| Author |
Message
|
| kenn_ryan |
 Posted: Mon May 11, 2015 5:49 am Post subject: MQV8 Explorer not displaying MQ objects |
 |
|
Newbie
Joined: 07 Mar 2012
Posts: 9
|
Hi Guys,
I had just recently installed the standalone MQV8 MQ Explorer SupportPac. (http://www-01.ibm.com/support/docview.wss?uid=swg24021041)
I am connecting to a version 7 queue manager. (7.0.1.10)
However, I noticed that it is not displaying the MQ objects I had given authorization.
Some testing I did:
Using MQ7 explorer, using the same MQ connection details it is working fine.
I do try changing the mcauser to "mqm" it works fine and displays the MQ objects.
I do MQ trace and there is no authorization error shown
Furthermore, when I click the queue tab, it doesn't give any authorization error. Rather I would just see it is "Retrieving Data" but no data are shown
Does anyone had the same experience?
Or should there be additional authorizations I need to add?
Thanks a lot in advance for your advises.
Cheers, |
|
| Back to top |
|
 |
| exerk |
| Posted: Mon May 11, 2015 7:01 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
Set the MQS_REPORT_NOAUTH environment variable, bounce your queue manager, and see what's reported in its logs when you try and connect using the MQ V8.0-based MQ Explorer.
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Mon May 11, 2015 7:24 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
You did not specify but I sure hope that the connection in MQExplorer V8 is a client connection...
Aside from a client connection I don't even see a qmgr that is not V8.
And for all the non V8 qmgrs in discovery it asks me if I want to upgrade it to V8....
With the client connection I have no problem seeing my objects in my 7.0.1.8 qmgr. 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| kenn_ryan |
| Posted: Tue May 12, 2015 2:34 am Post subject: |
|
|
Newbie
Joined: 07 Mar 2012
Posts: 9
|
Hi exerk,
Thanks for the tip regarding MQS_REPORT_NOAUTH environment variable.
However, I have different errors in each QMGR I am testing with.
One QMGR needs access to queues that starts with QM* while other QMGR doesn't need it.
Unfortunately, we cannot do this kind of troubleshooting in the production QMGR's.
I will do further testing and share results here.
Cheers |
|
| Back to top |
|
|
| kenn_ryan |
| Posted: Tue May 12, 2015 6:47 am Post subject: |
|
|
Newbie
Joined: 07 Mar 2012
Posts: 9
|
From the testing (MQV8 Explorer connecting as MQ7 QMGR), it seems to be that:
- MQV8 explorer needs to have display authority on all the objects. (e'g for queue tabs, it should have +dsp auth on all queues)
This isn't the behavior on MQ7 explorer though.
MQ explorer used to be the tool that application team uses in monitoring their respective queues, but we are moving away with that and use Tivoli Omegamon instead.
Just did some testing and investigation on the MQV8 explorer functionality and stumbled upon on the following issues.
Anyway, thanks for the input guys appreciate it.
And if somewhat there's a way how to get around with it, appreciate if you can share too.
Cheers, |
|
| Back to top |
|
|
| exerk |
| Posted: Tue May 12, 2015 7:02 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
| kenn_ryan wrote: |
| - MQV8 explorer needs to have display authority on all the objects. (e'g for queue tabs, it should have +dsp auth on all queues) |
Not unreasonable if you want to look at object attributes...
| kenn_ryan wrote: |
| This isn't the behavior on MQ7 explorer though. |
Sure about that?
| kenn_ryan wrote: |
| And if somewhat there's a way how to get around with it, appreciate if you can share too. |
Get around what? If you're in a command console, what verb do you use to 'display' queue manager objects?
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Tue May 12, 2015 7:39 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| kenn_ryan wrote: |
From the testing (MQV8 Explorer connecting as MQ7 QMGR), it seems to be that:
- MQV8 explorer needs to have display authority on all the objects. (e'g for queue tabs, it should have +dsp auth on all queues)
This isn't the behavior on MQ7 explorer though.
MQ explorer used to be the tool that application team uses in monitoring their respective queues, but we are moving away with that and use Tivoli Omegamon instead.
Just did some testing and investigation on the MQV8 explorer functionality and stumbled upon on the following issues.
Anyway, thanks for the input guys appreciate it.
And if somewhat there's a way how to get around with it, appreciate if you can share too.
Cheers, |
Regardless of the version I would expect that you'd need +inq +dsp of any object you want to show...
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| kenn_ryan |
| Posted: Thu May 14, 2015 8:21 am Post subject: |
|
|
Newbie
Joined: 07 Mar 2012
Posts: 9
|
Thanks for the replies, but below is my scenario:
For the given mcauser in the SVRCONN channel in MQ7 Qmgr, I had given authority for a queue named TEST.
Using the same connection details:
Clicking Queue tab - It will display the TEST queue
MQ8 Explorer (standalone)
Clicking Queue tab - It will try to "Retrieve Data" but nothing displayed.
MQ trace and logs shows it needs to have display auth on all MQ objects)
MQ trace sample below. (All queues had entries):
Entity mqtest has insufficient authority to access object QM1.TESTQC
The following requested permissions are unauthorized: dsp
---------{ xcsIsEnvironment
xcsIsEnvironment[MQSAUTHERRORS] = FALSE
QMGR logs: (All queues and entries like below)
05/12/2015 08:45:00 PM - Process(2964.5) User(mqm) Program(amqzlaa0)
Host(wmqtest1.apis.dhl.com)
AMQ8077: Entity 'mqtest ' has insufficient authority to access object
'QM1'.
05/12/2015 04:50:37 PM - Process(14256.14) User(mqm) Program(amqzlaa0)
Host(wmqtest1.apis.dhl.com)
AMQ8077: Entity 'mqtest ' has insufficient authority to access object
'QM1.TESTQC'.
Of course I can use command line and any tools aside from explorer.
But I was interested of make the MQ8 explorer working as I was interested in finding out why such behaviour.
Cheers,
 |
|
| Back to top |
|
|
|
|
