| Author |
Message
|
| 7207165620 |
 Posted: Thu Sep 11, 2014 1:56 am Post subject: AMQ8075:Authorization failed because the SID forentity admin |
 |
|
Apprentice
Joined: 11 Apr 2013
Posts: 37
|
Hi Folks,
I am trying to connect from mq client using java program to mq server.But I am getting below error
----- cmqxrsrv.c : 1850 -------------------------------------------------------
11-09-2014 13:40:07 - Process(6152.1 User(MUSR_MQADMIN) Program(amqzlaa0.exe)
Host(xxx) Installation(Installation1)
VRMF(7.5.0.1) QMgr(RRBQM)
AMQ8075: Authorization failed because the SID for entity 'admin' cannot be
obtained.
----- amqzfubn.c : 2233 -------------------------------------------------------
11-09-2014 13:40:08 - Process(4516.7) User(MUSR_MQADMIN) Program(amqrmppa.exe)
Host(xxx) Installation(Installation1)
VRMF(7.5.0.1) QMgr(yyy)
AMQ9557: Queue Manager User ID initialization failed.
EXPLANATION:
The call to initialize the User ID failed with CompCode 2 and Reason 2035.
ACTION:
Correct the error and try again.
----- cmqxrsrv.c : 1972 -------------------------------------------------------
11-09-2014 13:40:08 - Process(4516.7) User(MUSR_MQADMIN) Program(amqrmppa.exe)
Host(xxx) Installation(Installation1)
VRMF(7.5.0.1) QMgr(RRBQM)
AMQ9999: Channel 'dddddd' to host '01cedhw0339 (10.1.23.240)' ended
abnormally.
MQ client : WMQ v7.5.0.1 on Windows server
Mq server : WMQ v7.5.0.1 on windows 8
I went several posts on same issue but did not get any luck.
I have disabled CHLAUTH of qmgr but still getting same error.
Kindly suggest
 |
|
| Back to top |
|
 |
| smdavies99 |
| Posted: Thu Sep 11, 2014 3:10 am Post subject: Re: AMQ8075:Authorization failed because the SID forentity a |
|
|
Jedi Council
Joined: 10 Feb 2003
Posts: 6076
Location: Somewhere over the Rainbow this side of Never-never land.
|
This should tell you everything you need to know.
| 7207165620 wrote: |
AMQ8075: Authorization failed because the SID for entity 'admin' cannot be
obtained.
|
along with this
| 7207165620 wrote: |
AMQ9557: Queue Manager User ID initialization failed.
|
Nothing to do with the channel.
_________________
WMQ User since 1999
MQSI/WBI/WMB/'Thingy' User since 2002
Linux user since 1995
Every time you reinvent the wheel the more square it gets (anon). If in doubt think and investigate before you ask silly questions. |
|
| Back to top |
|
|
| 7207165620 |
| Posted: Thu Sep 11, 2014 3:33 am Post subject: AMQ8075:Authorization failed because the SID forentity admin |
|
|
Apprentice
Joined: 11 Apr 2013
Posts: 37
|
Thanks for replying.
What can I understand or conclude from term 'SID' for entity 'admin' can't be obtained. If I get the SID then what should be my next step? Kindly suggest. |
|
| Back to top |
|
|
| smdavies99 |
| Posted: Thu Sep 11, 2014 3:38 am Post subject: |
|
|
Jedi Council
Joined: 10 Feb 2003
Posts: 6076
Location: Somewhere over the Rainbow this side of Never-never land.
|
Use 'admin' does not exist on this system perhaps?
_________________
WMQ User since 1999
MQSI/WBI/WMB/'Thingy' User since 2002
Linux user since 1995
Every time you reinvent the wheel the more square it gets (anon). If in doubt think and investigate before you ask silly questions. |
|
| Back to top |
|
|
| 7207165620 |
| Posted: Thu Sep 11, 2014 3:48 am Post subject: AMQ8075:Authorization failed because the SID forentity admin |
|
|
Apprentice
Joined: 11 Apr 2013
Posts: 37
|
| Actually 'admin' is the user where java program runs on window server which acting is MQ client. User 'admin' is also there under 'mqm' group on windows server. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Thu Sep 11, 2014 4:02 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20697
Location: LI,NY
|
However your qmgr runs as MUSER_MQADMIN.
This does not look like the qmgr is set up to run under a domain user and or verify domain membership....
user admin on machine xyz has a different sid from domain\admin or from user admin on machine pqr.
Have fun
Have fun 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| 7207165620 |
| Posted: Fri Sep 12, 2014 6:51 am Post subject: AMQ8075:Authorization failed because the SID forentity admin |
|
|
Apprentice
Joined: 11 Apr 2013
Posts: 37
|
I am successful in getting message from MQ from java program using server connection channel in local windows system and from different windows 8 system. I did changes by following below link :
http://www-01.ibm.com/support/docview.wss?uid=swg21577137
changes :
ALTER QMGR CHLAUTH(ENABLED)
SET CHLAUTH(RRBQM.SVRCONN) TYPE(ADDRESSMAP) ADDRESS(*) USERSRC(CHANNEL)
SET CHLAUTH(RRBQM.SVRCONN) TYPE(BLOCKUSER) USERLIST('nobody')
But when trying the same java program from windows server, I am getting the same error as I posted before.
Kindly suggest. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Fri Sep 12, 2014 1:02 pm Post subject: Re: AMQ8075:Authorization failed because the SID forentity a |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20697
Location: LI,NY
|
| 7207165620 wrote: |
I am successful in getting message from MQ from java program using server connection channel in local windows system and from different windows 8 system. I did changes by following below link :
http://www-01.ibm.com/support/docview.wss?uid=swg21577137
changes :
ALTER QMGR CHLAUTH(ENABLED)
SET CHLAUTH(RRBQM.SVRCONN) TYPE(ADDRESSMAP) ADDRESS(*) USERSRC(CHANNEL)
SET CHLAUTH(RRBQM.SVRCONN) TYPE(BLOCKUSER) USERLIST('nobody')
But when trying the same java program from windows server, I am getting the same error as I posted before.
Kindly suggest. |
Remember java is different and allows you to pass the user you want.
Using non java you should use SSL and an mcauserid to circumvent this type of problem... however you could also try a user mapping in the channel authority record and the userauthority records you've shown me tell me the channel is way too open...
Have fun...
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| 7207165620 |
| Posted: Mon Sep 22, 2014 3:22 am Post subject: AMQ8075:Authorization failed because the SID forentity admin |
|
|
Apprentice
Joined: 11 Apr 2013
Posts: 37
|
Now I am able to connect from windows server after altering mcauser to MQ Server user.
Thanks for help.
 |
|
| Back to top |
|
|
|
|
