| Author |
Message
|
| Jimmy3 |
 Posted: Thu Dec 20, 2012 2:05 am Post subject: WMQ issues after PC Restart |
 |
|
Novice
Joined: 08 May 2007
Posts: 16
|
Hi
I am facing a peculiar issue, not 100% sure if its MQ or windows. But still posting here just in case anyone else has faced this.
After my installation of WMQ 7.0, and configuring it, we usually get a 'IBM MQSeries' Service created, and the System 'path' set to MQ .. bin paths etc.
Now whats happenning with me is after everyrestart, the path entries of MQ from the varialbe 'path' is getting deleted, and the MQ service which was created after installation also gets removed. So the MQ doesnt start up properly at all, and you cannot go beyond this.
The only option at this point is to uninstall and re-install WMQ. THen those are again created, but then the next restart screws it up again!!
Quite peculiar, havent really found anything in the internet so far about this.
Anyone... help??? |
|
| Back to top |
|
 |
| McueMart |
| Posted: Thu Dec 20, 2012 2:22 am Post subject: |
|
|
Chevalier
Joined: 29 Nov 2011
Posts: 490
Location: UK...somewhere
|
| Do you have any kind of 'enterprise computer management' software running on your PC (e.g. Symantec). Some of these have policies set meaning that they reset your system path on reboot. Highly annoying! |
|
| Back to top |
|
|
| lancelotlinc |
| Posted: Fri Dec 21, 2012 6:30 am Post subject: |
|
|
Jedi Knight
Joined: 22 Mar 2010
Posts: 4941
Location: Bloomington, IL USA
|
Don't run your MQSeries service as SYSTEM user. You must set an active directory user id as your MQSeries service user.
See the "Prepare WebSphere MQ Wizard" in your IBM MQ programs directory.
_________________
http://leanpub.com/IIB_Tips_and_Tricks
Save $20: Coupon Code: MQSERIES_READER |
|
| Back to top |
|
|
| exerk |
| Posted: Sat Dec 22, 2012 1:17 pm Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
| lancelotlinc wrote: |
| ...You must set an active directory user id as your MQSeries service user... |
No you don't, you can just as easily run it under a local user, which is MUSR_MQADMIN as the 'default' user from a vanilla install.
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| lancelotlinc |
| Posted: Wed Dec 26, 2012 6:11 am Post subject: |
|
|
Jedi Knight
Joined: 22 Mar 2010
Posts: 4941
Location: Bloomington, IL USA
|
| exerk wrote: |
| lancelotlinc wrote: |
| ...You must set an active directory user id as your MQSeries service user... |
No you don't, you can just as easily run it under a local user, which is MUSR_MQADMIN as the 'default' user from a vanilla install. |
In modern times, it is required to have the MQ service Id query active directory. SYSTEM user id cannot query active directory.
Your point is valid for earlier product versions.
_________________
http://leanpub.com/IIB_Tips_and_Tricks
Save $20: Coupon Code: MQSERIES_READER |
|
| Back to top |
|
|
| exerk |
| Posted: Wed Dec 26, 2012 10:32 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
| lancelotlinc wrote: |
| exerk wrote: |
| lancelotlinc wrote: |
| ...You must set an active directory user id as your MQSeries service user... |
No you don't, you can just as easily run it under a local user, which is MUSR_MQADMIN as the 'default' user from a vanilla install. |
In modern times, it is required to have the MQ service Id query active directory. SYSTEM user id cannot query active directory.
Your point is valid for earlier product versions. |
Then it's not explicit in the Info Centre, which quite clearly states that it can run under either, as seen HERE and HERE. I will concede your point in relation to MI and MSCS queue managers however.
