| Author |
Message
|
| kumarp |
 Posted: Tue Jan 11, 2005 11:01 am Post subject: Problem connecting toolkit to config manager on server |
 |
|
Novice
Joined: 20 May 2003
Posts: 23
|
Hi,
I have a WBIMB 5 config manager on a Win 2000 server, and I want to use the broker toolkit on my laptop to connect to the config manager on the server. I tried creating a domain connection on my laptop by putting in the config manager QM name, hostname, and port, but I got an authorization error: RC=2035(MQRC_NOT_AUTHORIZED: The user is not authorized to perform the operation attempted )
I found a post on this forum that mentioned the same problem here: http://www.mqseries.net/phpBB2/viewtopic.php?t=17395&highlight=2035 and the solution seems to be to add the user that I am using on my laptop to the WBIMB groups on the server machine (mqbrasgn, mqbrdevt, mqbrks, etc.) This makes good sense, but the problem I'm facing is: When I go to the server machine and try to add my laptop user to the groups, I can't because the server machine isn't aware of the user that I use on my laptop.
I tried to create a user on the server machine with the same name as the user that I use on my laptop, add the user to the WBIMB groups, and try to connect to the config manager from my laptop again...but this time I get an error like:
TopicRoot information was not received from the Configuration Manager. Either the Configuration Manager is not available or the user 'parulk@parulk' does not have authority to view the object. (UUID='TopicRoot', required attribute='topicroot.defaultpolicy')
Clearly I'm not doing something right. Can anyone help???
Thanks,
Parul |
|
| Back to top |
|
 |
| kirani |
| Posted: Tue Jan 11, 2005 11:21 pm Post subject: |
|
|
Jedi Knight
Joined: 05 Sep 2001
Posts: 3779
Location: Torrance, CA, USA
|
Is your user-id part of mqb* groups on config mgr machine? Also, what command did you use to create the config mgr.
_________________
Kiran
IBM Cert. Solution Designer & System Administrator - WBIMB V5
IBM Cert. Solutions Expert - WMQI
IBM Cert. Specialist - WMQI, MQSeries
IBM Cert. Developer - MQSeries
|
|
| Back to top |
|
|
| jefflowrey |
| Posted: Wed Jan 12, 2005 5:26 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
Untangling Windows security is usually the big part of planning and completing a broker install.
It sounds like you have machines that are not in the same domain.
You may need to instruct the config manager to not be domain aware.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| kumarp |
| Posted: Wed Jan 12, 2005 5:26 am Post subject: |
|
|
Novice
Joined: 20 May 2003
Posts: 23
|
Hi,
I used the following command to create the config manager:
mqsicreateconfigmgr -i mqtest -a mqtest00 -q CONFIG_MGR_QM -n WBICMDB -u mqtest -p mqtest00
As I stated above, I tried to add my userid to the mqb* groups on the config mgr machine, but the config mgr machine wasn't aware of my userid, so it wouldn't let me add it. To work around it, I tried creating a new userid on the config mgr machine with the same name as my userid, and then add it to the groups...but then I got the following error when trying to connect to the config mgr.:
TopicRoot information was not received from the Configuration Manager. Either the Configuration Manager is not available or the user 'parulk@parulk' does not have authority to view the object. (UUID='TopicRoot', required attribute='topicroot.defaultpolicy')
Does this have anything to do with Windows domains? I am not familiar with this topic at all, so any insight you can give would be most helpful.
Thanks!
-- Parul |
|
| Back to top |
|
|
| kumarp |
| Posted: Wed Jan 12, 2005 5:28 am Post subject: |
|
|
Novice
Joined: 20 May 2003
Posts: 23
|
Hi,
Sorry JeffLowery, I just saw your post...how can I instruct the config manager not to be domain aware?
Thanks,
Parul |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Wed Jan 12, 2005 5:35 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
What is the domain configuration in question?
Does the server belong to a domain?
Does your laptop belong to a domain?
Are they in the same domain? Are they in different domains?
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| waugh |
| Posted: Wed Jan 12, 2005 6:38 am Post subject: |
|
|
Master
Joined: 19 Feb 2004
Posts: 225
|
Hey Parul,
is mqtest member of mqm, administrator, mqbrops, mqbrkrs, mqbrtpic, mqbrdevt, mqbrasgn?
did you apply CSD04?
now on your laptop are you logged in as "mqtest"?
if all the above are done, and still you are unable to connect, then as Jeff told you before, you can make it domain unaware, but please refer manual to see (http://publib.boulder.ibm.com/infocenter/wbihelp/index.jsp
search for mqsichangeconfigmgr) how it will effect your config manager's security ....
by running following commands on config machine's command prompt
mqsistop configmgr
mqsichangeconfigmgr -l 0
mqsistart configmgr |
|
| Back to top |
|
|
| kumarp |
| Posted: Wed Jan 12, 2005 6:38 am Post subject: |
|
|
Novice
Joined: 20 May 2003
Posts: 23
|
Hi,
I think that neither machine belongs to any domain. Is it necessary to have them in a Windows domain for the toolkit on my laptop to connect to the config manager on the server?
And do I need to instruct the config manager to be not domain aware? How do I do that?
Thanks,
Parul |
|
| Back to top |
|
|
| kumarp |
| Posted: Wed Jan 12, 2005 6:42 am Post subject: |
|
|
Novice
Joined: 20 May 2003
Posts: 23
|
Hi,
To answer your questions: mqtest is a user on the server, and is a member of all the mqb* groups. I did apply CSD04 on both server and laptop. On my laptop I log in as parulk, not mqtest --> this is the problem, I think.
Do you think I should proceed in trying to make the config manager domain unaware?
THanks,
Parul |
|
| Back to top |
|
|
| rkford11 |
| Posted: Wed Jan 12, 2005 7:22 am Post subject: |
|
|
Partisan
Joined: 06 Jun 2004
Posts: 316
|
| kumarp wrote: |
Hi,
To answer your questions: mqtest is a user on the server, and is a member of all the mqb* groups. I did apply CSD04 on both server and laptop. On my laptop I log in as parulk, not mqtest --> this is the problem, I think.
Do you think I should proceed in trying to make the config manager domain unaware?
THanks,
Parul |
Hi Parul,
make parulk member of mqm and mq* groups. as said by waugh run the following commands
mqsistop configmgr
mqsichangeconfigmgr -l 0
mqsistart configmgr
and then try to connect to the config mgr on the server thru toolkit on u r laptop. hope this helps out. |
|
| Back to top |
|
|
| kumarp |
| Posted: Wed Jan 12, 2005 8:05 am Post subject: |
|
|
Novice
Joined: 20 May 2003
Posts: 23
|
Hi,
Thanks to everyone for their help. I made the config manager domain unaware as suggested with the command: mqsichangeconfigmgr -l 0
and I was able to connect to the config mgr from my laptop.
For future reference for anyone who has this same problem here is a summary:
Config mgr is on Win2000 server machine, toolkit is on my Win2000 laptop. Neither are in a Windows domain.
In order to connect toolkit on my laptop to config mgr on server, I had to:
1) create a Windows user on server machine with same name as my user on laptop
2) add this new user to all the mq* groups on server machine
3) make config mgr domain unaware wiht commands :
mqsistop configmgr
mqsichangeconfigmgr -l 0
mqsistart configmgr
I was then able to create a domain in broker toolkit on my laptop to connect to config mgr on server machine.
Thanks again!!!
--Parul |
|
| Back to top |
|
|
|
|
