ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Installation/Configuration Support » MQ Manager connection problem with SYSTEM.BKR.CONFIG channel

Post new topic  Reply to topic
 MQ Manager connection problem with SYSTEM.BKR.CONFIG channel « View previous topic :: View next topic » 
Author Message
darring
PostPosted: Mon Jan 27, 2014 2:01 am    Post subject: MQ Manager connection problem with SYSTEM.BKR.CONFIG channel Reply with quote

Apprentice

Joined: 14 Jun 2008
Posts: 36

Hi,
I'm using MQ7.5 on Linux(2.6.32-71.29.1.el6.x86_64) in 64 bit mode. I have one user who is part of mqm groupcan't connect to QM. As the user is part of mqm group, I expected the user has access to all MQ Objects. MQ Error log for the QM shows

Quote:

----- amqzfubx.c : 624 --------------------------------------------------------
01/27/2014 11:37:12 AM - Process(22241.1382) User(mqm) Program(amqzlaa0)
Host(myhostname) Installation(Installation1)
VRMF(7.5.0.1) QMgr(MYGMGR)

AMQ8077: Entity 'user123 ' has insufficient authority to access object
'MYGMGR'.

EXPLANATION:
The specified entity is not authorized to access the required object. The
following requested permissions are unauthorized: connect
ACTION:
Ensure that the correct level of authority has been set for this entity against
the required object, or ensure that the entity is a member of a privileged
group.
----- amqzfubx.c : 624 --------------------------------------------------------
01/27/2014 11:37:12 AM - Process(5168.29) User(mqm) Program(amqrmppa)
Host(myhostname) Installation(Installation1)
VRMF(7.5.0.1) QMgr(MYGMGR)

AMQ9557: Queue Manager User ID initialization failed.

EXPLANATION:
The call to initialize the User ID failed with CompCode 2 and Reason 2035.
ACTION:
Correct the error and try again.


Is there something I'm missing? Or it's my wrong assumption that if a user is part of mqm group, it has access to all MQ Objects? Please help to understand.

Thanks
Back to top
View user's profile Send private message
Tibor
PostPosted: Mon Jan 27, 2014 2:35 am    Post subject: Reply with quote

Grand Master

Joined: 20 May 2001
Posts: 1033
Location: Hungary

If this is a new user or membership, your local user / group cache should be refreshed with REFRESH SECURITY (or a queue manager restart).
Back to top
View user's profile Send private message
fjb_saper
PostPosted: Mon Jan 27, 2014 10:17 am    Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY

Remember that with 7.5 come the channel auth records and by default the security is set on rather than off

Check this url https://www.ibm.com/developerworks/mydeveloperworks/blogs/aimsupport/entry/blocked_by_chlauth_why?lang=en

Have fun
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
mqjeff
PostPosted: Mon Jan 27, 2014 10:22 am    Post subject: Reply with quote

Grand Master

Joined: 25 Jun 2008
Posts: 17447

fjb_saper wrote:
Remember that with 7.5 come the channel auth records and by default the security is set on rather than off

Check this url https://www.ibm.com/developerworks/mydeveloperworks/blogs/aimsupport/entry/blocked_by_chlauth_why?lang=en

Have fun


There's an additional set of default chlauth rules created for SYSTEM.BKR.CONFIG by the mqsicreatebroker command.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » IBM MQ Installation/Configuration Support » MQ Manager connection problem with SYSTEM.BKR.CONFIG channel
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.