ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Security » MQ Java client issue

Post new topic  Reply to topic
 MQ Java client issue « View previous topic :: View next topic » 
Author Message
amitjain
PostPosted: Tue Jan 20, 2015 9:03 am    Post subject: MQ Java client issue Reply with quote

Apprentice

Joined: 14 Jan 2015
Posts: 39

Hi,

My MQ configuration is as follows

MQ server - Linux
user created on linux box with name ajain ( which is windows authenticated)
group create on linux cmapmq and user ajain added into it.

setmqaut done for cmapmq group on queue to put message.

When I try to connect from my java program with below details.

config.put(MQConstants.USER_ID_PROPERTY, "ajain");
config.put(MQConstants.PASSWORD_PROPERTY, "Datamini5%");
config.put(MQConstants.USE_MQCSP_AUTHENTICATION_PROPERTY,true);


It fails with
com.ibm.mq.MQException: MQJE001: Completion Code '2', Reason '2035'.

If I comment above config.put ( userid,password and use_mqcsp_authenitication_property) it works fine.
In MQExplorer it just show as
Put Application Name : TestMQ7 ( my java program name)
but user identifier is blank.

But If I put message from MQ explorer directly it show User identifier field with my name and put application name as ampqputc.exe

. Is it because my userid is enabled for windows authentication , I cant pass my credential by setting it in java ? Please suggest what i am doing wrong. I want to run the program from someone else machine where I am not logged in on windows with my user id.


on queue manager error log file I get below messages

20/01/15 16:46:17 - Process(3373.4) User(mqm) Program(amqzmur0)
Host(ulonapmqss01.maninvestments.com) Installation(Installation2)
VRMF(8.0.0.0) QMgr(CMAP_TEST_GTEXCHANGE_QM)

AMQ6287: WebSphere MQ V8.0.0.0 (p000-L140429.1).

EXPLANATION:
WebSphere MQ system information:
Host Info :- Linux 2.6.32-358.el6.x86_64 (MQ Linux (x86-64 platform)
64-bit)
Installation :- /app/mqm (Installation2)
Version :- 8.0.0.0 (p000-L140429.1)
ACTION:
None.
-------------------------------------------------------------------------------
20/01/15 16:46:17 - Process(3408.65) User(mqm) Program(amqzlaa0)
Host(ulonapmqss01.maninvestments.com) Installation(Installation2)
VRMF(8.0.0.0) QMgr(CMAP_TEST_GTEXCHANGE_QM)

AMQ5534: User ID 'ajain' authentication failed

EXPLANATION:
The user ID and password supplied by 'TestMQ7' could not be authenticated.
ACTION:
Ensure that the correct user ID and password are provided by the application.
Ensure that the authentication repository is correctly configured. Look at
previous error messages for any additional information.
----- amqzfuca.c : 4242 -------------------------------------------------------
20/01/15 16:46:17 - Process(3408.65) User(mqm) Program(amqzlaa0)
Host(ulonapmqss01.maninvestments.com) Installation(Installation2)
VRMF(8.0.0.0) QMgr(CMAP_TEST_GTEXCHANGE_QM)

AMQ5541: The failed authentication check was caused by the queue manager
CONNAUTH CHCKCLNT(REQDADM) configuration.

EXPLANATION:
The user ID 'ajain' and its password were checked because the user ID is
privileged and the queue manager connection authority (CONNAUTH) configuration
refers to an authentication information (AUTHINFO) object named
'SYSTEM.DEFAULT.AUTHINFO.IDPWOS' with CHCKCLNT(REQDADM).

This message accompanies a previous error to clarify the reason for the user ID
and password check.
ACTION:
Refer to the previous error for more information.

Ensure that a password is specified by the client application and that the
password is correct for the user ID. The authentication configuration of the
queue manager connection determines the user ID repository. For example, the
local operating system user database or an LDAP server.

To avoid the authentication check, you can either use an unprivileged user ID
or amend the authentication configuration of the queue manager. You can amend
the CHCKCLNT attribute in the CHLAUTH record, but you should generally not
allow unauthenticated remote access.
-------------------------------------------------------------------------------
20/01/15 16:46:18 - Process(3926.49) User(mqm) Program(amqrmppa)
Host(ulonapmqss01.maninvestments.com) Installation(Installation2)
VRMF(8.0.0.0) QMgr(CMAP_TEST_GTEXCHANGE_QM)

AMQ9557: Queue Manager User ID initialization failed for 'ajain'.

EXPLANATION:
The call to initialize the User ID 'ajain' failed with CompCode 2 and Reason
2035.
ACTION:
Correct the error and try again.
----- cmqxrsrv.c : 2199 -------------------------------------------------------
Back to top
View user's profile Send private message
Vitor
PostPosted: Tue Jan 20, 2015 10:00 am    Post subject: Re: MQ Java client issue Reply with quote

Grand High Poobah

Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA

amitjain wrote:
But If I put message from MQ explorer directly it show User identifier field with my name and put application name as ampqputc.exe


When did the MQExplorer start using the amqsputc sample to put messages? Have I missed a memo?

Note that amqsputc and MQExplorer will handle users differently. The amqsputc sample uses the MQI from C, the MQExplorer (like you) uses JMS.

You said:

amitjain wrote:

group create on linux cmapmq and user ajain added into it.


Is that the user's primary group, and is it also a member of mqm?

Also, which password is that? The Windows one or the Linux one?
_________________
Honesty is the best policy.
Insanity is the best defence.
Back to top
View user's profile Send private message
fjb_saper
PostPosted: Tue Jan 20, 2015 12:25 pm    Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY

I am not sure that MQE uses JMS. It does however most certainly use JAVA.
As for the error what does the chl authrecs say? See https://www.ibm.com/developerworks/mydeveloperworks/blogs/aimsupport/entry/blocked_by_chlauth_why?lang=en
Also please upgrade from 8.0.0.0 to 8.0.0.1 as there are some improvements in cross platform authenticaition there...


_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
hughson
PostPosted: Wed Jan 21, 2015 2:46 am    Post subject: Reply with quote

Padawan

Joined: 09 May 2013
Posts: 1959
Location: Bay of Plenty, New Zealand

If you try a simple 'C' sample like amqsputc with the same user ID and password, does it accept your password then? See MQ V8 - Samples can use user ID and password for details on how.

Cheers
Morag
_________________
Morag Hughson @MoragHughson
IBM MQ Technical Education Specialist
Get your IBM MQ training here!
MQGem Software
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » IBM MQ Security » MQ Java client issue
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.