ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Security » Authorization issue when fetching from local queue

Post new topic  Reply to topic
 Authorization issue when fetching from local queue « View previous topic :: View next topic » 
Author Message
riyaz_tak
PostPosted: Wed Aug 23, 2017 1:14 am    Post subject: Authorization issue when fetching from local queue Reply with quote

Voyager

Joined: 05 Jan 2012
Posts: 92

Hi

We have IBM websphere mq 7.5 installed on Oracle Linux machine.

Our client is using Apache active MQ.

Client wants to fetch values from Webspehere MQ so we created one local queue and put a sample message .

Client is using camel to fetch values from our local queue.

I have given authorization as well to access the queue :

setmqaut -m our_qm -t qmgr -p username +connect +inq +setall

I am getting below error in MQ log :

AMQ8077: Entity 'xxxx ' has insufficient authority to access object
'local_queue'.

EXPLANATION:
The specified entity is not authorized to access the required object. The
following requested permissions are unauthorized: get/browse/inq
ACTION:
Ensure that the correct level of authority has been set for this entity against
the required object, or ensure that the entity is a member of a privileged
group.

Is there anything else that I need to set ?
Please let me know if you need more info.

Regards
Riyaz
Back to top
View user's profile Send private message
exerk
PostPosted: Wed Aug 23, 2017 1:34 am    Post subject: Reply with quote

Jedi Council

Joined: 02 Nov 2006
Posts: 6339

With that command you have given authorisation to only the queue manager, not to any objects within it.

Also you have given all IDs in the 'username' Primary Group the same access as you have used the principle switch instead of using the group switch(it's a Unix thing but addressed in later versions of MQ). Ideally you should create a group to put the username in, and authorise that group to the queue manager (see the example below).

setmqaut -m our_qm -t q -n local_queue -g username_group +get +inq +browse
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys.
Back to top
View user's profile Send private message
riyaz_tak
PostPosted: Wed Aug 23, 2017 2:08 am    Post subject: Reply with quote

Voyager

Joined: 05 Jan 2012
Posts: 92

Thanks A lot.

It worked
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » IBM MQ Security » Authorization issue when fetching from local queue
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.