Re: MQClient authorization error (2035)
Rebecca may be on the right track. Check that the NIS account is in an authorised group on the server. I would also ensure that the account number (use the command "id" on both servers) and group numbers are the same on both servers. Regards John. -Original Message- From: Sony Varghese [mailto:[EMAIL PROTECTED] Sent: 02 June 2003 15:51 To: [EMAIL PROTECTED] Subject: Re: MQClient authorization error (2035) Hi John, My userid is a NIS userid id .. The MCAUSER is set to blank .. Regards Sony -Original Message- From: John Scott [mailto:[EMAIL PROTECTED] Sent: 02 June 2003 17:18 To: [EMAIL PROTECTED] Subject: Re: MQClient authorization error (2035) Are you logging on using a different user name from the client? What is the MCAUSER set to for the server connection channel the client is using? Regards John. -Original Message- From: Sony Varghese [mailto:[EMAIL PROTECTED] Sent: 02 June 2003 14:58 To: [EMAIL PROTECTED] Subject: MQClient authorization error (2035) Hi , I'm getting a 2035 error when I run amqsputc (MQClient) on a UNIX box. If I log in to the UNIX box where MQSeries is installed and run amqsput (MQServer), the program works fine. If it works fine on the server, shouldn't it also work fine on the client? Any idea why this happens? Do reply Regards Sony Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive ** Click here to visit the Argos home page http://www.argos.co.uk The information contained in this message or any of its attachments may be privileged and confidential, and is intended exclusively for the addressee. The views expressed may not be official policy, but the personal views of the originator. If you are not the intended addressee, any disclosure, reproduction, distribution, dissemination or use of this communication is not authorised. If you have received this message in error, please advise the sender by using your reply facility in your e-mail software. All messages sent and received by Argos Ltd are monitored for virus, high risk file extensions, and inappropriate content. As a result users should be aware that mail maybe accessed. ** Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: MQClient authorization error (2035)
... but that's probably slightly better than the default behaviour, which is that any client is able to connect and run with the authority of any user on your machine, including "mqm" (this is particularly trivial in java code, but it's perfectly possible to do it using MQ client in C or any other language that lets you write client side exits). If someone needs to use client connections, and a requirement to control access to the queue manager, they minimally need some kind of server side security exit to provide some kind of access control (for those not wanting to "roll your own" there are products from Candle, Primeur and doubtless others), or you need to be running WMQ 5.3 and using the SSL support. Off the shelf, the client supplies the user Id and the server assumes the client did the authorisation checking. The "password" is not used on distributed platforms, although it is passed across and could be checked by a server side security exit, if you wrote one to do so. Nigel --- [EMAIL PROTECTED] RIMEUR.COM To: [EMAIL PROTECTED] Sent by: cc: [EMAIL PROTECTED] Subject: Re: MQClient authorization error (2035) .AC.AT 06/03/03 10:14 AM Please respond to MQSERIES Be aware that if you do this, any client will be able to connect and run with the authority of that account. Dave -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED] Behalf Of Andrew Miller Sent: 03 June 2003 09:30 To: [EMAIL PROTECTED] Subject: Re: MQClient authorization error (2035) Sony, the simple solution is to set the MCAUSER id up on the client svrconn channel to have a valid userid/account ie. one which exists on the box. It cannae be blank. Windy Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive This communication is for informational purposes only. It is not intended as an offer or solicitation for the purchase or sale of any financial instrument or as an official confirmation of any transaction. All market prices, data and other information are not warranted as to completeness or accuracy and are subject to change without notice. Any comments or statements made herein do not necessarily reflect those of J.P. Morgan Chase & Co., its subsidiaries and affiliates. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: MQClient authorization error (2035)
Be aware that if you do this, any client will be able to connect and run with the authority of that account. Dave -Original Message- From: MQSeries List [mailto:[EMAIL PROTECTED] Behalf Of Andrew Miller Sent: 03 June 2003 09:30 To: [EMAIL PROTECTED] Subject: Re: MQClient authorization error (2035) Sony, the simple solution is to set the MCAUSER id up on the client svrconn channel to have a valid userid/account ie. one which exists on the box. It cannae be blank. Windy Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: MQClient authorization error (2035)
