|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
 |
|
amqsputc RC = 2063 |
« View previous topic :: View next topic » |
Author |
Message
|
dnoam |
Posted: Mon Apr 03, 2006 2:31 am Post subject: amqsputc RC = 2063 |
|
|
Apprentice
Joined: 23 Jan 2006 Posts: 25
|
Hi.
Config: MQ 6 client on Win/XP,
MQ 6 Server on Win 2003 Server.
On the XP (Client) box, "amqsputc test1" fails with 2063.
The logged-on user is defined on the MQ Server box, the user is in mqm group, with autorization to get/put/browse to "test1" queue:
setmqaut -m <QM_name> -t queue -n test1 -g mqm +browse +get +put
- Should I use specific "setmqaut" commands to all the users as well?
- Any other ideas?
TIA |
|
Back to top |
|
 |
Vitor |
Posted: Mon Apr 03, 2006 3:08 am Post subject: |
|
|
 Grand High Poobah
Joined: 11 Nov 2005 Posts: 26093 Location: Texas, USA
|
If it was a lack of authorisation I'd have expected a 2035 reason code. 2063 implies a failure in the OAM software. Have you checked the queue manager logs for matching errors, or found equivalent FFST files?
Do you get the same problem using the mqm user id or is it just this user?
I'd also try defining a new group and using that for manipulating the queue. Generally it's bad practice to use the mqm group for non-administrative tasks.
You also don't mention if the user is a local or a domain user. You might want to search the forum for various discussions regarding the use of domain users, and the issues that have arisen from their use. _________________ Honesty is the best policy.
Insanity is the best defence. |
|
Back to top |
|
 |
dnoam |
Posted: Mon Apr 03, 2006 3:48 am Post subject: |
|
|
Apprentice
Joined: 23 Jan 2006 Posts: 25
|
Thanks.
The user is local, defined on the MQ Server box.
In the following file:
C:\Program Files\IBM\WebSphere MQ\Qmgrs\QM_comsrv2003\errors\AMQERR01.LOG
I found the following error:
03/04/2006 12:15:37 - Process(31376.2) User(MUSR_MQADMIN) Program(amqzlaa0.exe)
AMQ8079: Access was denied when attempting to retrieve group membership
information for user 'xxx@yyy'.
EXPLANATION:
WebSphere MQ, running with the authority of user 'musr_mqadmin@comsrv2003', was
unable to retrieve group membership information for the specified user.
ACTION:
Ensure Active Directory access permissions allow user 'musr_mqadmin@comsrv2003'
to read group memberships for user 'xxx@yyy'. To retrieve group
membership information for a domain user, MQ must run with the authority of a
domain user.
Please advice.
TIA |
|
Back to top |
|
 |
fjb_saper |
Posted: Mon Apr 03, 2006 3:55 am Post subject: |
|
|
 Grand High Poobah
Joined: 18 Nov 2003 Posts: 20756 Location: LI,NY
|
dnoam wrote: |
EXPLANATION:
WebSphere MQ, running with the authority of user 'musr_mqadmin@comsrv2003', was
unable to retrieve group membership information for the specified user.
ACTION:
Ensure Active Directory access permissions allow user 'musr_mqadmin@comsrv2003'
to read group memberships for user 'xxx@yyy'. To retrieve group
membership information for a domain user, MQ must run with the authority of a
domain user.
Please advice.
TIA |
Talk to your network admin guys.
It is quite clear what your course of action needs to be. _________________ MQ & Broker admin |
|
Back to top |
|
 |
Vitor |
Posted: Mon Apr 03, 2006 3:57 am Post subject: |
|
|
 Grand High Poobah
Joined: 11 Nov 2005 Posts: 26093 Location: Texas, USA
|
I'm with fjb_saper. The error kind of says it all.
You might still want to do a search on issues with domain users. Useful background. _________________ Honesty is the best policy.
Insanity is the best defence. |
|
Back to top |
|
 |
dnoam |
Posted: Mon Apr 03, 2006 5:32 am Post subject: |
|
|
Apprentice
Joined: 23 Jan 2006 Posts: 25
|
|
Back to top |
|
 |
|
|
 |
|
Page 1 of 1 |
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|
|
|