| Author |
Message
|
| jayii |
 Posted: Fri Oct 30, 2015 3:24 am Post subject: Windows Login for SQL database |
 |
|
Novice
Joined: 05 May 2014
Posts: 11
|
Hi,
Background: I am trying to access an SQL Server database from IIB. I created the database source name (Admin Tools-> System DSN->servername and credentials) using Windows NT login. I linked this DSN to IIB using the mqsisetdbparms command passing my Windows username and password(I:e the one I used to login to that server) and then did mqsicvp.
Now when I try to hit the server from IIB. I find the below error in the logs
'[Microsoft][ODBC SQL Server Driver][SQL Server]Login failed for user 'DS\VW000007$'.' (CHARACTER)
Here, DS is the domain name and VW000007 is the server name to which I logged in.
I even tried after passing the below command but it doesn't seem to help.
mqsichangeproperties TESTNODE_jayanti.anthati -e default -o ComIbmSocketConnectionManager -n allowedAuthTypes -v "IWA"
Any help/guidance will be much appreciated. |
|
| Back to top |
|
 |
| jayii |
| Posted: Fri Oct 30, 2015 4:03 am Post subject: |
|
|
Novice
Joined: 05 May 2014
Posts: 11
|
| I stopped the broker before giving the mqsicommand and then started it |
|
| Back to top |
|
|
| smdavies99 |
| Posted: Fri Oct 30, 2015 5:09 am Post subject: |
|
|
Jedi Council
Joined: 10 Feb 2003
Posts: 6076
Location: Somewhere over the Rainbow this side of Never-never land.
|
So you are running in a Windows domain and your TESTNODE broker my not have the rights to validate your username/password in the domain or that the Broker is running under the default system account which does not have the correct rights to do domain queries
That is what I see from the information you have given us. But as you have not quited the Version/patch levle of anything the above is just guesswork.
This sort of thing is why...
1) I always use SQLServer Auth and not Windows Auth
2) I always create a broker specifically and not an IIB V10 Test one (i.e. the one that gets started with the Tooklit by default)/ I have scripts that do it all for me including setting the ODBC access peoperties and running 'mqsicvp'.
3) I start the TK on IIB 10 in such a way as to NOT create the TEST broker.
However YMMV and all that.
_________________
WMQ User since 1999
MQSI/WBI/WMB/'Thingy' User since 2002
Linux user since 1995
Every time you reinvent the wheel the more square it gets (anon). If in doubt think and investigate before you ask silly questions. |
|
| Back to top |
|
|
| jayii |
| Posted: Sun Nov 01, 2015 9:08 pm Post subject: |
|
|
Novice
Joined: 05 May 2014
Posts: 11
|
Hi
I am using IIBv10 Beta
Thanks for your reply!
| Quote: |
that the Broker is running under the default system account which does not have the correct rights to do domain queries
|
Is there a way to find out the credentials[username] that the broker is using by default inspite of explicitly setting the username in mqsisetdbparms.
| Quote: |
| 3) I start the TK on IIB 10 in such a way as to NOT create the TEST broker. |
How do you achieve this? coz when I open IIB by default
TESTNODE_username is created. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Sun Nov 01, 2015 9:35 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| jayii wrote: |
How do you achieve this? coz when I open IIB by default
TESTNODE_username is created. |
There is a setting in windows- preferences-iib-test or somewhere like this for that. Read it up in the infocenter 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| jayii |
| Posted: Sun Nov 01, 2015 11:31 pm Post subject: |
|
|
Novice
Joined: 05 May 2014
Posts: 11
|
Thanks....got it...but still the issue isn't resolved. whenever I try to hit the database it takes the servername for loggin in and fails.
Last edited by jayii on Mon Nov 02, 2015 1:11 am; edited 1 time in total |
|
| Back to top |
|
|
| maurito |
| Posted: Mon Nov 02, 2015 12:45 am Post subject: Re: Windows Login for SQL database |
|
|
Partisan
Joined: 17 Apr 2014
Posts: 358
|
| jayii wrote: |
Hi,
Background: I am trying to access an SQL Server database from IIB. I created the database source name (Admin Tools-> System DSN->servername and credentials) using Windows NT login. I linked this DSN to IIB using the mqsisetdbparms command passing my Windows username and password(I:e the one I used to login to that server) and then did mqsicvp.
Now when I try to hit the server from IIB. I find the below error in the logs
'[Microsoft][ODBC SQL Server Driver][SQL Server]Login failed for user 'DS\VW000007$'.' (CHARACTER)
Here, DS is the domain name and VW000007 is the server name to which I logged in.
I even tried after passing the below command but it doesn't seem to help.
mqsichangeproperties TESTNODE_jayanti.anthati -e default -o ComIbmSocketConnectionManager -n allowedAuthTypes -v "IWA"
Any help/guidance will be much appreciated. |
First of all, have you tried connecting to the database from the ODBC connection you created ?.
Have you tried connecting to the database from a command console ( cmd ) ?
for example:
| Code: |
| sqlcmd -S<server_name> -U<user_name> -P<password> |
that should connect you to the default database in the server and if that works, then try connecting to the specific database you want:
| Code: |
| sqlcmd -S<server_name> -U<user_name> -P<password> -d<database_to_connect> |
and by the way, you never mentioned that you have set the database in your ODBC, so you will be connecting to the default.
Note that the flags in the above commands are case sensitive. |
|
| Back to top |
|
|
| Vitor |
| Posted: Mon Nov 02, 2015 5:21 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| jayii wrote: |
| I am using IIBv10 Beta |
Don't use the beta - by definition it's not finished.
Use the GA v10
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| jayii |
| Posted: Tue Nov 03, 2015 4:33 am Post subject: |
|
|
Novice
Joined: 05 May 2014
Posts: 11
|
Thanks All for your response.
The issue is resolved now.
I logged onto the ibm service with a common service account and it worked. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Tue Nov 03, 2015 8:14 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| jayii wrote: |
Thanks All for your response.
The issue is resolved now.
I logged onto the ibm service with a common service account and it worked. |
Guess that if you had it (iib) running under the SYSTEM account it forwards the computer name to any network request...
_________________
MQ & Broker admin |
|
| Back to top |
|
|
|
|