Sony, the simple solution is to set the MCAUSER id up on the client svrconn channel to have a valid userid/account ie. one which exists on the box. It cannae be blank. Windy On 02/06/2003 15:57:43 MQSeries List wrote: >Hi , > >I'm getting a 2035 error when I run amqsputc (MQClient) on a UNIX box. >If I log in to the UNIX box where MQSeries is installed and run amqsput >(MQServer), the program works fine. > >If it works fine on the server, shouldn't it also work fine on the client? >Any idea why this happens? > >Do reply > >Regards >Sony > >Instructions for managing your mailing list subscription are provided in >the Listserv General Users Guide available at http://www.lsoft.com >Archive: http://vm.akh-wien.ac.at/MQSeries.archive For more information on Standard Life, visit our website http://www.standardlife.com/ The Standard Life Assurance Company, Standard Life House, 30 Lothian Road, Edinburgh EH1 2DH, is registered in Scotland (No. SZ4) and regulated by the Financial Services Authority. Tel: 0131 225 2552 - calls may be recorded or monitored. This confidential e-mail is for the addressee only. If received in error, do not retain/copy/disclose it without our consent and please return it to us. We virus scan and monitor all e-mails but are not responsible for any damage caused by a virus or alteration by a third party after it is sent. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: MQClient authorization error (2035)
Sony, I'm not familiar with NIS userids, but from the context, I'd guess they're like a single signon or a Windows domain signon? Is the userid you are using the same in both cases? MQ security on Unix is based on the user's group; does using NIS have any effect on the group assignment? One thing you could do is turn on Authority Events (I think the4 syntax is "ALTER QMGR AUTHOREV(ENABLED)", but that's from memory and should be checked. Then when you get the 2035, an event message should be written to the SYSTEM.ADMIN.QMGR.EVENT (wouldn't sear that's the right name, either). This should tell you in more detail where the problem lies. -Original Message- From: Sony Varghese [mailto:[EMAIL PROTECTED] Sent: Monday, June 02, 2003 11:50 AM To: [EMAIL PROTECTED] Subject: Re: MQClient authorization error (2035) Hi Rebecca, The scenario you have described is correct. My userid is a NIS userid id .. There's no seperate security set up for the queue manager Regards Sony -Original Message- From: Bullock, Rebecca (CSC) [mailto:[EMAIL PROTECTED] Sent: 02 June 2003 16:20 To: [EMAIL PROTECTED] Subject: Re: MQClient authorization error (2035) Sony, it's unclear from your question exactly what your issue is. Here's what I think you're asking: On Unix box A, you set up the MQSERVER variable (or a client channel table) which connects you to Unix box B. Then when you try to use amqsputc on A, you get a 2035 error. If, however, you log in on Unix box B and use amqsput, it runs fine. If this correct, then: Is the userid you are using on A defined on B and if it is, have you set up security to allow that userid to connect and to write to the queue? Just a thought, based on what I think you're asking -- Rebecca Rebecca Bullock Computer Sciences Corporation MFCoE/Newark CS Team Educational Testing Service Account Princeton, NJ 08541 email: [EMAIL PROTECTED] or [EMAIL PROTECTED] -Original Message- From: Sony Varghese [mailto:[EMAIL PROTECTED] Sent: Monday, June 02, 2003 10:58 AM To: [EMAIL PROTECTED] Subject: MQClient authorization error (2035) Hi , I'm getting a 2035 error when I run amqsputc (MQClient) on a UNIX box. If I log in to the UNIX box where MQSeries is installed and run amqsput (MQServer), the program works fine. If it works fine on the server, shouldn't it also work fine on the client? Any idea why this happens? Do reply Regards Sony Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive ** This e-mail and any files transmitted with it may contain privileged or confidential information. It is solely for use by the individual for whom it is intended, even if addressed incorrectly. If you received this e-mail in error, please notify the sender; do not disclose, copy, distribute, or take any action in reliance on the contents of this information; and delete it from your system. Any other use of this e-mail is prohibited. Thank you for your compliance. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive ** This e-mail and any files transmitted with it may contain privileged or confidential information. It is solely for use by the individual for whom it is intended, even if addressed incorrectly. If you received this e-mail in error, please notify the sender; do not disclose, copy, distribute, or take any action in reliance on the contents of this information; and delete it from your system. Any other use of this e-mail is prohibited. Thank you for your compliance. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: MQClient authorization error (2035)
