| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Server connection channel authentication |
« View previous topic :: View next topic » |
| Author |
Message
|
| ravip |
 Posted: Thu Jul 21, 2005 9:38 am Post subject: Server connection channel authentication |
 |
|
Novice
Joined: 22 Feb 2005
Posts: 23
|
I have a server connection channel defined with a blank MCAUSER and one of the applications is trying to connect to our MQ and getting the 2035 not authorized exception. We've created a group for them and added the Ids and after giving the permissions to the group on MQ its working ok although we if the userId is in uppercase then we still have a problem although the userId belongs to the group that we have permissions on MQ for.
First question is why do we need to set the permissions when I left the MCAUSER feild blank on the Server Connection Channel blank? and is there a problem with the upper case userIds? our machine is UNIX (SOLARIS) and the MQ version is 5.3 CSD09. Any suggestions would be appreciated. |
|
| Back to top |
|
 |
| tkane |
| Posted: Thu Jul 21, 2005 10:43 am Post subject: |
|
|
Voyager
Joined: 23 Dec 2002
Posts: 82
Location: Kansas City
|
Can you tell what ID is being validated?
You don't say what OS your server is, but on MVS you should see a RACF error that shows what was attempted.
On Unix you can enable authorev (authority events) on the queue manager and then analyze the event messages generated into SYSTEM.ADMIN.QMGR.EVENT.
Good Luck
Tom |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Thu Jul 21, 2005 12:16 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
Leaving the MCA user blank works only for java client connections when you do not specify a userid on the call.
Any other mode of connection (C, C++, .NET, java with userid on the call) will send the userid of the process running the client or the one defined in the environment where acceptable.
(Read client manual for more precision)
 |
|
| Back to top |
|
|
| Nigelg |
| Posted: Tue Jul 26, 2005 1:32 am Post subject: |
|
|
Grand Master
Joined: 02 Aug 2004
Posts: 1046
|
| Upper case user names passed by the client are transcoded to lower case when they arrive at a UNIX server, so the equivalent name with lower case characters has to be created and granted authorisation to WMQ objects. |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
