| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Losing mqm authorization |
« View previous topic :: View next topic » |
| Author |
Message
|
| mat0282 |
 Posted: Wed Jul 10, 2002 12:24 pm Post subject: Losing mqm authorization |
 |
|
Newbie
Joined: 15 May 2001
Posts: 6
Location: Milwaukee, WI. USA
|
We have strange situation here and wondered if anyone else out there has seen it. We are on MQ5.2 CSD#1 on HP-UX 11.00.
We have a user id mqsadmin that is a member of the mqm group. Fairly consistently, this user id loses some of it's mqm type access on one of our queue managers. It will be able to issue runmqsc commands such as alter/delete queue, but it won't be able to display any queue that it is not explicitly authorized for via setmqaut - it receives an AMQ8135. It also loses it's ability to run remote runmqsc commands unless it is explicitly authorized to put onto the SYSTEM.ADMIN.COMMAND.QUEUE. In addition, some of the sdr/rcvr channels into this queue manager periodically go into a retry state. If you issue a refresh security on this queue manager, all of the problems disappear for a while. This used to happen only every month or so, but now it is happening constantly. There are 3 other queue managers running on the same box that are not experiencing this issue. At one point, we thought CSD#3 would fix this problem, but now we have seen this same thing occur on boxes where this CSD is installed.
We have a ticket with IBM open, but it seems to be a real puzzlement. Anyone else seen anything like this before?
Thanks In Advance,
John Matoba
Northwestern Mutual |
|
| Back to top |
|
 |
| bduncan |
| Posted: Wed Jul 10, 2002 1:18 pm Post subject: |
|
|
Padawan
Joined: 11 Apr 2001
Posts: 1554
Location: Silicon Valley
|
Hmm.. can't say I've seen this exact situation before. However, I have run into the problem where the authorizations seemed change and the queue manager would have odd behaviors. This happened when someone inadvertantly created a queue manager as root, rather than mqm. From that point on, the authorizations never seemed to work right, until we deleted the queue manager and recreated it as mqm...
Also, we've seen some weird authorization issues while using NIS on the machines hosting our queue managers...
_________________
Brandon Duncan
IBM Certified MQSeries Specialist
MQSeries.net forum moderator |
|
| Back to top |
|
|
| gvpatil |
| Posted: Wed Jul 10, 2002 3:58 pm Post subject: Verify the group id of user mqsadmin |
|
|
Newbie
Joined: 18 Jan 2002
Posts: 9
|
You have mentioned about remote administation, that enables me to think, you have mqsadmin user on another server. Check the group id of the users existing on both the servers. MQ series uses gid's for security.
Gunendra |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
