| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Security Problems With Active Directory - EventId 8079 |
« View previous topic :: View next topic » |
| Author |
Message
|
| fjb_saper |
 Posted: Tue Aug 30, 2005 7:55 pm Post subject: |
 |
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
Which part of
| Quote: |
Event ID: 8079
"Access was denied when attempting to retrieve group membership information for user 'aduser@activedirectory
MQSeries, running with the authority of user 'musr_mqadmin@machinename', was unable to retrieve group membership information for the specified user.
Ensure Active Directory access permissions allow user 'musr_mqadmin@machinename' to read group memberships for user 'aduser@activedirectory'. To retrieve group membership information for a domain user, MQSeries must run with the authority of a domain user" |
do you not understand ? You must give the mq user musr_mqadmin@machinename (which seems to be running mq on your machine) the permission to query domain and domain group membership.
Check out the user permissions manual. Has to do with batch and background permissions i.e. system type permissions...
Enjoy  |
|
| Back to top |
|
 |
| fjb_saper |
| Posted: Tue Aug 30, 2005 8:12 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| mqadmin wrote: |
| The Problem is that this user allready has this permission. |
Apparently it is not being recognized by the OS... (Windows)... |
|
| Back to top |
|
|
| PeterPotkay |
| Posted: Wed Aug 31, 2005 5:54 am Post subject: |
|
|
Poobah
Joined: 15 May 2001
Posts: 7722
|
Because MQ doesn't like nested groups (in the manual). So on your local machine, in the mqm group, not only should you have the domain mqm group, but go ahead and manually add that domain ID that is in domain mqm into the local mqm group, and you should be good to go.
_________________
Peter Potkay
Keep Calm and MQ On |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
