Mq Error 4036
Contents |
AMQ4036 or JMSWMQ2013 when using client connection as an MQ Administrator Technote (troubleshooting) Problem(Abstract) You create a new queue manager in WebSphere mq reason code 2035 while trying to connect MQ 7.1, 7.5, 8.0 or 9.0 or later and you try to use
Disable Chlauth Mq
a user id that is an MQ Administrator to access the queue manager via a server-connection channel (remotely from another mq disable channel authentication host, or locally from the same host and not using bindings mode). You get an error with reason code 2035: 2035 MQRC_NOT_AUTHORIZED Related error codes: MQ Explorer => AMQ4036 MQ classes for
Mq Error 2035 Completion Code 2
JMS => JMSWMQ2013 The MQ Administrator can remotely access (via a server-connection channel) without problems other MQ queue managers at version 6 or 7.0.x. Cause You created a new queue manager in MQ 7.1 or later. The default value for the new feature introduced in 7.1, "Channel Authentication Records" (CHLAUTH) is ENABLED. You can see the value by using runmqsc: $ runmqsc QmgrName DISPLAY QMGR CHLAUTH the call to initialize the user id failed with compcode 2 and reason 2035. AMQ8408: Display Queue Manager details. QMNAME(TEST01) CHLAUTH(ENABLED) By default, the following 3 channel authentication records are generated when a new queue manager is created in 7.1 or upgraded to 7.1: DISPLAY CHLAUTH(*) 1 : DISPLAY CHLAUTH(*) AMQ8878: Display channel authentication record details. CHLAUTH(SYSTEM.ADMIN.SVRCONN) TYPE(ADDRESSMAP) ADDRESS(*) USERSRC(CHANNEL) AMQ8878: Display channel authentication record details. CHLAUTH(SYSTEM.*) TYPE(ADDRESSMAP) ADDRESS(*) USERSRC(NOACCESS) AMQ8878: Display channel authentication record details. CHLAUTH(*) TYPE(BLOCKUSER) USERLIST(*MQADMIN) The last record blocks all server-connection channel access to any MQ Administrator. The effect is that non-administrative users can still connect if suitably authorized to do so, but administrative connections and anonymous connections are disallowed regardless of any Object Authority Manager (OAM) authorization settings. This means that new queue managers in V7.1 are much more secure by default than in previous versions, but with the trade off that administrative access must be explicitly defined. +++ Additional notes: a) If you upgraded a queue manager to MQ 7.1 this new feature is NOT enabled by default. $ runmqsc QmgrName DISPLAY QMGR CHLAUTH AMQ8408: Display Queue Manager details. QMNAME(TEST01) CHLAUTH(DISABLED) However, this new feature can be enabled by issuing the following command in runmqsc: ALTER QMGR CHLAUTH(ENABLED) b) You use the MQ Expl
Latest Post - 2012-01-11T21:27:52Z by fjb_saper Display:ConversationsBy Date 1-6 of 6 Previous Next TS7S_Vasant_Parab 270002TS7S 3 Posts Pinned topic ( AMQ4036) Error 2012-01-09T11:33:53Z | Tags: Answered question This question has been answered. Unanswered
Mqje001 Reason 2035
question This question has not been answered yet. Hello, I have installed WebSphere
Setmqaut Command In Mq
MQ on two machines running on Windows XP platform. Both the PC's are within a local network. Created Queue set chlauth Manager QM1 on machine 1 and Queue Manager on QM 2. Created Server connection channel SYSTEM.ADMIN.SVRCONN on both as well as client connections. Both the Queue Managers have Listener running on http://www.ibm.com/support/docview.wss?uid=swg21577137 port 1414. Now I want to create a cluster with QM1 as a local Queue Manager while QM2 as a remote Queue Manager. But I am getting an error "You are not authorized to perform this operation. (AMQ4036)". Tried this ALTER CHANNEL(SYSTEM.ADMIN.SVRCONN) CHLTYPE(SVRCONN) MCAUSER('nobody') but its not working. Replaced 'nobody' with MUSER_MQADMIN. Could someone please help me on this. Thanks in advance! V https://www.ibm.com/developerworks/forums/thread.jspa?threadID=414284 Log in to reply. Updated on 2012-01-11T21:27:52Z at 2012-01-11T21:27:52Z by fjb_saper fjb_saper 110000H916 201 Posts Re: ( AMQ4036) Error 2012-01-09T19:53:44Z This is the accepted answer. This is the accepted answer. Define what you mean with "Now I want to create a cluster with QM1 as a local Queue Manager while QM2 as a remote Queue Manager". Are you talking about MSCS cluster or MQ Cluster?? Clarify your concept of a "remote qmgr". Log in to reply. TS7S_Vasant_Parab 270002TS7S 3 Posts Re: ( AMQ4036) Error 2012-01-10T04:13:49Z This is the accepted answer. This is the accepted answer. fjb_saper 110000H916 2012-01-09T19:53:44Z Define what you mean with "Now I want to create a cluster with QM1 as a local Queue Manager while QM2 as a remote Queue Manager". Are you talking about MSCS cluster or MQ Cluster?? Clarify your concept of a "remote qmgr". More... Queue Manager QM1 is on PC1(192.168.100.101:1414) while Queue Manager QM2 is on PC2(192.168.100.105:1414) I want to create a MQ Cluster on PC1 with QM1 will be a local Queue Manager and QM2 will be a remote Queue Manager. But I am getting an error AMQ4036
