MQSeries.net :: View topic

dlamond1 · Posted: Thu Feb 15, 2007 9:26 am Post subject:

Hi,

I know this has been discussed a lot, but there is still something I'm missing. I have set and mcauser (user1)on a channel (my.svrconn). I have used setmqaut to grant the following

setmqaut -m MY.QUEUE.MANAGER -t qmgr -g user1 +connect
setmqaut -m MY.QUEUE.MANAGER -n '**' -t authinfo -g user1 +all +crt
setmqaut -m MY.QUEUE.MANAGER -n '**' -t channel -g user1 +all +crt
setmqaut -m MY.QUEUE.MANAGER -n '**' -t clntconn -g user1 +all +crt
setmqaut -m MY.QUEUE.MANAGER -n '**' -t listener -g user1 +all +crt
setmqaut -m MY.TFM.QUEUE.MANAGER -n '**' -t namelist -g user1 +all +crt
setmqaut -m MY.TFM.QUEUE.MANAGER -n '**' -t process -g user1 +all +crt
setmqaut -m MY.TFM.QUEUE.MANAGER -n '**' -t queue -g user1 +all +crt
setmqaut -m MY.TFM.QUEUE.MANAGER -n '**' -t service -g user1 +all +crt

Now I thing this grants close to everything to user1, and to everybody using my.svrconn.

On an another box I use amqsputc and it works fine. Then I have a simple java apps that gets a 2035.

Here is how I connect:

connection = factory.createQueueConnection();
connection.start();

I also tried removing the mcauser and using the following:

connection = factory.createQueueConnection("user1", null);
connection.start();

and

connection = factory.createQueueConnection("user1", "password1");
connection.start();

Still gives me a 2035.

If I put user1 in the mqm group, It works for all case. But then, why not just use 'mqm' as the mcauser? Doesn't it defeats the purpose of using setmqaut?

What am I missing?