| Author |
Message
|
| ayanc |
 Posted: Mon Nov 15, 2004 10:00 pm Post subject: WBIMB Connection Problem |
 |
|
Voyager
Joined: 15 Nov 2004
Posts: 88
|
Hi All,
I have configuration manager installed in a Windows XP machine. The broker is in HP-UX.
I am using another (remote) Win XP m/c to connect to the config manager.
I have performed the following steps:
1) In the Broker Administration Perspective, I created a new domain.
2) I provided the connection details (Qmgr, IP, and port)
When I try to connect, it gives me two errors. They are as follows:
1)
TopicRoot information was not received from the Configuration Manager. Either the Configuration Manager is not available or the user wmqi@ayan doesnt have the authority to view the object. (UUID = 'TopicRoot', required attribute = 'name')
2)
PubSubTopology information was not received from the Configuration Manager. Either the Configuration Manager is not available or the user wmqi@ayan doesnt have the authority to view the object. (UUID = 'PubSubTopology', required attribute = 'name')
The BIP number obtained was BIP0889E
The error seems to be pretty obvious that the user doesn't have the proper access. Here 'wmqi' is the user that I am logged on and it has proper access to the config mgr. But 'ayan' is the name of the remote machine in a LAN (a different n/w from the Config Mgr and Broker).
It seems to be connecting as 'wmqi@ayan'.
Does anyone have any idea about a possible solution.
Thanks in Advance.
Ayan. |
|
| Back to top |
|
 |
| kirani |
| Posted: Mon Nov 15, 2004 11:27 pm Post subject: |
|
|
Jedi Knight
Joined: 05 Sep 2001
Posts: 3779
Location: Torrance, CA, USA
|
you need to define your logged on user (wmqi) on remote ayan machine and add them to mqb* groups.
_________________
Kiran
IBM Cert. Solution Designer & System Administrator - WBIMB V5
IBM Cert. Solutions Expert - WMQI
IBM Cert. Specialist - WMQI, MQSeries
IBM Cert. Developer - MQSeries
|
|
| Back to top |
|
|
| ayanc |
| Posted: Tue Nov 16, 2004 1:59 am Post subject: |
|
|
Voyager
Joined: 15 Nov 2004
Posts: 88
|
Hi Kirani,
The user 'wmqi' is defined as Administrator in the m/c 'ayan'. In addition it has been added to all the mq related groups.
Yet the problem persists.
Ayan |
|
| Back to top |
|
|
| sjensen |
| Posted: Tue Nov 16, 2004 4:24 am Post subject: |
|
|
Centurion
Joined: 18 Dec 2003
Posts: 134
Location: London
|
Probably not the problem but who is the MCA User on the SYSTEM.BKR.CONFIG channel on the Configuration Queue Manager?
Cheers
Stefan |
|
| Back to top |
|
|
| ayanc |
| Posted: Tue Nov 16, 2004 8:04 pm Post subject: |
|
|
Voyager
Joined: 15 Nov 2004
Posts: 88
|
Hi Stefan,
I found that the MCA user section is blank. So, I believe no user has been set up. Could you please guide me through my next step.
Thanks.
Ayan. |
|
| Back to top |
|
|
| fazz |
| Posted: Wed Nov 17, 2004 7:33 am Post subject: |
|
|
Centurion
Joined: 20 Feb 2004
Posts: 144
Location: England
|
Hi Ayan,
If no MCA is set then the user id supplied by the calling application will be used.
Cheers
Fazz |
|
| Back to top |
|
|
| sjensen |
| Posted: Wed Nov 17, 2004 7:41 am Post subject: |
|
|
Centurion
Joined: 18 Dec 2003
Posts: 134
Location: London
|
Hi
Sorry I thought I posted a reply this morning.
We had to set it to the user running the config manager. In your case I think that is wmqi. Without that we had problems deploying.
Cheers
Stefan |
|
| Back to top |
|
|
| ayanc |
| Posted: Thu Nov 18, 2004 8:27 pm Post subject: |
|
|
Voyager
Joined: 15 Nov 2004
Posts: 88
|
Hi All,
Thanks for your kind response. I am now able to connect successfully. The method worked fine.
Cheers,
Ayan. |
|
| Back to top |
|
|
| PeterPotkay |
| Posted: Thu Nov 18, 2004 8:47 pm Post subject: |
|
|
Poobah
Joined: 15 May 2001
Posts: 7722
|
Be aware that if you hard code the MCAUSER, that channel is now a wide open security hole. Anyone with the toolkit has full access to your config manager, and will connect as that ID. And any client app can use that channel for any other MQ purpose, and will execute as 'wmqi', which presumably has 100% authority to do anything.
SSL or a security exit should be used in this case to limit who can use this "super" channel. If security is a concern in your shop.
_________________
Peter Potkay
Keep Calm and MQ On |
|
| Back to top |
|
|
| sjensen |
| Posted: Mon Nov 22, 2004 4:36 am Post subject: |
|
|
Centurion
Joined: 18 Dec 2003
Posts: 134
Location: London
|
Hi,
Strangely I've now changed the MCA user to 'nowhereman' and deployment works fine. I can only speculate that the initial deployment is different as that did not work. If I get the time I will create a new test environment and try again from scratch.
Cheers
Stefan |
|
| Back to top |
|
|
|
|
