| Author |
Message
|
| MQMB&WAS |
 Posted: Tue Aug 30, 2016 11:53 am Post subject: AMQ4036 not able to connect to local qmgr from MQ Explorer |
 |
|
Centurion
Joined: 12 Jun 2016
Posts: 130
|
Hello everyone,
I just installed MQ on my local system(linux), default listener with port 1414 is running, default channels are not running even when I tried to start them.
I'm seeing the below error when I try to connect to qmgr from MQ Explorer, would really appreciate if anyone could explain what configurations I need to make to connect to the qmgr.
Access not permitted. You are not authorized to perform this operation. (AMQ4036).
Thanks in advance. |
|
| Back to top |
|
 |
| mqjeff |
| Posted: Tue Aug 30, 2016 12:04 pm Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
|
| Back to top |
|
|
| Vitor |
| Posted: Tue Aug 30, 2016 12:13 pm Post subject: Re: AMQ4036 not able to connect to local qmgr from MQ Explor |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| MQMB&WAS wrote: |
would really appreciate if anyone could explain what configurations I need to make to connect to the qmgr.
Access not permitted. You are not authorized to perform this operation. (AMQ4036). |
How about some security configurations? The error seems pretty clear.
And if your planned response to this post is anything like:
| Quote: |
| Why do I need security configurations when I'm trying to connect as an administrator / mqm |
then welcome to the world of increased default security.
Hail Morag!
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| hughson |
| Posted: Tue Aug 30, 2016 2:40 pm Post subject: Re: AMQ4036 not able to connect to local qmgr from MQ Explor |
|
|
Padawan
Joined: 09 May 2013
Posts: 1959
Location: Bay of Plenty, New Zealand
|
| MQMB&WAS wrote: |
would really appreciate if anyone could explain what configurations I need to make to connect to the qmgr.
Access not permitted. You are not authorized to perform this operation. (AMQ4036). |
First things first. You've shown us the error that MQ Explorer reported, but that's just a client and the client doesn't get told the whole story.
For the full and detailed reason why you can't connect you should look in the queue manager ANQERR01.LOG.
Depending on your MQ version you'll either see something complaint about a lack of a password or that your channel was blocked as my guess is that you are using a privileged user ID. However we await your response to be sure, rather than guessing.
Cheers
Morag
_________________
Morag Hughson @MoragHughson
IBM MQ Technical Education Specialist
Get your IBM MQ training here!
MQGem Software |
|
| Back to top |
|
|
| MQMB&WAS |
| Posted: Tue Aug 30, 2016 6:56 pm Post subject: |
|
|
Centurion
Joined: 12 Jun 2016
Posts: 130
|
I was seeing the below error in AMQERR01.log, so I added my id to mqm group with the command "usermod -a -G mqm myname" ,restarted mq and now I can connect to the qmgr from MQ explorer.
AMQ8077: Entity 'myname' has insufficient authority to access object 'QMGR'.
EXPLANATION:
The specified entity is not authorized to access the required object.The
following requested permissions are unauthorized: connect
ACTION:
Ensure that the correct level of authority has been set for this entity against
the required object, or ensure that the entity is a member of a privileged
group.
I still have one question, is there a single command or setting to grant authorizations to a userid(who is not a member of the mqm group) to access all the mq objects from mq explorer?
Thanks for your time. |
|
| Back to top |
|
|
| hughson |
| Posted: Tue Aug 30, 2016 8:18 pm Post subject: |
|
|
Padawan
Joined: 09 May 2013
Posts: 1959
Location: Bay of Plenty, New Zealand
|
|
| Back to top |
|
|
| fjb_saper |
| Posted: Tue Aug 30, 2016 8:27 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
Also remember that when you change group membership at the OS level this is not reflected to the qmgr unless the qmgr is bounced or a refresh security is issued. The queue manager caches group membership...
Have fun 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| MQMB&WAS |
| Posted: Tue Aug 30, 2016 8:40 pm Post subject: |
|
|
Centurion
Joined: 12 Jun 2016
Posts: 130
|
| fjb_saper wrote: |
Also remember that when you change group membership at the OS level this is not reflected to the qmgr unless the qmgr is bounced or a refresh security is issued. The queue manager caches group membership...
Have fun |
yes, I experienced that. Thanks. |
|
| Back to top |
|
|
| MQMB&WAS |
| Posted: Tue Aug 30, 2016 8:42 pm Post subject: |
|
|
Centurion
Joined: 12 Jun 2016
Posts: 130
|
|
| Back to top |
|
|
| fjb_saper |
| Posted: Wed Aug 31, 2016 2:06 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
Would you PLEASE not disable BBCode in your posts?
You can look at the difference using preview...
Thanks
_________________
MQ & Broker admin |
|
| Back to top |
|
|
|
|
