| Author |
Message
|
| bkc98 |
 Posted: Thu Nov 11, 2004 10:09 pm Post subject: Entity Truncated at 12 characters |
 |
|
Novice
Joined: 25 Jul 2003
Posts: 10
|
I have an authorization issue on two servers I'm trying to connect to remotely using the Websphere .Net classes that come with the 5.3 support pack (CSD08).
I see in the event log (as well as the AMQERR02.LOG) the following error message:
-------------------------------------------------------------------------
AMQ8077: Entity 'servicegpdso' has insufficient authority to access object
'NTASCM2'.
EXPLANATION:The specified entity is not authorized to access the required object. The following requested permissions are unauthorized: connect
ACTION:Ensure that the correct level of authority has been set for this entity against the required object, or ensure that the entity is a member of a privileged group.
-------------------------------------------------------------------------
Notice the entity mentioned in the error msg above (servicegpdso). The problem here is that the actual user name my asp.net application is impersonating is really 'servicegpdsops' -- notice the two extra characters (the 'ps' at the end).
Why is websphere truncating the entity to 12 characters in this case? The same code works just fine on 3 other servers (with the same version of websphere on them as the servers having the problem)! I've tried another account, as well. Same result. The funny thing is that my own user name (blake_caraway) works just fine. What gives?
Now, I'm not a Websphere guy. I don't maintain queueing environments for a living. I'm just a developer trying to write some code to get queue depths and pop messages off a queue if necessary from time to time.
Thoughts? This is really driving me nuts.
Thanks for any help you can throw my way,
/bc |
|
| Back to top |
|
 |
| kirani |
| Posted: Thu Nov 11, 2004 11:56 pm Post subject: |
|
|
Jedi Knight
Joined: 05 Sep 2001
Posts: 3779
Location: Torrance, CA, USA
|
What Authorizations does this user-id ('servicegpdsops' ) have on this server? Also, compare it with the other servers. Don't worry about the truncated user-id in your error message. User-Identifier field in 12 bytes long, so it's removing last 2 chars.
Please make sure your user-id has authorizations to perform MQ operaions on the queue manager.
_________________
Kiran
IBM Cert. Solution Designer & System Administrator - WBIMB V5
IBM Cert. Solutions Expert - WMQI
IBM Cert. Specialist - WMQI, MQSeries
IBM Cert. Developer - MQSeries
|
|
| Back to top |
|
|
| bkc98 |
| Posted: Fri Nov 12, 2004 6:53 am Post subject: |
|
|
Novice
Joined: 25 Jul 2003
Posts: 10
|
| kirani wrote: |
What Authorizations does this user-id ('servicegpdsops' ) have on this server? Also, compare it with the other servers. Don't worry about the truncated user-id in your error message. User-Identifier field in 12 bytes long, so it's removing last 2 chars.
Please make sure your user-id has authorizations to perform MQ operaions on the queue manager. |
I'm a developer, not an mq guy. I've learned a little while coding with the API and reading this forum and checking out some of the manuals, but checking/setting MQ authorization isn't something I'm familiar with at this time.
Can I get a quick tip and a link to some WebSphere documentation that can light the way (I'm also currently looking all over IBM's website for websphere documentation regarding checking/setting mq authorization)?
Thanks for the help,
/bc |
|
| Back to top |
|
|
| kirani |
| Posted: Fri Nov 12, 2004 10:00 am Post subject: |
|
|
Jedi Knight
Joined: 05 Sep 2001
Posts: 3779
Location: Torrance, CA, USA
|
What exactly do you mean by "WebSphere". There are lots of products under this brand. For MQ Related material please chekc this thread.
http://www.mqseries.net/phpBB2/viewtopic.php?t=18349
_________________
Kiran
IBM Cert. Solution Designer & System Administrator - WBIMB V5
IBM Cert. Solutions Expert - WMQI
IBM Cert. Specialist - WMQI, MQSeries
IBM Cert. Developer - MQSeries
|
|
| Back to top |
|
|
| bkc98 |
| Posted: Fri Nov 12, 2004 10:54 am Post subject: |
|
|
Novice
Joined: 25 Jul 2003
Posts: 10
|
Right. Sorry. I'm talking about MQ related stuff.
Thanks,
/bc |
|
| Back to top |
|
|
| bkc98 |
| Posted: Fri Nov 12, 2004 11:45 am Post subject: |
|
|
Novice
Joined: 25 Jul 2003
Posts: 10
|
Got it!
After reading Chapter 10 in the WebSphere MQ support handbook (that I found using the link posted on this thread - thank you!), I learned that modified security permissions are not effective until a particular queue manager is restarted.
I restarted one of the queue managers kicking back the authorization error and now I can connect to the queue mgr (in one of my test environments) just fine. Woo-hoo! The other queue mgr is production and I'll let the mq production support group restart that one on Monday (I figure they know how to do this in the safest, least risky manner with).
Thanks for the help, guys!
Now I'm off to start writing code to pop messages off a queue.
/bc |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Fri Nov 12, 2004 11:47 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
| bkc98 wrote: |
Got it!
After reading Chapter 10 in the WebSphere MQ support handbook (that I found using the link posted on this thread - thank you!), I learned that modified security permissions are not effective until a particular queue manager is restarted. |
It's not necessary to do that with 5.3. You can use runmqsc and issue "REFRESH SECURITY" instead of restarting the queue manager.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| bkc98 |
| Posted: Mon Nov 15, 2004 10:18 am Post subject: |
|
|
Novice
Joined: 25 Jul 2003
Posts: 10
|
Thanks! That worked!
I really appreciate the help!
/bc |
|
| Back to top |
|
|
|
|
