ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » General IBM MQ Support » Interaction of CHLAUTH and CONNAUTH

Post new topic  Reply to topic
 Interaction of CHLAUTH and CONNAUTH « View previous topic :: View next topic » 
Author Message
ghoshly
PostPosted: Fri Aug 25, 2023 1:13 pm    Post subject: Interaction of CHLAUTH and CONNAUTH Reply with quote

Partisan

Joined: 10 Jan 2008
Posts: 325

Hello Experts,

I am trying to allow B2B client to use server connection channel and able to get / put messages from MQ queue manager. Earlier we were using MQ v8 queue manager and we had disabled CONNAUTH property of the Queue Manager. We have created new queue manager in MQ v9.3 in the same AIX server and I am trying to use CONNAUTH property to make sure B2B client is using the right user id and password in their configuration.

I would provide all the setup details shortly in the next update.
I am trying to follow the below link from IBM documentation to understand the process -
https://www.ibm.com/docs/en/ibm-mq/9.3?topic=records-interaction-chlauth-connauth

Is there a way to know whether the failure is coming from Step 13, or 14, or 15 or even much before?

Error we are getting : MQException during MQCONN: CC=2 RC=2035 NOT_AUTHORIZED
Back to top
View user's profile Send private message
fjb_saper
PostPosted: Sat Aug 26, 2023 1:13 pm    Post subject: Re: Interaction of CHLAUTH and CONNAUTH Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20696
Location: LI,NY

ghoshly wrote:
Hello Experts,

I am trying to allow B2B client to use server connection channel and able to get / put messages from MQ queue manager. Earlier we were using MQ v8 queue manager and we had disabled CONNAUTH property of the Queue Manager. We have created new queue manager in MQ v9.3 in the same AIX server and I am trying to use CONNAUTH property to make sure B2B client is using the right user id and password in their configuration.

I would provide all the setup details shortly in the next update.
I am trying to follow the below link from IBM documentation to understand the process -
https://www.ibm.com/docs/en/ibm-mq/9.3?topic=records-interaction-chlauth-connauth

Is there a way to know whether the failure is coming from Step 13, or 14, or 15 or even much before?

Error we are getting : MQException during MQCONN: CC=2 RC=2035 NOT_AUTHORIZED

Make sure the client is using a client of level 9.3, if using a level of 9.2.0 make sure the client is passing the information via the MQCSP structure.
Use dis chlauth(chlname) type(all) match(runcheck) to show which chlauth rule apply.
Finally show us the connauth values and make sure you used refresh security type(connauth)
If you still get a 2035 verify that user name and password match. Also check in the logs if the qmgr is complaining about an authorization missing for a specific object.
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
hughson
PostPosted: Thu Aug 31, 2023 10:40 pm    Post subject: Re: Interaction of CHLAUTH and CONNAUTH Reply with quote

Padawan

Joined: 09 May 2013
Posts: 1916
Location: Bay of Plenty, New Zealand

ghoshly wrote:
I am trying to follow the below link from IBM documentation to understand the process -
https://www.ibm.com/docs/en/ibm-mq/9.3?topic=records-interaction-chlauth-connauth

Is there a way to know whether the failure is coming from Step 13, or 14, or 15 or even much before?

Yes - look in the queue manager's AMQERR01.LOG file. It should ALWAYS be your first port of call when an application gets a 2035 reason code.

Cheers,
Morag
_________________
Morag Hughson @MoragHughson
IBM MQ Technical Education Specialist
Get your IBM MQ training here!
MQGem Software
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » General IBM MQ Support » Interaction of CHLAUTH and CONNAUTH
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.