Remote Administration

[justcurious]

I am having trouble authenticating when trying to connect to a queue manager with mmc.

We are running MQSeries 5.0 on an NT4 member server.
I am running MQSeries 5.1 on my local NT4 workstation.

On the server, I have performed the following steps:
1) define channel(SYSTEM.ADMIN.SVRCONN) trptype(TCP) chltype(SVRCONN) descr('Remote Administration') mcauser('mqm')
2) strmqcsv QUEUE_MANAGER_NAME
3) added my domain login account to the local mqm group

When I try to connect to the queue manager from my local machine, I receive an authentication error:
"Access not authorized. You are not authorized to perform this operation. (AMQ4036)"

When I re-define the SVRCONN channel without the mcauser parameter, I have no problem connecting.

I have read other threads regarding this issue on this and other forums, but I have seen none that relate to a setup that mirrors mine ( IE: NT4 and v5.0 ).

Q1: Am I missing something?
Q2: Without the mcauser parameter, am I running with no security?
Q3: Do I need to upgrade MQ on the server to a newer version?

Any help will be appreciated.

 

[justcurious]

I figured it out.

Even after disabling my test account and removing it from all groups, I was still able to authenticate. That had me thinking that MQ was accepting annonymous connections.

What was actually happening was that MQ was doing it's own authentication and accepting my test account because it had been used to define a couple of queues and the SVRCONN channel.

Once I figured out where these entries were, I deleted them and things started to happen the way I expected them to.