Author |
Message
|
parazzi |
Posted: Wed Sep 23, 2015 10:28 am Post subject: MQRC_NOT_AUTHORIZED - mqm user on windows |
|
|
 Newbie
Joined: 18 Sep 2015 Posts: 5
|
Hi Guys, good afternoon..
I'm facing a issue on MQ running on windows server, when application request COD, the msg is being place on windows MQ DLQ.
I believe this has to do with the user identifier being mqm. On Unix box usually create the remote user on server and set authority, but unfortunately I did not find way to do it, the windows do not allow the creation of the user with same group name.
Did anyone faced this issue before ? any idea is appreciated.
WebSphere MQ 7.0.1.3
Windows 2003 R2 |
|
Back to top |
|
 |
smdavies99 |
Posted: Wed Sep 23, 2015 10:36 am Post subject: |
|
|
 Jedi Council
Joined: 10 Feb 2003 Posts: 6076 Location: Somewhere over the Rainbow this side of Never-never land.
|
First the bad news
Server 2003 is out of support (you probably know that)
MQ 7.0.1.3 goes out of support in 1 week.
Now onto your problem.
Make the user you want to use for the MQ Admin a member of the 'mqm' group.
Logout and login again and you should be good to go.
However, this is not best practice these days but as your versio of MQ goes out of support very, very soon it should do to get you going. _________________ WMQ User since 1999
MQSI/WBI/WMB/'Thingy' User since 2002
Linux user since 1995
Every time you reinvent the wheel the more square it gets (anon). If in doubt think and investigate before you ask silly questions. |
|
Back to top |
|
 |
parazzi |
Posted: Wed Sep 23, 2015 10:45 am Post subject: |
|
|
 Newbie
Joined: 18 Sep 2015 Posts: 5
|
smdavies99 wrote: |
First the bad news
Server 2003 is out of support (you probably know that)
MQ 7.0.1.3 goes out of support in 1 week.
|
Yeah I know .... client is holding the migration
smdavies99 wrote: |
Make the user you want to use for the MQ Admin a member of the 'mqm' group.
Logout and login again and you should be good to go.
However, this is not best practice these days but as your versio of MQ goes out of support very, very soon it should do to get you going.
|
The problem is that I cannot create the user mqm, that need access to reply the msg.
I'll try to use DLH and remove the header, and see if it goes. |
|
Back to top |
|
 |
Vitor |
Posted: Wed Sep 23, 2015 11:12 am Post subject: Re: MQRC_NOT_AUTHORIZED - mqm user on windows |
|
|
 Grand High Poobah
Joined: 11 Nov 2005 Posts: 26093 Location: Texas, USA
|
parazzi wrote: |
I believe this has to do with the user identifier being mqm. |
What leads you to this belief? Does the DLH have a 2035 in it?
It's equally likely that the message is being dead lettered because there's no default route back. On the evidence posted. _________________ Honesty is the best policy.
Insanity is the best defence. |
|
Back to top |
|
 |
parazzi |
Posted: Wed Sep 23, 2015 11:16 am Post subject: Re: MQRC_NOT_AUTHORIZED - mqm user on windows |
|
|
 Newbie
Joined: 18 Sep 2015 Posts: 5
|
Vitor wrote: |
parazzi wrote: |
I believe this has to do with the user identifier being mqm. |
What leads you to this belief? Does the DLH have a 2035 in it?
It's equally likely that the message is being dead lettered because there's no default route back. On the evidence posted. |
ops, sorry
yes it is 2035.
Reply queue, xmit queue and channel are all ok, I can put a test msg using MQ Explorer. |
|
Back to top |
|
 |
Vitor |
Posted: Wed Sep 23, 2015 11:26 am Post subject: Re: MQRC_NOT_AUTHORIZED - mqm user on windows |
|
|
 Grand High Poobah
Joined: 11 Nov 2005 Posts: 26093 Location: Texas, USA
|
parazzi wrote: |
Reply queue, xmit queue and channel are all ok, I can put a test msg using MQ Explorer. |
I didn't ask about that, I asked about the default route the COD needs.
But the 2035 is clearly indicating a different problem.
I'm interested to note that your Windows machine doesn't have an mqm user in the mqm group (usually added as part of the install) or that the software doesn't recognize "mqm" even in the absence of a user.
What user runs the queue manager processes? _________________ Honesty is the best policy.
Insanity is the best defence. |
|
Back to top |
|
 |
parazzi |
Posted: Wed Sep 23, 2015 11:34 am Post subject: Re: MQRC_NOT_AUTHORIZED - mqm user on windows |
|
|
 Newbie
Joined: 18 Sep 2015 Posts: 5
|
Vitor wrote: |
parazzi wrote: |
Reply queue, xmit queue and channel are all ok, I can put a test msg using MQ Explorer. |
I didn't ask about that, I asked about the default route the COD needs.
|
That what I meant, the route the COD need is ok.
Vitor wrote: |
But the 2035 is clearly indicating a different problem.
I'm interested to note that your Windows machine doesn't have an mqm user in the mqm group (usually added as part of the install) or that the software doesn't recognize "mqm" even in the absence of a user.
What user runs the queue manager processes? |
The user that was created and run the service is MUSR_MQADMIN.
never installed MQ on windows, don't know if it is the default user.
I'm thinking it is a problem with user due the mqm does not exist on this box and User Ident. on msg in DLQ is mqm. |
|
Back to top |
|
 |
exerk |
Posted: Wed Sep 23, 2015 12:56 pm Post subject: Re: MQRC_NOT_AUTHORIZED - mqm user on windows |
|
|
 Jedi Council
Joined: 02 Nov 2006 Posts: 6339
|
parazzi wrote: |
The user that was created and run the service is MUSR_MQADMIN.
never installed MQ on windows, don't know if it is the default user. |
It is, and on Windows you can't have a user name the same as a group name - SOL... _________________ It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
Back to top |
|
 |
parazzi |
Posted: Wed Sep 23, 2015 4:54 pm Post subject: Re: MQRC_NOT_AUTHORIZED - mqm user on windows |
|
|
 Newbie
Joined: 18 Sep 2015 Posts: 5
|
good evening guys,
using DQH with HEADER (NO) I was able to sent the msg back
thanks guys for all your time. |
|
Back to top |
|
 |
|