MQ

 View Only
Expand all | Collapse all

MQ Explorer on new pc will not connect to queue manager but did on old pc

  • 1.  MQ Explorer on new pc will not connect to queue manager but did on old pc

    Posted Wed April 28, 2021 03:03 PM
    I got a new pc from work this week, and I have installed all the tools, including MQ explorer (via the z/OS explorer install manager).  I exported the mq explorer settings and imported them in the new environment.

    I can connect to all the local queue managers except for one.  When I try to connect to it, mq explorer is telling me "Access not permitted.  You are not authorized to perform this operation (AMQ4036)"

    I'm not using a different id to connect to it.

    The only thing different is the level of mq explorer in z/os explorer.  on the old pc it's 9.1.3.0 and on the new pc it's 9.2.1.0.

    The target queue manager is on AIX and is at 9.1.4.  Another AIX queue manager at the same version/release I am able to connect to.

    Any ideas?

    Peter

    ------------------------------
    Peter Vander Woude
    ------------------------------


  • 2.  RE: MQ Explorer on new pc will not connect to queue manager but did on old pc

    Posted Wed April 28, 2021 06:24 PM
    You can check AMQERR0x.log files on the queue manager you are trying to connect, look for a 2035 error.  It may help to identify what is failing
    Regards

    ------------------------------
    JOAO MIGUEL RAMIRES
    ------------------------------



  • 3.  RE: MQ Explorer on new pc will not connect to queue manager but did on old pc

    IBM Champion
    Posted Thu April 29, 2021 02:09 AM

    Could you confirm something for me please? Your question suggests that the queue manager that you cannot connect to is local, you say "I can connect to all the local queue managers except for one", but then later you say that the target queue manager is on AIX. 

    Could you say the following about the problematic queue manager:-

    • It's platform
    • It's IBM MQ version
    • Are you connecting using a client connection or is it local to your MQ Explorer
    • What errors are shown in the queue manager AMQERR01.LOG when you attempt to connect your MQ Explorer to it? (The MQ Explorer can only report a very generic "security says no" type of message - all the details are kept at the queue manager).
    Cheers,
    Morag


    ------------------------------
    Morag Hughson
    MQ Technical Education Specialist
    MQGem Software Limited
    Website: https://www.mqgem.com
    ------------------------------



  • 4.  RE: MQ Explorer on new pc will not connect to queue manager but did on old pc

    Posted Thu April 29, 2021 09:20 AM
    Morag,

    The queue manager is on AIX 7.2.  The queue manager itself is v9.1.4.

    I am trying to connect using MQ Explorer v9.2.

    When I login to that server, via ssh, and find the logs, there are no error messages at all, related to my connection attempts.

    What I meant by all the local queue managers, I meant the queue managers that are in our datacenter, of which we have 2 on AIX 7.2.  One is dev/qa, and I can connect to it.  The second is a production queue manager and is the one I cannot connect to.

    I tested to verify that something is not blocking me from connecting to the queue manager by using curl as below:

    curl -v telnet://abc.wyx.com:1419

    This connects up just fine.  But MQ explorer still gives me the error about security when I try to connect to the queue managers.

    ------------------------------
    Peter Vander Woude
    ------------------------------



  • 5.  RE: MQ Explorer on new pc will not connect to queue manager but did on old pc

    Posted Thu April 29, 2021 09:31 AM
    And the error MQ Explorer gives you , can you share it ? What channel are you using to connect the production queue manager ?

    ------------------------------
    Joao Ramires
    ------------------------------



  • 6.  RE: MQ Explorer on new pc will not connect to queue manager but did on old pc

    Posted Thu April 29, 2021 09:40 AM
    The profile is set to connect to SYSTEM.ADMIN.SVRCONN
    Here is the error message I'm getting:


    Peter

    ------------------------------
    Peter Vander Woude
    ------------------------------



  • 7.  RE: MQ Explorer on new pc will not connect to queue manager but did on old pc

    Posted Thu April 29, 2021 10:04 AM
    I believe you may have a rule blocking remote access to that queue manager . Remote administration needs to be "open" if you want to do use it. 
    Do you have access to the queue manager? Command line access? If this is the case you can do the necessary setup to admin remotly that queue manager.

