MQSeries.net :: View topic - Message Broker using SYSTEM.DEF.SVRCONN on MQ 7.5

aniket.goundaje · Posted: Mon Sep 29, 2014 7:42 pm Post subject:

Hello All,

I have started playing around MQ CHLAUTH and facing one issue when i enable the CHLAUTH

MQ version :- 7.5.0.2
Message Broker version :- 7.0.0.5
Platform: AIX
broker user id is not part of mqm group
When I enable the CHLAUTH on migrated queue manager from 7.0.1.10 to 7.5.0.2 I start seeing below errors with message broker

I know this behavior is default provided by the rule

CHLAUTH(SYSTEM.*) TYPE(ADDRES
SMAP)
ADDRESS(*) USERSRC(NOACCESS)
Can I change Messge broker to use other channel than DEF.SVRCONN. Can I add another auth command to open up SYSTEM.DEF.SVRCONN ? I think that will defeat the purpoe of blocking it. Any suggestions ?

Error:-

09/29/14 16:59:01 - Process(XXXX) User(XXX) Program(amqrmppa)
Host(XXX) Installation(Installation2)
VRMF(7.5.0.2) QMgr(XXXX)

AMQ9777: Channel was blocked

EXPLANATION:
The inbound channel 'SYSTEM.DEF.SVRCONN' was blocked from address
'XXX.XX.XXX' because the active values of the channel matched a record
configured with USERSRC(NOACCESS). The active values of the channel were
'CLNTUSER("broker user id")'.
ACTION:
Contact the systems administrator, who should examine the channel
authentication records to ensure that the correct settings have been
configured. The ALTER QMGR CHLAUTH switch is used to control whether channel
authentication records are used. The command DISPLAY CHLAUTH can be used to
query the channel authentication records.
----- cmqxrmsa.c : 926 --------------------------------------------------------
09/29/14 16:59:01 -

AMQ9999: Channel 'SYSTEM.DEF.SVRCONN' to host 'XXX (XXX.XX.XX)'
ended abnormally.

EXPLANATION:
The channel program running under process ID XXXX for channel
'SYSTEM.DEF.SVRCONN' ended abnormally. The host name is 'hostname
(XXX.XX.XXX)'; in some cases the host name cannot be determined and so is
shown as '????'.
ACTION:
Look at previous error messages for the channel program in the error logs to
determine the cause of the failure. Note that this message can be excluded
completely or suppressed by tuning the "ExcludeMessage" or "SuppressMessage"
attributes under the "QMErrorLog" stanza in qm.ini. Further information can be
found in the System Administration Guide.