| Author | Message | 
		
		  | HugoB | 
			  
				|  Posted: Fri Jun 18, 2004 3:42 am    Post subject: MQ logging authorisation problem on NT 4 |   |  | 
		
		  | Acolyte
 
 
 Joined: 26 Jun 2001Posts: 67
 
 
 | 
			  
				| Hi, 
 I have a problem with authorisation, I presume.
 It´s on NT 4 (SP6a) with MQ 5.3 CSD05.
 
 It all runs fine, no problem.
 But as soon as i want to view the error loggin (AMQERR01.LOG)
 I get some sort of garbage.
 
 18-06-04  13:21:56
 AMQ8003: MQM could not display the text for error 32771.
 -------------------------------------------------------------------------------
 18-06-04  13:21:56
 AMQ9410: MQM could not display the text for error 37904.
 -------------------------------------------------------------------------------
 
 I presume the user MUSR_MQADMIN is the owner of the logging process.
 And this user has maybe not have enough rights.
 
 My question is, where to look for on NT 4. The normal setting are set
 correct. Like an mqm group with its members. And the MUSR_MQADMIN
 is working correct, otherwise MQ would not work at all. I checked some things within Dcomcnfg.exe. It looks normal. (to me that is
  ) 
 One remark though, it´s a NT 4 machine within the MOD, so it is secured more than normal. This is probably the problem too.
 But .... where ???
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | -EdC- | 
			  
				|  Posted: Mon Jun 21, 2004 8:55 am    Post subject: log |   |  | 
		
		  | Newbie
 
 
 Joined: 21 Jun 2004Posts: 1
 Location: Nederland
 
 | 
			  
				| goto mainframe whit all, SU  _________________
 EdC
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | JasonE | 
			  
				|  Posted: Tue Jun 22, 2004 4:28 am    Post subject: |   |  | 
		
		  | Grand Master
 
 
 Joined: 03 Nov 2003Posts: 1220
 Location: Hursley
 
 | 
			  
				| 
   
	| Quote: |  
	| Check that the registry key At 5.2: "SYSTEM\CurrentControlSet\Services\EventLog\Application\MQSeries"
 At 5.3: "SYSTEM\CurrentControlSet\Services\EventLog\Application\WebSphere MQ"
 This key can be found under HKEY_LOCAL_MACHINE
 
 Ensure that the appropriate user Id(s) have the correct access rights so that they may open the key. Use regedt32 to verify and make amends where necessary.
 
 Check that the values under the registry key described above, are present.
 
 EventMessageFile should be set to '\bin\amqxms0n.dll'
 TypesSupported should be set to 0x07.
 
 Verify that there are no restrictions for the appropriate user Id(s) to gain access to the message library file (amqxms0n.dll).
 |  
 Note appropriate ids are the userid MQ is running under (set in dcomcnfg), and the mqm group.
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | HugoB | 
			  
				|  Posted: Tue Jun 22, 2004 6:38 am    Post subject: |   |  | 
		
		  | Acolyte
 
 
 Joined: 26 Jun 2001Posts: 67
 
 
 | 
			  
				| Thnx JasonE. 
 I will verify these.
 I found more of these checks from you on this board.
 But no luck, on the other hand, you do introduce some new ones !!
 
 Give it a try frist thing in the morning !!!
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | JasonE | 
			  
				|  Posted: Tue Jun 22, 2004 6:44 am    Post subject: |   |  | 
		
		  | Grand Master
 
 
 Joined: 03 Nov 2003Posts: 1220
 Location: Hursley
 
 | 
			  
				| If they dont work, take filemon and regmon (www.sysinternals.com) of an error message failing to come out, and search for access denied type errors.... 
 Oh, and let me know so I can update my list
  |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | HugoB | 
			  
				|  Posted: Wed Jun 23, 2004 3:57 am    Post subject: |   |  | 
		
		  | Acolyte
 
 
 Joined: 26 Jun 2001Posts: 67
 
 
 | 
			  
				| Hi JasonE, 
 Regmon/Filemon were the ones i already used.
 They did not help me.
 But they are very usefull tools indeed.
 
 The permissions on the registry tree, as you said, appear
 to have a big influence. I think this info will help to
 tackle the problem. Now I need to figure out what user(s)
 need to be added. Coz the defaults are added as i can compare
 with most of my other systems. It has to do with security restrictions
 on our regsitry here at the MOD.
 
 Thnx for your valuable info JasonE !
 
 I keep you posted if I find more info on this.
 
 Last edited by HugoB on Thu Jun 24, 2004 12:18 am; edited 1 time in total
 |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  | JasonE | 
			  
				|  Posted: Wed Jun 23, 2004 6:59 am    Post subject: |   |  | 
		
		  | Grand Master
 
 
 Joined: 03 Nov 2003Posts: 1220
 Location: Hursley
 
 | 
			  
				| If you still cant get it working, PM me with somewhere I can ftp a regmon and filemon log from, and I'll take a look - I've always found those tools answer this question (so far...)  |  | 
		
		  | Back to top |  | 
		
		  |  | 
		
		  |  |