Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations TouchToneTommy on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

SECURITY under IIS/W2K/MQSERIES 5.2/MQAX200 - MQRC_NOT_AUTHORIZED

Status
Not open for further replies.

milqs

Programmer
Apr 26, 2002
1
FR
hi everyone !

I hope you'll be able to help me with this MQSeries security trouble i really cannot handle.

my environment of work is :
-mqseries server 5.2
-mqax200 (mqseries activex)
-iis
-windows 2000

i have an ASP.NET application (designed in C#) using the MQAX200 ActiveX to connect to MQSeries. The MQSeries server in on the same computer than the IIS web server.

almost all users of this computer, including IUSR_<computer_name> (the user for anonymous web access), is in the Administrators AND mqm group.

but, when i want to connect to mqseries with this web application, i get a 2035 error : MQRC_NOT_AUTHORIZED.

i mentionned that i'm using the mqax200 activex, but i don't think that is related to the problem. because with another DLL (developped by my project team), the problem is still there.

i tried many solutions that i picked up on several places around the web, but nothing worked.
do you have an idea of what i could do to make this work ?

i thank you in advance for your help
cheers

milqs


 

Is it anything to do with it not being an interactive user?

If you copy the C# code into a console app project and run that, does that work? If it works this proves the interactive user security.


 
Make sure you know what userID the IIS application is running under. Sometimes people change this in the MMC snap-in. IUSR_<system> is the default, but can be changed - try changing this yourself even, to an ID that is mqm privelaged.

Is the application running under COM+ control? If so, you must set the package security correctly also.

Finally, make sure that authority is set correctly on the mq message queue - use the dspmqaut command to check the access rights to the queue.

Scott Meridew
Certified MQSeries Specialist, MCSE
TxMQ Inc.
scott@txmq.com
Scott Meridew
Certified MQSeries Specialist,MCSE
MQ Squared Inc.
 
Also, we have seen that MQ will not pick up new authentication rights (like being added to the MQM group) till the queue manager is restarted. Have you tried restarting the queue manager?

Vinoo Palayoor
IBM MQSeries Certified Specialist
 
Hi

This is Reddy ..Could you please tell me that How to write a ASP program for MQSeries.Please tell me the Installtions issues also like where to install MQServer and IIS and all those..

It would be great help if you could guve some suggesstion

Best regards
/reddy
 
Hello ALl,

Even I am facing the same problem but in adittion to that I need to knkow why is MQAX200 ActiveX requred when we have IBM classes for .net given , well when i am doing the same with classes I am also getting the security error , can anybody please help with the same.

Thanks in advance

vijay sharma
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top