| Author |
Message
|
| udidavidi |
 Posted: Fri Dec 28, 2007 11:18 am Post subject: MQRC_NOT_AUTHORIZED[2035] |
 |
|
Newbie
Joined: 28 Dec 2007
Posts: 5
|
All
i'm trying toi connect to WebSphere MQ server on windows from a unix client.
when trying to connect i'm keep getting the MQRC_NOT_AUTHORIZED[2035] error code.
i have searched the forum for a solution - that led me to run the following commands on the windows box and geting the following results:
1. dspmqaut -t qmgr -g mqm
Entity mqm has the following authorizations for object ISRAEL.QM:
inq
set
connect
altusr
crt
dlt
chg
dsp
setid
setall
2. for the user:
dspmqaut -t qmgr -g mqm
Entity mqm has the following authorizations for object ISRAEL.QM:
inq
set
connect
altusr
crt
dlt
chg
dsp
setid
setall
can someone please help and tell me what is missing?
Thanks! |
|
| Back to top |
|
 |
| udidavidi |
| Posted: Fri Dec 28, 2007 11:20 am Post subject: in addition |
|
|
Newbie
Joined: 28 Dec 2007
Posts: 5
|
| did not mentioned it - but i'm running with MQ websphere 6.0 on windows. |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Fri Dec 28, 2007 11:25 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
Turn on authority events.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| udidavidi |
| Posted: Fri Dec 28, 2007 11:26 am Post subject: O.K |
|
|
Newbie
Joined: 28 Dec 2007
Posts: 5
|
|
| Back to top |
|
|
| PeterPotkay |
| Posted: Fri Dec 28, 2007 11:27 am Post subject: |
|
|
Poobah
Joined: 15 May 2001
Posts: 7722
|
Its a property of the Queue Manager.
_________________
Peter Potkay
Keep Calm and MQ On |
|
| Back to top |
|
|
| udidavidi |
| Posted: Fri Dec 28, 2007 11:33 am Post subject: |
|
|
Newbie
Joined: 28 Dec 2007
Posts: 5
|
Guys
are you familiar with the feeling that your bos gives you a project you dont have a clue about?
that me right now.
so i understend that Its a property of the Queue Manager
please - i need to know how do i add it?
how do i turn on authority events?
(the command willbe nice  )
appreciate your help. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Fri Dec 28, 2007 12:33 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| udidavidi wrote: |
Guys
are you familiar with the feeling that your bos gives you a project you dont have a clue about?
that me right now.
so i understend that Its a property of the Queue Manager
please - i need to know how do i add it?
how do i turn on authority events?
(the command willbe nice )
appreciate your help. |
Look at the runmqsc command book under alter qmgr?
Look at the possibilities when you right click the qmgr name under properties?(windows MQ explorer)
And BTW you will have to bounce the qmgr for it to take effect.
And ask your boss for training 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| tleichen |
| Posted: Fri Dec 28, 2007 12:39 pm Post subject: |
|
|
Yatiri
Joined: 11 Apr 2005
Posts: 663
Location: Center of the USA
|
| udidavidi wrote: |
Guys
are you familiar with the feeling that your bos gives you a project you dont have a clue about?
that me right now.
so i understend that Its a property of the Queue Manager
please - i need to know how do i add it?
how do i turn on authority events?
(the command willbe nice )
appreciate your help. |
I'd say try this link:
http://www.dice.com
_________________
IBM Certified MQSeries Specialist
IBM Certified MQSeries Developer |
|
| Back to top |
|
|
| SAFraser |
| Posted: Fri Dec 28, 2007 2:45 pm Post subject: |
|
|
Shaman
Joined: 22 Oct 2003
Posts: 742
Location: Austin, Texas, USA
|
What is the user name on the unix machine by which you are trying to make the connection to the Windows server?
You have listed the authorities for the Windows group "mqm". If the unix user name is, for example, "udidavidi", then a user ID of that same name must also exist on the Windows server and be a member of the Windows mqm group as well.
You will not be able to connect from the unix client as user "mqm" because that same user would need to exist on the Windows server; it cannot exist, as Windows will not let you create a user ID that is the same as a Windows group name.
Hope this is helpful?
Shirley |
|
| Back to top |
|
|
| udidavidi |
| Posted: Sat Dec 29, 2007 1:01 am Post subject: |
|
|
Newbie
Joined: 28 Dec 2007
Posts: 5
|
thanks shirly
on the UNIX box i have the user boiqa1 - which i dont have on the windows box.
C:\Documents and Settings\chen>dspmqaut -t qmgr -p boiqa1
AMQ7026: A principal or group name was invalid.
on the windows box i have the user chen:
C:\Documents and Settings\chen>dspmqaut -t qmgr -p chen
Entity chen has the following authorizations for object ISRAEL.QM:
inq
set
connect
altusr
crt
dlt
chg
dsp
setid
setall
? |
|
| Back to top |
|
|
| SAFraser |
| Posted: Sat Dec 29, 2007 4:06 am Post subject: |
|
|
Shaman
Joined: 22 Oct 2003
Posts: 742
Location: Austin, Texas, USA
|
You must create boiqa1 on the windows server and either 1) put it in the Windows mqm group if you want it to have full rights to MQ or 2) put boiqa1 into another Windows group (such as "mquser") and give that group specific rights using the setmqaut command or 3) give boiqa1 specific rights as a principal using the setmqaut command. The group or user must have both rights to the qmgr as well as the queue it wishes to access.
Or, on the unix box, create chen and use chen to try the client connection. chen will also need rights on Windows to whatever queue you are trying to access.
You must be the same user on both boxes, so you are going to need another user ID on one or the other. However, the passwords for the user ID do not need to be the same.
Let me know if you have other doubts. |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Sat Dec 29, 2007 6:40 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
It's a lot simpler, and more manageable, to create a specific server connection channel for this application to use. Then set the MCAUSER value of the server connection channel to a specific user defined on the Windows machine. Then define necessary permission to that user id with setmqaut on the qmgr.
And don't grant this user full authorities to the qmgr or put it in the mqm group on Windows.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
|
|
