Author |
Message
|
santy.tcs |
Posted: Sun Oct 26, 2008 1:59 am Post subject: Application not able to connect Queue Manager of MQ series |
|
|
Apprentice
Joined: 20 May 2008 Posts: 28
|
Hi All,
My application is not able to connect Queue Manager and getting error 2035,
not authorized.
MQ application and MQ series (v 5.3) is on same machine (solaris).we have added the user id of application to mqm group .We have also set all access as it has all access of mq object because it is in mqm group .
MCAUSER of server connection is blank.i have also set MQSERVER variable at MQ series server.
i have also restarted The Queue Manager and also used the REFRESH SECURITY command.
I have enable the AUTHOREV of Queue manger so that we can get message in SYSTEM.ADMIN.QMGR.EVENT.
The problem is that when i logged in to the server with user id which is in mqm group and want to put some message in loacal queue of queue manager by amqsput , i got error not authorized 2035.
i am able to put message in local queue with other user which is also in mqm group.
This is message i got from SYSTEM.ADMIN.QMGR.EVENT.
'.......$.......,'
'................'
'...........D....'
'.......0QMERMTRT0'
'1 '
' '
' ........'
'............... '
'............UNKN'
'OWN ........'
'...............0'
'............amqs'
'put '
' '
where QMERMTRT01 is the name of queue manager and got UNKNOWN as user,
but the user is in mqm group.
Please advice me where i did some thing wrong.
Thanks in advance. |
|
Back to top |
|
 |
bruce2359 |
Posted: Sun Oct 26, 2008 8:51 am Post subject: |
|
|
 Poobah
Joined: 05 Jan 2008 Posts: 9469 Location: US: west coast, almost. Otherwise, enroute.
|
Quote: |
My application is not able to connect Queue Manager and getting error 2035, not authorized. |
Look at the error logs for the queue manager that the application is connecting to. Copy/paste the real error message(s) here.
From the snippet of the event message you included, it looks like you were running amqsput utility.
Do not put end-users in the MQM group. _________________ I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
Back to top |
|
 |
santy.tcs |
Posted: Sun Oct 26, 2008 10:05 am Post subject: |
|
|
Apprentice
Joined: 20 May 2008 Posts: 28
|
Thanks bruce for your reply.
We did not get any error message written in log file while connecting to queue manager.
Thanks in advance. |
|
Back to top |
|
 |
bruce2359 |
Posted: Sun Oct 26, 2008 3:28 pm Post subject: |
|
|
 Poobah
Joined: 05 Jan 2008 Posts: 9469 Location: US: west coast, almost. Otherwise, enroute.
|
Quote: |
My application is not able to connect Queue Manager and getting error 2035, not authorized. |
I'm confused.
Quote: |
We did not get any error message written in log file while connecting to queue manager. |
Where exactly did you see the above 2035 rc? Did you look down the filepath for the errors directory for you qmgr? What log file did you look at?
Were you running amqsput? Or some other application? Who was logged on?
What is your applicaiton?
Quote: |
we have added the user id of application to mqm group |
You mean the userid who logged on, yes? _________________ I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
Back to top |
|
 |
santy.tcs |
Posted: Sun Oct 26, 2008 6:35 pm Post subject: |
|
|
Apprentice
Joined: 20 May 2008 Posts: 28
|
Thanks for your reply.
i logged by different user at the same server where MQ Series is installed and go to path (/opt/mqm/samp/bin/) and type amqsput ql qm .
then i got 2035 error. at command prompt of solaris.
for knowing the error we logged at same server with user mqm and go to path (/var/mqm/qmgrs/qmname/error/****.log) where i did not get any thing while try to connect QM by different user.
Thanks in advance. |
|
Back to top |
|
 |
fjb_saper |
Posted: Mon Oct 27, 2008 1:11 am Post subject: |
|
|
 Grand High Poobah
Joined: 18 Nov 2003 Posts: 20756 Location: LI,NY
|
After adding the user to the authorized group make sure you issue
newgrp -
command to refresh the user/group info or logoff and log back on.
