MQSeries.net :: View topic

ivanachukapawn · Posted: Wed Apr 01, 2015 1:28 pm Post subject: OAM anomaly

Running a MQ8.0.0.2 qmgr, I have effectively disabled connection authentication (by specifying none for client and local connections in IDPWOS). I kept the default CHLAUTH rules (blocking *MQADMIN, SYSTEM.* and allowing MQ Explorer channel access). I don't have a backstop rule yet. Using the ID of a non-privileged user, I attempted to dmpmqmsg connect to the QM and copy a message from TEST.QUEUE1 to TEST.QUEUE2. But I get error message: "MQOPEN on object 'TEST.QUEUE2' returned 2035 Not authorized" - as both CHLAUTH and connection authentication seem irrelevant to this behavior, I have assumed OAM as the error message source. But I have setmqaut for this QM/user as follows Profile: TEST.QUEUE2 object type: queue Entity: user1 Entity Type: group (this is odd. I specifying -p on my setmqaut command) authority: get browse put inq and the same for TEST.QUEUE1 - to permit the QMGR connection, I setmqaut to yield profile: self object type: qmgr entity: user1 entity type: group Authority: inq connect dsp - don't know why I'm getting this error. I enabled authority events and got some messages but their text is not helpful. And incidentally, I refreshed the authorization service after running the setmqauts.