MQSeries.net :: View topic - RESOLVED: Access Not Authorized. You are Not Authorized.

exerk · Posted: Wed Nov 08, 2006 4:50 pm Post subject:

Win AD doesn't like embedded groups, it seems unable to parse them, i.e. when you have a domain 'mqm' group containing another group and only the domain 'mqm' group is specified; I couldn't get it to drill down. I use domain 'mqm' group in its loosest sense, i.e. to describe the group in which all our admins are defined.

Another consideration is to use BlockIP2 on a SVRCONN channel (with an MCA User set to an existing admin ID) to restrict connections to specific hosts ...works for me...unless you want cast iron security in which case SSL is the way.
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys.