| Author |
Message
|
| Liz |
 Posted: Tue Aug 13, 2013 9:16 pm Post subject: MQ Security Error |
 |
|
Newbie
Joined: 13 Aug 2013
Posts: 4
|
Hi all,
I am using MQseries version 5.2 .
I got the error - "Security error occurred - MQM not authorised to use transaction XXX".
So, I changed the user MQM to a specific user id YYY which has access to process the transaction XXX( I have made this change in the MQ descriptor).
But even after this change, I am still getting the same security error.
Could you please help? Happy to provide more details if required.
 |
|
| Back to top |
|
 |
| Mr Butcher |
| Posted: Tue Aug 13, 2013 10:23 pm Post subject: |
|
|
Padawan
Joined: 23 May 2005
Posts: 1716
|
So obviously it is not the userid in the MQMD that is taken into account to check security, as nothing changed after you changed that userid.
Find out which user is used (MCA? user running the application? or or) and then do the proper changes.
_________________
Regards, Butcher |
|
| Back to top |
|
|
| smdavies99 |
| Posted: Tue Aug 13, 2013 10:24 pm Post subject: |
|
|
Jedi Council
Joined: 10 Feb 2003
Posts: 6076
Location: Somewhere over the Rainbow this side of Never-never land.
|
What platform is this on?
Unless you have a very expensive extra support contract with IBM , my guess is that you are going to be out of luck here. 5.2 went out of support years ago.
I'm willing to guess that 99.9% of the people who post here have not worked on 5.2 for a good number of years.
_________________
WMQ User since 1999
MQSI/WBI/WMB/'Thingy' User since 2002
Linux user since 1995
Every time you reinvent the wheel the more square it gets (anon). If in doubt think and investigate before you ask silly questions. |
|
| Back to top |
|
|
| Liz |
| Posted: Tue Aug 13, 2013 10:32 pm Post subject: |
|
|
Newbie
Joined: 13 Aug 2013
Posts: 4
|
| Mr Butcher wrote: |
So obviously it is not the userid in the MQMD that is taken into account to check security, as nothing changed after you changed that userid.
Find out which user is used (MCA? user running the application? or or) and then do the proper changes. |
Yes that's right. The user ID after the change is still MQM. Would be happy if you can give me any pointers on which module/object to check? (I am new to MQ).  |
|
| Back to top |
|
|
| Liz |
| Posted: Tue Aug 13, 2013 10:35 pm Post subject: |
|
|
Newbie
Joined: 13 Aug 2013
Posts: 4
|
| smdavies99 wrote: |
What platform is this on?
Unless you have a very expensive extra support contract with IBM , my guess is that you are going to be out of luck here. 5.2 went out of support years ago.
I'm willing to guess that 99.9% of the people who post here have not worked on 5.2 for a good number of years. |
True, that brings me to this hassle. Trying my luck  |
|
| Back to top |
|
|
| Liz |
| Posted: Tue Aug 13, 2013 10:37 pm Post subject: |
|
|
Newbie
Joined: 13 Aug 2013
Posts: 4
|
| Liz wrote: |
| smdavies99 wrote: |
What platform is this on?
Unless you have a very expensive extra support contract with IBM , my guess is that you are going to be out of luck here. 5.2 went out of support years ago.
I'm willing to guess that 99.9% of the people who post here have not worked on 5.2 for a good number of years. |
True, that brings me to this hassle. Trying my luck |
This is on AIX |
|
| Back to top |
|
|
| PaulClarke |
| Posted: Tue Aug 13, 2013 11:12 pm Post subject: |
|
|
Grand Master
Joined: 17 Nov 2005
Posts: 1002
Location: New Zealand
|
Would you like to say a little more about your environment.
What is processing the message and where is it getting the effective userid from? Things to check are:
1/ Just because you set the user in the MQMD does not mean that MQ will accept it. Not just any program can set all the content in the MQMD. You need to have authority to do it and you need to use one of the SET_CONTEXT MQOPEN/MQPUT options
2/ Just because there is a userid in the MQMD when a message is received doesn't mean that the processing application will pay any attention to it. Often the applications authority is merely the userid they were started under. Are you sure the processing application is not just started under 'mqm' and will always use it?
Cheers,
P.
_________________
Paul Clarke
MQGem Software
www.mqgem.com |
|
| Back to top |
|
|
|
|
