ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum IndexIBM MQ API SupportAdd authorisations to an new created Queue MQAUTH_BROWSE etc

Post new topicReply to topic Goto page Previous  1, 2, 3
Add authorisations to an new created Queue MQAUTH_BROWSE etc View previous topic :: View next topic
Author Message
hughson
PostPosted: Wed Jun 19, 2019 4:43 pm Post subject: Reply with quote

Grand Master

Joined: 09 May 2013
Posts: 1256
Location: Bay of Plenty, New Zealand

pcouas wrote:
I have use Channel created automatically when Qmanager was created

https://postimg.cc/64Wgcfb4
https://postimg.cc/18G0R13P
https://postimg.cc/CzfXN5mN
https://postimg.cc/qznDKYvD

I have asked information to my expert, but they has no answer ! they don't know !


So from your screenshots I have gleaned that you have a SVRCONN channel defined on your queue manager called DEV.ADMIN.SVRCONN which has an MCAUSER set to 'admin'.



This means that when you client connects to the queue manager using that channel name, it will be given the user id 'admin' to run with for authority checks against the queue manager.

Your next screenshot shows the failure on the queue manager when you try to connect:-



and tells us that there was a problem with the user id 'admin'. Since you have only shown the very last few lines of the error log I don't know whether there was a prior error with more information, but this might suggest that the user id 'admin' does not exist for the queue manager to use. Can you confirm that the user id 'admin' is actually defined to the O/S that your queue manager is running on, and if it does exist, can you show us whether there were other error messages prior this one?

Images
To embed an image, go to the URL that you are posting, right click on the image and select "copy image address" and then use that URL (which will end with .png) in your [ img ] tags instead of posting the page URL.

Cheers,
Morag
_________________
Morag Hughson @MoragHughson
IBM MQ Technical Education Specialist
Get your IBM MQ training here!
MQGem Software
Back to top
View user's profile Send private message Visit poster's website
pcouas
PostPosted: Thu Jun 20, 2019 4:56 am Post subject: Reply with quote

Voyager

Joined: 06 Sep 2011
Posts: 76

user admin ise defined on system


complete error log


DEV.AUTHINFO definition on webconsole
Back to top
View user's profile Send private message
hughson
PostPosted: Thu Jun 20, 2019 2:45 pm Post subject: Reply with quote

Grand Master

Joined: 09 May 2013
Posts: 1256
Location: Bay of Plenty, New Zealand

The error you have received is telling you that because you have associated the user ID admin to your channel, and it is a privileged user id, you must provide a user id and password when you make a client connection to your queue manager.

You have two choices:-
  • provide a user id and password
  • Turn off the requirement for a password by altering the DEV.AUTHINFO object to have "Optional" in the "Client Connections" box. I repeat your screenshot here to show you what you need to change.


Clearly, the first option is the more secure one, but I get the impression this is all on your own machine and is for you to play with rather than a production system. Clearly if you want to learn about MQ security though, you should also look into the first option, or better still, don't use a privileged user id in the first place so that you can learn about authorizations.

However, you know what it is you need this queue manager for and I don't, so it is not up to me to say.

I would reiterate my offer of MQ training though - as you do need to learn how to understand what the queue manager is trying to tell you.

Cheers,
Morag
_________________
Morag Hughson @MoragHughson
IBM MQ Technical Education Specialist
Get your IBM MQ training here!
MQGem Software
Back to top
View user's profile Send private message Visit poster's website
pcouas
PostPosted: Fri Jun 21, 2019 12:18 am Post subject: Reply with quote

Voyager

Joined: 06 Sep 2011
Posts: 76

Hi

I could connect to my QM with an sourceforge tool,
but i could not showing Process !
https://sourceforge.net/projects/mqadmintool/ (it's not for production )




Back to top
View user's profile Send private message
hughson
PostPosted: Fri Jun 21, 2019 2:09 am Post subject: Reply with quote

Grand Master

Joined: 09 May 2013
Posts: 1256
Location: Bay of Plenty, New Zealand

pcouas wrote:
I could connect to my QM with an sourceforge tool,
but i could not showing Process !

I don't know about the source forge tool. Why not use an MQ admin tool that can show you process objects?

There are two that come with the MQ product for example. MQ Explorer GUI and runmqsc command line tool.

Cheers,
Morag
_________________
Morag Hughson @MoragHughson
IBM MQ Technical Education Specialist
Get your IBM MQ training here!
MQGem Software
Back to top
View user's profile Send private message Visit poster's website
pcouas
PostPosted: Fri Jun 21, 2019 3:31 am Post subject: Reply with quote

Voyager

Joined: 06 Sep 2011
Posts: 76

Standard tool in our company is MQMON tool from mqgen, but i could not connect with it !
I have tested this morning with this free tool, and i could connect to Qmanager Qm1 !
But i could not seeing Process !!
If you have better tools, i am interested

Regards
Back to top
View user's profile Send private message
pcouas
PostPosted: Fri Jun 21, 2019 3:43 am Post subject: Reply with quote

Voyager

Joined: 06 Sep 2011
Posts: 76

Youppi i have found Solution with Last Version of official Tool using by my company.

In security Tabs i need to add admin and passw0rd
Back to top
View user's profile Send private message
hughson
PostPosted: Fri Jun 21, 2019 2:21 pm Post subject: Reply with quote

Grand Master

Joined: 09 May 2013
Posts: 1256
Location: Bay of Plenty, New Zealand

pcouas wrote:
Ok currently i tried to connect mqmonntp_7.5.1.exe to qmanager en docker for viewing all Qmanager objects like process.


pcouas wrote:
Standard tool in our company is MQMON tool from mqgen, but i could not connect with it !
I have tested this morning with this free tool, and i could connect to Qmanager Qm1 !
But i could not seeing Process !!
If you have better tools, i am interested

Regards


The MQMON V7.5.1 version is very old. I don't think connection would be successful if you need to supply a user ID and password as you do. If you could connect successfully then it would show you process objects, but I believe it would fail to connect.

pcouas wrote:
Youppi i have found Solution with Last Version of official Tool using by my company.

In security Tabs i need to add admin and passw0rd


I am glad to hear that the current version of MQMON works for you. You should always use the latest version if you have a licence. There is no need to use the old version if you have a licence!

Glad to hear that you are all sorted now.

Please, if you have other questions, start a new thread rather than continuing this one, Already it has nothing to do with the title of the thread

Cheers,
Morag
_________________
Morag Hughson @MoragHughson
IBM MQ Technical Education Specialist
Get your IBM MQ training here!
MQGem Software
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:
Post new topicReply to topic Goto page Previous  1, 2, 3 Page 3 of 3

MQSeries.net Forum IndexIBM MQ API SupportAdd authorisations to an new created Queue MQAUTH_BROWSE etc
Jump to:



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP


Theme by Dustin Baccetti
Powered by phpBB 2001, 2002 phpBB Group

Copyright MQSeries.net. All rights reserved.