ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » General IBM MQ Support » AMQ4036 Issue

Post new topic  This topic is locked: you cannot edit posts or make replies.
 AMQ4036 Issue « View previous topic :: View next topic » 
Author Message
vishBroker
PostPosted: Thu Oct 16, 2014 3:26 pm    Post subject: AMQ4036 Issue Reply with quote

Centurion

Joined: 08 Dec 2010
Posts: 135

++ Had posted same in WebSphere MQ Installation/Configuration Support forum. As there are less updates, added here for quicker attention ++

MQ Server - MQv8.0.0.1 on Linux
MQ Client(Explorer) - MQv7.5.0.1 on Windows.

Not able to connect to remote queue manager.

Configuration on explorer:
QMname, HOST:PORT, Channel (SYSTEM.BKR.CONFIG)

Here is o/p from server -
Quote:

DISPLAY CHANNEL(SYSTEM.BKR.CONFIG) ALL
1 : DISPLAY CHANNEL(SYSTEM.BKR.CONFIG) ALL
AMQ8414: Display Channel details.
CHANNEL(SYSTEM.BKR.CONFIG) CHLTYPE(SVRCONN)
ALTDATE(2014-10-16) ALTTIME(17.44.56)
CERTLABL( ) COMPHDR(NONE)
COMPMSG(NONE) DESCR( )
DISCINT(0) HBINT(300)
KAINT(AUTO) MAXINST(999999999)
MAXINSTC(999999999) MAXMSGL(104857600)
MCAUSER(mqsiadm) MONCHL(QMGR)
RCVDATA( ) RCVEXIT( )
SCYDATA( ) SCYEXIT( )
SENDDATA( ) SENDEXIT( )
SHARECNV(10) SSLCAUTH(OPTIONAL)
SSLCIPH( ) SSLPEER( )
TRPTYPE(TCP)




So, when I connect via SYSTEM.BKR.CONFIG channel - the authorization will happen as per the mqsiadm user's group.

For the mqsiadm user
Quote:

[mqsiadm@HOST:errors]$ grep mqsiadm /etc/group
mqsiadm:x:1018:
mqm:x:1020:mqsiadm
mqbrkrs:x:1021:mqsiadm

[mqsiadm@tesoawsmb03q:errors]$ id
uid=1017(mqsiadm) gid=1018(mqsiadm) groups=1018(mqsiadm),1020(mqm),1021(mqbrkrs)
[mqsiadm@HOST:errors]$

This means - the user mqsiadm is member of mqsiadm, mqm and mqbrkrs groups (all 3)

So, I did setmqaut for all the 3 groups on the queue manager as well as 'SYSTEM.BKR.CONFIG' SVRCONN channel.

Quote:

[mqsiadm@HOST:errors]$ dspmqaut -m QMQ3POS -t qmgr -g mqsiadm
Entity mqsiadm has the following authorizations for object QMQ3POS:
inq
set
connect
altusr
crt
dlt
chg
dsp
setid
setall
ctrl
system
[mqsiadm@HOST:errors]$ dspmqaut -m QMQ3POS -t qmgr -g mqm
Entity mqm has the following authorizations for object QMQ3POS:
inq
set
connect
altusr
crt
dlt
chg
dsp
setid
setall
ctrl
system
[mqsiadm@HOST:errors]$ dspmqaut -m QMQ3POS -t qmgr -g mqbrkrs
Entity mqbrkrs has the following authorizations for object QMQ3POS:
inq
set
connect
altusr
crt
dlt
chg
dsp
setid
setall
system
[mqsiadm@HOST:errors]$


All the 3 groups have same authority over queue manager

Same goes for SYSTEM.BKR.CONFIG channel
Quote:

[mqsiadm@HOST:errors]$ dspmqaut -m QMQ3POS -n SYSTEM.BKR.CONFIG -t channel -g mqsiadm
Entity mqsiadm has the following authorizations for object SYSTEM.BKR.CONFIG:
crt
dlt
chg
dsp
ctrl
ctrlx
[mqsiadm@HOST:errors]$ dspmqaut -m QMQ3POS -n SYSTEM.BKR.CONFIG -t channel -g mqbrkrs
Entity mqbrkrs has the following authorizations for object SYSTEM.BKR.CONFIG:
crt
dlt
chg
dsp
ctrl
ctrlx
[mqsiadm@HOST:errors]$ dspmqaut -m QMQ3POS -n SYSTEM.BKR.CONFIG -t channel -g mqm
Entity mqm has the following authorizations for object SYSTEM.BKR.CONFIG:
crt
dlt
chg
dsp
ctrl
ctrlx
[mqsiadm@HOST:errors]$


I tried with SSLCAUTH as OPTIONAL and REQUIRED - same error.

Kindly suggest, what I am missing here.
Back to top
View user's profile Send private message
fjb_saper
PostPosted: Thu Oct 16, 2014 7:28 pm    Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY

Learn the rules of the forum. Double posting is not our favorite.
See post: http://www.mqseries.net/phpBB2/viewtopic.php?t=68686
for discussion. Locking this thread.
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
Display posts from previous:   
Post new topic  This topic is locked: you cannot edit posts or make replies. Page 1 of 1

MQSeries.net Forum Index » General IBM MQ Support » AMQ4036 Issue
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.