MQSeries.net :: View topic - Configuration for Remote Administration

MQSeries.net

Tech Exchange

Education

Certifications

Library

Info Center

SupportPacs

FAQÂ Â

Usergroups

RSS Feed - WebSphere MQ Support

RSS Feed - Message Broker Support

MQSeries.net Forum Index » General IBM MQ Support » Configuration for Remote Administration

Configuration for Remote Administration

« View previous topic :: View next topic »

Author

Message

jayZ

Posted: Tue Dec 15, 2015 1:41 pm Post subject: Configuration for Remote Administration

Acolyte

Joined: 03 Jun 2008
Posts: 71

Was hoping I could get a hand with an issue I'm seeing with remote administration.

I set up my configuration using http://www-01.ibm.com/support/knowledgecenter/SSFKSJ_7.5.0/com.ibm.mq.adm.doc/q021140_.htm?lang=en.

I have 2 queue managers, both on 7.5.0.2.

QM 1, used only to remotely administer QM 2

QM 1 is on windows
QM 2 is on linux

MQSC commands from QM 1 are ending up in the DLQ of QM 2 because the OS user from QM 1 doesn't exist on QM 2. The issue is that I have set the MCAUSER on all SDR/RCVR channels to an account that exists on both queue managers. All channels have been restarted and are currently running.

Any thoughts on why the MCAUSER isn't being used?

Thanks,
Jeff

mqjeff

Posted: Tue Dec 15, 2015 1:44 pm Post subject:

Grand Master

Joined: 25 Jun 2008
Posts: 17447

CHLAUTH rules?
_________________
chmod -R ugo-wx /

jayZ

Posted: Tue Dec 15, 2015 2:01 pm Post subject:

Acolyte

Joined: 03 Jun 2008
Posts: 71

None that would map the user of these particular channels.

One the source queue manager, I've got this (names changed)

Code:

SDR: QM1.TO.QM2
RCVR: QM2.TO.QM2
XMITQ: QM2

CHLAUTH:
DIS CHLAUTH(*)
3 : DIS CHLAUTH(*)
AMQ8878: Display channel authentication record details.
CHLAUTH(SYSTEM.ADMIN.SVRCONN) TYPE(ADDRESSMAP)
ADDRESS(*) USERSRC(CHANNEL)
AMQ8878: Display channel authentication record details.
CHLAUTH(SYSTEM.*) TYPE(ADDRESSMAP)
ADDRESS(*) USERSRC(NOACCESS)
AMQ8878: Display channel authentication record details.
CHLAUTH(*) TYPE(BLOCKUSER)
USERLIST(*MQADMIN)

On the target

Code:

SDR: QM2.TO.QM1
RCVR: QM1.TO.QM2
XMITQ: QM1

AMQ8878: Display channel authentication record details.
CHLAUTH(SYSTEM.*) TYPE(ADDRESSMAP)
ADDRESS(*) USERSRC(NOACCESS)
AMQ8878: Display channel authentication record details.
CHLAUTH(*) TYPE(SSLPEERMAP)
SSLPEER(CN=*) USERSRC(NOACCESS)
AMQ8878: Display channel authentication record details.
CHLAUTH(*) TYPE(BLOCKUSER)
USERLIST(*MQADMIN)

mqjeff

Posted: Wed Dec 16, 2015 5:35 am Post subject:

Grand Master

Joined: 25 Jun 2008
Posts: 17447

The default blockuser rule might be interfereing - I'm assuming the MCAUSER you're setting is part of the mqm group, because you're trying to do administration.
_________________
chmod -R ugo-wx /

Display posts from previous:

Page 1 of 1

MQSeries.net Forum Index » General IBM MQ Support » Configuration for Remote Administration

Jump to:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Protected by Anti-Spam ACP