| Author |
Message
|
| Smarty05 |
 Posted: Tue May 22, 2007 5:56 am Post subject: MQClient install verification + error 2035 |
 |
|
Apprentice
Joined: 02 May 2007
Posts: 26
|
Hi,
I have MQ Client v6.0 installed on Win XP and MQ Server v5.3 running on Solaris 8.
As per Quick beginning guide,
1. Installed MQ Client 6.0 successfully
2. Set the MQSERVER variable on MQ clinet Win machine.i.e. SET MQSERVER=SVRCONN_ChannelName/TransportType/MQServerHostName(port)
3. And as last step, i wanted to Verify installation using amqsputc, but getting error when trying to put test message on MQ Server QM.
Sample AMQSPUT0 start
MQCONN ended with reason code 2035
I don't see any step missed as per Quick beggining guide for Win, any idea why i am getting this authorization error ?
Do i need to set any explicit authority?
Thanks in advance...
Regards,
Smarty05 |
|
| Back to top |
|
 |
| Gaya3 |
| Posted: Tue May 22, 2007 6:12 am Post subject: |
|
|
Jedi
Joined: 12 Sep 2006
Posts: 2493
Location: Boston, US
|
Hi
What is the MCAUSER specified in the Server/Client Connection channel
and under which user id you are trying to place the message
Find out whether its the same, and its not same as of my conclusion
Thanks and Regards
Gayathri
_________________
Regards
Gayathri
-----------------------------------------------
Do Something Before you Die |
|
| Back to top |
|
|
| marcin.kasinski |
| Posted: Tue May 22, 2007 6:19 am Post subject: |
|
|
Sentinel
Joined: 21 Dec 2004
Posts: 850
Location: Poland / Warsaw
|
mqrc 2035
2035 0x000007f3 MQRC_NOT_AUTHORIZED
Use dspmqaut to see user permission (MCA user of channel or user running application) .
_________________
Marcin |
|
| Back to top |
|
|
| Smarty05 |
| Posted: Tue May 22, 2007 6:22 am Post subject: |
|
|
Apprentice
Joined: 02 May 2007
Posts: 26
|
Thanks for your reply...
To keep it simple at the moment, i did not set any MCAUSER...
dis chl(CHANNEL1) chltype mcauser
4 : dis chl(CHANNEL1) chltype mcauser
AMQ8414: Display Channel details.
CHANNEL(CHANNEL1) CHLTYPE(SVRCONN)
MCAUSER( )
well, i logged on MQ client Win machine using my normal user login 'user1780' which is member of 'mqm' group on local machine and trying to put message on Solaris machine QM(where i am a 'mqm' user). |
|
| Back to top |
|
|
| rparti |
| Posted: Tue May 22, 2007 6:31 am Post subject: |
|
|
Voyager
Joined: 05 Oct 2005
Posts: 86
Location: U.S.A.
|
Check the log for the queue manager. It will tell you the user that gave you the 2035.
Ensure that the correct queue manager or object was specified, and that MQServerHostName points to the right IP |
|
| Back to top |
|
|
| marcin.kasinski |
| Posted: Tue May 22, 2007 6:39 am Post subject: |
|
|
Sentinel
Joined: 21 Dec 2004
Posts: 850
Location: Poland / Warsaw
|
| Smarty05 wrote: |
Thanks for your reply...
To keep it simple at the moment, i did not set any MCAUSER...
dis chl(CHANNEL1) chltype mcauser
4 : dis chl(CHANNEL1) chltype mcauser
AMQ8414: Display Channel details.
CHANNEL(CHANNEL1) CHLTYPE(SVRCONN)
MCAUSER( )
well, i logged on MQ client Win machine using my normal user login 'user1780' which is member of 'mqm' group on local machine and trying to put message on Solaris machine QM(where i am a 'mqm' user). |
How about solaris user ?
Does it means you have on solaris user user1780 with proper rights?
_________________
Marcin |
|
| Back to top |
|
|
| Smarty05 |
| Posted: Tue May 22, 2007 6:56 am Post subject: |
|
|
Apprentice
Joined: 02 May 2007
Posts: 26
|
| i don't have 'user1780' user on Solaris box. |
|
| Back to top |
|
|
| marcin.kasinski |
| Posted: Tue May 22, 2007 7:00 am Post subject: |
|
|
Sentinel
Joined: 21 Dec 2004
Posts: 850
Location: Poland / Warsaw
|
| Smarty05 wrote: |
| i don't have 'user1780' user on Solaris box. |
That's why it doesn't work.
This user should exist on solaris.
Create this user, add to mqm group and invoke REFRESH SECURITY.
