| Author |
Message
|
| rakeshchouhan |
 Posted: Mon Apr 14, 2014 1:32 am Post subject: Security Premission to remote broker in WMB7.0.0.1 |
 |
|
Newbie
Joined: 30 Jul 2013
Posts: 3
|
Hi All
I am working on WMQ7.0 and WMB7.0.0.1 in Windows 7
I am trying to connect to remote broker through different machine.
When i have added the remote user name in "mqm" group then Remote broker connection established successfully but in this case remote broker have all the access like read, write and execute.
So for providing the limited access to remote broker i have removed the remote user name from "mqm" group and added the remote user name in new group like "dev".
Then i have run the following command:
setmqaut -m <queueManager> -t qmgr -g <group> +connect
setmqaut -m WBRK_QM -t qmgr -g dev +connect
This command run successfully on my machine but when i was trying to connect my broker from remote machine it was showing the error:
The user 'Neeraj_Yadav' is not authorized to connect to queue manager 'WBRK_QM' (MQ reason code 2035 while trying to connect)
Check that
1. The bkore is running
2. The TCP/IP port of queue manager is active if it is remote.
I have already chack my broker is running on the local machine and TCP/IP port is active.
Please help me out from this problem. |
|
| Back to top |
|
 |
| fjb_saper |
| Posted: Mon Apr 14, 2014 4:04 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20696
Location: LI,NY
|
expected.
Use +connect +inq +dsp and read up in the infocenter what permission you need upon which queues to be able to access the broker... 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| rakeshchouhan |
| Posted: Mon Apr 14, 2014 9:04 pm Post subject: |
|
|
Newbie
Joined: 30 Jul 2013
Posts: 3
|
Thanks for your suggestion. But this is not working as of now.
Because my first problem is that i am not able to connect with Remote broker.
For connecting the remote broker i have run theses two commands and they run successfully.
C:\Program Files\IBM\MQSI\7.0>setmqaut -m WBRK_QM -t qmgr -g dev +connect +inq +dsp
The setmqaut command completed successfully.
C:\Program Files\IBM\MQSI\7.0>setmqaut -m WBRK_QM -n SYSTEM.BROKER.DEPLOY.QUEUE -t q -g dev +all
The setmqaut command completed successfully.
After this I have again tried to connect with remote broker. Now it is showing that "Remote broker is not running".
Although my broker is running and SYSTEM.BKR.CONFIG channel is in running state and TCP/IP listener is in running state.
Please help me out to solve this problem. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Mon Apr 14, 2014 9:52 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20696
Location: LI,NY
|
|
| Back to top |
|
|
| rakeshchouhan |
| Posted: Thu Apr 17, 2014 4:01 am Post subject: |
|
|
Newbie
Joined: 30 Jul 2013
Posts: 3
|
Thanks for reply,
I have followed all the steps listed in the provided link but still not able to connect to remote broker.
One more thing i have noticed that when I activate the security of my broker by using the followinmg command:
C:\Program Files\IBM\MQSI\7.0>mqsistop WBRK_BROKER
BIP8071I: Successful command completion.
C:\Program Files\IBM\MQSI\7.0>mqsichangebroker WBRK_BROKER -s active
BIP8071I: Successful command completion.
C:\Program Files\IBM\MQSI\7.0>mqsistart WBRK_BROKER
BIP8096I: Successful command initiation, check the system log to ensure that the component started without problem and that it continues to run without problem.
Then I am not able to see the execution group of my local broker.
Please see the error message in the below link:
[/img]https://www.flickr.com/photos/123476983@N06/13896819252/[img]
Thanks in adavance for resolving this problem. |
|
| Back to top |
|
|
|
|
