Thursday, July 2, 2015

fix mq connection error 2035 from websphere application server

Error description is as below

JMSWMQ2013: The security authentication was not valid that was supplied for QueueManager 'XYZ' with connection mode 'Client' and host name 'x.x.x.x(1415)'.
Please check if the supplied username and password are correct on the QueueManager to which you are connecting.
Caused by: com.ibm.mq.MQException: JMSCMQ0001: WebSphere MQ call failed with compcode '2' ('MQCC_FAILED') reason '2035' ('MQRC_NOT_AUTHORIZED').


To check authentication and authorization permissions for connecting to QMGR with a client user id

dspmqaut -m "QMGR NAME" -t qmgr -p "CLIENT USER ID"



To modify authentication and authorization permissions for connecting to QMGR with a client user id

setmqaut -m "QMGR NAME" -t qmgr -p "CLIENT USER ID" +all


runmqsc 
"QMGR NAME" 
REFRESH SECURITY(*)


To check authentication and authorization permissions for a particular channel connection to specified QMGR

dspmqaut -m "QMGR NAME" -n "Channel Name" -t channel -p "CLIENT USER ID"

 To modify authentication and authorization permissions for a particular channel connection to specified QMGR

setmqaut -m "QMGR NAME" -n "Channel Name" -t channel -p "CLIENT USER ID" +all


dspmquat Usage:

dspmqaut [-m QMgrName] [-n ObjName] -t ObjType
                (-p Principal | -g Group) [-s ServiceComponent]

 -g   User group name.
 -m   Queue manager name.
 -n   Profile name, either an object name or a generic profile name.
 -t   Object type:
        authinfo, channel, clntconn, comminfo, listener,
        namelist, process, queue, qmgr, rqmname, service,
        topic.
 -p   Principal name.
 -s   Name of the authorization service.

Make sure that client ID in WebSphere Application Server is correctly set and matches to the MCAUSER defined for the channel .
Otherwise , modify the value in WebSphere Console by following the below path

Resources , JMS, Queue Connection Factory, QCF Name, Client ID

Below is the command to modify MCAUSER for MQ Channel SYSTEM.DEF.SVRCONN in a particular Queue Manager

runmqsc
ALTER CHANNEL('SYSTEM.DEF.SVRCONN') CHLTYPE(SVRCONN) TRPTYPE(TCP) MCAUSER('MUSR_MQADMIN')  MAXMSGL(104857600)


1 comment:

Anonymous said...

Thank you. It worked :)