| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| messagebroker topic authorization error |
« View previous topic :: View next topic » |
| Author |
Message
|
| igaston |
 Posted: Wed Sep 10, 2008 8:39 am Post subject: messagebroker topic authorization error |
 |
|
Newbie
Joined: 08 Sep 2008
Posts: 4
Location: California
|
|
| Back to top |
|
 |
| igaston |
| Posted: Wed Sep 10, 2008 8:41 am Post subject: error below |
|
|
Newbie
Joined: 08 Sep 2008
Posts: 4
Location: California
|
I installed MQSeries 6.0 as part of a lotus sametime Advanced 8 install and message broker throws some authorization errors in event viewer on startup. Can someone give me some guidance on how to manage the message broker security, or turn it off entirely to avoid the error? I've seen info about a workbench, but it didn't seem to be part of the install.
These are the errors below:
error:
( BRKR_SCCS ) The broker received a negative response to a 'stopped' publish event, response is ''unexpected''.
A 'stopped' publish event failed, use the response to determine the cause of the failure.
The broker continues to run but the current published state of the broker will be incorrect until the next successful publish event. Contact your IBM support center.
error:
( BRKR_SCCS.default ) A client attempted to publish on a topic for which it was not authorized. The message was dropped. The client connection is ''com.ibm.orgcollab.mqbi.principal.SimpleUser@4115077e'', and the topic is ''$SYS/Broker/BRKR_SCCS/Status/ExecutionGroup/default''.
A security error has occurred. The error is described in the message.
Correct the error and retry the operation.
error:
( BRKR_SCCS.default ) User does not have publish permission on a topic: 'stadv#b64#c2FtZXRpbWU= , $SYS/Broker/BRKR_SCCS/Status/ExecutionGroup/default'.
Authorization to publish or delete a publication on a topic has been denied.
Ensure that the user has the required authority to complete the operation and retry. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Wed Sep 10, 2008 9:16 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
Your user must be authorized with the config manager. Could it be that the user running the broker is not member of the mqm or mqbrokers group on the config manager's machine, or that there is no acl entry for it?
See mqsicreateaclentry or mqsidisplayacllist
Did you just install topic security, and you are missing the entries to allow the brokers to publish on the system status topics?
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| igaston |
| Posted: Thu Sep 11, 2008 11:05 am Post subject: |
|
|
Newbie
Joined: 08 Sep 2008
Posts: 4
Location: California
|
Thanks for the response. That got me on the right track.
I did the following:
C:\IBM\MQSI\6.0\bin>mqsilistaclentry CMGR_SCCS -b BRKR_SCCS
BIP8071I: Successful command completion.
I took this to mean there were no acls. I then verified the names of the mqseries and messagebroker admin groups that the sametime prereq installer created and should have configured message broker for. I then ran these commands:
C:\IBM\MQSI\6.0\bin>mqsicreateaclentry CMGR_SCCS -g mqm -x F -b BRKR_SCCS
BIP8071I: Successful command completion.
C:\IBM\MQSI\6.0\bin>mqsicreateaclentry CMGR_SCCS -g mqbrkrs -x F -b BRKR_SCCS
BIP8071I: Successful command completion.
I then had to set the queue.manager to autostart in its properties, so broker wouldn't throw more errors. I've also found that when you shut them down you should shut down the broker before the config manager, or you will get errors also, then restart in reverse order MQSeries first. After doing all that, no more errors  I'll set the services to start in the proper order for reboots.
Would have been nice if the prereq installer would have done this stuff.
anyway, thanks a lot! |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