Hi John, My userid is a NIS userid id .. The MCAUSER is set to blank .. Regards Sony -Original Message- From: John Scott [mailto:[EMAIL PROTECTED] Sent: 02 June 2003 17:18 To: [EMAIL PROTECTED] Subject: Re: MQClient authorization error (2035) Are you logging on using a different user name from the client? What is the MCAUSER set to for the server connection channel the client is using? Regards John. -Original Message- From: Sony Varghese [mailto:[EMAIL PROTECTED] Sent: 02 June 2003 14:58 To: [EMAIL PROTECTED] Subject: MQClient authorization error (2035) Hi , I'm getting a 2035 error when I run amqsputc (MQClient) on a UNIX box. If I log in to the UNIX box where MQSeries is installed and run amqsput (MQServer), the program works fine. If it works fine on the server, shouldn't it also work fine on the client? Any idea why this happens? Do reply Regards Sony Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive ** Click here to visit the Argos home page http://www.argos.co.uk The information contained in this message or any of its attachments may be privileged and confidential, and is intended exclusively for the addressee. The views expressed may not be official policy, but the personal views of the originator. If you are not the intended addressee, any disclosure, reproduction, distribution, dissemination or use of this communication is not authorised. If you have received this message in error, please advise the sender by using your reply facility in your e-mail software. All messages sent and received by Argos Ltd are monitored for virus, high risk file extensions, and inappropriate content. As a result users should be aware that mail maybe accessed. ** Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: MQClient authorization error (2035)
Hi Rebecca, The scenario you have described is correct. My userid is a NIS userid id .. There's no seperate security set up for the queue manager Regards Sony -Original Message- From: Bullock, Rebecca (CSC) [mailto:[EMAIL PROTECTED] Sent: 02 June 2003 16:20 To: [EMAIL PROTECTED] Subject: Re: MQClient authorization error (2035) Sony, it's unclear from your question exactly what your issue is. Here's what I think you're asking: On Unix box A, you set up the MQSERVER variable (or a client channel table) which connects you to Unix box B. Then when you try to use amqsputc on A, you get a 2035 error. If, however, you log in on Unix box B and use amqsput, it runs fine. If this correct, then: Is the userid you are using on A defined on B and if it is, have you set up security to allow that userid to connect and to write to the queue? Just a thought, based on what I think you're asking -- Rebecca Rebecca Bullock Computer Sciences Corporation MFCoE/Newark CS Team Educational Testing Service Account Princeton, NJ 08541 email: [EMAIL PROTECTED] or [EMAIL PROTECTED] -Original Message- From: Sony Varghese [mailto:[EMAIL PROTECTED] Sent: Monday, June 02, 2003 10:58 AM To: [EMAIL PROTECTED] Subject: MQClient authorization error (2035) Hi , I'm getting a 2035 error when I run amqsputc (MQClient) on a UNIX box. If I log in to the UNIX box where MQSeries is installed and run amqsput (MQServer), the program works fine. If it works fine on the server, shouldn't it also work fine on the client? Any idea why this happens? Do reply Regards Sony Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive ** This e-mail and any files transmitted with it may contain privileged or confidential information. It is solely for use by the individual for whom it is intended, even if addressed incorrectly. If you received this e-mail in error, please notify the sender; do not disclose, copy, distribute, or take any action in reliance on the contents of this information; and delete it from your system. Any other use of this e-mail is prohibited. Thank you for your compliance. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: MQClient authorization error (2035)
