| Author |
Message
|
| rajmq |
 Posted: Wed Jan 15, 2003 6:45 am Post subject: 2035 is NOT AUTHORIZED FOR ACCEESS |
 |
|
Partisan
Joined: 29 Sep 2002
Posts: 331
Location: USA
|
Hi
I want connect to QManager from MQClient(win2k),QMGR running in AIX5.1 box.
I set the variable in client m/c MQSERVER='CHANEL/TCP/ipadress(PORT)
but when try to connect, the reponse code is 2035
2035 is NOT AUTHORIZED FOR ACCEESS
After that i created same userid in AIX Box, and also i given mqm rights.
But again it is failed.
can anyone give me a slou for above probs??
thanks
raj |
|
| Back to top |
|
 |
| zpat |
| Posted: Wed Jan 15, 2003 8:25 am Post subject: |
|
|
Jedi Council
Joined: 19 May 2001
Posts: 5866
Location: UK
|
| Try restarting the queue manager. |
|
| Back to top |
|
|
| mqonnet |
| Posted: Wed Jan 15, 2003 9:19 am Post subject: |
|
|
Grand Master
Joined: 18 Feb 2002
Posts: 1114
Location: Boston, Ma, Usa.
|
On what call do you get 2035... Conn, Open???
Make sure that the logged on userid and the principal you just created on AIX are exactly the same, including the "case".
Also if you are creating a userid/principal on Aix with the same name as the userid on 2k, then make sure that you dont have anything in the MCAUSER attribute of the svrconn channel you are trying to access.
Cheers.
Kumar
_________________
IBM Certified WebSphere MQ V5.3 Developer
IBM Certified WebSphere MQ V5.3 Solution Designer
IBM Certified WebSphere MQ V5.3 System Administrator |
|
| Back to top |
|
|
| rajmq |
| Posted: Wed Jan 15, 2003 9:34 pm Post subject: |
|
|
Partisan
Joined: 29 Sep 2002
Posts: 331
Location: USA
|
Hi
Thanks for all
Thsi Server is running in Production.So it is very difficult to stop & start
QMGR.
In svrconn channel also i am not spcified any MCAUSER attribute.
CASE also exactly same.
Using w2k userid i am able to login ( AIX QMGR Box)
Security Refresh also i did,But still same.
anyother suggestions.
raj |
|
| Back to top |
|
|
| dgolding |
| Posted: Thu Jan 16, 2003 12:26 am Post subject: |
|
|
Yatiri
Joined: 16 May 2001
Posts: 668
Location: Switzerland
|
You didn't say what version MQ you are on, but within runmqsc you can execute:
refresh security
this will reread the group files and your user should be able to get in.
HTH |
|
| Back to top |
|
|
| XIPO |
| Posted: Thu Jan 16, 2003 1:07 am Post subject: Security problem |
|
|
Novice
Joined: 17 Dec 2002
Posts: 13
Location: Spain
|
I had a similar problem, and finally I created a user in w2K without uppercase (for example "mqmadmin"), and also in AIX.
mqmadmin always belong to mqm group in all our AIXs.
Have you tried MQJExplorer, this program normally hasn´t got problems of authority, if you are login as a user that belongs to mqm group in AIX. This is a problem that I´m triying to solve because in my opinion it´s an important security hole, there is a solution but only for qmgrs in w2K (http://www.kolban.com//mq/Security/security.htm, thanks to Neil Kolban).
Good luck 
Tom |
|
| Back to top |
|
|
| mqonnet |
| Posted: Thu Jan 16, 2003 5:56 am Post subject: |
|
|
Grand Master
Joined: 18 Feb 2002
Posts: 1114
Location: Boston, Ma, Usa.
|
Did you check if the user you created on AIX has the authority to access QM objects in question?? You could do that using dspmqaut.
Cheers.
Kumar
_________________
IBM Certified WebSphere MQ V5.3 Developer
IBM Certified WebSphere MQ V5.3 Solution Designer
IBM Certified WebSphere MQ V5.3 System Administrator |
|
| Back to top |
|
|
|
|
