| Author |
Message
|
| Toka |
 Posted: Sun Sep 14, 2008 11:13 pm Post subject: Cannot connect Queue Manager after entering windows domain |
 |
|
Newbie
Joined: 14 Sep 2008
Posts: 3
|
Hello,
I have installed WebsphereMQ/Broker/BrokerToolkit on my local machine.
I used to be in a workgroup with the username Admin. everything worked well.
Later I entered the windows domain and got a windows domain user. In domain I'm have user privilages, but on local machine I have administrator privilages with this user.
The problem is that, when I open WebSphere Message Brokers Toolkit with my windows domain account I cannot connect to Queue Manager (Domains). I get an error saying:
| Quote: |
BIP0915E Message Brokers Toolkit is unable to communicate with the Configuration Manager.
Reason:
WebSphere MQ queue manager QM1 cannot be reached.
Details:
User ToGelashvili@togelashvili is not authorized to connect to queue manager 'QM1' (MQ reason code 2035 while trying to connect)
|
ToGelashvili is my windows domain username and my computer name.
Event Viewer shows the following warning 5 times:
| Quote: |
Event Type: Warning
Event Source: WebSphere MQ
Event Category: None
Event ID: 9245
Date: 9/15/2008
Time: 12:27:17 PM
User: N/A
Computer: TOGELASHVILI
Description:
Unable to obtain account details for channel MCA user ID.
WebSphere MQ was unable to obtain the account details for MCA user ID 'ToGelashvili@togelashvili'. This user ID was the MCA user ID for channel 'SYSTEM.BKR.CONFIG' on queue manager 'QM1' and may have been defined in the channel definition, or supplied either by a channel exit or by a client.
Ensure that the user ID is correct and that it is defined on the Windows local system, the local domain or on a trusted domain. For a domain user ID, ensure that all necessary domain controllers are available.
|
When I run WebSphere Message Brokers Toolkit as local machine user: Admin, it connects without an error.
What could a possible reason be?
What should i check or what additional info should I provide?
I tried dspmqaut on both users and here are the results:
| Code: |
dspmqaut -m QM1 -t qmgr -p hq\togelashvili
Entity hq\togelashvili has the following authorizations for object QM1:
inq
set
connect
altusr
crt
dlt
chg
dsp
setid
setall
|
| Code: |
dspmqaut -m QM1 -t qmgr -p admin
Entity admin has the following authorizations for object QM1:
inq
set
connect
altusr
crt
dlt
chg
dsp
setid
setall
|
|
|
| Back to top |
|
 |
| ranganathan |
| Posted: Mon Sep 15, 2008 2:15 am Post subject: |
|
|
Centurion
Joined: 03 Jul 2008
Posts: 104
|
| is the user id a member of *mqbrkrs* group ?! |
|
| Back to top |
|
|
| Toka |
| Posted: Mon Sep 15, 2008 3:12 am Post subject: |
|
|
Newbie
Joined: 14 Sep 2008
Posts: 3
|
| Yes, I have added it to mqbrkrs and also I added to mqm group too |
|
| Back to top |
|
|
| Pats21 |
| Posted: Mon Sep 15, 2008 6:41 am Post subject: |
|
|
Disciple
Joined: 08 Sep 2006
Posts: 154
|
Try one of the following;
1. run the mqsicreateaclentry command and add the domain user account to have permission over the config manager and broker.
sample command is 'mqsicreateaclentry CONFIGST -u 'db2admin' -a -x F -p'
however check the admin pdf for exact details.
2. check the MCA user account entry in the 'SYSTEM.BKR.CONFIG' and make user you are part of that group. |
|
| Back to top |
|
|
| Toka |
| Posted: Thu Sep 18, 2008 3:33 am Post subject: |
|
|
Newbie
Joined: 14 Sep 2008
Posts: 3
|
| As i understand my account does not have rights to retrieve group policy info from domain. |
|
| Back to top |
|
|
| Giridhar |
| Posted: Thu Sep 18, 2008 11:42 am Post subject: |
|
|
Apprentice
Joined: 23 Nov 2005
Posts: 46
|
| Check if you are in the MQCONN group as well. I had a similar situation and was solved once I was added to this group. |
|
| Back to top |
|
|
|
|
