ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Security » Authentication on temporary topics

Post new topic  Reply to topic
 Authentication on temporary topics « View previous topic :: View next topic » 
Author Message
Razzia
PostPosted: Tue Jun 26, 2018 12:59 am    Post subject: Authentication on temporary topics Reply with quote

Newbie

Joined: 06 Mar 2017
Posts: 6

Hi

Short intro:
We are installing a product that uses MQ, topics and JMS. The product is java based and is installed in WAS. We have MQ 8.0.0.9 installed on RHEL. The system consist of one MQ server, and three servers with MQ clients.

We have set up channel authentication and authrec on queues and topics.
That works on the defined queues and topics.

Earlier we made a .bindings file with JMSAdmin tool, in which we added:
- DEFINE T(SOME.TOPIC)
- DEF TCF(TopicConnectionFactory) TRANSPORT(CLIENT) CHANNE(OUR.CHANNEL) HOST(server.domain.net) PORT(1414) QMGR(OurQmgr)

The new product is being installed by a consultant, and now he is getting an error when trying to pub/sub to a temporary queue.

Code:

AMQ8009: Entity 'UsernameHere' has insufficient authority to access topic string
'TEMP/-14787121931528871576360'.

EXPLANATION:
The specified entity is not authorized to access the required topic. The
following permissions were requested: sub
ACTION:
Ensure that the correct level of authority has been set for this entity against
appropriate topic objects, or ensure that the entity is a member of a
privileged group.


I tried creating a new topic with topic string "TEMP/**" and "TEMP/*" and granting access to the user, but that doesn't work.

How do I grant the user access to pub/sub on temporary topics?
Back to top
View user's profile Send private message
fjb_saper
PostPosted: Tue Jun 26, 2018 9:59 pm    Post subject: Re: Authentication on temporary topics Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20696
Location: LI,NY

Razzia wrote:
Hi

Short intro:
We are installing a product that uses MQ, topics and JMS. The product is java based and is installed in WAS. We have MQ 8.0.0.9 installed on RHEL. The system consist of one MQ server, and three servers with MQ clients.

We have set up channel authentication and authrec on queues and topics.
That works on the defined queues and topics.

Earlier we made a .bindings file with JMSAdmin tool, in which we added:
- DEFINE T(SOME.TOPIC)
- DEF TCF(TopicConnectionFactory) TRANSPORT(CLIENT) CHANNE(OUR.CHANNEL) HOST(server.domain.net) PORT(1414) QMGR(OurQmgr)

The new product is being installed by a consultant, and now he is getting an error when trying to pub/sub to a temporary queue.

Code:

AMQ8009: Entity 'UsernameHere' has insufficient authority to access topic string
'TEMP/-14787121931528871576360'.

EXPLANATION:
The specified entity is not authorized to access the required topic. The
following permissions were requested: sub
ACTION:
Ensure that the correct level of authority has been set for this entity against
appropriate topic objects, or ensure that the entity is a member of a
privileged group.


I tried creating a new topic with topic string "TEMP/**" and "TEMP/*" and granting access to the user, but that doesn't work.

How do I grant the user access to pub/sub on temporary topics?

Have you tried to authorise '/TEMP/#' or 'TEMP/#'. You might also want to check if you have topic type wildcards (#) or string type wildcards (*) defined for the topic
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » IBM MQ Security » Authentication on temporary topics
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.