Peter, I had similar problems setting the MCAUSER on a receiver channel. It
is not as straight forward as with a SVRCONN (I don't fully understand
why).

This is what you have to do.

Authorizations needed for queue manager:  +inq, +connect, +set, + setall
Authorizations needed for destination queue and DLQ: +put and +setall

Setting those authorizations worked for me. None of my production receivers
now run with a blank MCAUSER and nobody can "play" in anyone else's queue!

Remember also, if you are giving your customer the name of an alias queue
as the destination queue, the Authorizations need to be set on the alias
not the base queue name.


Cheers

Bill Anderson
Senior Systems Analyst
SITA Atlanta, GA
770-303-3503 (office)
404-915-3190 (cell)
[EMAIL PROTECTED]
http://www.mconnect.aero/



                      "Potkay, Peter M
                      (PLC, IT)"                 To:       [EMAIL PROTECTED]
                      <[EMAIL PROTECTED]        cc:
                      RTFORD.COM>                Subject:  MCAUSER on a RCVR channel
                      Sent by: MQSeries
                      List
                      <[EMAIL PROTECTED]
                      AC.AT>


                      11/03/2003 04:17 PM
                      Please respond to
                      MQSeries List






I have a RCVR channel to my QM (QM1) from an outside company / queue
manager
called ABC.

The RCVR channel is called ABC.QM1, and I set the MCAUSER of this channel
to
"abcuser".

My goal is to use setmqaut to allow anyone coming over this channel access
to only the queues I allow.


So on QM1, I issued the following commands:

E:\>setmqaut -m QM1 -n ABC.LOCAL.QUEUE -t queue -p abcuser +all
The setmqaut command completed successfully.

E:\>setmqaut -m QM1 -t qmgr -p abcuser +connect
The setmqaut command completed successfully.

Issue the refresh security command, which comes back successfully.

E:\>dspmqaut -m QM1 -n ABC.LOCAL.QUEUE -t queue -p abcuser
Entity abcuser has the following authorizations for object ABC.LOCAL.QUEUE:
        get
        browse
        put
        inq
        set
        dlt
        chg
        dsp
        passid
        passall
        setid
        setall
        clr

E:\>dspmqaut -m QM1 -t qmgr -p abcuser
Entity abcuser has the following authorizations for object QM1:
        connect


There is a remote queue def on ABC pointing to ABC.LOCAL.QUEUE on QM1. Now
I
send 200 messages into this remote queue. The SNDR channel goes into retry.
I see 2035 errors on QM1.

1/03/2003  15:57:05
AMQ9509: Program cannot open queue manager object.

EXPLANATION:
The attempt to open either the queue or queue manager object 'QM1' on
queue manager 'QM1' failed with reason code 2035.
ACTION:
Ensure that the queue is available and retry the operation.
----- amqrmmqa.c : 1579
-------------------------------------------------------
11/03/2003  15:57:05
AMQ9599: Program could not open queue manager object.

EXPLANATION:
The attempt to open either the queue or queue manager object
'ABC.LOCAL.QUEUE'
on queue manager 'QM1' by user 'abcuser' failed with reason code 2035.
ACTION:
Ensure that the queue is available and retry the operation. If the message
is
from a remote Queue Manager, check the Message Channel Agent User
Identifier
has the correct authority.
----- amqrmmqa.c : 775
--------------------------------------------------------
11/03/2003  15:57:05
AMQ9999: Channel program ended abnormally.

EXPLANATION:
Channel program 'ABC.QM1' ended abnormally.
ACTION:
Look at previous error messages for channel program 'ABC.QM1' in the
error files to determine the cause of the failure.
----- amqrmrsa.c : 467
--------------------------------------------------------




How can I get this to work?




Peter Potkay
MQSeries Specialist
The Hartford Financial Services
[EMAIL PROTECTED]
x77906
IBM MQSeries Certified




This communication, including attachments, is for the exclusive use of
addressee and may contain proprietary, confidential or privileged
information. If you are not the intended recipient, any use, copying,
disclosure, dissemination or distribution is strictly prohibited. If
you are not the intended recipient, please notify the sender
immediately by return email and delete this communication and destroy all
copies.

Instructions for managing your mailing list subscription are provided in
the Listserv General Users Guide available at http://www.lsoft.com
Archive: http://vm.akh-wien.ac.at/MQSeries.archive

Instructions for managing your mailing list subscription are provided in
the Listserv General Users Guide available at http://www.lsoft.com
Archive: http://vm.akh-wien.ac.at/MQSeries.archive

Reply via email to