| Author |
Message
|
| Missam |
 Posted: Wed Feb 18, 2004 12:13 pm Post subject: AMQ4036 Authorization Error |
 |
|
Chevalier
Joined: 16 Oct 2003
Posts: 424
|
Hi,
I Installed MQ Explorer on Win 2000 And trying to connect to remote queue manager.i'm getting AMQ4036 Not Authorized To Connect Error.
Is there any alternative way to connect to that queue manager with out adding my user id on the Remote machine. |
|
| Back to top |
|
 |
| vennela |
| Posted: Wed Feb 18, 2004 12:27 pm Post subject: |
|
|
Jedi Knight
Joined: 11 Aug 2002
Posts: 4055
Location: Hyderabad, India
|
On the remote QMGR you should
either
def chl(SYSTEM.ADMIN.SVRCONN) chltype(SVRCONN) mcauser('mqm')
or
alter chl(SYSTEM.ADMIN.SVRCONN) chltype(SVRCONN) mcauser('mqm') |
|
| Back to top |
|
|
| EddieA |
| Posted: Wed Feb 18, 2004 1:23 pm Post subject: |
|
|
Jedi
Joined: 28 Jun 2001
Posts: 2453
Location: Los Angeles
|
Foe Explorer it's the ADMIN channel.
Whenever this method of setting up the channel is suggested it should come with a standard "Government Health Warning". This opens the Channel to ANYONE who connects. There is NO security.
Cheers,
_________________
Eddie Atherton
IBM Certified Solution Developer - WebSphere Message Broker V6.1
IBM Certified Solution Developer - WebSphere Message Broker V7.0 |
|
| Back to top |
|
|
| mq_developer |
| Posted: Wed Feb 18, 2004 3:22 pm Post subject: |
|
|
Voyager
Joined: 18 Feb 2002
Posts: 82
|
Adding to Vennela's comment ...
In windows by default there wont be any user id as such as 'mqm' ( just a group) , so your mcauser should have one of those userids that is part of 'mqm' group .. By default , MQUSR_MQADMIN would work unless other wise customized ...
By doing so , you are allowing/exposing "trusted connections" to the queue manager .. so it means your qmgr is vulnerable and prone to security risk ... as its blindly going to accept incoming connections ... |
|
| Back to top |
|
|
| Missam |
| Posted: Wed Feb 18, 2004 3:51 pm Post subject: |
|
|
Chevalier
Joined: 16 Oct 2003
Posts: 424
|
Thanks For All The Replies.
1)We can do
2)Security Problem
3)Adding Group To User |
|
| Back to top |
|
|
|
|
