Author |
Message
|
felfel |
Posted: Wed Nov 09, 2005 5:22 am Post subject: WMB V6 Toolkit & domain connection |
|
|
Apprentice
Joined: 02 Nov 2004 Posts: 26
|
Hi ,
I have the following installation :
Toolkit V6 on Windows XP.
ConfigMgr & Broker V6 on VMWARE ( Both on Linux & Windows 2000)
I can acces remote QMGRs on VMWARE from MQ Explorer ( listener ok)
I am unable to connect my Toolkit within any broker domain.
I thought it was a security problem so i put the MCAUSER of the SYSTEM.BRK.CONFIG channel to wmqi user ( all privileges groups mqm, wbrkrs , Administrators).
But I still have the error BIP0889E from Toolkit.
Any idea ?
Thanks, _________________ "Mens sana in corpore sano" |
|
Back to top |
|
 |
jefflowrey |
Posted: Wed Nov 09, 2005 5:26 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002 Posts: 19981
|
The toolkit connects to the ConfigMgr qmgr.
The configmgr connects to the broker on your behalf.
The toolkit does not connect to the broker. _________________ I am *not* the model of the modern major general. |
|
Back to top |
|
 |
mqmatt |
Posted: Wed Nov 09, 2005 5:42 am Post subject: |
|
|
 Grand Master
Joined: 04 Aug 2004 Posts: 1213 Location: Hursley, UK
|
Felfel,
Is the Config Manager actually running (check the system event log for a BIP1003)?
Also, check the connection details you entered for typos etc. And as you're using VMWare, make sure the IP address is the one that the image is using (you will need to specify an IP address as the Java Bindings won't work between a VMWare guest and a VMWare host).
You might want to try connecting to the Config Manager from the machine on which the CM is running (use the CMP API Exerciser if you haven't installed the toolkit there), to see if it is indeed a security auth problem.
-Matt |
|
Back to top |
|
 |
felfel |
Posted: Wed Nov 09, 2005 6:49 am Post subject: |
|
|
Apprentice
Joined: 02 Nov 2004 Posts: 26
|
All components are runing .
I have already installed the toolkit on VMWARE systems and i haven't problem to connect within the broker domain in th same system.
I can ping all ip adress between all systems and i can view qmgrs in all MQ Explorers.
But when I try to connect the toolkit from main system to configmgr to a VMWARE system I have this error in the toolkit :
BIP0889E An exception occured when connecting with the configuration manager ..
No errors in the eventvwr of any system.
When I remove the user wmqi from MCAUSER of the channel , i have a security error. _________________ "Mens sana in corpore sano" |
|
Back to top |
|
 |
mqmatt |
Posted: Wed Nov 09, 2005 6:57 am Post subject: |
|
|
 Grand Master
Joined: 04 Aug 2004 Posts: 1213 Location: Hursley, UK
|
As these are (effectively) different machines, you will need to define an ACL entry to allow the user id of the toolkit machine to access the broker domain (mqsicreateaclentry).
If that's not the problem, it's either a typo in your connection definitions or a PMR  |
|
Back to top |
|
 |
felfel |
Posted: Wed Nov 09, 2005 7:15 am Post subject: Resolved |
|
|
Apprentice
Joined: 02 Nov 2004 Posts: 26
|
I create acl entry for my Toolkit user in the VMWARE system and now , i can connect to the configmgr.
it's different from V5.
Now , we have to create acl entry for all users who want to connect !
You can not substitute them with an generic userid in the MCAUSER of the channel.
Certainly , it is most secure but much more user administration.
Thanks for your help, _________________ "Mens sana in corpore sano" |
|
Back to top |
|
 |
jefflowrey |
Posted: Wed Nov 09, 2005 7:21 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002 Posts: 19981
|
For some more information, see http://www.mqseries.net/phpBB2/viewtopic.php?t=24941
But note that it's not a complete picture of what's going on.
Also, I don't think your situation is different from v5 - you probably would need to create an ACL for MachineA/user on MachineB to authenticate the user to the *configmgr*, not to MQ (mcauser only authenticates to MQ). _________________ I am *not* the model of the modern major general. |
|
Back to top |
|
 |
|