| Author |
Message
|
| Blomman |
 Posted: Tue Aug 28, 2007 12:04 am Post subject: How to setmqaut to remoteqmanager? |
 |
|
Master
Joined: 31 Oct 2006
Posts: 230
|
Hi!
I have a c program that is trying to put messeges on a remote qmanager but im getting reason 2035.
How do i setmqaut on a remoteqmanager?
I have read the manulas but cant find anything.
Im running mqver 5.3 on Hpux 11.11
Regards!
/Blomman |
|
| Back to top |
|
 |
| Vitor |
| Posted: Tue Aug 28, 2007 12:11 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
Telnet onto the box hosting the remote queue manager as mqm or other authorised user. Issue the setmqaut command.
OR
If you've no access to the box in question, have it's administrator issue the command on your behalf.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| Blomman |
| Posted: Tue Aug 28, 2007 12:14 am Post subject: |
|
|
Master
Joined: 31 Oct 2006
Posts: 230
|
| Vitor wrote: |
Telnet onto the box hosting the remote queue manager as mqm or other authorised user. Issue the setmqaut command.
OR
If you've no access to the box in question, have it's administrator issue the command on your behalf. |
Telnet? I have root access to the remote server so i can log in and do what i want.. But how can i setaut for a userid that only exists on another server?
//Blomman |
|
| Back to top |
|
|
| Vitor |
| Posted: Tue Aug 28, 2007 12:25 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| Blomman wrote: |
| Vitor wrote: |
Telnet onto the box hosting the remote queue manager as mqm or other authorised user. Issue the setmqaut command.
OR
If you've no access to the box in question, have it's administrator issue the command on your behalf. |
Telnet? I have root access to the remote server so i can log in and do what i want.. But how can i setaut for a userid that only exists on another server?
//Blomman |
What happens when you try it? 
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| Blomman |
| Posted: Tue Aug 28, 2007 12:36 am Post subject: |
|
|
Master
Joined: 31 Oct 2006
Posts: 230
|
| Vitor wrote: |
| Blomman wrote: |
| Vitor wrote: |
Telnet onto the box hosting the remote queue manager as mqm or other authorised user. Issue the setmqaut command.
OR
If you've no access to the box in question, have it's administrator issue the command on your behalf. |
Telnet? I have root access to the remote server so i can log in and do what i want.. But how can i setaut for a userid that only exists on another server?
//Blomman |
What happens when you try it? |
That the principal dosent exists, and it dosent, cause it has an uid on the remoteserver that wants to access this server and to put a message on a qmanager here...Hmm i hope u understand that fuzzy explanation..
//Blomman |
|
| Back to top |
|
|
| Vitor |
| Posted: Tue Aug 28, 2007 12:55 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
Ok, so if the sending user id does not exist on the remote queue manager then you need to explore other means of providing a user id.
Typically in this situation the offending user id or group is added to the remote machine. Remember that WMQ doesn't validate the user id, relying on the source machine for that, so the id is effectively a dummy.
If by "put messages onto a remote queue manager" you mean a client connection I would strongly suggest you to investigate the possibility of a restricted MCAUser or SSL exit, depending on how secure you need it to be.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Tue Aug 28, 2007 3:41 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
And remember that authorization on Unix is done at the group level. If you set it at user level it gets set for the primary group of that user...
_________________
MQ & Broker admin |
|
| Back to top |
|
|
|
|
