Author |
Message
|
sachinramesh |
Posted: Thu Nov 07, 2024 10:41 pm Post subject: Not authorised to runmqsc commands:Reset connauth |
|
|
Disciple
Joined: 20 Feb 2007 Posts: 170
|
HI ,
I have tried to alter my qmgr connauth properties with authinfo 'SYSTEM.DEFAULT.AUTHINFO.IDPWOS' and chckclnt as 'REQDADM'
I tried to connect to the qmgr with uid and pwd and realized that the uid/pwd is for a different account and it will not work .
Now i dont have the uid/pwd to connect to the qmgr , i want to alter the qmgr connauth to null.
Is there a way to do it, as the runmqsc commnands are not working.
This is on Linux servers where MQ verison is 9.3 .
Error says:
AMQ5540E: Application 'runmqsc' did not supply a user ID and password |
|
Back to top |
|
|
gbaddeley |
Posted: Sun Nov 10, 2024 2:56 pm Post subject: |
|
|
Jedi Knight
Joined: 25 Mar 2003 Posts: 2536 Location: Melbourne, Australia
|
Can you log in to the Linux server as mqm user, or sudo to mqm, or as a user that is in mqm group ? You can then use runmqsc command at the shell prompt. _________________ Glenn |
|
Back to top |
|
|
sachinramesh |
Posted: Sun Nov 10, 2024 11:21 pm Post subject: |
|
|
Disciple
Joined: 20 Feb 2007 Posts: 170
|
gbaddeley wrote: |
Can you log in to the Linux server as mqm user, or sudo to mqm, or as a user that is in mqm group ? You can then use runmqsc command at the shell prompt. |
yes , i am able to login to the server and also sudo to mqm user.Still i am facing the same issue.
[user123@hostname ~]$ sudo su - mqm
Last login: Mon Nov 11 06:45:56 CET 2024 on pts/1
[mqm@hostname ~]$ runmqsc CMSS
5724-H72 (C) Copyright IBM Corp. 1994, 2024.
Starting MQSC for queue manager CMSS.
AMQ8135E: Not authorized.
No MQSC commands read.
[mqm@hostname ~]$
Error:
AMQ5540E: Application 'runmqsc' did not supply a user ID and password |
|
Back to top |
|
|
fjb_saper |
Posted: Mon Nov 11, 2024 2:56 am Post subject: Re: Not authorised to runmqsc commands:Reset connauth |
|
|
Grand High Poobah
Joined: 18 Nov 2003 Posts: 20736 Location: LI,NY
|
sachinramesh wrote: |
HI ,
I have tried to alter my qmgr connauth properties with authinfo 'SYSTEM.DEFAULT.AUTHINFO.IDPWOS' and chckclnt as 'REQDADM'
I tried to connect to the qmgr with uid and pwd and realized that the uid/pwd is for a different account and it will not work .
Now i dont have the uid/pwd to connect to the qmgr , i want to alter the qmgr connauth to null.
Is there a way to do it, as the runmqsc commnands are not working.
This is on Linux servers where MQ verison is 9.3 .
Error says:
AMQ5540E: Application 'runmqsc' did not supply a user ID and password |
This is why I hate using the default. Copy the default as your own and change the AUTHENMD(PAM).
This will enable the authentication through the Unix PAM model, which you probably need.
And don't forget the REFRESH SECURITY TYPE(CONNAUTH)
_________________ MQ & Broker admin |
|
Back to top |
|
|
sachinramesh |
Posted: Mon Nov 11, 2024 10:49 pm Post subject: Re: Not authorised to runmqsc commands:Reset connauth |
|
|
Disciple
Joined: 20 Feb 2007 Posts: 170
|
fjb_saper wrote: |
This is why I hate using the default. Copy the default as your own and change the AUTHENMD(PAM).
This will enable the authentication through the Unix PAM model, which you probably need.
And don't forget the REFRESH SECURITY TYPE(CONNAUTH)
|
As i mentioned earlier i am not able to modify any authinfo parameters.
Somehow i could connect to the qmgr in MQExploer using a different channel and saw that chcklocal parameter is set to REQUIRED and chckclnt is set to REQDADM.
the mca user used in the channel i used to connect to mq explorer has only read access.
looks like i have to delete and recreate the qmgr ,as all the admin users are needed to provide the uid/pwd and non admin users dont have access to modify the authinfo .
Please suggest if there is any other option to change the authinfo parameter to optional. |
|
Back to top |
|
|
sachinramesh |
Posted: Tue Nov 12, 2024 4:06 am Post subject: |
|
|
Disciple
Joined: 20 Feb 2007 Posts: 170
|
This is now fixed.
i have set the password for mqm user and connected to the qmgr to alter the authinfo parameters. |
|
Back to top |
|
|
|