| Author |
Message
|
| arunsenthild |
 Posted: Sun Feb 21, 2016 11:27 am Post subject: JMSCMQ0001: MQRC_NOT_AUTHORIZED 2035 from WAS 8.5 |
 |
|
Novice
Joined: 24 Dec 2007
Posts: 11
|
Hi,
Im using the below versions.
1. IBM Websphere Application Server 8.5.5
2. IBM Websphere MQ 8.0.0.2
Performed the below steps in Websphere MQ
Created a Queue Manger
Disabled Channel Auth using the below command
runmqsc QM_NEW
ALTER QMGR CHLAUTH(DISABLED)
Now I'm trying to create a queue connection factory from the websphere application server console(Resources-->JMS--> Queue Connection Factory) from the same sysem.
During test connection im getting the below error.
A connection could not be made to WebSphere MQ for the following reason: JMSCMQ0001: WebSphere MQ call failed with compcode '2' ('MQCC_FAILED') reason '2035' ('MQRC_NOT_AUTHORIZED'). |
|
| Back to top |
|
 |
| exerk |
| Posted: Sun Feb 21, 2016 11:33 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
And what about CONNAUTH?
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| arunsenthild |
| Posted: Sun Feb 21, 2016 11:41 am Post subject: |
|
|
Novice
Joined: 24 Dec 2007
Posts: 11
|
as per your advice
i've provided ALTER QMGR CONNAUTH(DISABLED)
Initially it didnt work, after a restart of queue manager im able to make a connection now.
Thanks a lot for your help. |
|
| Back to top |
|
|
| exerk |
| Posted: Sun Feb 21, 2016 11:45 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
Great. Now connectivity is proved you can re-enable both and set the appropriate authorities 
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| JosephGramig |
| Posted: Tue Feb 23, 2016 7:55 am Post subject: |
|
|
Grand Master
Joined: 09 Feb 2006
Posts: 1244
Location: Gold Coast of Florida, USA
|
| Ya know... this looks a lot like a topic that belongs in "WebSphere Application Server"... |
|
| Back to top |
|
|
| exerk |
| Posted: Tue Feb 23, 2016 7:57 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
| JosephGramig wrote: |
| Ya know... this looks a lot like a topic that belongs in "WebSphere Application Server"... |
A case of 6 or two 3s - an overlap - but could also go in the Security forum 
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| mqjeff |
| Posted: Tue Feb 23, 2016 8:03 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
Let's not dismiss the JMS forum...
_________________
chmod -R ugo-wx / |
|
| Back to top |
|
|
| RogerLacroix |
| Posted: Tue Feb 23, 2016 12:42 pm Post subject: |
|
|
Jedi Knight
Joined: 15 May 2001
Posts: 3264
Location: London, ON Canada
|
| exerk wrote: |
| Great. Now connectivity is proved you can re-enable both and set the appropriate authorities |
  Yeah right. Most of the MQ world is unsecured, so what makes you think that user will secure their queue manager?
Regards,
Roger Lacroix
Capitalware Inc.
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Tue Feb 23, 2016 1:31 pm Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
| RogerLacroix wrote: |
| exerk wrote: |
| Great. Now connectivity is proved you can re-enable both and set the appropriate authorities |
Yeah right. Most of the MQ world is unsecured, so what makes you think that user will secure their queue manager?
Regards,
Roger Lacroix
Capitalware Inc. |
Whooop! Whooop! Whooop! Sarcasm alarm.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| Vitor |
| Posted: Tue Feb 23, 2016 1:55 pm Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| bruce2359 wrote: |
| RogerLacroix wrote: |
| exerk wrote: |
| Great. Now connectivity is proved you can re-enable both and set the appropriate authorities |
Yeah right. Most of the MQ world is unsecured, so what makes you think that user will secure their queue manager?
Regards,
Roger Lacroix
Capitalware Inc. |
Whooop! Whooop! Whooop! Sarcasm alarm. |
It's a false positive - I never said a word........ 
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| RogerLacroix |
| Posted: Tue Feb 23, 2016 2:17 pm Post subject: |
|
|
Jedi Knight
Joined: 15 May 2001
Posts: 3264
Location: London, ON Canada
|
| bruce2359 wrote: |
| Whooop! Whooop! Whooop! Sarcasm alarm. |
Sarcasm, maybe but frustration, absolutely!!!
At mqseries.net, you get the random question about RC 2035 and how to get around it (the wrong way) but at StackOverflow, it is question after question after question. I mean seriously, people are lazy but I would have never thought people were that INCREDIBLY lazy. Well, on the bright-side, at least we know, there will be no end to hackers stealing data when people intentionally leave the front door (& every other door) wide open.
Just the other day, I had an MQAdmin from a Fortune 100 company (yes Fortune 100) email me about their trial of MQ Visual Edit. I thought great, they will surely buy lots of licenses maybe a site license but they have a problem. They have very, very basic MQ security in MQ v7.* and no SSL and they want MQ Visual Edit to do LDAP authentication. I said you want the queue manager to do LDAP authentication to protect against any MQ client application. They said no, they don't want more MQ security at the queue manager just for MQ Visual Edit to do LDAP authentication. 
Sure I could add the code but it would be pointless. I've pretty much gone blue in the face trying to explain to them that you don't do security at the client-side but rather at the server-side but I am going nowhere fast.
What can you do! You can lead a horse to water but you can't make it drink.
Regards,
Roger Lacroix
Capitalware Inc.
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter |
|
| Back to top |
|
|
| exerk |
| Posted: Tue Feb 23, 2016 4:03 pm Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
| RogerLacroix wrote: |
| exerk wrote: |
| Great. Now connectivity is proved you can re-enable both and set the appropriate authorities |
Yeah right. Most of the MQ world is unsecured, so what makes you think that user will secure their queue manager?
Regards,
Roger Lacroix
Capitalware Inc. |
The flame of eternal hope burns bright 
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| PeterPotkay |
| Posted: Tue Feb 23, 2016 4:08 pm Post subject: |
|
|
Poobah
Joined: 15 May 2001
Posts: 7722
|
Developers don't care about security, the same as they don't care about high availability, disaster recovery, and quite honestly, quality. The primary goal is to get something to function in the easiest and fastest way possible to allow a at least one transaction to pass thru with a result that resembles the desired output. Note that I didn't say at least one transaction without error, because who cares what trail of errors are left as long as some result gets returned that allows them to say "It Works!" to allow a Project Manager to check off that deliverable as done and done.
Maybe some care, but project timelines trump any and all other aspects.
At least it appears to be the same dismal state of affairs elsewhere as well....
_________________
Peter Potkay
Keep Calm and MQ On
Last edited by PeterPotkay on Wed Feb 24, 2016 4:50 pm; edited 1 time in total |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Tue Feb 23, 2016 5:45 pm Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
Think. You can lead a horse to water, but you can't make him think.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| MQsysprog |
| Posted: Wed Feb 24, 2016 12:05 am Post subject: |
|
|
Centurion
Joined: 24 Feb 2014
Posts: 116
|
| Think... It was the old motto of Thomas J Watson of IBM... |
|
| Back to top |
|
|
|
|
