ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » General IBM MQ Support » MQ logging authorisation problem on NT 4

Post new topic  Reply to topic
 MQ logging authorisation problem on NT 4 « View previous topic :: View next topic » 
Author Message
HugoB
PostPosted: Fri Jun 18, 2004 3:42 am    Post subject: MQ logging authorisation problem on NT 4 Reply with quote

Acolyte

Joined: 26 Jun 2001
Posts: 67

Hi,

I have a problem with authorisation, I presume.
It´s on NT 4 (SP6a) with MQ 5.3 CSD05.

It all runs fine, no problem.
But as soon as i want to view the error loggin (AMQERR01.LOG)
I get some sort of garbage.

18-06-04 13:21:56
AMQ8003: MQM could not display the text for error 32771.
-------------------------------------------------------------------------------
18-06-04 13:21:56
AMQ9410: MQM could not display the text for error 37904.
-------------------------------------------------------------------------------

I presume the user MUSR_MQADMIN is the owner of the logging process.
And this user has maybe not have enough rights.

My question is, where to look for on NT 4. The normal setting are set
correct. Like an mqm group with its members. And the MUSR_MQADMIN
is working correct, otherwise MQ would not work at all. I checked some things within Dcomcnfg.exe. It looks normal. (to me that is )

One remark though, it´s a NT 4 machine within the MOD, so it is secured more than normal. This is probably the problem too.
But .... where ???
Back to top
View user's profile Send private message
-EdC-
PostPosted: Mon Jun 21, 2004 8:55 am    Post subject: log Reply with quote

Newbie

Joined: 21 Jun 2004
Posts: 1
Location: Nederland

goto mainframe whit all, SU
_________________
EdC
Back to top
View user's profile Send private message MSN Messenger
JasonE
PostPosted: Tue Jun 22, 2004 4:28 am    Post subject: Reply with quote

Grand Master

Joined: 03 Nov 2003
Posts: 1220
Location: Hursley

Quote:
Check that the registry key
At 5.2: "SYSTEM\CurrentControlSet\Services\EventLog\Application\MQSeries"
At 5.3: "SYSTEM\CurrentControlSet\Services\EventLog\Application\WebSphere MQ"
This key can be found under HKEY_LOCAL_MACHINE

Ensure that the appropriate user Id(s) have the correct access rights so that they may open the key. Use regedt32 to verify and make amends where necessary.

Check that the values under the registry key described above, are present.

EventMessageFile should be set to '\bin\amqxms0n.dll'
TypesSupported should be set to 0x07.

Verify that there are no restrictions for the appropriate user Id(s) to gain access to the message library file (amqxms0n.dll).


Note appropriate ids are the userid MQ is running under (set in dcomcnfg), and the mqm group.
Back to top
View user's profile Send private message
HugoB
PostPosted: Tue Jun 22, 2004 6:38 am    Post subject: Reply with quote

Acolyte

Joined: 26 Jun 2001
Posts: 67

Thnx JasonE.

I will verify these.
I found more of these checks from you on this board.
But no luck, on the other hand, you do introduce some new ones !!

Give it a try frist thing in the morning !!!
Back to top
View user's profile Send private message
JasonE
PostPosted: Tue Jun 22, 2004 6:44 am    Post subject: Reply with quote

Grand Master

Joined: 03 Nov 2003
Posts: 1220
Location: Hursley

If they dont work, take filemon and regmon (www.sysinternals.com) of an error message failing to come out, and search for access denied type errors....

Oh, and let me know so I can update my list
Back to top
View user's profile Send private message
HugoB
PostPosted: Wed Jun 23, 2004 3:57 am    Post subject: Reply with quote

Acolyte

Joined: 26 Jun 2001
Posts: 67

Hi JasonE,

Regmon/Filemon were the ones i already used.
They did not help me.
But they are very usefull tools indeed.

The permissions on the registry tree, as you said, appear
to have a big influence. I think this info will help to
tackle the problem. Now I need to figure out what user(s)
need to be added. Coz the defaults are added as i can compare
with most of my other systems. It has to do with security restrictions
on our regsitry here at the MOD.

Thnx for your valuable info JasonE !

I keep you posted if I find more info on this.


Last edited by HugoB on Thu Jun 24, 2004 12:18 am; edited 1 time in total
Back to top
View user's profile Send private message
JasonE
PostPosted: Wed Jun 23, 2004 6:59 am    Post subject: Reply with quote

Grand Master

Joined: 03 Nov 2003
Posts: 1220
Location: Hursley

If you still cant get it working, PM me with somewhere I can ftp a regmon and filemon log from, and I'll take a look - I've always found those tools answer this question (so far...)
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » General IBM MQ Support » MQ logging authorisation problem on NT 4
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.