ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » General IBM MQ Support » amqsputc RC = 2063

Post new topic  Reply to topic
 amqsputc RC = 2063 « View previous topic :: View next topic » 
Author Message
dnoam
PostPosted: Mon Apr 03, 2006 2:31 am    Post subject: amqsputc RC = 2063 Reply with quote

Apprentice

Joined: 23 Jan 2006
Posts: 25

Hi.
Config: MQ 6 client on Win/XP,
MQ 6 Server on Win 2003 Server.

On the XP (Client) box, "amqsputc test1" fails with 2063.
The logged-on user is defined on the MQ Server box, the user is in mqm group, with autorization to get/put/browse to "test1" queue:

setmqaut -m <QM_name> -t queue -n test1 -g mqm +browse +get +put

- Should I use specific "setmqaut" commands to all the users as well?
- Any other ideas?

TIA
Back to top
View user's profile Send private message
Vitor
PostPosted: Mon Apr 03, 2006 3:08 am    Post subject: Reply with quote

Grand High Poobah

Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA

If it was a lack of authorisation I'd have expected a 2035 reason code. 2063 implies a failure in the OAM software. Have you checked the queue manager logs for matching errors, or found equivalent FFST files?

Do you get the same problem using the mqm user id or is it just this user?

I'd also try defining a new group and using that for manipulating the queue. Generally it's bad practice to use the mqm group for non-administrative tasks.

You also don't mention if the user is a local or a domain user. You might want to search the forum for various discussions regarding the use of domain users, and the issues that have arisen from their use.
_________________
Honesty is the best policy.
Insanity is the best defence.
Back to top
View user's profile Send private message
dnoam
PostPosted: Mon Apr 03, 2006 3:48 am    Post subject: Reply with quote

Apprentice

Joined: 23 Jan 2006
Posts: 25

Thanks.
The user is local, defined on the MQ Server box.

In the following file:
C:\Program Files\IBM\WebSphere MQ\Qmgrs\QM_comsrv2003\errors\AMQERR01.LOG

I found the following error:

03/04/2006 12:15:37 - Process(31376.2) User(MUSR_MQADMIN) Program(amqzlaa0.exe)
AMQ8079: Access was denied when attempting to retrieve group membership
information for user 'xxx@yyy'.

EXPLANATION:
WebSphere MQ, running with the authority of user 'musr_mqadmin@comsrv2003', was
unable to retrieve group membership information for the specified user.
ACTION:
Ensure Active Directory access permissions allow user 'musr_mqadmin@comsrv2003'
to read group memberships for user 'xxx@yyy'. To retrieve group
membership information for a domain user, MQ must run with the authority of a
domain user.

Please advice.
TIA
Back to top
View user's profile Send private message
fjb_saper
PostPosted: Mon Apr 03, 2006 3:55 am    Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY

dnoam wrote:

EXPLANATION:
WebSphere MQ, running with the authority of user 'musr_mqadmin@comsrv2003', was
unable to retrieve group membership information for the specified user.
ACTION:
Ensure Active Directory access permissions allow user 'musr_mqadmin@comsrv2003'
to read group memberships for user 'xxx@yyy'. To retrieve group
membership information for a domain user, MQ must run with the authority of a
domain user.

Please advice.
TIA
Talk to your network admin guys.
It is quite clear what your course of action needs to be.
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
Vitor
PostPosted: Mon Apr 03, 2006 3:57 am    Post subject: Reply with quote

Grand High Poobah

Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA

I'm with fjb_saper. The error kind of says it all.

You might still want to do a search on issues with domain users. Useful background.
_________________
Honesty is the best policy.
Insanity is the best defence.
Back to top
View user's profile Send private message
dnoam
PostPosted: Mon Apr 03, 2006 5:32 am    Post subject: Reply with quote

Apprentice

Joined: 23 Jan 2006
Posts: 25

Thanks, people.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » General IBM MQ Support » amqsputc RC = 2063
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.