MQ

MQ

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  runmqsc out of memory - WINS/DNS?

    Posted 23 days ago

    Hi Folks,

    I can't work out what is running out of memory and therefore what to increase - can anyone help pls.....

    i've got a win 2022 VM with 32Gb of memory. It has two QM on it - there is still plenty of free mem showing (25 Gb.)

    I...

    • create a new QM,
    • start it,
    • attempt to runmqsc command line (runmqsc TEST)

    and the result on the command line is:

    AMQ8157E: Security error.

    and in the TEST QM logs I get 5 x AMQ7227W "warnings"

    for processes

    (amqzlsa0.exe), (amqzlsa0.exe), (amqzlsa0.exe), (amqzlaa0.exe), (amqzlsa0.exe)

    in that order

    i.e. 4 for (amqzlsa0.exe) and 1 for (amqzlaa0.exe)

    ----------------------------

    AMQ7227W: IBM MQ encountered the following network error: Not enough memory
    resources are available to process this command.

    MQ failed to successfully complete a network operation due to the specified
    error. If the error is encountered on systems that are part of a Windows 2000
    domain it can indicate incorrect DNS or WINS configuration.

    -------------------

    I can see a amqzlsa0.exe for the other 2QM but none for my test QM. I can see a amqzlaa0 for my test VM

    I can still open an runmqsc command prompt against the other 2 QM.

    I can't connect to the QM in explorer - the same security error occurs.

    The MQ service is running using a domain account - which may have something to do with it?

    Anyone got any clues as to where to look next as to what specifically is running out of memory and how to increase it?? or what is wrong with my DNS/WINS config that is not affecting the other 2 QM !?

    many thanks folks !!



    ------------------------------
    John Hawkins
    Integration Consultant
    ------------------------------


  • 2.  RE: runmqsc out of memory - WINS/DNS?

    Posted 22 days ago
    Edited by Francois Brandelik 22 days ago

    Hi John,

    Do you have the GroupModel=GlobalGroups in your Security stanza in the qm.ini ?

    What user do you use to do runmqsc ? if you changed the membership of the local mqm group, did you log out and back in, then run (as administrator) the refresh security command?

    Have you tried running runmqsc in a command window with elevated privilege (run as admin)?

    Did you start the qmgr as a service and did you start it from a command window with elevated privilege?

    Hope it helps



    ------------------------------
    Francois Brandelik
    ------------------------------

    Original Message


  • 3.  RE: runmqsc out of memory - WINS/DNS?

    Posted 15 days ago

    Hi Francois - thanks for getting back to me...

    Ah ha - You might have put me on the right track here.

    I've created the QM as "interactive"  (this is windows)  and then runmqsc works fine. But if I start the QM as a service (-ss) then it fails again (regardless of whether i start it under an elevated account or not). Looks like there's a problem with running it under the windows service.

    The mq service is running as MUSR_MQADMIN1 (this is the local mqm user). This user is only a member of the mqm group.

    Is there some kind of memory limit on this user do you know?? From my limited reading on this subject it's not clear to me that you can easily set memory limits on windows users.

    thanks for the hints !!

    John.



    ------------------------------
    John Hawkins
    ------------------------------

    Original Message


  • 4.  RE: runmqsc out of memory - WINS/DNS?

    Posted 15 days ago

    Hmm, is there such a thing as the following for windows??

    All my reading tells me there isn't !

    kernel.msgmni = 1024
    kernel.shmmni = 4096
    kernel.shmall = 2097152
    kernel.sem = 500 256000 250 1024
    fs.file-max = 32768
    net.ipv4.tcp_keepalive_time = 300



    ------------------------------
    John Hawkins
    ------------------------------

    Original Message


  • 5.  RE: runmqsc out of memory - WINS/DNS?

    Posted 14 days ago
    Edited by Francois Brandelik 14 days ago

    Not to my knowledge.

    But windows accounts are tricky. If you run stuff, make sure your account is in the mqm group. If recently added, log out and back in again and make sure you run refresh security on the queue manager.

    If you have a problem running the qmgr as service, I would expect there might be something wrong with the local security policy. Verify that the 7 entries are set for the MQ Service account:

    • Act as part of the operating system
    • bypass traverse checking
    • ... some change memory stuff
    • login as batch
    • login as service
    • replace process level token
    • shutdown system

    If you changed any of those, you should bounce the server. At a minimum bounce the MQ service.

    I mostly run mq commands from an elevated dos prompt. That way if my id is not in the mqm group I can still run the commands...

    Hope it helps



    ------------------------------
    Francois Brandelik
    ------------------------------

    Original Message


  • 6.  RE: runmqsc out of memory - WINS/DNS?

    Posted 10 days ago

    Hi Francois,

    somehow we have been running with a local user as the MQ service. This has been configured like that for years without any issues. however, recently security has been tightened which meant that the user couldn't access the right domain groups anymore !

    We've moved to a, correct, domain user with the correct group read permissions, as it should have been all along, and all is well !

    thanks for your help francois !



    ------------------------------
    John Hawkins
    ------------------------------

    Original Message


Related Content