| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Windows Domain users with MQ 7 |
« View previous topic :: View next topic » |
| Author |
Message
|
| ashley5 |
 Posted: Tue Nov 01, 2011 1:24 am Post subject: Windows Domain users with MQ 7 |
 |
|
Novice
Joined: 20 Feb 2006
Posts: 14
|
Hi All,
We've installed MQ 7.0.1.6 on a Windows 2008R2 64-bit machine, with Windows domain users. They have been configured as per IBM's procedure. They been added to the mqm group on the machine as well.
Now when we first installed it, we could create QMs without any issue. But as soon as we did changes to the QM via scripts, the QM refused to start. Eventually blank QMs we created refused to start.
They would throw 3 FDC files each. Sadly I re-installed MQ in an attempt to resolve this, which removed the FDC files. (live and learn)
I do however have the first Probe ID as I still have the my browser search open.
Cannot Start Queue Manager - ProbeID: zf095010 Component: zfuCacheAuthQueue
however, according to all the searches I did, IBM says it only happens on an AS/400 - http://www-01.ibm.com/support/docview.wss?uid=swg21446744
I did try doing running the "Prepare WebSphere MQ Wizard" again, but it complains as such:
| Quote: |
WebSphere MQ Configuration Problem
WebSphere MQ is not correctly configured for Windows domain users
An unexpected error has occured while validating the security credentials of user 'DISCSEC\mqadmin'.
Ensure that the network is operational, and the all the required domain controllers are available. |
I'm sure it's supposed to ask me what user to verify, but it's not. As I said above the Domain admin has confirmed the users have been configured correctly, and gave me screenshots as evidence. The one possibility, is this machine is in a secure DMZ, as it is accessed by external clients, and as such is locked down as much as possible. Every machine runs it's own firewall, and the DC has very strict firewall rules too. I've disabled the firewall on this machine (as a test), but it still doesn't work. So unless the firewall on the DC is causing the issue, which I don't see how, as I'm logging into Windows with the Domain accounts without issue.
So now, I decided to re-install, as perhaps something went wrong with the installation.
After the install, still can't "Prepare" MQ, but now I can't create Queue managers either.
So I uninstall again, and do a registry cleanout.
Re-install, patch, and....
Can't Prepare.
Can't create QM's.
I'm really lost as to what is wrong now. Any ideas would be greatly appreciated.
Regards,
Ashley |
|
| Back to top |
|
 |
| Vitor |
| Posted: Tue Nov 01, 2011 4:56 am Post subject: Re: Windows Domain users with MQ 7 |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| ashley5 wrote: |
| Any ideas would be greatly appreciated. |
Set up a meeting with your network people & your Windows domain admins. Give them the impression that doughnuts & candy will be provided. Once they're all in the room lock the door, hide the key and refuse to let them out until someone helps you.
You're stuck in a maze of firewalls, domain trusts, domain authorities and other dark magiks. I suspect someone will need to manually confgure the DCOM as the Prepare Wizard appears to have run screaming for the hills; there's a mmc thing that does that your domain people should know about.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Tue Nov 01, 2011 6:47 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
I also suspect that due to the restrictions in your DMZ you will never get the qmgr working correctly.
One of the alternatives is to keep your QMGRs on the inside and just place MQIPT (support pack ms81?) in the DMZ. 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
