| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| IIS Authentication problem |
« View previous topic :: View next topic » |
| Author |
Message
|
| asrar007 |
 Posted: Thu Jan 31, 2008 6:43 am Post subject: Urgent Help Need AMQ8561: Domain controller unavailable |
 |
|
Newbie
Joined: 31 Jan 2008
Posts: 2
|
I am experiencing this similar issue. I have a client application calling web service hosted on server which will put a message on queue.
The server system has windows 2003 server edition along with windows active directory installed on it (its a domain controller as well). Other noticeable softwares installed are IBM Tivoli LDAP, IBM DB2 v8.1, IBM DB2 v8.3 content manager, IBM WebSphere WAS.
I experienced this same issue as websites hosted on IIS uses the network service account. After seeing the solution, I created a special user(domain user account) with read group access rights and add it to the domain mqm and also local mqm group. Then, give that user account (created before) in place of account used by IIS for anonymous access. I also mentioned this user account in server connection channel (in mcauserid). Then after installing IBM Websphere MQ v5.3 also CSD05, I mentioned that same special user account in prepare mq wizard and it successfully set. Then i run the application on server (logged on server through domain user account specifially administrater account) and tries to put a message through web service it stills giving me the same error.
So, is something wrong i am doing. One thing more, initially i installed mq v5.3 through portal but had to reinstall as it does not installed tools like mq explorer, prepar mq wizard. |
|
| Back to top |
|
 |
| jefflowrey |
| Posted: Thu Jan 31, 2008 6:47 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
You're doing a number of things wrong, or at least from a confused point of view, including adding on to this old thread.
A moderator will come along and split this out into a new thread.
It's not clear why you decided to use the same user for your MQ service id (what is given to the Prepare MQ Security Wizard) as for the authentication ID for the IIS application to talk to MQ.
It's not clear that you have configured the IIS application to only use the IIS application ID for talking to MQ and not to pass along the ID of the user connecting to the IIS application.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| Vitor |
| Posted: Thu Jan 31, 2008 6:56 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
|
| Back to top |
|
|
| asrar007 |
| Posted: Thu Jan 31, 2008 7:40 am Post subject: AMQ8561 Urgent Help needed |
|
|
Newbie
Joined: 31 Jan 2008
Posts: 2
|
Sorry for posting on old thread. Coming on to using the same user id, well there is no special reason for it. Actually i was remotely logon to the server machine and when tried to provide the same domain account it displays a warning that using the same user account can cause errors in websphere mq in the future. So thats why i decided to use the special user account i created for it.
Regarding IIS configuration, according to my knowledge, each website, if allows anonymous access, uses username and password (be default "IUSR_ComputerName") which in result is a network service account. So I changed that website properties to use this special user account. But it still gives the same error which in result means that it is still using the network service account. Is there any other way of telling IIS to run requests for a particular website under a specific user account apart from the method of changing anonymous useraccount under the directory security tab of website properties.
Is there any issue using same user accounts both for mq service and IIS.
If you know the solution to resolve this error, plz do let me know.
Lastly, if its possible can we have a chat right now as i desperately want to run it.
Thankz |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
