MQSeries.net :: View topic

rabm · Posted: Wed Jan 04, 2017 9:47 am Post subject:

Hi,
I am trying to connect to a v9 queue manager that has ldap enabled and CHCKCLNT(REQUIRED) using rfhutilc.
In rfhutil I have configured the Set Conn Id with userid (id1) and password and ticked used CSP.
I have used a MQCHLTAB to configure the connection (TLS).
I can connect fine using amqsputc

set MQSSLKEYR=F:\keys\key
set MQCHLLIB=F:\
set MQCHLTAB=AMQCLCHL.TAB
set MQSAMP_USER_ID=id1

amqsputc Q1 QM1
Sample AMQSPUT0 start
Enter password: passwd
target queue is Q1

Sample AMQSPUT0 end

But when I try and connect with rfhutilc it fails -

----- cmqxrsrv.c : 2363 -------------------------------------------------------
03/01/2017 11:10:45 - Process(4196.19) User(y) Program(amqzlaa0.exe)
Host(x) Installation(Installation1)
VRMF(9.0.0.0) QMgr(QM1)

AMQ5540: Application 'rfhutilc.exe' did not supply a user ID
and password

EXPLANATION:
The queue manager is configured to require a user ID and password, but none was
supplied.
ACTION:
Ensure that the application provides a valid user ID and password, or change
the queue manager configuration to OPTIONAL to allow applications to connect
which have not supplied a user ID and password.
----- amqzfuca.c : 4751 -------------------------------------------------------
03/01/2017 11:10:45 - Process(5828.6) User(y) Program(amqrmppa.exe)
Host(x) Installation(Installation1)
VRMF(9.0.0.0) QMgr(QM1)

AMQ9557: Queue Manager User ID initialization failed for 'id2'.

EXPLANATION:
The call to initialize the User ID 'id2' failed with CompCode 2 and Reason
2035.
ACTION:
Correct the error and try again.
----- cmqxrsrv.c : 2363 -------------------------------------------------------

The id2 is the id I am running the rfhutil client, not the id I am trying to connect with. (id2 has got access so not sure why the 2035).

Additional info -
dis AUTHINFO(USE.LDAP) AUTHTYPE(IDPWLDAP)

AUTHINFO(USE.LDAP) AUTHTYPE(IDPWLDAP)
ADOPTCTX(YES) DESCR( )
CONNAME(ldap1(50072),ldap2(50072))
CHCKCLNT(REQUIRED) CHCKLOCL(OPTIONAL)
CLASSGRP(group) CLASSUSR(user)
FAILDLAY(10) FINDGRP(member)
BASEDNG(OU=GROUPS)
BASEDNU(ou=ldap)
LDAPUSER(cn=BIND)
LDAPPWD(********************************)
SHORTUSR(cn) GRPFIELD(cn)
USRFIELD( ) AUTHORMD(SEARCHGRP)
NESTGRP(NO) SECCOMM(YES)
ALTDATE(2016-12-22) ALTTIME(16.00.00)

AMQ8414: Display Channel details.
CHANNEL(CLIENT.TO.QM1) CHLTYPE(CLNTCONN)
AFFINITY(PREFERRED) ALTDATE(2016-12-22)
ALTTIME(15.03.51) CERTLABL(cert1)
CLNTWGHT(0) COMPHDR(NONE)
COMPMSG(NONE) CONNAME(QM1(1414))
DEFRECON(NO) DESCR( )
HBINT(300) KAINT(AUTO)
LOCLADDR( ) MAXMSGL(4194304)
MODENAME( ) PASSWORD( )
QMNAME(QM1) RCVDATA( )
RCVEXIT( ) SCYDATA( )
SCYEXIT( ) SENDDATA( )
SENDEXIT( ) SHARECNV(10)
SSLCIPH(TLS_RSA_WITH_AES_256_CBC_SHA256)
SSLPEER(CN=client
) TPNAME( )
TRPTYPE(TCP) USERID( )

dis CHLAUTH('*')
6 : dis CHLAUTH('*')
AMQ8878: Display channel authentication record details.
CHLAUTH(CLIENT.TO.QM1) TYPE(ADDRESSMAP)
ADDRESS(*) USERSRC(CHANNEL)
AMQ8878: Display channel authentication record details.
CHLAUTH(CLIENT.TO.QM1) TYPE(BLOCKUSER)
USERLIST(nobody)
AMQ8878: Display channel authentication record details.
CHLAUTH(*) TYPE(ADDRESSMAP)
ADDRESS(*) USERSRC(NOACCESS)
AMQ8878: Display channel authentication record details.
CHLAUTH(*) TYPE(BLOCKUSER)
USERLIST(nobody
,*MQADMIN)

rfhutil v7.5.0 Build 220

Any ideas on how I can get rfhutilc to connect?