ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » Problem connecting toolkit to config manager on server

Post new topic  Reply to topic
 Problem connecting toolkit to config manager on server « View previous topic :: View next topic » 
Author Message
kumarp
PostPosted: Tue Jan 11, 2005 11:01 am    Post subject: Problem connecting toolkit to config manager on server Reply with quote

Novice

Joined: 20 May 2003
Posts: 23

Hi,
I have a WBIMB 5 config manager on a Win 2000 server, and I want to use the broker toolkit on my laptop to connect to the config manager on the server. I tried creating a domain connection on my laptop by putting in the config manager QM name, hostname, and port, but I got an authorization error: RC=2035(MQRC_NOT_AUTHORIZED: The user is not authorized to perform the operation attempted )

I found a post on this forum that mentioned the same problem here: http://www.mqseries.net/phpBB2/viewtopic.php?t=17395&highlight=2035 and the solution seems to be to add the user that I am using on my laptop to the WBIMB groups on the server machine (mqbrasgn, mqbrdevt, mqbrks, etc.) This makes good sense, but the problem I'm facing is: When I go to the server machine and try to add my laptop user to the groups, I can't because the server machine isn't aware of the user that I use on my laptop.

I tried to create a user on the server machine with the same name as the user that I use on my laptop, add the user to the WBIMB groups, and try to connect to the config manager from my laptop again...but this time I get an error like:

TopicRoot information was not received from the Configuration Manager. Either the Configuration Manager is not available or the user 'parulk@parulk' does not have authority to view the object. (UUID='TopicRoot', required attribute='topicroot.defaultpolicy')

Clearly I'm not doing something right. Can anyone help???
Thanks,
Parul
Back to top
View user's profile Send private message
kirani
PostPosted: Tue Jan 11, 2005 11:21 pm    Post subject: Reply with quote

Jedi Knight

Joined: 05 Sep 2001
Posts: 3779
Location: Torrance, CA, USA

Is your user-id part of mqb* groups on config mgr machine? Also, what command did you use to create the config mgr.
_________________
Kiran


IBM Cert. Solution Designer & System Administrator - WBIMB V5
IBM Cert. Solutions Expert - WMQI
IBM Cert. Specialist - WMQI, MQSeries
IBM Cert. Developer - MQSeries

Back to top
View user's profile Send private message Visit poster's website
jefflowrey
PostPosted: Wed Jan 12, 2005 5:26 am    Post subject: Reply with quote

Grand Poobah

Joined: 16 Oct 2002
Posts: 19981

Untangling Windows security is usually the big part of planning and completing a broker install.

It sounds like you have machines that are not in the same domain.

You may need to instruct the config manager to not be domain aware.
_________________
I am *not* the model of the modern major general.
Back to top
View user's profile Send private message
kumarp
PostPosted: Wed Jan 12, 2005 5:26 am    Post subject: Reply with quote

Novice

Joined: 20 May 2003
Posts: 23

Hi,
I used the following command to create the config manager:
mqsicreateconfigmgr -i mqtest -a mqtest00 -q CONFIG_MGR_QM -n WBICMDB -u mqtest -p mqtest00

As I stated above, I tried to add my userid to the mqb* groups on the config mgr machine, but the config mgr machine wasn't aware of my userid, so it wouldn't let me add it. To work around it, I tried creating a new userid on the config mgr machine with the same name as my userid, and then add it to the groups...but then I got the following error when trying to connect to the config mgr.:
TopicRoot information was not received from the Configuration Manager. Either the Configuration Manager is not available or the user 'parulk@parulk' does not have authority to view the object. (UUID='TopicRoot', required attribute='topicroot.defaultpolicy')

Does this have anything to do with Windows domains? I am not familiar with this topic at all, so any insight you can give would be most helpful.
Thanks!
-- Parul
Back to top
View user's profile Send private message
kumarp
PostPosted: Wed Jan 12, 2005 5:28 am    Post subject: Reply with quote

Novice

Joined: 20 May 2003
Posts: 23

Hi,
Sorry JeffLowery, I just saw your post...how can I instruct the config manager not to be domain aware?
Thanks,
Parul
Back to top
View user's profile Send private message
jefflowrey
PostPosted: Wed Jan 12, 2005 5:35 am    Post subject: Reply with quote

Grand Poobah

Joined: 16 Oct 2002
Posts: 19981

What is the domain configuration in question?

