ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » General IBM MQ Support » Not authorised to runmqsc commands:Reset connauth

Post new topic  Reply to topic
 Not authorised to runmqsc commands:Reset connauth « View previous topic :: View next topic » 
Author Message
sachinramesh
PostPosted: Thu Nov 07, 2024 10:41 pm    Post subject: Not authorised to runmqsc commands:Reset connauth Reply with quote

Disciple

Joined: 20 Feb 2007
Posts: 170

HI ,
I have tried to alter my qmgr connauth properties with authinfo 'SYSTEM.DEFAULT.AUTHINFO.IDPWOS' and chckclnt as 'REQDADM'

I tried to connect to the qmgr with uid and pwd and realized that the uid/pwd is for a different account and it will not work .

Now i dont have the uid/pwd to connect to the qmgr , i want to alter the qmgr connauth to null.

Is there a way to do it, as the runmqsc commnands are not working.
This is on Linux servers where MQ verison is 9.3 .

Error says:
AMQ5540E: Application 'runmqsc' did not supply a user ID and password
Back to top
View user's profile Send private message Send e-mail
gbaddeley
PostPosted: Sun Nov 10, 2024 2:56 pm    Post subject: Reply with quote

Jedi Knight

Joined: 25 Mar 2003
Posts: 2535
Location: Melbourne, Australia

Can you log in to the Linux server as mqm user, or sudo to mqm, or as a user that is in mqm group ? You can then use runmqsc command at the shell prompt.
_________________
Glenn
Back to top
View user's profile Send private message
sachinramesh
PostPosted: Sun Nov 10, 2024 11:21 pm    Post subject: Reply with quote

Disciple

Joined: 20 Feb 2007
Posts: 170

gbaddeley wrote:
Can you log in to the Linux server as mqm user, or sudo to mqm, or as a user that is in mqm group ? You can then use runmqsc command at the shell prompt.


yes , i am able to login to the server and also sudo to mqm user.Still i am facing the same issue.

[user123@hostname ~]$ sudo su - mqm
Last login: Mon Nov 11 06:45:56 CET 2024 on pts/1

[mqm@hostname ~]$ runmqsc CMSS
5724-H72 (C) Copyright IBM Corp. 1994, 2024.
Starting MQSC for queue manager CMSS.
AMQ8135E: Not authorized.

No MQSC commands read.
[mqm@hostname ~]$

Error:
AMQ5540E: Application 'runmqsc' did not supply a user ID and password
Back to top
View user's profile Send private message Send e-mail
fjb_saper
PostPosted: Mon Nov 11, 2024 2:56 am    Post subject: Re: Not authorised to runmqsc commands:Reset connauth Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20736
Location: LI,NY

sachinramesh wrote:
HI ,
I have tried to alter my qmgr connauth properties with authinfo 'SYSTEM.DEFAULT.AUTHINFO.IDPWOS' and chckclnt as 'REQDADM'

I tried to connect to the qmgr with uid and pwd and realized that the uid/pwd is for a different account and it will not work .

Now i dont have the uid/pwd to connect to the qmgr , i want to alter the qmgr connauth to null.

Is there a way to do it, as the runmqsc commnands are not working.
This is on Linux servers where MQ verison is 9.3 .

Error says:
AMQ5540E: Application 'runmqsc' did not supply a user ID and password

This is why I hate using the default. Copy the default as your own and change the AUTHENMD(PAM).
This will enable the authentication through the Unix PAM model, which you probably need.
And don't forget the REFRESH SECURITY TYPE(CONNAUTH)

_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
sachinramesh
PostPosted: Mon Nov 11, 2024 10:49 pm    Post subject: Re: Not authorised to runmqsc commands:Reset connauth Reply with quote

Disciple

Joined: 20 Feb 2007
Posts: 170

fjb_saper wrote:
This is why I hate using the default. Copy the default as your own and change the AUTHENMD(PAM).
This will enable the authentication through the Unix PAM model, which you probably need.
And don't forget the REFRESH SECURITY TYPE(CONNAUTH)


As i mentioned earlier i am not able to modify any authinfo parameters.
Somehow i could connect to the qmgr in MQExploer using a different channel and saw that chcklocal parameter is set to REQUIRED and chckclnt is set to REQDADM.
the mca user used in the channel i used to connect to mq explorer has only read access.

looks like i have to delete and recreate the qmgr ,as all the admin users are needed to provide the uid/pwd and non admin users dont have access to modify the authinfo .

Please suggest if there is any other option to change the authinfo parameter to optional.
Back to top
View user's profile Send private message Send e-mail
sachinramesh
PostPosted: Tue Nov 12, 2024 4:06 am    Post subject: Reply with quote

Disciple

Joined: 20 Feb 2007
Posts: 170

This is now fixed.

i have set the password for mqm user and connected to the qmgr to alter the authinfo parameters.
Back to top
View user's profile Send private message Send e-mail
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » General IBM MQ Support » Not authorised to runmqsc commands:Reset connauth
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.