| Author |
Message
|
| sekharg |
 Posted: Sun Feb 10, 2013 1:35 am Post subject: AMQ4096 Error |
 |
|
Newbie
Joined: 10 Feb 2013
Posts: 6
|
Hi Can any one please help me In getting resolve the Authorization error
I have created a SVRCONN channel and altered that with MCAUSER is empty.
my requirement is one group should access this channel and able to display and inquire about that Queue.
1. We need to Create a Group using the below command
groupadd GROUPA
2. Add some users to this group by issueing below command
useradd –g GROUPA tonn
3. Give the access to group to connect Queue Manager using the below command
setmqaut –m ESB01D –t qmgr –g GROUPA +connect
4. Give the access to Group on MQ Objects by issuing The Below command
Setmqaut –m ESB01D –n CM.* -t q –g GROUPA +inq +dsp
5. After giving the access to Objects we can Display the privileges for group GROUPA
dspmqaut –m ESB01D –t qmgr –g GROUPA
dspmqaut –m ESB01D –n CM* -t q –g GROUPA
I have seen the outputs correctly. But when I am tryng to connect with user tonn i am getting AMQ4096
Can anyone help me to getting this resloved |
|
| Back to top |
|
 |
| fjb_saper |
| Posted: Sun Feb 10, 2013 2:58 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
If you are using MQ V 7.1 or above you need to map or provide the userid. A blank userid will not be accepted.
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| sekharg |
| Posted: Sun Feb 10, 2013 3:22 am Post subject: |
|
|
Newbie
Joined: 10 Feb 2013
Posts: 6
|
Hi Saper thanks for reply.
I am Using MQ V 7.5 . If I mention any of the user from That Group in server connection Channel MCAUSER will it works for any user from that Group. |
|
| Back to top |
|
|
| Vitor |
| Posted: Sun Feb 10, 2013 4:30 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| sekharg wrote: |
| If I mention any of the user from That Group in server connection Channel MCAUSER will it works for any user from that Group. |
Think about what MCAUser does, and then be embarrassed to have asked the question.
You could also have set this up in a development environment and discovered for yourself if it did or did not work for all the group's members in half the time it's taken to wait for a reply here.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| sekharg |
| Posted: Sun Feb 10, 2013 4:54 am Post subject: |
|
|
Newbie
Joined: 10 Feb 2013
Posts: 6
|
Hi,
I Have already Implemented this in Dev server. It Doesn't work. FYI I know about MCAUSER. Still i am Getting Error from Explorer thats why I have pasted my issue over here. |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Sun Feb 10, 2013 6:13 am Post subject: Re: AMQ4096 Error |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
| sekharg wrote: |
Hi Can any one please help me In getting resolve the Authorization error
I have created a SVRCONN channel and altered that with MCAUSER is empty. |
Is that 'empty' lower-case? Or 'EMPTY' UPPER-CASE?
[/quote]...my requirement is one group should access this channel and able to display and inquire about that Queue.
...
| sekharg wrote: |
5. After giving the access to Objects we can Display the privileges for group GROUPA
dspmqaut –m ESB01D –t qmgr –g GROUPA
dspmqaut –m ESB01D –n CM* -t q –g GROUPA
I have seen the outputs correctly. |
It might help us help you if you post the outputs here so we can look at them.
| sekharg wrote: |
| But when I am tryng to connect with user tonn i am getting AMQ4096. |
It might help us help you if you post the conversation that yielded the error.
Did you research AMQ4096? What does it mean? What is the approproate response?
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| mqjeff |
| Posted: Sun Feb 10, 2013 6:14 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
You don't appear to know about MCAUSER, otherwise you would not have it blank.
On unix, the queue manager does not provide authorization for users. It finds the primary group of the user, and uses that for authorization.
The only users that a queue manager knows about are those users that are defined in the security registry of the computer that the queue manager is running on.
It is unlikely that the user running MQExplorer is the same user that is defined on the machine hosting the queue manager.
You also have not done anything with SET CHLAUTH, which is needed on MQ v7.5
You are missing some basic understanding. Read, Think, Try, Repeat. |
|
| Back to top |
|
|
| sekharg |
| Posted: Sun Feb 10, 2013 9:45 pm Post subject: |
|
|
Newbie
Joined: 10 Feb 2013
Posts: 6
|
| Thank you all.I will get back to you once it resolved |
|
| Back to top |
|
|
| sekharg |
| Posted: Mon Feb 11, 2013 7:10 am Post subject: |
|
|
Newbie
Joined: 10 Feb 2013
Posts: 6
|
Hi I Just logged off and loggin with user who is exixting in the group and It works..
Thank you all |
|
| Back to top |
|
|
|
|
