MQSeries.net :: View topic - Authorization issues in MQ6 on W3K

MQSeries.net

Tech Exchange

Education

Certifications

Library

Info Center

SupportPacs

FAQÂ Â

Usergroups

RSS Feed - WebSphere MQ Support

RSS Feed - Message Broker Support

MQSeries.net Forum Index » General IBM MQ Support » Authorization issues in MQ6 on W3K

Goto page Previous 1, 2

Authorization issues in MQ6 on W3K

« View previous topic :: View next topic »

Author

Message

Posted: Tue Sep 18, 2007 1:30 am Post subject:

Master

Joined: 31 May 2007
Posts: 254
Location: Sweden

PeterPotkay wrote:

The post on the list serve that I found this on said they thought it was related to VMWare not being able to query the nested domain group's members, that you had to add the individual IDs from that domain group individualy into the local mqm group. They weren't 100% sure though.

Yes, I think this is a known problem - that MQ can't go via AD groups to identify users. Does this apply to vmware only and is there a solution to it?
The user(s) we're trying with are added directly to the local mqm group.

This post was VERY promising but unfortunately didn't resolve the problem:
http://www.mqseries.net/phpBB2/viewtopic.php?p=184265&sid=7c9b0a05bccb7889673c56e95b9bfb81

We've sent in a PMR to IBM but for full support, the problem has to be recreated on a physical server.

jifster

Posted: Fri Sep 28, 2007 2:45 am Post subject:

Newbie

Joined: 28 Sep 2007
Posts: 1
Location: Birmingham, UK

Hi, I have a similar problem with V5.3 on W2K3. I have tried all the things mentioned but I am still unable connect to the QMs when logged in as a domain account. One thing to add is that I have logged in with another account from a trusted domain (i.e. not the domain the server is a member of) and this works OK. Problem only seems to occur when logged in using a domain account that is in the same domain as the server.

Any further help is greatly appreciated

fjb_saper

Posted: Fri Sep 28, 2007 2:56 am Post subject:

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20768
Location: LI,NY

you either add the domain user explicitly to an authorized group on the MQServer(non domain service account) or allow the domain service account to query for domain membership and domain group membership....

Read the Windows specific manuals...

_________________
MQ & Broker admin

Display posts from previous:

Goto page Previous 1, 2

Page 2 of 2

MQSeries.net Forum Index » General IBM MQ Support » Authorization issues in MQ6 on W3K

Jump to:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Protected by Anti-Spam ACP