MQ

 View Only
  • 1.  MQ Explorer : Access not permitted AMQ4036 error

    Posted Wed April 17, 2024 04:10 AM

    MQ Explorer is giving the following error while trying to add a remote queue manager TEST on (IBM MQ 9.3.0.15) on RHEL 8:

    I can telnet to port 1414 from the MQ Explorer to the IBM MQ machine & checked all firewall settings on source and target. 

    Performed the following on IBM MQ:

    ***********************************************************************************************************************************

    Created Queue Manager
    --------------------
    crtmqm -q TEST
    strmqm TEST
    runmqsc TEST
     
    Defined Listener
    ---------------
    DEFINE LISTENER (LS1) TRPTYPE(TCP) CONTROL(QMGR) PORT(1414)
    START LISTENER(LS1)
     
    Defined Channel
    --------------
    DEFINE CHANNEL(CH1) CHLTYPE(SVRCONN) TRPTYPE(TCP) MCAUSER('mqm')
    START CHANNEL(CH1)
    ****************************************************************************************************************
    This is a test environment and I'm trying to create other queue managers & manage all administrative task from MQ Explorer.
    MQ Exporer is installed on host machine, whereas IBM MQ is installed on a guest vmware machine.
    Appreciate any guidance.


    ------------------------------
    Muhammad Faisal Syed
    ------------------------------


  • 2.  RE: MQ Explorer : Access not permitted AMQ4036 error

    Posted Wed April 17, 2024 05:23 AM

    Hi Muhammad,

    This page will help you, https://www.ibm.com/docs/en/ibm-mq/9.3?topic=records-resolving-chlauth-access-issues



    ------------------------------
    Regards,

    Martin Evans
    IBM MQ Technical Product Manager
    ------------------------------



  • 3.  RE: MQ Explorer : Access not permitted AMQ4036 error

    IBM Champion
    Posted Thu April 18, 2024 02:13 AM

    Hi Muhammad,

    adding to Martin's post, this page also summarizes the needed steps quite well:

    https://www.ibm.com/support/pages/how-setmqaut-commands-allow-mq-explorer-remote-administration-mq-queue-manager-unix



    ------------------------------
    Hermanni Pernaa
    ------------------------------



  • 4.  RE: MQ Explorer : Access not permitted AMQ4036 error

    Posted Thu April 18, 2024 03:30 AM

    Hi Hermanni,

    Thanks for the link, it suggests I should create a username of Windows machine on my Linux machine where IBM MQ is installed. Let's say I have a restriction of adding another user on IBM MQ Linux machine, is it possible if I could avoid that, I've tried ALTER QMGR CHLAUTH(DISABLED) but still not being able to add remote queue manager on MQ Explorer.



    ------------------------------
    Muhammad Faisal Syed
    ------------------------------



  • 5.  RE: MQ Explorer : Access not permitted AMQ4036 error

    IBM Champion
    Posted Thu April 18, 2024 04:33 AM

    No problem, did the error message change after disabling the CHLAUTH? I think you also have to disable CONNAUTH. Here is Morag's excellent post about the subject:

    Getting going without turning off IBM MQ Security



    ------------------------------
    Hermanni Pernaa
    ------------------------------



  • 6.  RE: MQ Explorer : Access not permitted AMQ4036 error

    IBM Champion
    Posted Thu April 18, 2024 02:15 AM

    Hi Muhammad,

    adding to Martin's post, this page also summarizes the needed steps quite well:

    https://www.ibm.com/support/pages/how-setmqaut-commands-allow-mq-explorer-remote-administration-mq-queue-manager-unix



    ------------------------------
    Hermanni Pernaa
    ------------------------------