ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum IndexIBM MQ Installation/Configuration SupportAMQ4036 not able to connect to local qmgr from MQ Explorer

Post new topicReply to topic
AMQ4036 not able to connect to local qmgr from MQ Explorer View previous topic :: View next topic
Author Message
MQMB&WAS
PostPosted: Tue Aug 30, 2016 11:53 am Post subject: AMQ4036 not able to connect to local qmgr from MQ Explorer Reply with quote

Apprentice

Joined: 12 Jun 2016
Posts: 27

Hello everyone,

I just installed MQ on my local system(linux), default listener with port 1414 is running, default channels are not running even when I tried to start them.
I'm seeing the below error when I try to connect to qmgr from MQ Explorer, would really appreciate if anyone could explain what configurations I need to make to connect to the qmgr.

Access not permitted. You are not authorized to perform this operation. (AMQ4036).

Thanks in advance.
Back to top
View user's profile Send private message
mqjeff
PostPosted: Tue Aug 30, 2016 12:04 pm Post subject: Reply with quote

Grand Master

Joined: 25 Jun 2008
Posts: 17059

http://www.ibm.com/support/knowledgecenter/en/SSFKSJ_8.0.0/com.ibm.mq.ref.doc/amq4.htm
_________________
Read, Think, Try, Repeat
Back to top
View user's profile Send private message
Vitor
PostPosted: Tue Aug 30, 2016 12:13 pm Post subject: Re: AMQ4036 not able to connect to local qmgr from MQ Explor Reply with quote

Grand High Poobah

Joined: 11 Nov 2005
Posts: 24215
Location: Ohio, USA

MQMB&WAS wrote:
would really appreciate if anyone could explain what configurations I need to make to connect to the qmgr.

Access not permitted. You are not authorized to perform this operation. (AMQ4036).


How about some security configurations? The error seems pretty clear.

And if your planned response to this post is anything like:

Quote:
Why do I need security configurations when I'm trying to connect as an administrator / mqm


then welcome to the world of increased default security.

Hail Morag!
_________________
Honesty is the best policy.
Insanity is the best defence.
Back to top
View user's profile Send private message
hughson
PostPosted: Tue Aug 30, 2016 2:40 pm Post subject: Re: AMQ4036 not able to connect to local qmgr from MQ Explor Reply with quote

Yatiri

Joined: 09 May 2013
Posts: 639
Location: Bay of Plenty, New Zealand

MQMB&WAS wrote:
would really appreciate if anyone could explain what configurations I need to make to connect to the qmgr.

Access not permitted. You are not authorized to perform this operation. (AMQ4036).

First things first. You've shown us the error that MQ Explorer reported, but that's just a client and the client doesn't get told the whole story.

For the full and detailed reason why you can't connect you should look in the queue manager ANQERR01.LOG.

Depending on your MQ version you'll either see something complaint about a lack of a password or that your channel was blocked as my guess is that you are using a privileged user ID. However we await your response to be sure, rather than guessing.

Cheers
Morag
_________________
Morag Hughson @MoragHughson
IBM MQ Technical Education Specialist
MQGem Software
Back to top
View user's profile Send private message Visit poster's website
MQMB&WAS
PostPosted: Tue Aug 30, 2016 6:56 pm Post subject: Reply with quote

Apprentice

Joined: 12 Jun 2016
Posts: 27

I was seeing the below error in AMQERR01.log, so I added my id to mqm group with the command "usermod -a -G mqm myname" ,restarted mq and now I can connect to the qmgr from MQ explorer.


AMQ8077: Entity 'myname' has insufficient authority to access object 'QMGR'.
EXPLANATION:
The specified entity is not authorized to access the required object.The
following requested permissions are unauthorized: connect
ACTION:
Ensure that the correct level of authority has been set for this entity against
the required object, or ensure that the entity is a member of a privileged
group.


I still have one question, is there a single command or setting to grant authorizations to a userid(who is not a member of the mqm group) to access all the mq objects from mq explorer?

Thanks for your time.
Back to top
View user's profile Send private message
hughson
PostPosted: Tue Aug 30, 2016 8:18 pm Post subject: Reply with quote

Yatiri

Joined: 09 May 2013
Posts: 639
Location: Bay of Plenty, New Zealand

MQMB&WAS wrote:
Is there a single command or setting to grant authorizations to a userid (who is not a member of the mqm group) to access all the mq objects from mq explorer?

Yes, you can use the "Role Based Authorities wizard" from MQ Explorer.

Briefly described in Knowledge Center here Granting full administrative access to all resources on a queue manager, and more in-depth in this blog post A non-privileged MQ administrator

Cheers
Morag
_________________
Morag Hughson @MoragHughson
IBM MQ Technical Education Specialist
MQGem Software
Back to top
View user's profile Send private message Visit poster's website
fjb_saper
PostPosted: Tue Aug 30, 2016 8:27 pm Post subject: Reply with quote

Grand Poobah

Joined: 18 Nov 2003
Posts: 18946
Location: LI,NY

Also remember that when you change group membership at the OS level this is not reflected to the qmgr unless the qmgr is bounced or a refresh security is issued. The queue manager caches group membership...

Have fun
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
MQMB&WAS
PostPosted: Tue Aug 30, 2016 8:40 pm Post subject: Reply with quote

Apprentice

Joined: 12 Jun 2016
Posts: 27

fjb_saper wrote:
Also remember that when you change group membership at the OS level this is not reflected to the qmgr unless the qmgr is bounced or a refresh security is issued. The queue manager caches group membership...

Have fun


yes, I experienced that. Thanks.
Back to top
View user's profile Send private message
MQMB&WAS
PostPosted: Tue Aug 30, 2016 8:42 pm Post subject: Reply with quote

Apprentice

Joined: 12 Jun 2016
Posts: 27

Yes, you can use the "Role Based Authorities wizard" from MQ Explorer.

Briefly described in Knowledge Center here Granting full administrative access to all resources on a queue manager, and more in-depth in this blog post A non-privileged MQ administrator

Got it, thanks for your time, Morag.
Back to top
View user's profile Send private message
fjb_saper
PostPosted: Wed Aug 31, 2016 2:06 am Post subject: Reply with quote

Grand Poobah

Joined: 18 Nov 2003
Posts: 18946
Location: LI,NY

Would you PLEASE not disable BBCode in your posts?
You can look at the difference using preview...
Thanks
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
Display posts from previous:
Post new topicReply to topic Page 1 of 1

MQSeries.net Forum IndexIBM MQ Installation/Configuration SupportAMQ4036 not able to connect to local qmgr from MQ Explorer
Jump to:



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP


Theme by Dustin Baccetti
Powered by phpBB 2001, 2002 phpBB Group

Copyright MQSeries.net. All rights reserved.