| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Entity 'root' has insufficient authority to access object |
« View previous topic :: View next topic » |
| Author |
Message
|
| kuankuo123 |
 Posted: Sat Jan 07, 2023 5:14 am Post subject: Entity 'root' has insufficient authority to access object |
 |
|
Guest
|
Dear All,
In IBM Websphere MQ, I create a "UAPL106FTP" Queue Manager with channel "UAPL10SFTP.SVRCHL.04", which is "SVRCONN" CHLTYPE.
and also set channel's MCAUSER(wasadm) to be "wasadm".
The channel also set SSL configuration with below channel properity setting
SSLCAUTH(required)
SSLCIPH(XXXXXXXXX_256_CBC_SHA384)
Now, I have the application UAT Linux server, and I log on with "wasadm" user to run the Jave code application to connect to the MQ server with SSL key store.
The SSL configuration is successful pass, but it still fail with "2035" MQRC_NOT_AUTHORIZED issue.
After I checking the queue manager(UAPL106FTP) errors log, it show with below error message:
01/05/2023 05:13:05 AM - Process(31009.74311) User(mqm) Program(amqzlaa0)
Host(hkl25091959) Installation(Installation1)
VRMF(9.2.0.6) QMgr(UAPL106FTP)
Time(2023-01-04T21:13：05.033Z)
CommentInsert1(root)
CommentInsert2(UAPL106FTP [qmgr])
CommentInsert3(connect)
AMQ8077W: Entity 'root' has insufficient authority to access object UAPL106FTP [qmgr]
I run the java program with "wasadm" user in UAT application server, and also set the MCAUSER to be "wasadm" in channel setting.
From the error log message, it shows that it using the "root" entity to connect the queue manager.
I have set the Channel MCAUSER to be "wasadm", why it still "root" entity to connect the queue manage?
Dear all, if you know the reason, please help to explian the root cause to me that why it use "root" entity to connect the queue manager? thanks a lot. |
|
| Back to top |
|
 |
| kuankuo123 |
| Posted: Sat Jan 07, 2023 4:41 pm Post subject: |
|
|
Guest
|
Hello All,
Per my understanding, as I have set the channel MCAUSER to be "wasadm", it should use the "wasadm" to connect the channel and queue manager.
So in the error log, why it doesn't say "wasadm" entiy no insufficient authority, but saying that "root" entity no insufficient authority.
If you have any idea, please kindly share / explaine to me, thanks very much.
I am thinking, whether even I set the channel MCAUSER(wasadm), but if I don't set the queue manager's authority to wasadm, it will try to use "root" use to connect, so saying that "root" entity no insufficient authority? |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Sat Jan 07, 2023 9:31 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20696
Location: LI,NY
|
Is your web server running as root and your java/jms code running on the web server? You might need to set up a JAAS alias to run your MQ Connection
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| kuankuo123 |
| Posted: Sun Jan 08, 2023 4:06 am Post subject: |
|
|
Guest
|
The more details about my case as below:
I have 3 Linux servers
(a) UAT application server(A)
(b) The existing UAT MQ server(B)
(c) The new UAT MQ server(C)
I write a simple Java program for testing the the queue connection between the UAT applicaiton and UAT MQ server.
1. I log on the A server and switch the "wasadm" user to run the Java program to test the queue manager's channel connection between A and B, it can connect successfully.
2. Copy all queue manager configuration/setting from B server to C server. In A server, still under "wasadm", then udpate the connection targer from B to C, but when execute the java program, it fails.
after checking the queue manger log, it show below message:
AMQ8077W: Entity 'root' has insufficient authority to access object UAPL106FTP [qmgr]
In A server, I just change the target MQ server from B to C, and no otherthing change, and in C server, I check the channel MCAUSER is "wasadm", why it saying : Entity 'root' has insufficient authority |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
