| Author |
Message
|
| jakelee |
 Posted: Mon May 03, 2004 1:46 pm Post subject: MQ 5.3 Configuration Error... |
 |
|
Newbie
Joined: 03 May 2004
Posts: 3
|
I installed MQ 5.3 on my laptop successfully. This is a standalone machine.
When I tried to configure this instance of MQ, it did some searching and then went to another screen saying "WebSphere MQ Configuration Problem: WebSphere MQ is not correctly configured for Windows 2000 Domain users - An unexpected error has occurred while validating the security credentials of user "SHREK\Administrator". Ensure that network is operational, and that all the required domain controllers are available."
How can I configure this MQ instance on a single machine successfully?
Thanks,
J- |
|
| Back to top |
|
 |
| EddieA |
| Posted: Mon May 03, 2004 3:49 pm Post subject: |
|
|
Jedi
Joined: 28 Jun 2001
Posts: 2453
Location: Los Angeles
|
Looks like you may have answered wrongly when asked the questions regarding Domain usage.
Run the Prepare Websphere MQ Wizard (from the Start menu), and reply "No" to the question "Are any domain controllers in your network running Windows 2000 server".
Cheers,
_________________
Eddie Atherton
IBM Certified Solution Developer - WebSphere Message Broker V6.1
IBM Certified Solution Developer - WebSphere Message Broker V7.0 |
|
| Back to top |
|
|
| JasonE |
| Posted: Tue May 04, 2004 1:35 am Post subject: |
|
|
Grand Master
Joined: 03 Nov 2003
Posts: 1220
Location: Hursley
|
| What is in the contents of the amqmjpse.txt file, any obvious errors? |
|
| Back to top |
|
|
| jakelee |
| Posted: Tue May 04, 2004 9:11 am Post subject: |
|
|
Newbie
Joined: 03 May 2004
Posts: 3
|
| JasonE wrote: |
| What is in the contents of the amqmjpse.txt file, any obvious errors? |
10:00:46 *********************************************************************
10:00:46 Tuesday May 04, 2004
10:00:46 Starting the Prepare MQSeries Wizard log
10:00:46 MQSeries binary directory is 'C:\Program Files\IBM\WebSphere MQ\bin\'
10:00:46 MQSeries data directory is 'C:\Program Files\IBM\WebSphere MQ'
10:00:46 Getting parameters passed to program:
10:00:46 Finished getting parameters passed to program
10:00:46 This computer name is 'SHREK'
10:00:46 Logged on user is 'Administrator' on domain 'SHREK'
10:00:46 National language identifier is 'A'
10:00:46 No other instance of the Prepare MQSeries Wizard, creating new instance
10:00:46 Displaying the Prepare MQSeries Wizard
10:00:46 Active page is 'IDD_PROPPAGE_WELCOME' (Class = 'CPageWelcome')
10:00:47 Windows 2000, trying to force window to foreground
10:00:47 This thread id 3536, foreground thread id 3536
10:00:47 Already foreground window
10:00:47 Checking logged on user is authorized
10:00:47 IsAdminAuthority: checking logged on user has administrator authority on local machine
10:00:47 Retrieved token information
10:00:47 IsAdminAuthority: rc=True
10:00:47 Logged on user is authorized
10:00:47 Active page is 'IDD_PROPPAGE_SERV_CHECK' (Class = 'CPageServCheck')
10:00:47 CheckSecurity: Checking that the MQSeries Services can read the group membership of the logged on user
10:00:47 Retrieved token information
10:02:42 CoCreateInstance failed, rc=-2146959355 (0x80080005)
10:02:42 CheckSecurity: rc=2 (0x2)
10:02:42 Checking Services status: SECURITY_STATE_UNKNOWN
10:02:43 A shortcut to the Prepare MQSeries Wizard already exists: Prepare WebSphere MQ Wizard
10:02:43 Active page is 'IDD_PROPPAGE_SEC_BAD' (Class = 'CPageSecBad')
10:10:56 Cancel pressed
10:10:56 Cancel pressed
10:10:56 Checking logged on user is authorized
10:10:56 IsAdminAuthority: checking logged on user has administrator authority on local machine
10:10:56 Retrieved token information
10:10:56 IsAdminAuthority: rc=True
10:10:56 Logged on user is authorized
10:10:56 Checking whether first time setup of Services has been done
10:10:56 First time setup of Services has already been done |
|
| Back to top |
|
|
| jakelee |
| Posted: Tue May 04, 2004 9:17 am Post subject: |
|
|
Newbie
Joined: 03 May 2004
Posts: 3
|
| EddieA wrote: |
Looks like you may have answered wrongly when asked the questions regarding Domain usage.
