|   | 
	 
  
    | 
RSS Feed - WebSphere MQ Support
 | 
RSS Feed - Message Broker Support
 |   
 
  
	     | 
	 | 
   
 
  
	|  AMQ4036 Issue | 
	« View previous topic :: View next topic »  | 
   
  
  	
	  
		
		
		  | Author | 
		  Message
		 |  
		
		  | vishBroker | 
		  
		    
			  
				 Posted: Thu Oct 16, 2014 3:26 pm    Post subject: AMQ4036 Issue | 
				     | 
			   
			 
		   | 
		 
		
		   Centurion
 
 Joined: 08 Dec 2010 Posts: 135
  
  | 
		  
		    
			  
				++ Had posted same in WebSphere MQ Installation/Configuration Support forum. As there are less updates, added here for quicker attention  ++
 
 
MQ Server - MQv8.0.0.1 on Linux 
 
MQ Client(Explorer) - MQv7.5.0.1 on Windows. 
 
 
Not able to connect to remote queue manager. 
 
 
Configuration on explorer: 
 
QMname, HOST:PORT, Channel (SYSTEM.BKR.CONFIG) 
 
 
Here is o/p from server - 
 
   
	| Quote: | 
   
  
	
 
DISPLAY CHANNEL(SYSTEM.BKR.CONFIG) ALL 
 
1 : DISPLAY CHANNEL(SYSTEM.BKR.CONFIG) ALL 
 
AMQ8414: Display Channel details. 
 
CHANNEL(SYSTEM.BKR.CONFIG) CHLTYPE(SVRCONN) 
 
ALTDATE(2014-10-16) ALTTIME(17.44.56) 
 
CERTLABL( ) COMPHDR(NONE) 
 
COMPMSG(NONE) DESCR( ) 
 
DISCINT(0) HBINT(300) 
 
KAINT(AUTO) MAXINST(999999999) 
 
MAXINSTC(999999999) MAXMSGL(104857600) 
 
MCAUSER(mqsiadm) MONCHL(QMGR) 
 
RCVDATA( ) RCVEXIT( ) 
 
SCYDATA( ) SCYEXIT( ) 
 
SENDDATA( ) SENDEXIT( ) 
 
SHARECNV(10) SSLCAUTH(OPTIONAL) 
 
SSLCIPH( ) SSLPEER( ) 
 
TRPTYPE(TCP) 
 
 
 | 
   
 
 
 
 
So, when I connect via SYSTEM.BKR.CONFIG channel - the authorization will happen as per the mqsiadm user's group. 
 
 
For the mqsiadm user 
 
   
	| Quote: | 
   
  
	
 
[mqsiadm@HOST:errors]$ grep mqsiadm /etc/group 
 
mqsiadm:x:1018: 
 
mqm:x:1020:mqsiadm 
 
mqbrkrs:x:1021:mqsiadm 
 
[mqsiadm@tesoawsmb03q:errors]$ id 
 
uid=1017(mqsiadm) gid=1018(mqsiadm) groups=1018(mqsiadm),1020(mqm),1021(mqbrkrs) 
 
[mqsiadm@HOST:errors]$ 
 
 | 
   
 
 
This means - the user mqsiadm is member of mqsiadm, mqm and mqbrkrs groups (all 3) 
 
 
So, I did setmqaut for all the 3 groups on the queue manager as well as 'SYSTEM.BKR.CONFIG' SVRCONN channel. 
 
 
   
	| Quote: | 
   
  
	
 
[mqsiadm@HOST:errors]$ dspmqaut -m QMQ3POS -t qmgr -g mqsiadm 
 
Entity mqsiadm has the following authorizations for object QMQ3POS: 
 
inq 
 
set 
 
connect 
 
altusr 
 
crt 
 
dlt 
 
chg 
 
dsp 
 
setid 
 
setall 
 
ctrl 
 
system 
 
[mqsiadm@HOST:errors]$ dspmqaut -m QMQ3POS -t qmgr -g mqm 
 
Entity mqm has the following authorizations for object QMQ3POS: 
 
inq 
 
set 
 
connect 
 
altusr 
 
crt 
 
dlt 
 
chg 
 
dsp 
 
setid 
 
setall 
 
ctrl 
 
system 
 
[mqsiadm@HOST:errors]$ dspmqaut -m QMQ3POS -t qmgr -g mqbrkrs 
 
Entity mqbrkrs has the following authorizations for object QMQ3POS: 
 
inq 
 
set 
 
connect 
 
altusr 
 
crt 
 
dlt 
 
chg 
 
dsp 
 
setid 
 
setall 
 
system 
 
[mqsiadm@HOST:errors]$ 
 
 | 
   
 
 
 
All the 3 groups have same authority over queue manager 
 
 
Same goes for SYSTEM.BKR.CONFIG channel 
 
   
	| Quote: | 
   
  
	
 
[mqsiadm@HOST:errors]$ dspmqaut -m QMQ3POS -n SYSTEM.BKR.CONFIG -t channel -g mqsiadm 
 
Entity mqsiadm has the following authorizations for object SYSTEM.BKR.CONFIG: 
 
crt 
 
dlt 
 
chg 
 
dsp 
 
ctrl 
 
ctrlx 
 
[mqsiadm@HOST:errors]$ dspmqaut -m QMQ3POS -n SYSTEM.BKR.CONFIG -t channel -g mqbrkrs 
 
Entity mqbrkrs has the following authorizations for object SYSTEM.BKR.CONFIG: 
 
crt 
 
dlt 
 
chg 
 
dsp 
 
ctrl 
 
ctrlx 
 
[mqsiadm@HOST:errors]$ dspmqaut -m QMQ3POS -n SYSTEM.BKR.CONFIG -t channel -g mqm 
 
Entity mqm has the following authorizations for object SYSTEM.BKR.CONFIG: 
 
crt 
 
dlt 
 
chg 
 
dsp 
 
ctrl 
 
ctrlx 
 
[mqsiadm@HOST:errors]$ 
 
 | 
   
 
 
 
I tried with SSLCAUTH as OPTIONAL and REQUIRED - same error. 
 
 
Kindly suggest, what I am missing here. | 
			   
			 
		   | 
		 
		
		  | Back to top | 
		  
		  	
		   | 
		 
		
		    | 
		 
		
		  | fjb_saper | 
		  
		    
			  
				 Posted: Thu Oct 16, 2014 7:28 pm    Post subject:  | 
				     | 
			   
			 
		   | 
		 
		
		    Grand High Poobah
 
 Joined: 18 Nov 2003 Posts: 20768 Location: LI,NY 
  | 
		  
		    
		   | 
		 
		
		  | Back to top | 
		  
		  	
		   | 
		 
		
		    | 
		 
		
		  | 
		    
		   | 
		 
	   
	 | 
   
 
  
	     | 
	 | 
	Page 1 of 1 | 
   
 
 
 
  
  	
	  
		
		  
 
  | 
		  You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
  | 
  		 
	   
	 | 
   
 
  	 | 
	  |