| Author |
Message
|
| 7207165620 |
 Posted: Wed Aug 14, 2013 7:58 am Post subject: unable to load imqb23vn.dll file |
 |
|
Apprentice
Joined: 11 Apr 2013
Posts: 37
|
Hi,
We have SWIFT alliance running on windows server 2008 and Message broker running on different machine.In order make communication between SWIFT alliance and Message broker I have installed MQ client on SWIFT alliance machine.
But when enabling routing rules on message partner, it is giving error as imqb23vn.dll is missing.
* Websphere MQ is not installed on default location(C:\Program files)
PATH variable is updated according after installing MQ client.
So my question is "Is there is specific PATH environment variable to be defined for SWIFT , so that SWIFT alliance will search and load libraries.
Excuse me if my question is immature.
Thanks |
|
| Back to top |
|
 |
| Vitor |
| Posted: Wed Aug 14, 2013 8:25 am Post subject: Re: unable to load imqb23vn.dll file |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| 7207165620 wrote: |
| Websphere MQ is not installed on default location(C:\Program files) |
Is it?
| 7207165620 wrote: |
| So my question is "Is there is specific PATH environment variable to be defined for SWIFT , so that SWIFT alliance will search and load libraries. |
What does the SWIFT documentation say about this? Specifically, does it require that WMQ be installed in the default location because it doesn't search any path? Or does it insist on a Windows PATH with no spaces in it?
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| mqjeff |
| Posted: Wed Aug 14, 2013 8:30 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
or does it simply require that the primary installation be set, and then have the swift product or the box restarted so that it knows about the changed PATH.
Since no process ever reloads the PATH variable after it's been started. EVER. |
|
| Back to top |
|
|
| Vitor |
| Posted: Wed Aug 14, 2013 8:32 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| mqjeff wrote: |
| or does it simply require that the primary installation be set |
Ooo....good catch!
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| PeterPotkay |
| Posted: Wed Aug 14, 2013 9:55 am Post subject: |
|
|
Poobah
Joined: 15 May 2001
Posts: 7722
|
| Vitor wrote: |
| mqjeff wrote: |
| or does it simply require that the primary installation be set |
Ooo....good catch! |
We're assuming its MQ 7.1 or newer.
MQ 7.0.1 is still fully supported.
_________________
Peter Potkay
Keep Calm and MQ On |
|
| Back to top |
|
|
| Vitor |
| Posted: Wed Aug 14, 2013 9:59 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| PeterPotkay wrote: |
| Vitor wrote: |
| mqjeff wrote: |
| or does it simply require that the primary installation be set |
Ooo....good catch! |
We're assuming its MQ 7.1 or newer.
MQ 7.0.1 is still fully supported. |
We can assume that, based on the stated symptoms, if the OP is using MQ7.1 or higher this is a possible cause and one I always overlook.
The OP could (as you correctly point out) legitimately be using MQ7.0 and have a different problem.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| 7207165620 |
| Posted: Thu Aug 15, 2013 4:47 am Post subject: unable to load imqb23vn.dll file |
|
|
Apprentice
Joined: 11 Apr 2013
Posts: 37
|
Hi all,
Actually there were some dependencies due to which I could not restart the server, but I have managed to restart the server now and that issue is resolved.
But now when I am trying to connect to queue which on server end from SWIFT alliance, I am getting error like below :
Error opening MQ queue queuename
Reason : 2035 Not authorized for access.
But other third party applications(T24 application) are able to communicate to queues on ESB side using same server channel.
note:1) MCAUSER property of server channel is kept blank .
2) Channel authentication is disabled.
DISPLAY QMGR CHLAUTH
1 : DISPLAY QMGR CHLAUTH
AMQ8408: Display Queue Manager details.
QMNAME(qmname) CHLAUTH(DISABLED)
So I am trying to give put acess to that queue like below :
setmqaut -m qmname -n qname -t q -g Administrator +put
AMQ7026: A principal or group name was invalid.
But broblem is on swift alliance message partner is running on local Administrator user.
Is there any other way to resolve this problem.
Thanks |
|
| Back to top |
|
|
| Vitor |
| Posted: Thu Aug 15, 2013 5:15 am Post subject: Re: unable to load imqb23vn.dll file |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| 7207165620 wrote: |
| Is there any other way to resolve this problem. |
Set the MCAUser, either on that channel or a new one, to a dedicated and shorter id. Leaving it blank is not best practice anyway as it exposes your queue manager to attack, and in this instance "Administrator" is too long (more than 12 characters) to be used as an id.
Also, and off topic, they're running non-Windows software as the local Administrator? Seriously?
