MQSeries.net :: View topic - Windows NT SERVICE account and authentication

Jockern

I have a lab environment where I try to mirror a customer environment. As it is a lab environment I do not need to care about security why I try to understand and avoid a 2035 error code in my environment. I have a Java server app running under Windows as a service that connects to IBM MQ 9.004 in a non-JMS way. This Windows server application/service runs under a NT SERVICE-account where the user name is significantly longer than 12 characters. The server application and IBM MQ run on the same server. I have put the NT SERVICE account in the local MQM user group and added Everyone as well to that group. The MQ service runs under .\administrator

I have tried to disable security by completing the actions described here:
https://www.ibm.com/support/knowledgecenter/en/prodconn_1.0.0/com.ibm.scenarios.wmqwaslibertyV9.doc/topics/disable_security.htm?cp=SSFKSJ_9.0.0

Regarding the user name length. The NT service account user name is longer than 12 characters which historically seems to have been an issue. The log below also indicates that the user name becomes truncated. However, when testing with a local user (ordinary user, not a service account) having 16 characters, all works fine.

My question is therefore, is there any way to allow anonymous access to the QM, i.e. no user validation at all (existence, password etc). Also, is there anything than needs to be configured in order for an NT SERVICE accounts to be able to connect and post/get messages? For various reason I do not want to change the user account as I mirror another environment and would like the two to be as equal as possible.