Mq Error Reason Code 2035
Contents |
mqrc 2035 not authorized security MQRC_NOT_AUTHORIZED mqminfo 2035 2035 2035 2035 Technote (troubleshooting) Problem(Abstract) You are getting MQRC 2035, Not Authorized in your WebSphere MQ application or channel. You need to understand what mq error 2035 completion code 2 causes this failure. 2035 0x000007f3 MQRC_NOT_AUTHORIZED Cause MQRC 2035 (MQRC_NOT_AUTHORIZED) is returned when a user mq disable channel authentication is not authorized to perform the function that is attempted. Resolving the problem MQRC 2035 (MQRC_NOT_AUTHORIZED) is returned when a user is the call to initialize the user id failed with compcode 2 and reason 2035. not authorized to perform the function. Determine which object the user cannot access and provide the user access to the object. Debugging techniques: Use the dspmqaut (display authority command), to determine if the user has the
Mqconn Ended With Reason Code 2035
authorization to access the intended object. For more difficult problems a trace of the failure may be necessary. See "Additional information" for trace debugging pointers. For more details on how to take a trace, see: MustGather: Directions to start, end, and format trace Corrective action: Use the setmqaut (set or reset authority) command, to grant access to WebSphere MQ objects. You will then need to restart the queue manager to refresh the security cache, mqrc_not_authorized c# or via runmqsc run "REFRESH SECURITY(*)" to do the same. In some cases you may want to make the user a member of the "mqm" group. That will give the user full access to WebSphere MQ. For further details regarding the WebSphere MQ authority commands, refer to: dspmqaut (display authority) setmqaut (set or reset authority) Additional information Here's a quick overview of WMQ security: Users in the 'mqm' group and the 'mqm' userid (on UNIX) have full authority. Other users and groups need to be given limited authority through the OAM using 'setmqaut'. Imagine that a WMQ application issues a MQOPEN. Here is the sequence of events as that MQOPEN is handled by the application and its agent (note: this is a general flow. The internal routine names or the specific interactions between routines could change without any notification.) Application Agent (amqzlaa0) --> MQOPEN ----> zstMQOPEN ------> ziiMQOPEN --------> zcpSendReceiveAgent Pass request --> by IPC --> --> zlaProcessMessage ----> zlaProcessMQIRequest ------> zlaMQOPEN --------> zsqMQOPEN ----------> kpiMQOPEN ..... ------------> kqiAuthorityChecks --------------> zfu_as_calculateauthority *** Print useful info! *** <-------------- zfu_as_calculateauthority <------------ kqiAuthorityChecks ..... <---------- kpiMQOPEN <-------- zsqMQOPEN <------ zlaMQOPEN <---- zlaProcessMQIRequest Pass response <--
here for a quick overview of the site Help Center Detailed answers to any questions you might have Meta Discuss the workings and policies of this site About Us Learn more about Stack Overflow the company http://stackoverflow.com/questions/22456722/mqrc-not-authorized-reason-code-2035 Business Learn more about hiring developers or posting ads with us Stack Overflow Questions Jobs Documentation Tags Users Badges Ask Question x Dismiss Join the Stack Overflow Community Stack Overflow is a community of 6.2 million programmers, just like you, helping each other. Join them; it only takes a minute: Sign up MQRC_NOT_AUTHORIZED Reason Code 2035 up vote 0 down vote favorite 1 I have set up a MQ Server 7.1 on my local code 2 machine. I have set up a Queue Manager : QM_APPLE I am trying to run the sample .Net Code from the MQ Examples to PUT a message on the Queue : Q1. When I try to instantiate the MQQueueManager, I get the above error. I have tried following the Authorization steps in http://www-01.ibm.com/support/docview.wss?uid=swg21166937 but I am still getting the error. Obviously I am not specifying the parameters correctly here. Can anyone help? websphere-mq mq share|improve reason code 2035 this question edited Mar 17 '14 at 14:54 asked Mar 17 '14 at 14:17 Greg 1,16121439 This is the cmd line I am trying to use : setmqaut -m QM_APPLE -t qmgr -p greg@xyz-think +alladm ..... where I am the administrator on the machine name xyz-think –Greg Mar 17 '14 at 14:54 add a comment| 1 Answer 1 active oldest votes up vote 0 down vote accepted alladm is administrative privileges. It doesn't work for API privileges. Try with +allmqi. But that's generally not advisable. Try to drill down to specific authorization (like put, get, setid, setall) when you start developing a real application. http://pic.dhe.ibm.com/infocenter/wmqv7/v7r5/index.jsp?topic=%2Fcom.ibm.mq.ref.adm.doc%2Fq083500_.htm share|improve this answer answered Mar 17 '14 at 16:26 Umapathy 593415 I have trawled that page for hours and tried scores of other IBM authored "fixes". Nothing works. I have tried with your suggestion and it doesn't work. The error is still being thrown. The setmqaut tells me the command executed successfully but the error persists. There was another IBM "fix" that said the server administrator couldnt be the admin for a queue manager. Crazy but true. I added a new user to mqm group. Didnt work. Tried doing a get on the message. Didnt work. How can I drill down? Why can a message just be given saying what object ne