| Author |
Message
|
| aubade |
 Posted: Thu May 16, 2002 4:47 am Post subject: MQSERIES SECURITY WIN2K/IIS/MQSERIES 5.2 . please help :) |
 |
|
Newbie
Joined: 16 May 2002
Posts: 2
|
hi everyone,
I have a problem with MQSeries security that i really cannot handle. so I hope you'll help me...
my environment is :
-mqseries server 5.2
-mqax200 (mqseries activex)
-iis
-windows 2000
i have an ASP.NET application (designed in C#) using the MQAX200 ActiveX to connect to MQSeries. The MQSeries server in on the same computer than the IIS web server.
almost all users of this computer, including IUSR_<computer_name> (the user for anonymous web access), is in the Administrators AND mqm group.
but, when i want to connect to mqseries with this web application, i get a 2035 error : MQRC_NOT_AUTHORIZED.
i mentionned that i'm using the mqax200 activex, but i don't think that is related to the problem. because with another DLL (developped by my project team), the problem is still there.
i tried many solutions that i picked up on several places around the web, but nothing worked.
any help is appreciated 
thank you in advance
cheers |
|
| Back to top |
|
 |
| aubade |
| Posted: Fri May 17, 2002 4:42 am Post subject: Problem Solved |
|
|
Newbie
Joined: 16 May 2002
Posts: 2
|
Hi,
Here is the answer to the problem i asked about before.
When using MQSeries in a .NET application (for example with MQAX200), the user ASPNET (used by the .NET platform to execute applications) has to be in the Administrators and/or mqm group of the Windows system the MQSeries Server is installed on... |
|
| Back to top |
|
|
| MQRuss |
| Posted: Tue Sep 16, 2003 10:13 am Post subject: |
|
|
Novice
Joined: 16 Sep 2003
Posts: 13
Location: Macon. GA
|
I'm seeing this same issue. Though adding ASPNET doesn't seem to have resolved it. The MQ Server is complaining about not having the SID. I'll post again when I get it going.
-Russ
_________________
____________
Russ
MQ Newbie |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Tue Sep 16, 2003 11:54 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
| MQRuss wrote: |
I'm seeing this same issue. Though adding ASPNET doesn't seem to have resolved it. The MQ Server is complaining about not having the SID. I'll post again when I get it going.
-Russ |
When changing membership on the MQM group in Windows, you have to do something to refresh the OAM cache.
I think 5.2 supports the 'refresh security' MQSC command. If not, you'll have to restart the queue manager. |
|
| Back to top |
|
|
| MQRuss |
| Posted: Fri Sep 19, 2003 10:13 am Post subject: 5.2 and .NET SID ASPNET issues |
|
|
Novice
Joined: 16 Sep 2003
Posts: 13
Location: Macon. GA
|
Thanks for the good advice. My problem persists. I do have an error message I'll post it in below. Must be something simple as there are people all over the board firing away great. I've tried adding ASPNET to several different groups and also tried using the IDENTITY option in web.config without any luck to change the account being used. Strangely I can't get .NET to build it with the identity option.
in any case:
from MQServer event log
>>>
Authorization failed because the SID for entity 'aspnet' cannot be obtained.
The Object Authority Manager was unable to obtain a SID for the specified entity.
Ensure that the entity is valid, and that all necessary domain controllers are available.
>>>
from Visual Studio.NET
>>>>
Server Error in '/WebApplication2' Application.
--------------------------------------------------------------------------------
CompCode: 2, Reason: 2035
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.
Exception Details: IBM.WMQ.MQException: CompCode: 2, Reason: 2035
Source Error:
An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.
Stack Trace:
[MQException: CompCode: 2, Reason: 2035]
IBM.WMQ.MQBaseObject.throwNewMQException(Int32 compCode, Int32 reason)
IBM.WMQ.MQQueueManager.Connect(String queueManagerName)
IBM.WMQ.MQQueueManager..ctor(String queueManagerName)
IBM.WMQAX.MQQueueManager..ctor(String m)
WebApplication2.WebForm1.Button1_Click(Object sender, EventArgs e)
System.Web.UI.WebControls.Button.OnClick(EventArgs e)
System.Web.UI.WebControls.Button.System.Web.UI.IPostBackEventHandler.RaisePostBackEvent(String eventArgument)
System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument)
System.Web.UI.Page.RaisePostBackEvent(NameValueCollection postData)
System.Web.UI.Page.ProcessRequestMain()
--------------------------------------------------------------------------------
Version Information: Microsoft .NET Framework Version:1.1.4322.573; ASP.NET Version:1.1.4322.573
>>>>
Thanks, hopefully I'm just missing something obvious
_________________
____________
Russ
MQ Newbie |
|
| Back to top |
|
|
| MQRuss |
| Posted: Fri Sep 19, 2003 10:22 am Post subject: |
|
|
Novice
Joined: 16 Sep 2003
Posts: 13
Location: Macon. GA
|
|
| Back to top |
|
|
|
|
