I am new to MQ and have acquired the current systems (v7) from the admin that built them who is no longer around.

I built new MQv8 servers and was able to export the QM settings from the previous v7 server to import into the v8 server. When a process tries to read from the queue on the v8 server it is getting an error MQRC_NOT_AUTHORIZED. When I look in the event log on the MQ server I see this entry. I have verified that the MQM group is setup on this server and the Object Authorities entries include the MQM group. Can someone help me find what I'm missing?

Channel was blocked by userid 

 

The inbound channel 'ReplicationChannel' was blocked from address 'xxx.xxx.xxx.xxxbecause the active values of the channel were mapped to a userid which should be blocked. The active values of the channel were 'MCAUSER(xxx) CLNTUSER(xxx) ADDRESS(xxx)'. 

Hi Phil,

I suspect you might be being caught out by the default rule which blocks remote connections that assert privileged user IDs. If you display all your CHLAUTH rules you will see a TYPE(USERLIST) one that has *MQADMIN as the user. This is a special value that means "all privileged users", i.e. mqm users.

You can always work out exactly which CHLAUTH rule is blocking you, by using the DISPLAY CHLAUTH MATCH(RUNCHECK) command as described in this blog post I wrote:-

I'm being blocked by CHLAUTH - how can I work out why?

I've recently also added a blog post here in GWC with links to lots of great information about CHLAUTH. Check it out:-

Material about IBM MQ - CHLAUTH

Cheers,
Morag

Try below.

Alter qmgr chlaut ( disabled )

It will work when you are migrating from 7 to 8 it won't impact other flows though.

The standard process should be as said by Morgan.