| Author |
Message
|
| may1985 |
 Posted: Tue Mar 01, 2011 5:28 am Post subject: saveqmgr.solaris and SYSTEM.AUTH.DATA.QUEUE |
 |
|
Newbie
Joined: 01 Mar 2011
Posts: 5
|
Hi,
I am trying to save the queue manager using saveqmgr.solaris script and getting the below error. Also I found that the queue SYSTEM.AUTH.DATA.QUEUE is empty. Is there any relationship between these two?
/tools/adm/bin/saveqmgr.solaris -f /tmp/ABCDEVQ1.dev.abcdev53.mqsc -m ABCDEVQ1
Compiled for Websphere MQ V7.0.1.0 on Jun 24 2010
SAVEQMGR V6.1.3.1
(mqutils.c) MQOPEN failed for SYSTEM.DEFAULT.MODEL.QUEUE, CC=2 RC=2063 |
|
| Back to top |
|
 |
| mqjeff |
| Posted: Tue Mar 01, 2011 6:53 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
There likely is a relationship between the auth queue being empty and MS03 (or any other mq application) receiving an MQRC 2063 MQRC_SECURITY_ERROR.
Are you running saveqmgr as the mqm user?
Is security entirely disabled on the qmgr? |
|
| Back to top |
|
|
| may1985 |
| Posted: Tue Mar 01, 2011 6:58 am Post subject: |
|
|
Newbie
Joined: 01 Mar 2011
Posts: 5
|
Yes I am running as mqm, but getting this error. THe FDC says,
WebSphere MQ First Failure Symptom Report |
| ========================================= |
| |
| Date/Time :- Thursday February 24 08:30:06 EST 2011 |
| Host Name :- abcdev53 (SunOS 5. |
| PIDS :- 5724H7203 |
| LVLS :- 6.0.2.8 |
| Product Long Name :- WebSphere MQ for Solaris (SPARC platform) |
| Vendor :- IBM |
| Probe Id :- ZF095020 |
| Application Name :- MQM |
| Component :- zfuCacheAuthQueue |
| SCCS Info :- lib/cs/amqxeida.c, 1.52.1.26 |
| Line Number :- 3484 |
| Build Date :- Sep 30 2009 |
| CMVC level :- p600-208-090930 |
| Build Type :- IKAP - (Production) |
| UserID :- 00030005 (mqm) |
| Program Name :- amqzfuma |
| Addressing mode :- 64-bit |
| Process :- 24665 |
| Thread :- 6908 |
| ConnId(2) QM :- 8239 |
| Last HQC :- 2.0.0-12128 |
| Last HSHMEMB :- 0.0.0-0 |
| Major Errorcode :- MQRC_HCONN_ERROR |
| Minor Errorcode :- OK |
| Probe Type :- MSGAMQ07E2 |
| Probe Severity :- 4 |
| Probe Description :- AMQ6090: WebSphere MQ was unable to display an error |
| message 7E2. |
| FDCSequenceNumber :- 6905 |
| |
|
| Back to top |
|
|
| may1985 |
| Posted: Tue Mar 01, 2011 7:19 am Post subject: |
|
|
Newbie
Joined: 01 Mar 2011
Posts: 5
|
|
| Back to top |
|
|
| mqjeff |
| Posted: Tue Mar 01, 2011 8:24 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
That APAR is not relevant here for a number of reasons.
What does dspmqaut show?
This doesn't appear to be an issue with MS03 itself, btw. |
|
| Back to top |
|
|
| may1985 |
| Posted: Tue Mar 01, 2011 9:02 am Post subject: |
|
|
Newbie
Joined: 01 Mar 2011
Posts: 5
|
Can you please let me know on which object I need to run this command?
_________________
Thanks and Regards,
MDS |
|
| Back to top |
|
|
| mqjeff |
| Posted: Wed Mar 02, 2011 2:29 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
| well, I don't think it matters what you use dsmpqaut or dmpmqaut on. The point is, if either of them actually fail, then the qmgr is broken. |
|
| Back to top |
|
|
| gbaddeley |
| Posted: Wed Mar 02, 2011 2:16 pm Post subject: |
|
|
Jedi Knight
Joined: 25 Mar 2003
Posts: 2538
Location: Melbourne, Australia
|
| mqjeff wrote: |
| well, I don't think it matters what you use dsmpqaut or dmpmqaut on. The point is, if either of them actually fail, then the qmgr is broken. |
Agree.
| may1985 wrote: |
| I found that the queue SYSTEM.AUTH.DATA.QUEUE is empty |
This queue should never be empty. It is used internally by MQ to store the OAM security profiles. Do you have a backup of the profiles in 'setmqaut' command form, and can replay them? Another possibility is to shut down the qmgr and restore the directory for this queue from a system backup.
_________________
Glenn |
|
| Back to top |
|
|
| mqjeff |
| Posted: Wed Mar 02, 2011 3:46 pm Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
| gbaddeley wrote: |
| may1985 wrote: |
| I found that the queue SYSTEM.AUTH.DATA.QUEUE is empty |
This queue should never be empty. It is used internally by MQ to store the OAM security profiles. Do you have a backup of the profiles in 'setmqaut' command form, and can replay them? Another possibility is to shut down the qmgr and restore the directory for this queue from a system backup. |
It is still possible even in v7 to disable the OAM entirely.
In that case, I think it is possible that S.A.D.Q can be empty and nothing wrong.
But in that case, I would also not expect the MQRC that's been mentioned. |
|
| Back to top |
|
|
| gbaddeley |
| Posted: Thu Mar 03, 2011 6:04 pm Post subject: |
|
|
Jedi Knight
Joined: 25 Mar 2003
Posts: 2538
Location: Melbourne, Australia
|
| mqjeff wrote: |
| It is still possible even in v7 to disable the OAM entirely. |
Possible, but not recommended for anything but playing around with the product, as we all know very well. 
_________________
Glenn |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Thu Mar 03, 2011 8:53 pm Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
| gbaddeley wrote: |
| mqjeff wrote: |
| It is still possible even in v7 to disable the OAM entirely. |
Possible, but not recommended for anything but playing around with the product, as we all know very well. |
Because there will be absolutely NO SECURITY CHECKS. This is like all users being in mqm group.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
|
|