Does the server belong to a domain?

Does your laptop belong to a domain?

Are they in the same domain? Are they in different domains?
_________________
I am *not* the model of the modern major general.
Back to top
View user's profile Send private message
waugh
PostPosted: Wed Jan 12, 2005 6:38 am    Post subject: Reply with quote

Master

Joined: 19 Feb 2004
Posts: 225

Hey Parul,

is mqtest member of mqm, administrator, mqbrops, mqbrkrs, mqbrtpic, mqbrdevt, mqbrasgn?

did you apply CSD04?

now on your laptop are you logged in as "mqtest"?

if all the above are done, and still you are unable to connect, then as Jeff told you before, you can make it domain unaware, but please refer manual to see (http://publib.boulder.ibm.com/infocenter/wbihelp/index.jsp
search for mqsichangeconfigmgr) how it will effect your config manager's security ....

by running following commands on config machine's command prompt

mqsistop configmgr

mqsichangeconfigmgr -l 0

mqsistart configmgr
Back to top
View user's profile Send private message
kumarp
PostPosted: Wed Jan 12, 2005 6:38 am    Post subject: Reply with quote

Novice

Joined: 20 May 2003
Posts: 23

Hi,
I think that neither machine belongs to any domain. Is it necessary to have them in a Windows domain for the toolkit on my laptop to connect to the config manager on the server?

And do I need to instruct the config manager to be not domain aware? How do I do that?

Thanks,
Parul
Back to top
View user's profile Send private message
kumarp
PostPosted: Wed Jan 12, 2005 6:42 am    Post subject: Reply with quote

Novice

Joined: 20 May 2003
Posts: 23

Hi,

To answer your questions: mqtest is a user on the server, and is a member of all the mqb* groups. I did apply CSD04 on both server and laptop. On my laptop I log in as parulk, not mqtest --> this is the problem, I think.

Do you think I should proceed in trying to make the config manager domain unaware?

THanks,
Parul
Back to top
View user's profile Send private message
rkford11
PostPosted: Wed Jan 12, 2005 7:22 am    Post subject: Reply with quote

Partisan

Joined: 06 Jun 2004
Posts: 316

kumarp wrote:
Hi,

To answer your questions: mqtest is a user on the server, and is a member of all the mqb* groups. I did apply CSD04 on both server and laptop. On my laptop I log in as parulk, not mqtest --> this is the problem, I think.

Do you think I should proceed in trying to make the config manager domain unaware?

THanks,
Parul


Hi Parul,

make parulk member of mqm and mq* groups. as said by waugh run the following commands
mqsistop configmgr

mqsichangeconfigmgr -l 0

mqsistart configmgr

and then try to connect to the config mgr on the server thru toolkit on u r laptop. hope this helps out.
Back to top
View user's profile Send private message
kumarp
PostPosted: Wed Jan 12, 2005 8:05 am    Post subject: Reply with quote

Novice

Joined: 20 May 2003
Posts: 23

Hi,

Thanks to everyone for their help. I made the config manager domain unaware as suggested with the command: mqsichangeconfigmgr -l 0
and I was able to connect to the config mgr from my laptop.

For future reference for anyone who has this same problem here is a summary:

Config mgr is on Win2000 server machine, toolkit is on my Win2000 laptop. Neither are in a Windows domain.
In order to connect toolkit on my laptop to config mgr on server, I had to:
1) create a Windows user on server machine with same name as my user on laptop
2) add this new user to all the mq* groups on server machine
3) make config mgr domain unaware wiht commands :
mqsistop configmgr
mqsichangeconfigmgr -l 0
mqsistart configmgr
I was then able to create a domain in broker toolkit on my laptop to connect to config mgr on server machine.

Thanks again!!!
--Parul
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » Problem connecting toolkit to config manager on server
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.