Run the Prepare Websphere MQ Wizard (from the Start menu), and reply "No" to the question "Are any domain controllers in your network running Windows 2000 server".
Cheers, |
I answered "Don't Know" but reinstalled it with "No". But I am still getting the same error since it seems to configure in similar manner. |
|
| Back to top |
|
|
| JasonE |
| Posted: Wed May 05, 2004 3:33 am Post subject: |
|
|
Grand Master
Joined: 03 Nov 2003
Posts: 1220
Location: Hursley
|
| Quote: |
10:02:42 CoCreateInstance failed, rc=-2146959355 (0x80080005)
10:02:42 CheckSecurity: rc=2 (0x2)
10:02:42 Checking Services status: SECURITY_STATE_UNKNOWN
|
Thats your problem.
Try these (in order) and test after each step...
| Quote: |
1. Open command prompt, cd to <mq install dir>\bin directory and run amqmsrvn -regserver
2. Same command prompt, run regsvr32 amqmspsn.dll
3. Change pwd to musr_mqadmin, set in dcomcnfg under the mqseries identity page
4. If installed into x:\program files\.... see if there is a file called
x:\program (no extension) and rename/remove it
5. Ensure SYSTEM.ADMIN.COMMAND.QUEUE is set to DEFPSIST(NO)
6. Ensure MUSR_MQADMIN is not disabled and password is not set to expire
7. Check that MUSR_MQADMIN has directory permissions to the MQ drive and directories
including WINNT and SYSTEM32
8. Ensure MUSR_MQADMIN has logon as a service and logon as a batch job rights
9. Ensure the computer does not have the browser service disabled as MQ Install seems to require it for some reason.
10. Do the dcomcnfg ensure Default Authentication Level is Connect
|
BTW it doesnt matter what you answered to the security question, but the question is worded badly. It should say "Are you running in an active directory domain which was not migrated from an NT4 domain"...[/quote] |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Wed May 05, 2004 4:39 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
| JasonE wrote: |
| 5. Ensure SYSTEM.ADMIN.COMMAND.QUEUE is set to DEFPSIST(NO) |
Oh man, was that a bad couple of days... 
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| prabhu_chn |
| Posted: Sun May 30, 2004 2:19 pm Post subject: Same problem as yours , have u got any solution |
|
|
Newbie
Joined: 20 May 2004
Posts: 7
|
hi jakelee,
I got the same problem as yours.
installed MQ 5.3 on my laptop successfully. When I tried to configure this instance of MQ, it did some searching and then went to another screen saying "WebSphere MQ Configuration Problem: WebSphere MQ is not correctly configured for Windows 2000 Domain users - An unexpected error has occurred while validating the security credentials of user "prabhusrinivas\prabhu". Ensure that network is operational, and that all the required domain controllers are available."
How can I configure this MQ instance on a single machine successfully?
Are any domain controllers in your network running Windows 2000 server".
for this i answered "NO"
let me know if you got any solution for this problem...
Thanks, |
|
| Back to top |
|
|
| JasonE |
| Posted: Tue Jun 01, 2004 2:10 am Post subject: |
|
|
Grand Master
Joined: 03 Nov 2003
Posts: 1220
Location: Hursley
|
| You should need to do nothing special for a single user machine which is not part of a domain. Find your amqmjpse.txt file - what does it say at the point of checking security. I would almost guarantee it is com/dcom errors. I would run through my checklist from above and try running the wizard again... |
|
| Back to top |
|
|
| TEdwards |
| Posted: Thu May 11, 2006 6:04 am Post subject: M£ 5.3 installation on Windows MQ |
|
|
Newbie
Joined: 11 May 2006
Posts: 4
|
I get exactly the same problem.
In amqmjpse.txt I have
***********************************************
13:53:28 Retrieving group memberships for current user IUSER\701592422
13:53:33 CheckGroups returned code 1722 (0x6ba)
13:53:33 CheckSecurity: rc=2 (0x2)
13:53:33 Checking Services status: SECURITY_STATE_UNKNOWN
13:53:38 A shortcut to the Prepare MQSeries Wizard already exists: Prepare WebSphere MQ Wizard
13:53:38 Active page is 'IDD_PROPPAGE_SEC_BAD' (Class = 'CPageSecBad')
***********************************************
I've been through you checklist and everything is Ok except for
3. Change pwd to musr_mqadmin, set in dcomcnfg under the mqseries identity page
We have complex password authentication so I can't set the password to musr_mqadmin. I have changed MUSR_MQADMIN's password it to something more complex and changed the IBM MQ Services to logon as MUSR_MQADMIN using the complex password and checked that it the service will start OK.
