| Author |
Message
|
| zhebincong |
 Posted: Mon Mar 16, 2009 12:22 am Post subject: new domain connect to remote queue manager in MSB |
 |
|
Novice
Joined: 11 Aug 2005
Posts: 10
|
hi
i want to connect to remote queue manager in websphere msb toolkit,in the domain form, right click, then domain connection, fill in the queue manager name, in the host field, i fill in the ip address of remote machine. but when click the next button, a error form is popped up, the details say:
BIP1711W: The ConfigManagerProxy is not viewable by user ibm-l3p0615\Administrator
An attempt was made to view or manipulate the ConfigManagerProxy with UUID '', but the user who initiated this operation does not have the required authority to do so.
Ask the domain's administrator to grant your user ID the necessary authority to perform the requested action.
it seem like the account permission issue, but i am not sure how to add the local account to remote acl of msb, Thanks for helps..... |
|
| Back to top |
|
 |
| Vitor |
| Posted: Mon Mar 16, 2009 12:43 am Post subject: Re: new domain connect to remote queue manager in MSB |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| zhebincong wrote: |
| it seem like the account permission issue, but i am not sure how to add the local account to remote acl of msb, Thanks for helps..... |
The relevant acl command on the broker box would seem to be a choice so obvious you've clearly tried that without success - post your error and and any relevant messages.
An alternative would be to add your user to an existing authorised group.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| zhebincong |
| Posted: Mon Mar 16, 2009 12:55 am Post subject: |
|
|
Novice
Joined: 11 Aug 2005
Posts: 10
|
thanks for your response, but my question is just how and which command can add local account to acl of remote broker, and how connect to remote queue and configuration manager from local message broker toolkits.  |
|
| Back to top |
|
|
| mqjeff |
| Posted: Mon Mar 16, 2009 1:24 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
There's no such thing as local or remote ACLs.
The ACLs are created or deleted by standard, fully documented, mqsi commands.
When you issue the correct, standard, fully documented, mqsi command to create an ACL, you can tell it where the user exists.
This is done using the standard, fully documented options to the standard, fully documented command. |
|
| Back to top |
|
|
| Vitor |
| Posted: Mon Mar 16, 2009 1:25 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| zhebincong wrote: |
| thanks for your response, but my question is just how and which command can add local account to acl of remote broker |
mqsicreateaclentry, issued by a properly authrised user
| zhebincong wrote: |
| how connect to remote queue and configuration manager from local message broker toolkits. |
Establish a client connection using the toolkit domain connection facilities. You've need authorisation over and above the acl list to connect to and use the queue manager; this is exactly the same as for any application/user combination establishing a client connection to a queue manager. The fact it's Toolkit does not pertain.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| zhebincong |
| Posted: Mon Mar 16, 2009 1:43 am Post subject: |
|
|
Novice
Joined: 11 Aug 2005
Posts: 10
|
hi Vitor and mqjeff, in fact, what i really care about is just how to connect to the queue manager (or configuration manager) in remote computer from the msb toolkit in local machine?
acl is just my guess, it may not help, forget it.
can you help me with a little more details?
Thanks |
|
| Back to top |
|
|
| Vitor |
| Posted: Mon Mar 16, 2009 1:45 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| zhebincong wrote: |
| acl is just my guess, it may not help, forget it. |
No, sounds like a missing acl to me. Certainly worth checking, which requires the same authority as adding.
| zhebincong wrote: |
| can you help me with a little more details? |
I think giving you the name of the command is as detailed as I can get without actually working at your site.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| zhebincong |
| Posted: Mon Mar 16, 2009 5:30 am Post subject: |
|
|
Novice
Joined: 11 Aug 2005
Posts: 10
|
Thanks Vitor, this time, i can add the remote configuration manager connection to the new local domain, but when i try to connect, it throw following exception:
Either the network is down, the queue manager 'WBRK61_DEFAULT_QUEUE_MANAGER' is not running, or there is no related listener running on port 2414 (MQ reason code 2059 while trying to connect)
so i guess if i need to create MQ connection also?
Thanks |
|
| Back to top |
|
|
| Vitor |
| Posted: Mon Mar 16, 2009 6:04 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| zhebincong wrote: |
| so i guess if i need to create MQ connection also? |
It's the config mgr's queue manager you're actually connecting to if you look.
2059 errors are commonly discussed here.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| zhebincong |
| Posted: Mon Mar 16, 2009 6:14 am Post subject: |
|
|
Novice
Joined: 11 Aug 2005
Posts: 10
|
sorry, my previous post may not be clear, details as following:
by running mqsicreateaclentry on the remote server, i can create a connection to it in my local msb toolkit, and create a new domain, the next step, i need to connect to it (right click--->connect), but this time it throw the error i have showed in preious post, so i wonder if i need some other steps except running that command, such as create local MQ client connection to that queue manager?
Thanks |
|
| Back to top |
|
|
| Vitor |
| Posted: Mon Mar 16, 2009 6:27 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| zhebincong wrote: |
| sorry, my previous post may not be clear |
No, quite clear, I stand by my advice.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| mqjeff |
| Posted: Mon Mar 16, 2009 6:30 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
The Domain Connection in the Toolkit *is* an MQ client connection. In that sense, you don't have to do anything else.
But you do have to follow my esteemed colleague's advice, and troubleshoot the 2059 - hint start by looking up the meaning of MQRC 2059. |
|
| Back to top |
|
|
| zhebincong |
| Posted: Mon Mar 16, 2009 6:34 am Post subject: |
|
|
Novice
Joined: 11 Aug 2005
Posts: 10
|
yes. sir, it seem that i am not clear about your advice, you are right, it is just the QUEUE MANAGER which i can't connect to. i have tried to telnet that port (2414) from my local machine, it is really opened, and i am sure the listener is running.
but why can't my local domain connect to that queue manager?
any suggestion?
Thanks |
|
| Back to top |
|
|
| Vitor |
| Posted: Mon Mar 16, 2009 6:44 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| zhebincong wrote: |
| but why can't my local domain connect to that queue manager? |
For whatever reason is causing the 2059.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| zhebincong |
| Posted: Mon Mar 16, 2009 6:45 am Post subject: |
|
|
Novice
Joined: 11 Aug 2005
Posts: 10
|
need i set up the MQSERVER variable? i don't think so.
i really not sure why it can't connect to that QUEUE MANAGER |
|
| Back to top |
|
|
|
|
