| Author |
Message
|
| wmqiadmin |
 Posted: Thu Feb 23, 2006 8:58 am Post subject: Problem connecting broker in different domain |
 |
|
Disciple
Joined: 19 Jun 2005
Posts: 163
Location: epping UK
|
Hi,
We have a problem, We have a brokerV6 & ConfigMrgV6 on one domain say A win 2003, and toolkitV6 on different domain say B winXP.
On Domain A every thing is working fine if we connect toolkit from the same domain. If we try to connect to the broker from domain B it is giving an error "user unauthorised to connect to broker". Can any buddy please help me with this.
Thanks |
|
| Back to top |
|
 |
| jefflowrey |
| Posted: Thu Feb 23, 2006 10:54 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
You need to create ACLS for the users on the other domain.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| wmqiadmin |
| Posted: Thu Feb 23, 2006 11:17 am Post subject: |
|
|
Disciple
Joined: 19 Jun 2005
Posts: 163
Location: epping UK
|
Yes we had created it already.
Thanks |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Thu Feb 23, 2006 11:29 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
Are you getting a 2035 error from MQ? Or BIP error from the ConfigMgr?
Can the toolkit users establish a plain MQ connection to the configmgr qmgr using amqscnxc?
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| wmqiadmin |
| Posted: Thu Feb 23, 2006 1:45 pm Post subject: |
|
|
Disciple
Joined: 19 Jun 2005
Posts: 163
Location: epping UK
|
| jefflowrey wrote: |
| Are you getting a 2035 error from MQ? Or BIP error from the ConfigMgr? |
Yes, we are getting this error,
| Quote: |
| Can the toolkit users establish a plain MQ connection to the configmgr qmgr using amqscnxc? |
i don't know about this, can you please tell me more about this. |
|
| Back to top |
|
|
| nathanw |
| Posted: Fri Feb 24, 2006 3:13 am Post subject: |
|
|
Knight
Joined: 14 Jul 2004
Posts: 550
|
| as you are using domains i am assuming that the userids are set up locally as well as i have found sometimes that a domain userid will not work |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Fri Feb 24, 2006 4:22 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
You always need to authorize users twice with Broker. First to the ConfigMgr - which is done in the ACLS. Then with the ConfigMgr's queue manager. This is done through normal MQ security (which depends a bit on the platform you're running configmgr on).
A 2035 message indicates that you haven't authorized the domain B users to the ConfigMgr queue manager. Or that the queue manager service user doesn't have permission to authorize users in Domain B.
The easiest solution to your problem is to set the MCAUser on the SVRCONN being used by the toolkit to a user in Domain A.
This is not, however, the most secure solution.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| nathanw |
| Posted: Fri Feb 24, 2006 5:42 am Post subject: |
|
|
Knight
Joined: 14 Jul 2004
Posts: 550
|
| Jeff that was my second thought and i agree about the secuity side |
|
| Back to top |
|
|
| wmqiadmin |
| Posted: Fri Feb 24, 2006 1:50 pm Post subject: |
|
|
Disciple
Joined: 19 Jun 2005
Posts: 163
Location: epping UK
|
I'll try to do that and let you guys know.
Thanks |
|
| Back to top |
|
|
|
|