    ------------------------------
    Joao Ramires
    ------------------------------



  • 8.  RE: MQ Explorer on new pc will not connect to queue manager but did on old pc

    Posted Thu April 29, 2021 10:43 AM
    The only authorization record I see is for group mqm.

    when I do try to connect, the error message pops up immediately.  I don't get the window where it says "trying to connect to xxxxx".

    Peter

    ------------------------------
    Peter Vander Woude
    ------------------------------



  • 9.  RE: MQ Explorer on new pc will not connect to queue manager but did on old pc

    Posted Thu April 29, 2021 11:12 AM
    FYI, I figured out what the problem is.  In the 9.2 mq explorer connection definition, I had to check the "User identification compatibility mode" option on the userid page.  Once I did that, then I can connect.  I looked back on my old pc, and that was not checked over there.  Double checked the connection properties of the connection to the other aix queue manager and it has that option checked.

    Peter

    ------------------------------
    Peter Vander Woude
    ------------------------------



  • 10.  RE: MQ Explorer on new pc will not connect to queue manager but did on old pc

    IBM Champion
    Posted Thu April 29, 2021 11:15 AM

    That default in MQ Explorer did change recently.

    You should have had an error message in the AMQERR01.LOG of the queue manager though. I really do not understand why you didn't see any errors. Are you absolutely certain there was nothing in your queue manager AMQERR01.LOG?

    Cheers,
    Morag



    ------------------------------
    Morag Hughson
    MQ Technical Education Specialist
    MQGem Software Limited
    Website: https://www.mqgem.com
    ------------------------------



  • 11.  RE: MQ Explorer on new pc will not connect to queue manager but did on old pc

    Posted Thu April 29, 2021 11:20 AM
    I am certain.  The last time that file got updated was 5 days ago

    Peter

    ------------------------------
    Peter Vander Woude
    ------------------------------



  • 12.  RE: MQ Explorer on new pc will not connect to queue manager but did on old pc

    IBM Champion
    Posted Thu April 29, 2021 11:24 AM

    5 days! Seriously? I am amazed a queue manager has nothing to say for 5 days! Wow!

    You are looking in $MQ_DATA_PATH/Qmgrs/<QMgrName>/errors/AMQERR01.LOG and not $MQ_DATA_PATH/errors/AMQERR01.LOG right?

    Cheers,
    Morag



    ------------------------------
    Morag Hughson
    MQ Technical Education Specialist
    MQGem Software Limited
    Website: https://www.mqgem.com
    ------------------------------



  • 13.  RE: MQ Explorer on new pc will not connect to queue manager but did on old pc

    Posted Thu April 29, 2021 11:29 AM
    Morag,

    Thanks for pointing out the correct location.  I was indeed looking in the second directory you listed.

    When I went to the errors directory under the qmgrs/<qmgrname>, I did see errors for my connection attempt.  It was passing my network userid as the user to connect with, not the one specified in the connection detail.

    Peter

    ------------------------------
    Peter Vander Woude
    ------------------------------



  • 14.  RE: MQ Explorer on new pc will not connect to queue manager but did on old pc

    IBM Champion
    Posted Thu April 29, 2021 12:34 PM

    Phew - that makes more sense!

    I hope you remember to look in the queue manager AMQERR01.LOG in the future. This is where all the helpful messages are written, the system wide AMQERR01.LOG is less useful, unless you are on a client machine when it is the only one you have. Check both, but check the queue manager one most.

    Cheers,
    Morag



    ------------------------------
    Morag Hughson
    MQ Technical Education Specialist
    MQGem Software Limited
    Website: https://www.mqgem.com
    ------------------------------