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| lancelotlinc |
| Posted: Wed Dec 26, 2012 11:13 am Post subject: |
|
|
Jedi Knight
Joined: 22 Mar 2010
Posts: 4941
Location: Bloomington, IL USA
|
| exerk wrote: |
| lancelotlinc wrote: |
| exerk wrote: |
| lancelotlinc wrote: |
| ...You must set an active directory user id as your MQSeries service user... |
No you don't, you can just as easily run it under a local user, which is MUSR_MQADMIN as the 'default' user from a vanilla install. |
In modern times, it is required to have the MQ service Id query active directory. SYSTEM user id cannot query active directory.
Your point is valid for earlier product versions. |
Then it's not explicit in the Info Centre, which quite clearly states that it can run under either, as seen HERE and HERE. I will concede your point in relation to MI and MSCS queue managers however. |
Can you quote the statements: " it can run under either ". None of the links you provided talk about SYSTEM account.
_________________
http://leanpub.com/IIB_Tips_and_Tricks
Save $20: Coupon Code: MQSERIES_READER |
|
| Back to top |
|
|
| exerk |
| Posted: Wed Dec 26, 2012 2:39 pm Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
| lancelotlinc wrote: |
| Can you quote the statements: " it can run under either ". None of the links you provided talk about SYSTEM account. |
The MQSeries service can run under a named account, i.e. a specified account with a known password, or it can run under a SYSTEM account. Whether each of those accounts has the same privilege is a moot point - SYSTEM accounts are generally 'anonymous' but can have administrator-level access that a named account does not.
I cannot definitively find anything in the Info Centre that states a SYSTEM account cannot query domain-level accounts - presumably that's a Windows AD-specific thing - but the point remains, there is no absolute requirement to run an installation under a domain account or the Info Centre would most definitely state so.
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| lancelotlinc |
| Posted: Thu Dec 27, 2012 6:07 am Post subject: |
|
|
Jedi Knight
Joined: 22 Mar 2010
Posts: 4941
Location: Bloomington, IL USA
|
| exerk wrote: |
| lancelotlinc wrote: |
| Can you quote the statements: " it can run under either ". None of the links you provided talk about SYSTEM account. |
The MQSeries service can run under a named account, i.e. a specified account with a known password, or it can run under a SYSTEM account. Whether each of those accounts has the same privilege is a moot point - SYSTEM accounts are generally 'anonymous' but can have administrator-level access that a named account does not.
I cannot definitively find anything in the Info Centre that states a SYSTEM account cannot query domain-level accounts - presumably that's a Windows AD-specific thing - but the point remains, there is no absolute requirement to run an installation under a domain account or the Info Centre would most definitely state so. |
SYSTEM does not have the authority to query AD. Thats why you cannot use SYSTEM unless your PC is not a member of any domain. Using a PC that is not a member of any domain is highly unlikely given the communicative nature of the WMQ raison d'etre.
| Quote: |
In some network configurations, where user accounts are defined on domain controllers that are using Active Directory, the local user account WebSphere® MQ is running under might not have the authority it requires to query the group membership of other domain user accounts. The Prepare WebSphere MQ Wizard identifies whether this is the case by carrying out tests and asking the user questions about the network configuration.
If the local user account WebSphere MQ is running under does not have the required authority, the Prepare WebSphere MQ Wizard prompts the user for the account details of a domain user account with particular user rights. |
_________________
http://leanpub.com/IIB_Tips_and_Tricks
Save $20: Coupon Code: MQSERIES_READER |
|
| Back to top |
|
|
| exerk |
| Posted: Thu Dec 27, 2012 6:29 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
| lancelotlinc wrote: |
| SYSTEM does not have the authority to query AD. Thats why you cannot use SYSTEM unless your PC is not a member of any domain. Using a PC that is not a member of any domain is highly unlikely given the communicative nature of the WMQ raison d'etre. |
Yet there are many words of advice within the site about not running the MQSeries service (or V7.1 onwards equivalent) under a domain account, although personally I've never had a problem doing so. I stand by my previous statement (again) - if there is no requirement to run the service under a domain ID it is valid to run it under a 'local' account; be that SYSTEM or a 'known' user.
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
|
|
