| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| MQAX - "NOT AUTHORIZED" when connecting to QManage |
« View previous topic :: View next topic » |
| Author |
Message
|
| Jesse Taylor |
 Posted: Mon Mar 17, 2003 12:15 pm Post subject: MQAX - "NOT AUTHORIZED" when connecting to QManage |
 |
|
Newbie
Joined: 17 Mar 2003
Posts: 4
Location: NH, USA
|
Hello -
Has anybody had this problem; using the MQAX objects from ASP pages (VBScript) on Win2000 (MQSeries 5.3), we repeatedly get a "NOT AUTHORIZED" error when connecting to the Queue Manager.
The problem for us seems to be related to the security profile that the MQAX objs are running under - I can verify this by wrapping them with a VB COM obj and running it as a server process in COM+, which allows me to specify the user profile that it runs under. When I do this it runs perfectly - except for some other MQAX issues that I will get into later :).
We have tried adding the IIS default user to MQUsers group, adding MUSR_MQADMIN to the Administrators group (IBM's suggestion), tried a newer amqxssvn.exe that was supplied to us, still no luck.
I would greatly appreciate any suggestions!
- Jesse Taylor |
|
| Back to top |
|
 |
| mqonnet |
| Posted: Mon Mar 17, 2003 12:23 pm Post subject: |
|
|
Grand Master
Joined: 18 Feb 2002
Posts: 1114
Location: Boston, Ma, Usa.
|
Try adding a principal to the mqm group on the same system as the QMGR. This principal should be the same as the one MQAX objects are using internally.
Hopefull this should resolve your issue.
Cheers
Kumar
_________________
IBM Certified WebSphere MQ V5.3 Developer
IBM Certified WebSphere MQ V5.3 Solution Designer
IBM Certified WebSphere MQ V5.3 System Administrator |
|
| Back to top |
|
|
| Jesse Taylor |
| Posted: Mon Mar 17, 2003 12:34 pm Post subject: |
|
|
Newbie
Joined: 17 Mar 2003
Posts: 4
Location: NH, USA
|
| Thanks for the reply Kumar - but can I ask what do you mean by 'Principal'? |
|
| Back to top |
|
|
| mqonnet |
| Posted: Mon Mar 17, 2003 12:45 pm Post subject: |
|
|
Grand Master
Joined: 18 Feb 2002
Posts: 1114
Location: Boston, Ma, Usa.
|
You need to add a user using Win2k admin tools. The name of this user should be the same(case sensitive) as the one being used by MQAX objects. Add this new user to the "mqm" group, if you wish to do admin operations, such as runmqsc, start channels etc.
But if you dont want to give admin authority to this user, then DONT add this user to the mqm group. Instead use setmqaut to give appropriate authority to only the objects this user needs to access.
Cheers
Kumar
_________________
IBM Certified WebSphere MQ V5.3 Developer
IBM Certified WebSphere MQ V5.3 Solution Designer
IBM Certified WebSphere MQ V5.3 System Administrator |
|
| Back to top |
|
|
| Jesse Taylor |
| Posted: Fri Mar 21, 2003 7:31 am Post subject: |
|
|
Newbie
Joined: 17 Mar 2003
Posts: 4
Location: NH, USA
|
Okay, I see now.. a 'Principal' is MQseries' concept of a 'user', more or less.
Anyways, for documentation's sake, we finally did get this to work, and it was a combination of giving authority to the default IIS Launch Process account (IWAM_*) (not IUSR_*!) and applying the fixed amqxssn.exe.
Thanks for the help! |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
