| Author | Message | 
		
		  | sachinramesh | 
			  
				|  Posted: Thu Nov 07, 2024 10:41 pm    Post subject: Not authorised to runmqsc commands:Reset connauth |   |  | 
		
		  |  Disciple
 
 
 Joined: 20 Feb 2007Posts: 170
 
 
 | 
			  
				| HI , I have tried to alter my qmgr connauth properties with authinfo 'SYSTEM.DEFAULT.AUTHINFO.IDPWOS' and chckclnt as 'REQDADM'
 
 I tried to connect to the qmgr with uid and pwd and realized that the uid/pwd is for a different account and it will not work .
 
 Now i dont have the uid/pwd to connect to the qmgr , i want to alter the qmgr connauth to null.
 
 Is there a way to do it, as the runmqsc commnands are not working.
 This is on Linux servers where MQ verison is 9.3 .
 
 Error says:
 AMQ5540E: Application 'runmqsc' did not supply a user ID and password
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | gbaddeley | 
			  
				|  Posted: Sun Nov 10, 2024 2:56 pm    Post subject: |   |  | 
		
		  |  Jedi Knight
 
 
 Joined: 25 Mar 2003Posts: 2538
 Location: Melbourne, Australia
 
 | 
			  
				| Can you log in to the Linux server as mqm user, or sudo to mqm, or as a user that is in mqm group ? You can then use runmqsc command at the shell prompt. _________________
 Glenn
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | sachinramesh | 
			  
				|  Posted: Sun Nov 10, 2024 11:21 pm    Post subject: |   |  | 
		
		  |  Disciple
 
 
 Joined: 20 Feb 2007Posts: 170
 
 
 | 
			  
				| 
   
	| gbaddeley wrote: |  
	| Can you log in to the Linux server as mqm user, or sudo to mqm, or as a user that is in mqm group ? You can then use runmqsc command at the shell prompt. |  
 yes , i am  able to login to the server and also sudo to mqm user.Still i am facing the same issue.
 
 [user123@hostname ~]$ sudo su - mqm
 Last login: Mon Nov 11 06:45:56 CET 2024 on pts/1
 
 [mqm@hostname ~]$ runmqsc CMSS
 5724-H72 (C) Copyright IBM Corp. 1994, 2024.
 Starting MQSC for queue manager CMSS.
 AMQ8135E: Not authorized.
 
 No MQSC commands read.
 [mqm@hostname ~]$
 
 Error:
 AMQ5540E: Application 'runmqsc' did not supply a user ID and password
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | fjb_saper | 
			  
				|  Posted: Mon Nov 11, 2024 2:56 am    Post subject: Re: Not authorised to runmqsc commands:Reset connauth |   |  | 
		
		  |  Grand High Poobah
 
 
 Joined: 18 Nov 2003Posts: 20767
 Location: LI,NY
 
 | 
			  
				| 
   
	| sachinramesh wrote: |  
	| HI , I have tried to alter my qmgr connauth properties with authinfo 'SYSTEM.DEFAULT.AUTHINFO.IDPWOS' and chckclnt as 'REQDADM'
 
 I tried to connect to the qmgr with uid and pwd and realized that the uid/pwd is for a different account and it will not work .
 
 Now i dont have the uid/pwd to connect to the qmgr , i want to alter the qmgr connauth to null.
 
 Is there a way to do it, as the runmqsc commnands are not working.
 This is on Linux servers where MQ verison is 9.3 .
 
 Error says:
 AMQ5540E: Application 'runmqsc' did not supply a user ID and password
 |  This is why I hate using the default. Copy the default as your own and change the AUTHENMD(PAM).
 This will enable the authentication through the Unix PAM model, which you probably need.
 And don't forget the REFRESH SECURITY TYPE(CONNAUTH)
 
  _________________
 MQ & Broker admin
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | sachinramesh | 
			  
				|  Posted: Mon Nov 11, 2024 10:49 pm    Post subject: Re: Not authorised to runmqsc commands:Reset connauth |   |  | 
		
		  |  Disciple
 
 
 Joined: 20 Feb 2007Posts: 170
 
 
 | 
			  
				| 
   
	| fjb_saper wrote: |  
	| This is why I hate using the default. Copy the default as your own and change the AUTHENMD(PAM). This will enable the authentication through the Unix PAM model, which you probably need.
 And don't forget the REFRESH SECURITY TYPE(CONNAUTH)
 
  |  
 As i mentioned earlier i am not able to modify any authinfo parameters.
 Somehow i could connect to the qmgr in MQExploer using a different channel and saw that chcklocal parameter is set to REQUIRED and chckclnt is set to REQDADM.
 the mca user used in the channel i used to connect to mq explorer has only read access.
 
 looks like i have to delete and recreate the qmgr ,as all the admin users are needed to provide the uid/pwd and non admin users dont have access to modify the authinfo .
   
 Please suggest if there is any other option to change the authinfo parameter to optional.
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | sachinramesh | 
			  
				|  Posted: Tue Nov 12, 2024 4:06 am    Post subject: |   |  | 
		
		  |  Disciple
 
 
 Joined: 20 Feb 2007Posts: 170
 
 
 | 
			  
				| This is now fixed. 
 i have set the password for mqm user and connected to the qmgr to alter the authinfo parameters.
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  |  |