Sony, it's unclear from your question exactly what your issue is. Here's what I think you're asking: On Unix box A, you set up the MQSERVER variable (or a client channel table) which connects you to Unix box B. Then when you try to use amqsputc on A, you get a 2035 error. If, however, you log in on Unix box B and use amqsput, it runs fine. If this correct, then: Is the userid you are using on A defined on B and if it is, have you set up security to allow that userid to connect and to write to the queue? Just a thought, based on what I think you're asking -- Rebecca Rebecca Bullock Computer Sciences Corporation MFCoE/Newark CS Team Educational Testing Service Account Princeton, NJ 08541 email: [EMAIL PROTECTED] or [EMAIL PROTECTED] -Original Message- From: Sony Varghese [mailto:[EMAIL PROTECTED] Sent: Monday, June 02, 2003 10:58 AM To: [EMAIL PROTECTED] Subject: MQClient authorization error (2035) Hi , I'm getting a 2035 error when I run amqsputc (MQClient) on a UNIX box. If I log in to the UNIX box where MQSeries is installed and run amqsput (MQServer), the program works fine. If it works fine on the server, shouldn't it also work fine on the client? Any idea why this happens? Do reply Regards Sony Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive ** This e-mail and any files transmitted with it may contain privileged or confidential information. It is solely for use by the individual for whom it is intended, even if addressed incorrectly. If you received this e-mail in error, please notify the sender; do not disclose, copy, distribute, or take any action in reliance on the contents of this information; and delete it from your system. Any other use of this e-mail is prohibited. Thank you for your compliance. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: MQClient authorization error (2035)
Are you logging on using a different user name from the client? What is the MCAUSER set to for the server connection channel the client is using? Regards John. -Original Message- From: Sony Varghese [mailto:[EMAIL PROTECTED] Sent: 02 June 2003 14:58 To: [EMAIL PROTECTED] Subject: MQClient authorization error (2035) Hi , I'm getting a 2035 error when I run amqsputc (MQClient) on a UNIX box. If I log in to the UNIX box where MQSeries is installed and run amqsput (MQServer), the program works fine. If it works fine on the server, shouldn't it also work fine on the client? Any idea why this happens? Do reply Regards Sony Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive ** Click here to visit the Argos home page http://www.argos.co.uk The information contained in this message or any of its attachments may be privileged and confidential, and is intended exclusively for the addressee. The views expressed may not be official policy, but the personal views of the originator. If you are not the intended addressee, any disclosure, reproduction, distribution, dissemination or use of this communication is not authorised. If you have received this message in error, please advise the sender by using your reply facility in your e-mail software. All messages sent and received by Argos Ltd are monitored for virus, high risk file extensions, and inappropriate content. As a result users should be aware that mail maybe accessed. ** Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
Re: MQClient authorization error (2035)
When you run as the client, you are connecting to the QM via a SVRCONN channel. On that SVRCONN channel, there is an attribute called MCAUSERIDENTIFIER. If there is a value specified there, that is the ID that MQ is authenticating against. If it is blank, then the ID that you are logged onto your client machine is used. Or you may have a security exit setting the ID. Regardless of where the ID is being actually set, if that ID is not authorized, you will get a 2035. -Original Message- From: Sony Varghese [mailto:[EMAIL PROTECTED] Sent: Monday, June 02, 2003 10:58 AM To: [EMAIL PROTECTED] Subject: MQClient authorization error (2035) Hi , I'm getting a 2035 error when I run amqsputc (MQClient) on a UNIX box. If I log in to the UNIX box where MQSeries is installed and run amqsput (MQServer), the program works fine. If it works fine on the server, shouldn't it also work fine on the client? Any idea why this happens? Do reply Regards Sony Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive This communication, including attachments, is for the exclusive use of addressee and may contain proprietary, confidential or privileged information. If you are not the intended recipient, any use, copying, disclosure, dissemination or distribution is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return email and delete this communication and destroy all copies. Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
MQClient authorization error (2035)
Hi , I'm getting a 2035 error when I run amqsputc (MQClient) on a UNIX box. If I log in to the UNIX box where MQSeries is installed and run amqsput (MQServer), the program works fine. If it works fine on the server, shouldn't it also work fine on the client? Any idea why this happens? Do reply Regards Sony Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