5. Ensure SYSTEM.ADMIN.COMMAND.QUEUE is set to DEFPSIST(NO)
How do I do this?
Any other clues?
Thanks Trefor |
|
| Back to top |
|
|
| JasonE |
| Posted: Fri May 12, 2006 2:34 am Post subject: |
|
|
Grand Master
Joined: 03 Nov 2003
Posts: 1220
Location: Hursley
|
1722 is basically a failure at the o/s level to do authentication - ie not exactly an MQ problem. One recent cause for this has been identified - does this help?
----------------------------------------------------------------------------------------------------
Title: AMQ7227 RPC Server unavailable when trying to start IBM MQSeries
service entry.
.
Problem Abstract: When you attempt to start the WebSphere MQ by way of
the IBM MQSeries entry in the Microsoft services, it fails with message
AMQ7227 WebSphere MQ encountered the following network error: 1722 (RPC
server unavailable).
There are several FDC files reporting MQRC_SECURITY_ERROR (2063) for
MQ processes
amqzdmaa (via probe id ZD007030)
amqrrmfa (via prove id RM185002)
amqzfuma (via probe id ZF095010)
.
Cause: During authentication MQ issues a Windows API call such as
NetUserGetLocalGroups, that returns the system error 1722 (RPC server
unavailable). This means that the system is unable to communicate
correctly with the Domain Controller and this may occur for a variety
of reasons including configuration of Domain Name Service (DNS) and
Windows Internet Naming Service (WINS).
.
Solution: In this particular instance the problem was attributed to
your WINS configuration. You were able to resolve the problem by
configuring the MQ server as a WINS client, meaning that the MQ
server's netbios name was registered in the WINS data base and
the MQ server had access to the data base to be able to query other
service records or machines in the domain. |
|
| Back to top |
|
|
| bonnieng |
| Posted: Thu Aug 24, 2006 7:39 pm Post subject: Re: M£ 5.3 installation on Windows MQ |
|
|
Newbie
Joined: 24 Aug 2006
Posts: 3
|
I get exactly the same problem.
In amqmjpse.txt I have
***********************************************
11:25:13 CoCreateInstance failed, rc=-2146959355 (0x80080005)
11:25:13 CheckSecurity: rc=2 (0x2)
11:25:13 Checking Services status: SECURITY_STATE_UNKNOWN
***********************************************
I've been through your checklist but not point 5. I also don't understand how to do this. please help.
5. Ensure SYSTEM.ADMIN.COMMAND.QUEUE is set to DEFPSIST(NO)
Thanks a lot. |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Fri Aug 25, 2006 2:35 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
You can use runmqsc to find out the DEFPSIST value of the SYSTEM.ADMIN.COMMAND.QUEUE
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| JasonE |
| Posted: Fri Aug 25, 2006 3:47 am Post subject: |
|
|
Grand Master
Joined: 03 Nov 2003
Posts: 1220
Location: Hursley
|
Double check step 4 above just to be sure
Also, look in the event log for any messages written when this occurs, both application and system portion - (COM or DCOM errors are examples of what you might see) are there any?
If you are a server in an active directory domain, you need to run mq under a domain id (see quick beginnings guide) - You can manually set the id for the MQ DCOM object in dcomcnfg, identity tab, and then rerun the wizard - does this help? |
|
| Back to top |
|
|
| bonnieng |
| Posted: Sun Aug 27, 2006 6:43 pm Post subject: |
|
|
Newbie
Joined: 24 Aug 2006
Posts: 3
|
Thanks jefflowrey & JasonE!
First of all, I need to give more background of my case. I'm using Win2000 on a domain network(my corp network) but logon as standalone workstation (because i'm in a remote site, it's better not to sign on the corp. network as i'm using dual lan). My every colleague has the same config. but without problem on the MQ installation.
I'm a MQ newbie totally. My mq support colleague fail to install the service for me and ask me to crash my OS (re-install the whole system!!). That's why i'm seeking help here.
| jefflowrey wrote: |
| You can use runmqsc to find out the DEFPSIST value of the SYSTEM.ADMIN.COMMAND.QUEUE |
I run the runmqsc command failed with the error message "MQManager inexist".
| JasonE wrote: |
Double check step 4 above just to be sure
Also, look in the event log for any messages written when this occurs, both application and system portion - (COM or DCOM errors are examples of what you might see) are there any?
|
I've checked against step 4 and hv made sure no C:\program exist.
There's error in the system log but not application log. The error is thrown from DCOM, meaning is "server {55B99860-F95E-11D1-ABB6-0004ACF79B59} logon DCOM timeout."
I'm using a traditional chinese system, so can only tell the drift of the error messages, not the exact wordings. Many thanks. |
|
| Back to top |
|
|
|
|
