| Author | Message | 
		
		  | shelldweller | 
			  
				|  Posted: Mon Oct 26, 2009 12:43 pm    Post subject: MQRC_KEY_REPOSITORY_ERROR (on Linux) |   |  | 
		
		  |  Novice
 
 
 Joined: 27 Aug 2009Posts: 16
 
 
 | 
			  
				| There must be a completely lame reason for me getting this failure but I've got a stack overflow in my head so I wonder if anyone can help. 
 After executing this simple code:
 
 
 
   
	| Code: |  
	| MQCONN(QMANAGER_NAME, &HCon, &CompCode, &Reason); |  
 Reason is set to 2381 (MQRC_KEY_REPOSITORY_ERROR)
 
 Environment:
 
 Env. vars are set correctly:
 
 
 
   
	| Code: |  
	| $ env ...
 MQCHLTAB=AMQCLCHL.TAB
 MQCHLLIB=/var/mqm
 MQSSLKEYR=/var/mqm/ssl/key.kdb
 ...
 
 |  
 Key file exists and passwords are stashed:
 
 
   
	| Code: |  
	| $ ls -l /var/mqm/ssl/ ...
 -rw-r--r-- 1 mqm mqm     80 2009-09-09 10:25 key.crl
 -rw-r--r-- 1 mqm mqm 130080 2009-09-09 10:25 key.kdb
 -rw-r--r-- 1 mqm mqm     80 2009-09-09 10:25 key.rdb
 -rw-r--r-- 1 mqm mqm    129 2009-09-09 10:19 key.sth
 ...
 
 |  
 Key file is readable:
 
 
   
	| Code: |  
	| $ gsk7cmd -cert -list -db /var/mqm/ssl/key.kdb ...
 ibmwebspheremqmqm
 
 |  
 I am the right user:
 
 
 
 Tab file is there:
 
 
   
	| Code: |  
	| $ ls -l /var/mqm ...
 -rw-r--r-- 1 mqm mqm 6091 2009-07-13 06:33 AMQCLCHL.TAB
 ...
 |  
 Why on earth I cannot access the key repository?
   
 Thank you in advance!
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | bruce2359 | 
			  
				|  Posted: Mon Oct 26, 2009 12:58 pm    Post subject: |   |  | 
		
		  |  Poobah
 
 
 Joined: 05 Jan 2008Posts: 9486
 Location: US: west coast, almost. Otherwise, enroute.
 
 | 
			  
				| Did you look the reason code?  The narrative is pretty specific. 
 Did you search google?
 
 What platform?
 
 What version and maintenance level of MQ?
 _________________
 I like deadlines. I like to wave as they pass by.
 ב''ה
 Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live.
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | shelldweller | 
			  
				|  Posted: Mon Oct 26, 2009 1:10 pm    Post subject: |   |  | 
		
		  |  Novice
 
 
 Joined: 27 Aug 2009Posts: 16
 
 
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | PeterPotkay | 
			  
				|  Posted: Mon Oct 26, 2009 3:25 pm    Post subject: |   |  | 
		
		  |  Poobah
 
 
 Joined: 15 May 2001Posts: 7723
 
 
 | 
			  
				| You don't have MQSSLKEYR set properly. _________________
 Peter Potkay
 Keep Calm and MQ On
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | shelldweller | 
			  
				|  Posted: Tue Oct 27, 2009 6:02 am    Post subject: |   |  | 
		
		  |  Novice
 
 
 Joined: 27 Aug 2009Posts: 16
 
 
 | 
			  
				| 
   
	| Quote: |  
	| You don't have MQSSLKEYR set properly. |  
 Well... the env var is there; it's value is a correct file path readable by the effective user
 
 
 
   
	| Code: |  
	| $ echo $MQSSLKEYR /var/mqm/ssl/key.kdb
 $ ll /var/mqm/ssl/key.kdb
 -rw-r--r-- 1 mqm mqm 130080 2009-09-09 10:25 /var/mqm/ssl/key.kdb
 $ ./mqconnect
 Connecting to queue manager `MQMGRT2`
 Failed
 Reason code: 2381
 
 |  
 (the last line is my little silly program that tries to do MQCONN call)
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | RogerLacroix | 
			  
				|  Posted: Tue Oct 27, 2009 7:01 am    Post subject: |   |  | 
		
		  |  Jedi Knight
 
 
 Joined: 15 May 2001Posts: 3265
 Location: London, ON  Canada
 
 | 
			  
				| 
   
	| shelldweller wrote: |  
	| 
   
	| Code: |  
	| $ echo $MQSSLKEYR /var/mqm/ssl/key.kdb
 |  |  I thought it was supposed to be (no extension):
 
 
   
	| Code: |  
	| $ export MQSSLKEYR=/var/mqm/ssl/key |  
 Regards,
 Roger Lacroix
 Capitalware Inc.
 _________________
 Capitalware: Transforming tomorrow into today.
 Connected to MQ!
 Twitter
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | bruce2359 | 
			  
				|  Posted: Tue Oct 27, 2009 7:11 am    Post subject: |   |  | 
		
		  |  Poobah
 
 
 Joined: 05 Jan 2008Posts: 9486
 Location: US: west coast, almost. Otherwise, enroute.
 
 | 
			  
				| 
   
	| Quote: |  
	| my little silly program |  No self-deprecation, please.  What you have is a locally-written tool for use in testing and problem-determination.
 
 Now, doesn't that sound better?
 _________________
 I like deadlines. I like to wave as they pass by.
 ב''ה
 Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live.
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | shelldweller | 
			  
				|  Posted: Tue Oct 27, 2009 8:04 am    Post subject: |   |  | 
		
		  |  Novice
 
 
 Joined: 27 Aug 2009Posts: 16
 
 
 | 
			  
				| 
   
	| Quote: |  
	| I thought it was supposed to be (no extension) |  yes yes yes! that's it - no extension!
   
 
 
  - okay, next time I'll beg with dignity 
	| Quote: |  
	| No self-deprecation, please. |    
 
 
   
	| Quote: |  
	| What you have is a locally-written tool for use in testing and problem-determination. 
 Now, doesn't that sound better?
 |  Totally! I'll put that in my project update document.
 
 Thank you all.
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  |  |