Author |
Message
|
blovell |
Posted: Fri Mar 27, 2009 10:05 am Post subject: COD's ending up in DLQ |
|
|
 Acolyte
Joined: 08 Feb 2006 Posts: 63 Location: Alpharetta, GA
|
I have been working with a particular client over the past few years. This particular clients requires my QMGR to transmit to them a COD when my Get application grabs files from my QLOCAL.
The client doesn't not use the USERID MQM in their MQMD to me. I had to manually add the user to my solaris box to and give that user authorization to my XMITQ back to the client.
Nothing has changed with my QMGR nor my users (/etc/passwd) file, however all files are now going to my DLQ with MQRC 2035 Authorization errors. I have captured one of their MQMD's and found they are still using the same USERID as before.
What could they have possibly done to cause this. I am trying to assist them, as it is rather important. We monitor our DLQ for other client issues.
HELPPP... _________________ Bradley M. Lovell |
|
Back to top |
|
 |
blovell |
Posted: Fri Mar 27, 2009 10:13 am Post subject: |
|
|
 Acolyte
Joined: 08 Feb 2006 Posts: 63 Location: Alpharetta, GA
|
I intended to post this to the general support forum. Can we please move this. _________________ Bradley M. Lovell |
|
Back to top |
|
 |
Sam Uppu |
Posted: Fri Mar 27, 2009 10:18 am Post subject: |
|
|
 Yatiri
Joined: 11 Nov 2008 Posts: 610
|
Quote: |
The client doesn't not use the USERID MQM in their MQMD to me. I had to manually add the user to my solaris box to and give that user authorization to my XMITQ back to the client. |
Is the userid in the MQMD of the messages on DLQ match the userid what you provided permissions for XMITQ?.
What do you see for the dspmqaut for the XMITQ and the destination queues?.
Are you using clustering or with the remote definitions?.
Thanks. |
|
Back to top |
|
 |
Vitor |
Posted: Fri Mar 27, 2009 10:18 am Post subject: |
|
|
 Grand High Poobah
Joined: 11 Nov 2005 Posts: 26093 Location: Texas, USA
|
Moved _________________ Honesty is the best policy.
Insanity is the best defence. |
|
Back to top |
|
 |
bbburson |
Posted: Fri Mar 27, 2009 10:46 am Post subject: Re: COD's ending up in DLQ |
|
|
Partisan
Joined: 06 Jan 2004 Posts: 378 Location: Nowhere near a queue manager
|
blovell wrote: |
Nothing has changed with my QMGR nor my users (/etc/passwd) file, however all files are now going to my DLQ with MQRC 2035 Authorization errors. I have captured one of their MQMD's and found they are still using the same USERID as before. |
What about /etc/group? Has the userid perhaps been removed from the group they were in? Remember, on UNIX systems MQ authorizations are granted to the group even if the -p flag is used in the setmqaut command entry. |
|
Back to top |
|
 |
blovell |
Posted: Fri Mar 27, 2009 11:12 am Post subject: |
|
|
 Acolyte
Joined: 08 Feb 2006 Posts: 63 Location: Alpharetta, GA
|
/etc/group has not changed either. I have checked the -p options and the -g options to the XMITQ and QMGR and found all permissions for that user set. However, I am suspecting the client is sending the USERID as UPPERCASE, wheras the user is lowercase.. I am not sure if that changed or not.. ONly suspecting at this point.
In an effort to correct the problem I tried to define a shell user as all UPPERCASE on solaris and it would not let me. (I was going to accomodate them if possible ) _________________ Bradley M. Lovell |
|
Back to top |
|
 |
PeterPotkay |
Posted: Fri Mar 27, 2009 2:47 pm Post subject: |
|
|
 Poobah
Joined: 15 May 2001 Posts: 7722
|
Post the dead letter header from one of the messages in the DLQ. Use an amqsbcg(c) dump to get the actual data and post that.
Then do a dspmqaut for this user for both the QM and the XMITQ and post that output too. _________________ Peter Potkay
Keep Calm and MQ On |
|
Back to top |
|
 |
|