|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
 |
|
AMQ4036 Issue |
« View previous topic :: View next topic » |
Author |
Message
|
vishBroker |
Posted: Thu Oct 16, 2014 3:26 pm Post subject: AMQ4036 Issue |
|
|
Centurion
Joined: 08 Dec 2010 Posts: 135
|
++ Had posted same in WebSphere MQ Installation/Configuration Support forum. As there are less updates, added here for quicker attention ++
MQ Server - MQv8.0.0.1 on Linux
MQ Client(Explorer) - MQv7.5.0.1 on Windows.
Not able to connect to remote queue manager.
Configuration on explorer:
QMname, HOST:PORT, Channel (SYSTEM.BKR.CONFIG)
Here is o/p from server -
Quote: |
DISPLAY CHANNEL(SYSTEM.BKR.CONFIG) ALL
1 : DISPLAY CHANNEL(SYSTEM.BKR.CONFIG) ALL
AMQ8414: Display Channel details.
CHANNEL(SYSTEM.BKR.CONFIG) CHLTYPE(SVRCONN)
ALTDATE(2014-10-16) ALTTIME(17.44.56)
CERTLABL( ) COMPHDR(NONE)
COMPMSG(NONE) DESCR( )
DISCINT(0) HBINT(300)
KAINT(AUTO) MAXINST(999999999)
MAXINSTC(999999999) MAXMSGL(104857600)
MCAUSER(mqsiadm) MONCHL(QMGR)
RCVDATA( ) RCVEXIT( )
SCYDATA( ) SCYEXIT( )
SENDDATA( ) SENDEXIT( )
SHARECNV(10) SSLCAUTH(OPTIONAL)
SSLCIPH( ) SSLPEER( )
TRPTYPE(TCP)
|
So, when I connect via SYSTEM.BKR.CONFIG channel - the authorization will happen as per the mqsiadm user's group.
For the mqsiadm user
Quote: |
[mqsiadm@HOST:errors]$ grep mqsiadm /etc/group
mqsiadm:x:1018:
mqm:x:1020:mqsiadm
mqbrkrs:x:1021:mqsiadm
[mqsiadm@tesoawsmb03q:errors]$ id
uid=1017(mqsiadm) gid=1018(mqsiadm) groups=1018(mqsiadm),1020(mqm),1021(mqbrkrs)
[mqsiadm@HOST:errors]$
|
This means - the user mqsiadm is member of mqsiadm, mqm and mqbrkrs groups (all 3)
So, I did setmqaut for all the 3 groups on the queue manager as well as 'SYSTEM.BKR.CONFIG' SVRCONN channel.
Quote: |
[mqsiadm@HOST:errors]$ dspmqaut -m QMQ3POS -t qmgr -g mqsiadm
Entity mqsiadm has the following authorizations for object QMQ3POS:
inq
set
connect
altusr
crt
dlt
chg
dsp
setid
setall
ctrl
system
[mqsiadm@HOST:errors]$ dspmqaut -m QMQ3POS -t qmgr -g mqm
Entity mqm has the following authorizations for object QMQ3POS:
inq
set
connect
altusr
crt
dlt
chg
dsp
setid
setall
ctrl
system
[mqsiadm@HOST:errors]$ dspmqaut -m QMQ3POS -t qmgr -g mqbrkrs
Entity mqbrkrs has the following authorizations for object QMQ3POS:
inq
set
connect
altusr
crt
dlt
chg
dsp
setid
setall
system
[mqsiadm@HOST:errors]$
|
All the 3 groups have same authority over queue manager
Same goes for SYSTEM.BKR.CONFIG channel
Quote: |
[mqsiadm@HOST:errors]$ dspmqaut -m QMQ3POS -n SYSTEM.BKR.CONFIG -t channel -g mqsiadm
Entity mqsiadm has the following authorizations for object SYSTEM.BKR.CONFIG:
crt
dlt
chg
dsp
ctrl
ctrlx
[mqsiadm@HOST:errors]$ dspmqaut -m QMQ3POS -n SYSTEM.BKR.CONFIG -t channel -g mqbrkrs
Entity mqbrkrs has the following authorizations for object SYSTEM.BKR.CONFIG:
crt
dlt
chg
dsp
ctrl
ctrlx
[mqsiadm@HOST:errors]$ dspmqaut -m QMQ3POS -n SYSTEM.BKR.CONFIG -t channel -g mqm
Entity mqm has the following authorizations for object SYSTEM.BKR.CONFIG:
crt
dlt
chg
dsp
ctrl
ctrlx
[mqsiadm@HOST:errors]$
|
I tried with SSLCAUTH as OPTIONAL and REQUIRED - same error.
Kindly suggest, what I am missing here. |
|
Back to top |
|
 |
fjb_saper |
Posted: Thu Oct 16, 2014 7:28 pm Post subject: |
|
|
 Grand High Poobah
Joined: 18 Nov 2003 Posts: 20756 Location: LI,NY
|
|
Back to top |
|
 |
|
|
 |
|
Page 1 of 1 |
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|
|
|