_________________
Marcin |
|
| Back to top |
|
|
| marcin.kasinski |
| Posted: Tue May 22, 2007 7:11 am Post subject: |
|
|
Sentinel
Joined: 21 Dec 2004
Posts: 850
Location: Poland / Warsaw
|
| marcin.kasinski wrote: |
| Smarty05 wrote: |
| i don't have 'user1780' user on Solaris box. |
That's why it doesn't work.
This user should exist on solaris.
Create this user, add to mqm group and invoke REFRESH SECURITY. |
Another thing...
Why do you use users which are member of mqm group ?
Dou you really need it ?
Is it dev environment ?
_________________
Marcin |
|
| Back to top |
|
|
| Smarty05 |
| Posted: Tue May 22, 2007 8:24 am Post subject: |
|
|
Apprentice
Joined: 02 May 2007
Posts: 26
|
| marcin.kasinski wrote: |
| Smarty05 wrote: |
| i don't have 'user1780' user on Solaris box. |
That's why it doesn't work.
This user should exist on solaris.
|
well, this means if there r 'n' no of appl'n users using MQ Client based appl'n, i need to create all their id's on MQ Server box  ... If so, then how come MQ Client v6 Pdf doesn't have any such instruction to create same user on both boxes? |
|
| Back to top |
|
|
| Smarty05 |
| Posted: Tue May 22, 2007 8:35 am Post subject: |
|
|
Apprentice
Joined: 02 May 2007
Posts: 26
|
| rparti wrote: |
Check the log for the queue manager. It will tell you the user that gave you the 2035.
|
there is no error in MQ log....
FYI,amqsputc is a sample program...and as far i know,MQ doesn't write standalone program errors in QM logs... |
|
| Back to top |
|
|
| rparti |
| Posted: Tue May 22, 2007 9:12 am Post subject: |
|
|
Voyager
Joined: 05 Oct 2005
Posts: 86
Location: U.S.A.
|
[quote="Smarty05]
there is no error in MQ log....
FYI,amqsputc is a sample program...and as far i know,MQ doesn't write standalone program errors in QM logs...[/quote]
If you got a 2035, you should see something in "...IBM\Webshpere MQ\qmgrs\QMNAME\errors\*.log for sure
It is not a program error, but an error written by one of the QM processes if the connection to the QM was attempted. If you don't see this in the logs I dont thin the connection to the QM was attempted at all.
Make sure the listener is running on the QM, there is a severconnection channel defined there and that you are using the exact same info in the SETMQSERVER |
|
| Back to top |
|
|
| Smarty05 |
| Posted: Tue May 22, 2007 10:04 am Post subject: |
|
|
Apprentice
Joined: 02 May 2007
Posts: 26
|
I got the answer...
there is a doc error in Quick Beginning for Windows pdf which is confusing. It says we no need to set MCAUSER... 
define channel(channel1) chltype(svrconn) trptype(tcp) mcauser(' ')
But when I referred other Quick Beginning pdf's for HP-UX/Solaris/Linux etc, it says 
define channel (channel1) chltype (svrconn) trptype (tcp) mcauser ('mqm')
So when I set the MCAUSER to 'mqm', amqsputc is connecting to QM and I m able to verify my client-server configuration...
Thanks all for your patience & replies... |
|
| Back to top |
|
|
| Toronto_MQ |
| Posted: Tue May 22, 2007 10:17 am Post subject: |
|
|
Master
Joined: 10 Jul 2002
Posts: 263
Location: read my name
|
I would be very careful with what you've just done. You've enabled a very big security loophole.
Now anyone with knowledge of your IP address and channel name will be able to do anything with your queue manager.
You may want to look into setting up a security exit.
Steve |
|
| Back to top |
|
|
| marcin.kasinski |
| Posted: Tue May 22, 2007 10:51 am Post subject: |
|
|
Sentinel
Joined: 21 Dec 2004
Posts: 850
Location: Poland / Warsaw
|
| Smarty05 wrote: |
| marcin.kasinski wrote: |
| Smarty05 wrote: |
| i don't have 'user1780' user on Solaris box. |
That's why it doesn't work.
This user should exist on solaris.
|
well, this means if there r 'n' no of appl'n users using MQ Client based appl'n, i need to create all their id's on MQ Server box |
Yes, It'true
| Smarty05 wrote: |
... If so, then how come MQ Client v6 Pdf doesn't have any such instruction to create same user on both boxes?
|
I don't know,
There is information about this in QM docs.
I don't know if it is in MQ Client , MQ primer, or another one.
_________________
Marcin |
|
| Back to top |
|
|
|
|