If not your user is not 100% what you expect it to be...  _________________ MQ & Broker admin |
|
Back to top |
|
 |
santy.tcs |
Posted: Mon Oct 27, 2008 4:25 am Post subject: |
|
|
Apprentice
Joined: 20 May 2008 Posts: 28
|
Is there any issue if my User Id on solaris is of 9 digit length .
and when try to connect MQ Series on solaris it truncate the USER ID to 8 digit length so not able to recognise the user.
Please suggest as it is urgent.
Thanks in advance. |
|
Back to top |
|
 |
santy.tcs |
Posted: Mon Oct 27, 2008 6:59 am Post subject: |
|
|
Apprentice
Joined: 20 May 2008 Posts: 28
|
Actuualy i missed the version of MQ series my version is 5.2.
Is there any issue of MQ version V 5.2 ?
is any CSD require for V 5.2.
Please advice me where i have done wrong thing.
Thanks in advance. |
|
Back to top |
|
 |
bruce2359 |
Posted: Mon Oct 27, 2008 11:35 am Post subject: |
|
|
 Poobah
Joined: 05 Jan 2008 Posts: 9469 Location: US: west coast, almost. Otherwise, enroute.
|
Quote: |
...then i got 2035 error. at command prompt of solaris. |
Please copy the complete command prompt interaction starting at where you use the amqsput through the entire 2035 error message. _________________ I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
Back to top |
|
 |
David.Partridge |
Posted: Tue Oct 28, 2008 12:02 am Post subject: |
|
|
 Master
Joined: 28 Jun 2001 Posts: 249
|
After you made the group changes did you either shutdown and restart the QM or issue the REFRESH SECURITY mqsc command?
Secondly, don't give mqm group membership to application users even on a test system, use the OAM to grant appropriate minimal authority (to a group) onto precisely the queues needed for that application. _________________ Cheers,
David C. Partridge |
|
Back to top |
|
 |
santy.tcs |
Posted: Tue Oct 28, 2008 4:51 am Post subject: |
|
|
Apprentice
Joined: 20 May 2008 Posts: 28
|
Thanks for reply.
i have restarted the QM after i made change in group.
for test environment i have added user in mqm group.
Thanks in advance. |
|
Back to top |
|
 |
bruce2359 |
Posted: Tue Oct 28, 2008 5:58 am Post subject: |
|
|
 Poobah
Joined: 05 Jan 2008 Posts: 9469 Location: US: west coast, almost. Otherwise, enroute.
|
Quote: |
for test environment i have added user in mqm group. |
Do NOT give MQM-group authority to any end-user - even in test. Test should look like QA and production. _________________ I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
Back to top |
|
 |
Vitor |
Posted: Tue Oct 28, 2008 7:58 am Post subject: |
|
|
 Grand High Poobah
Joined: 11 Nov 2005 Posts: 26093 Location: Texas, USA
|
santy.tcs wrote: |
Actuualy i missed the version of MQ series my version is 5.2.
Is there any issue of MQ version V 5.2 ?
is any CSD require for V 5.2.
Please advice me where i have done wrong thing.
|
If you're using Solaris (as you intimated) then you should be using v6. Even if this is a typo & you're using v5.3 (as you said earlier in the thread) you should upgrade. _________________ Honesty is the best policy.
Insanity is the best defence. |
|
Back to top |
|
 |
santy.tcs |
Posted: Tue Oct 28, 2008 6:51 pm Post subject: |
|
|
Apprentice
Joined: 20 May 2008 Posts: 28
|
We are in process to upgrade ,We have upgraded recently two MQ series on different server.
But problem is we are using MQ v5.2 we are not able to connect with application please suggest.
can i make entry in channel table definition also for server client connection.
thanks |
|
Back to top |
|
 |
bruce2359 |
Posted: Wed Oct 29, 2008 5:43 am Post subject: |
|
|
 Poobah
Joined: 05 Jan 2008 Posts: 9469 Location: US: west coast, almost. Otherwise, enroute.
|
Please copy the entire interaction from the c: or $ prompt here so we can look at it in its entirety.
Quote: |
can i make entry in channel table definition also for server client connection. |
Are you running the applicaiton on the same o/s image where the qmgr is running? Or you running the application from another o/s image where there is no qmgr? _________________ I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
Back to top |
|
 |
|