. ??..
_________________
IBM Certified System Administrator -WMQ V5.3
SCJP 1.4 |
|
| Back to top |
|
 |
| wschutz |
| Posted: Fri Jul 29, 2005 5:29 pm Post subject: |
|
|
Jedi Knight
Joined: 02 Jun 2005
Posts: 3316
Location: IBM (retired)
|
Well, you at least need authority to put messages on SYSTEM.ADMIN.COMMAND.QUEUE. Do you have that?
_________________
-wayne |
|
| Back to top |
|
|
| csmith28 |
| Posted: Fri Jul 29, 2005 5:46 pm Post subject: |
|
|
Grand Master
Joined: 15 Jul 2003
Posts: 1196
Location: Arizona
|
| wschutz wrote: |
| Well, you at least need authority to put messages on SYSTEM.ADMIN.COMMAND.QUEUE. Do you have that? |
Well Yeah......
| Quote: |
2035 X’07F3’ MQRC_NOT_AUTHORIZED
The user is not authorized to perform the operation attempted:
- On an MQCONN or MQCONNX call, the user is not authorized to connect to the queue manager. On z/OS, for CICS applications, MQRC_CONNECTION_NOT_AUTHORIZED is issued instead.
- On an MQOPEN or MQPUT1 call, the user is not authorized to open the object for the option(s) specified. On z/OS, if the object being opened is a model queue, this reason also arises if the user is not authorized to create a dynamic queue with the required name.
- On an MQCLOSE call, the user is not authorized to delete the object, which is a permanent dynamic queue, and the Hobj parameter specified on the MQCLOSE call is not the handle returned by the MQOPEN call that created the queue.
This reason code can also occur in the Feedback field in the message descriptor of a report message; in this case it indicates that the error was encountered by a message channel agent when it attempted to put the message on a remote queue.
Corrective action: Ensure that the correct queue manager or object was specified, and that appropriate authority exists.
On z/OS, to determine for which object you are not authorized, you can use the violation messages issued by the External Security Manager. |
It is amazing  how useful WMQSeries documentation can be.
Perhaps you should consider getting your UID added to the mqm group or using setmqaut as the mqm user to grant the necessary permissions.
_________________
Yes, I am an agent of Satan but my duties are largely ceremonial. |
|
| Back to top |
|
|
| maha20 |
| Posted: Mon Aug 01, 2005 1:05 pm Post subject: |
|
|
Voyager
Joined: 23 Sep 2003
Posts: 79
|
Hi-
Today when I tested the application in a client mode I was able to access all the queues and get the result. But the same prog. is not working in bindings mode. Not sure why this a problem. Can someone suggest me. Thanks.
_________________
IBM Certified System Administrator -WMQ V5.3
SCJP 1.4 |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Mon Aug 01, 2005 3:33 pm Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
Maybe there is an MCA user on the client channel, that has different permissions on the queue manager.
A 2035 is always a permissions problem. Until you address it that way, you will never solve this problem.
To address this as a permissions problem, you need to understand what user is connecting, and what permissions that user has. Then you need to understand what permissions that user needs, and know enough about MQ to know how to grant those permissions to that user.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| maha20 |
| Posted: Mon Aug 01, 2005 4:57 pm Post subject: |
|
|
Voyager
Joined: 23 Sep 2003
Posts: 79
|
My overlook. Usually our SVRCONN channel is gven MCA UID testmq which is in the same grp as my UID. But for this particular QM the SVRCONN is given MCA UID 'mqm' .. which clearly grants the application to access all the queues .. Thanks Jeff for pointing this out ..
_________________
IBM Certified System Administrator -WMQ V5.3
SCJP 1.4 |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
