| Author |
Message
|
| Goodfellas |
 Posted: Fri Dec 11, 2009 8:56 am Post subject: Test |
 |
|
Acolyte
Joined: 26 Feb 2009
Posts: 70
|
Thanks
Last edited by Goodfellas on Tue May 28, 2013 12:28 pm; edited 1 time in total |
|
| Back to top |
|
 |
| bruce2359 |
| Posted: Fri Dec 11, 2009 9:28 am Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
| Quote: |
| Seperate SVRCONN Channel dedicated to them. |
Did they change their MQSERVER environment variable to match your new channel name?
Did you change the default SVRCONN channel MCAUSER to something with no authority?
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| Goodfellas |
| Posted: Fri Dec 11, 2009 10:46 am Post subject: |
|
|
Acolyte
Joined: 26 Feb 2009
Posts: 70
|
Yes the
Last edited by Goodfellas on Tue May 28, 2013 12:29 pm; edited 1 time in total |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Fri Dec 11, 2009 11:20 am Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
| Quote: |
| Yes the Appliation team is using the Dedicated channel Which I porovided them. |
Do you mean that they changed the MQSERVER or client channel table to use ONLY the new SVRCONN?
If they continue to use the default, it will continue to work as before.
| Quote: |
| The MCAUSER for the default channel "SYSTEM.DEF.SVRCONN" is blank. Nothing is mentioned here. |
No security on the default svrconn means any client can connect to/thru it. That's why it continues to work.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Fri Dec 11, 2009 12:34 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
Also make sure that MQ is set up to use your security (RACF?) system. 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| zpat |
| Posted: Fri Dec 11, 2009 12:46 pm Post subject: |
|
|
Jedi Council
Joined: 19 May 2001
Posts: 5866
Location: UK
|
| Check out the MQ classes for RACF and RESLEVEL settings. |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Fri Dec 11, 2009 1:02 pm Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
The SYSLOG from xxxxMSTR automatically does a DISPLAY SECURITY at qmgr startup. This will tell you what security switches are on/off. Post this display here.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| Mr Butcher |
| Posted: Mon Dec 14, 2009 12:30 am Post subject: |
|
|
Padawan
Joined: 23 May 2005
Posts: 1716
|
what is the setting of "Put authority" in your SVRCONN channel? is should read "onlymca" .....
_________________
Regards, Butcher |
|
| Back to top |
|
|
| Goodfellas |
| Posted: Mon Dec 14, 2009 8:55 am Post subject: |
|
|
Acolyte
Joined: 26 Feb 2009
Posts: 70
|
Thx
Last edited by Goodfellas on Tue May 28, 2013 12:29 pm; edited 1 time in total |
|
| Back to top |
|
|
| Vitor |
| Posted: Mon Dec 14, 2009 10:53 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| Goodfellas wrote: |
| Am I Missing something here....Please guide me. |
How have you veified they're using the dedicated SVRCONN? Change the default & see if their app stops working.....
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| Goodfellas |
| Posted: Mon Dec 14, 2009 11:28 am Post subject: |
|
|
Acolyte
Joined: 26 Feb 2009
Posts: 70
|
Thx
Last edited by Goodfellas on Tue May 28, 2013 12:29 pm; edited 1 time in total |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Mon Dec 14, 2009 11:55 am Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
and is there a rule for NOBODY that prevents it from opening queues?
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| Goodfellas |
| Posted: Mon Dec 14, 2009 1:28 pm Post subject: |
|
|
Acolyte
Joined: 26 Feb 2009
Posts: 70
|
Thanks
Last edited by Goodfellas on Tue May 28, 2013 12:30 pm; edited 1 time in total |
|
| Back to top |
|
|
| Mr Butcher |
| Posted: Mon Dec 14, 2009 11:01 pm Post subject: |
|
|
Padawan
Joined: 23 May 2005
Posts: 1716
|
that "NOBODY" -MCA method should work. we have something similiar in place.
could we please see a "DISPLAY SECURITY" output from that qmgr ?!?
i am still not sure if the application uses the correct channel. stop all other SVRCONN channels but the TO.RSK.SVRCONN.01 channel to be sure.
make sure they reconnect if you changed the channel definition.
_________________
Regards, Butcher |
|
| Back to top |
|
|
| Goodfellas |
| Posted: Tue Dec 15, 2009 7:40 am Post subject: |
|
|
Acolyte
Joined: 26 Feb 2009
Posts: 70
|
Thanks
Last edited by Goodfellas on Tue May 28, 2013 12:30 pm; edited 1 time in total |
|
| Back to top |
|
|
|
|
