| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Win2k client (wgrp) to server (domain) => 'not authorized |
« View previous topic :: View next topic » |
| Author |
Message
|
| spajot |
 Posted: Tue Jun 21, 2005 3:42 am Post subject: Win2k client (wgrp) to server (domain) => 'not authorized |
 |
|
Newbie
Joined: 21 Jun 2005
Posts: 3
|
Hello there,
Is it possible to make a Win2K MQClient which is not in a domain communicate with a Win2K MQServer which is ?
I have tried to add Anonymous logon and Guest accounts in the server mqm group, but nothing changes... always get the same error (2035).
In other words, is there a way to allow the server to accept every incoming connection without checking SIDs ? As a security matter, those connections could be filtered by a firewall before.
My MQClient cannot run in a domain whereas my server always does. I would be happy to read some suggestions to make all this work, if you guys have some...
Thanks a lot.
Sylvain |
|
| Back to top |
|
 |
| sebastianhirt |
| Posted: Tue Jun 21, 2005 4:01 am Post subject: |
|
|
Yatiri
Joined: 07 Jun 2004
Posts: 620
Location: Germany
|
Hi,
If you change Operating System Security you need to run refresh security for your queue manager otherwise it wouldn't recognize the change.
cheers
Sebastian |
|
| Back to top |
|
|
| spajot |
| Posted: Tue Jun 21, 2005 4:14 am Post subject: |
|
|
Newbie
Joined: 21 Jun 2005
Posts: 3
|
| sebastianhirt wrote: |
Hi,
If you change Operating System Security you need to run refresh security for your queue manager otherwise it wouldn't recognize the change.
|
I already did by rebooting the server(s)...
Has someone made it work in such configuration (client in a workgroup, server in a domain) ?
Sylvain |
|
| Back to top |
|
|
| PeterPotkay |
| Posted: Tue Jun 21, 2005 5:46 am Post subject: Re: Win2k client (wgrp) to server (domain) => 'not author |
|
|
Poobah
Joined: 15 May 2001
Posts: 7722
|
| spajot wrote: |
In other words, is there a way to allow the server to accept every incoming connection without checking SIDs ? As a security matter, those connections could be filtered by a firewall before.
|
Sure. Hardcode a value (ABCUSER) onto the SVRCONN channel's MCAUSER parm. Give that value the minimum rights to MQ using setmqaut commands. Now anyone that connects to that channel will be "seen" by MQ as ABCUSER.
Use SSL or an Exit to limit who can access the channel if you like.
_________________
Peter Potkay
Keep Calm and MQ On |
|
| Back to top |
|
|
| spajot |
| Posted: Wed Jun 22, 2005 5:49 am Post subject: |
|
|
Newbie
Joined: 21 Jun 2005
Posts: 3
|
Hello Peter.
That perfectly worked, thanks a lot !
Regards from France.
Sylvain |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
