ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » General IBM MQ Support » MQ domain related errors

Post new topic  Reply to topic
 MQ domain related errors « View previous topic :: View next topic » 
Author Message
mqperson
PostPosted: Wed Mar 21, 2007 1:59 pm    Post subject: MQ domain related errors Reply with quote

Apprentice

Joined: 10 Jan 2006
Posts: 32

1) I installed WMQ6.0 CSD02 on a windows 2003 server using my domain ID (DOMAIN1\user1).

2) I did not want a domain setup so i did not run the wizard at the end. But I did notice that the local mqm group automatically had the Domain mqm group as a member. MUSR_MQADMIN is also a member of the local mqm group. My domain ID (DOMAIN1\user1) is also a member of the local mqm and administrators group.

3) Everything was okay until yesterday when another domain user (DOMAIN1\user2) wanted to use the mq explorer.

4) This is the error message in the event viewer -

"WebSphere MQ encountered the following network error: The RPC server is unavailable.


MQ failed to successfully complete a network operation due to the specified error. If the error is encountered on systems that are part of a Windows 2000 domain it can indicate incorrect DNS or WINS configuration.

Ensure that your network is functioning correctly. On the Windows platform check DNS and/or WINS settings to ensure that domain controllers, used for authentication or authorisation functions, are accessible."

A runmqsc also returns a "Not Authorised" error message.

5) I got with the windows guys to check if the DNS records were refreshed and okay.

6) Changed dcomcnfg, in the identity tab to "Launching user".

6) What do I do now ? Do you think I should re-install MQ using a local id ? Isn't there someway may that I can totally disassociate this MQ installation from the domain ?


Thanks
Back to top
View user's profile Send private message
mqperson
PostPosted: Wed Mar 21, 2007 2:19 pm    Post subject: Reply with quote

Apprentice

Joined: 10 Jan 2006
Posts: 32

An additional info that I missed mentioning - I created a local Id as member of mqm and administrators groups. It is able to access MQ resources without any problems.
Back to top
View user's profile Send private message
Vitor
PostPosted: Thu Mar 22, 2007 12:34 am    Post subject: Reply with quote

Grand High Poobah

Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA

IMHO MQ should run as a local mqm user.

Do a search through the forum and you'll find a number of discussions of the use of domain users within MQ, and problems arising therefrom.
_________________
Honesty is the best policy.
Insanity is the best defence.
Back to top
View user's profile Send private message
mqperson
PostPosted: Fri Mar 23, 2007 2:39 pm    Post subject: Reply with quote

Apprentice

Joined: 10 Jan 2006
Posts: 32

Thanks Vitor.

I changed dcomcnfg to use MUSR_MQADMIN. also created a local id for accessing MQ explorer. I dont use the domain user anymore.

All is well now.
Back to top
View user's profile Send private message
SAFraser
PostPosted: Mon Mar 26, 2007 11:36 am    Post subject: Reply with quote

Shaman

Joined: 22 Oct 2003
Posts: 742
Location: Austin, Texas, USA

I have had good luck running MQ as a domain user since v5.2 and through the present time.

However, in the older versions of MQ, it was necessary to do the initial installation with a local ID in the local administrators' group. I have kept up that practice, although it might not still be necessary.

To sum, I install with local ID and then set MQ to run as a domain user.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » General IBM MQ Support » MQ domain related errors
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.