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| 7207165620 |
| Posted: Fri Aug 16, 2013 12:32 am Post subject: unable to load imqb23vn.dll file |
|
|
Apprentice
Joined: 11 Apr 2013
Posts: 37
|
Hi Vitor,
I have created a new user i.e mquser and added to the group under which message partner running on Windows server.
I have created 'mquser' and added to 'mqm' group on mqserver box.
I have created a new SERVER channel and specified 'mquser' under MCAUSER property and restarted qmgr.
Now I am giving authentication to queue as below:
setmqaut -m qmgrname -n queuename -t queue -g mquser +put
AMQ7026: A principal or group name was invalid.
Please need your assistance. |
|
| Back to top |
|
|
| 7207165620 |
| Posted: Fri Aug 16, 2013 12:52 am Post subject: unable to load imqb23vn.dll file |
|
|
Apprentice
Joined: 11 Apr 2013
Posts: 37
|
Here problem is the group under which 'mquser' is running on windows server exceeds 12 character.
So my doubt is
1) Only defining 'mquser' and adding to 'mqm' group on linux box is enough or do I need to do anything else? |
|
| Back to top |
|
|
| exerk |
| Posted: Fri Aug 16, 2013 12:57 am Post subject: Re: unable to load imqb23vn.dll file |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
| 7207165620 wrote: |
| I have created 'mquser' and added to 'mqm' group on mqserver box... |
User='mquser', Group='mqm'
| 7207165620 wrote: |
| I have created a new SERVER channel and specified 'mquser' under MCAUSER property and restarted qmgr... |
A restart was not required
| 7207165620 wrote: |
Now I am giving authentication to queue as below:
setmqaut -m qmgrname -n queuename -t queue -g mquser +put
AMQ7026: A principal or group name was invalid. |
Note the high-lighting and it's obvious where you've gone wrong. Also, it is really, really, bad practice to use an administrator-level account as an MCAUSER value without additional security on the channel, e.g. CHLAUTH (which you have disabled) and/or SSL. Furthermore, setting authorities for members of the mqm group is redundant.
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys.
Last edited by exerk on Fri Aug 16, 2013 4:44 am; edited 1 time in total |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Fri Aug 16, 2013 4:22 am Post subject: Re: unable to load imqb23vn.dll file |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
| 7207165620 wrote: |
Now I am giving authentication to queue as below:
setmqaut -m qmgrname -n queuename -t queue -g mquser +put
|
WMQ does not authenticate. You are authorizing, not authenticating.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| PeterPotkay |
| Posted: Fri Aug 16, 2013 4:39 am Post subject: Re: unable to load imqb23vn.dll file |
|
|
Poobah
Joined: 15 May 2001
Posts: 7722
|
| exerk wrote: |
| Furthermore, setting authorities for members of the mqm group is redundant. |
Put another way, you can not alter the permissions that members of the mqm group have. You cannot remove anything, and there is nothing to add since mqm has everything.
_________________
Peter Potkay
Keep Calm and MQ On |
|
| Back to top |
|
|
| 7207165620 |
| Posted: Sun Aug 18, 2013 1:04 pm Post subject: unable to load imqb23vn.dll file |
|
|
Apprentice
Joined: 11 Apr 2013
Posts: 37
|
Hi all,
I just want to make communication possible between mq client which is running on windows server 2008 and mq server running on linux, then I will go for security stuff.I am using client and server of version 7.5
note :
1)CHLAUTH on server queue manager is disabled.
2)SVRCONN channel MCAUSER property remains blank.
I feel the above configuration should accept connection from any mq client without authenticating, as server channel is open for all.
But when I am trying to connect to queue from SWIFT alliance, I am getting error like below :
Error opening MQ queue queuename
Reason : 2035 Not authorized for access.
Below is the mq server queue manager error log
08/16/2013 12:55:45 PM - Process(31415.5) User(mqm) Program(amqrmppa)
Host(hostname) Installation(Installation1)
VRMF(7.5.0.1) QMgr(qmname)
AMQ9999: Channel 'KCB.SVR.CONN' to host '172.17.2.63' ended
abnormally.
Please guide me to resolve it out.
 |
|
| Back to top |
|
|
| exerk |
| Posted: Sun Aug 18, 2013 1:21 pm Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
Windows will generally flow the userid (not sure about a java program though), under which the client application is running, to the Linux server. As the Windows user is unlikely to exist on the Linux server you will get what you are experiencing - MQRC 2035.
If you have set an MCAUSER value on the Linux server you must give the relevant authorities, preferably to the group (note the emphasis) that the user belongs to. If you think (note again the emphasis) you've done that but it still doesn't work then look again, very, very carefully, at my first reply to your post.
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
|
|
