| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| .Net API client connection: What user account MQ server see? |
« View previous topic :: View next topic » |
| Author |
Message
|
| lifeng |
 Posted: Tue Mar 11, 2008 1:15 pm Post subject: .Net API client connection: What user account MQ server see? |
 |
|
Apprentice
Joined: 11 Jan 2008
Posts: 46
|
My program running on a client machine using .Net API to make client connection to MQ queue manager on server machine myServer. The code doing that is as the following:
MQEnvironment.Hostname = "myServer";
MQEnvironment.Channel = "SYSTEM.DEF.SVRCONN";
MQEnvironment.Port = 1414;
...
MQQueueManager queueManager = new MQQueueManager("myQMGRName");
...
What I got back is an error: 2035, MQRC_NOT_AUTHORIZED. Search results on the error seem pointing to that the connecting user doesn't have permisstion to do this. What I don't know is that, for the MQ server, what user account the incoming connection runs under. In other words, as a client program, when I making connection like this, who am I on the server? Besides, is there special configuration setting need to be done on the server in order to support this kind of client connection?
Thanks in advance!
Lifeng |
|
| Back to top |
|
 |
| jefflowrey |
| Posted: Tue Mar 11, 2008 1:41 pm Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
The userid passed to the MQ Server is the user id on the client machine, that is running the client program.
You should set an MCAUSER on the SVRCONN channel to solve this problem.
Then use SSL to ensure that only users with correct certificates can connect to that channel.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| lifeng |
| Posted: Tue Mar 11, 2008 2:54 pm Post subject: |
|
|
Apprentice
Joined: 11 Jan 2008
Posts: 46
|
| The code I use for making connetion is from help center documentaion and it works, at least when both client program and MQ server are local. But when I look at MQ Explorer, I really don't find a channel named "SYSTEM.DEF.SVRCONN" anywhere on the system. I was assuming that this is a default channel if none is created, but now it looks like I should create a channel with that name. My question is, what type or what folder under "channels" should I create this "SYSTEM.DEF.SVRCONN" into? |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Tue Mar 11, 2008 4:45 pm Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
When you look at MQ Explorer, you like don't have it set to Show System Objects.
It's a button on the list view.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| lifeng |
| Posted: Tue Mar 11, 2008 7:02 pm Post subject: |
|
|
Apprentice
Joined: 11 Jan 2008
Posts: 46
|
Thanks so much jefflowrey! I did what you said and finally get my 2000 box (client) successfully connected to my 2003 server (MQ Server)!
Now it becomes interesting since the 2000 box is my workstation and I logged in as me. So I am able to add my personal login plus domain name (mylogin@mydomain) as MCAUSER to the SVRCONN channel of the 2003 server. But in reality, the client code will be running on a server in service mode - no body logs in on it. The only think I know is that the client code will be hosted by IIS. In that case, what user id should I use to add to 2003 server as MCAUSER? I tried ASPNET@myMachineName and that didn't work (2035, MQRC_NOT_AUTHORIZED.)
Thanks again for the help!
Lifeng |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