: Accessnot permitted. You are not authorized to perform this operation Setup: User has two IDs. • Linux user ID: j1234d • Windows ID: mydomain\jdove Queue Manager (QM1) is on Linux machine http://chandralekha.blogspot.com/2011/03/amq4036-error-connecting-to-queue.html and the Linux ID "j1234d" has access to the queue manager. MQ Explorer is on Windows machine where the user is logged on with Windows ID "mydomain\jdove". When user tries to connect to QM1 from Windows http://www.webspheretools.com/sites/webspheretools.nsf/docs/AMQ4036%20Error machine using MQ Explorer, he/she gets the following error. Resolution: MQ Explorer makes a client connection and the credentials passed to the QM1 on Linux server would be "mydomain\jdove". Since the ID "mydomain\jdove" is not code 2 defined on the Linux server, it fails to get authenticated. Simple way to resolve: 1. Create ID "j1234d" on your Windows machine and use MQ Explorer to connect to the QM1 on Linux Server However above fix would need you to log off current Windows session and sign in as "j1234d". This is a pain. Instead, do the following: Create ID "j1234d" on your Windows machine and use MQ Explorer to connect mq error 4036 to the QM1 on Linux Server Create a Windows batch script as shown : set APPDATA= runas /env /user: "strmqcfg -d" So for the above example it would be: set APPDATA=D:\mqeclipse\mqcm5dev runas /env /user:j1234d "strmqcfg -d" When you run the above script, at the prompt enter the password you have set for the id you created for id ‘j1234d'The runas command makes the MQ Explorer to run under the local id which is the equivalent of the Linux id. When we run the MQ Explorer process under the id , the credentials will be passed as is ( eg:'j1234d') and you will be able to connect to the queue manager since this ID on Linux server has access to the queue manager QM1. The same solution can be used if you are getting error"Not authorized" with RFHUTILC utility. The following screen shows the error. Use the above approach to circumvent the error. Hope this helps!!! Posted by UBS at 3/15/2011 01:35:00 PM Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest Labels: WebSphere MQ No comments: Post a Comment Older Post Home Subscribe to: Post Comments (Atom) About Me UBS View my complete profile Labels WebSphere MQ (2) $$$ (1) JAVA (1) NET (1) Tool Kit (1) UNIX (1) WEBSERVICES (1) WebLogic
09-Jun-2011 Related Document Categories: MqMq ExplorerWmqAmq4036 Error Get my WebSphere MQ course here >> http://www.themiddlewareshop.com/products/ AMQ4036 Severity 10 : Warning Message Access not permitted. You are not authorized to perform this operation. Explanation The queue manager's security mechanism has indicated that the userid associated with this request is not authorized to access the object. Solution: Problem is that you have defined a username and password in your MQ Client application or MQ Explorer and the user doesn't exist on the MQ server's operating system. For linux use useradd, for Window Add a user using the Manage Computer applet. Get my WebSphere MQ course here >> http://www.themiddlewareshop.com/products/ About Me Steve Robinson has been working in IT for over 20 years and has provided solutions for many large-enterprise corporate companies across the world. Steve specialises in Java and Middleware. In January 2013, I was awarded the prestigous 'IBM Champion' accolade. Linked In Twitter About Me My Blog Contact Me Read my books? IBM WebSphere Application Server 8.0 Administration Guide WebSphere Application Server 7.0 Administration Guide WebSphere Blog Recent Articles All Articles WebSphere Categories WebSphere Consultant WebSphere Application Server WebSphere Message Broker WebSphere MQ Jython JACL Install Rational Other Categories Shell Scripts Java Consultant Java Sample Code JMS MBeans Tomcat Clustering & Load balance> Websphere Tips Eclipse Contact | Articles | Shell Scripts | Java Code | JACL | Jython | WebSphere MQ | WebSphere Message Broker | WebSphere Blog | © Copyright 2006-2013 Robinson (UK) Limited