I've just applied the additional 'setmqaut' commands, to grant the necessary permissions to my 'tlm' role, and I now have a successful communication to my Queue.
Thanks ShalomC - much appreciated!
Sean.
Main Topics
Browse All TopicsI'm trying to establish exactly why my UNIX user (t20ora) can't "put" messages on and "get" messages from the test queue, (as provided by the MQ Series install), but am up against a brick wall!
My UNIX Environment:
- Solaris version:
SunOS sauron 5.9 Generic_118558-02 sun4u sparc SUNW,Ultra-4
- Websphere MQ Series v5.3 (installed from 'C44J8ML.tar.Z', downloaded directly from IBM's website)
--------------------------
Actions undertaken: Running the test 'put' and 'get' from the designated queue:
Trying to put & get a test message to the designated queue gives the following problem....
--------------------------
##########################
- As mqm user (the user whom MQ Series was installed as)
sauron:mqm >cd /opt/mqm/samp/bin/
sauron:mqm >./amqsput INPUT_OUTPUT_Q
Sample AMQSPUT0 start
target queue is INPUT_OUTPUT_Q
test message
Sample AMQSPUT0 end
sauron:mqm >./amqsget INPUT_OUTPUT_Q
Sample AMQSGET0 start
message <test message>
no more messages
Sample AMQSGET0 end
Result: SUCCESSFUL communication
- t20ora user (the user who I am trying to run this action under)
sauron:t20ora >./amqsput INPUT_OUTPUT_Q
Sample AMQSPUT0 start
MQCONN ended with reason code 2035
sauron:t20ora >./amqsget INPUT_OUTPUT_Q
Sample AMQSGET0 start
MQCONN ended with reason code 2035
Result: FAILURE
##########################
- Associated information
User groups assigned:
It seems to be necessary to be a member of the 'mqm' group, in order to be able to use the MQ Series install, so....
- Groups assigned to 'mqm' user:
sauron:t20ora >id -a mqm
uid=1055(mqm) gid=101(mqm) groups=101(mqm)
- Groups assinged to 't20ora' user:
sauron:t20ora >id -a t20ora
uid=1050(t20ora) gid=101(mqm) groups=108(tlm),101(mqm)
Performing the authority command for MQ Series Queue and Queue manager:
In order to ensure that the necessary permissions & privileges are assigned to the Queue Manager & Queue, the following command is performed as the 'mqm' user
As mqm user:
sauron:mqm > setmqaut -m QM_STLMQI -t qmgr -g mqm +all
The setmqaut command completed successfully.
sauron:mqm > setmqaut -m QM_STLMQI -n INPUT_OUTPUT_Q -t q -g mqm +all
The setmqaut command completed successfully.
Trying to run the same command as t20ora user:
sauron:t20ora > setmqaut -m QM_STLMQI -t qmgr -g mqm +all
AMQ7077: You are not authorized to perform the requested operation.
sauron:t20ora >setmqaut -m QM_STLMQI -n INPUT_OUTPUT_Q -t q -g mqm +all
AMQ7077: You are not authorized to perform the requested operation.
Showing those Queue & Queue Manager permissions, using the 'dspmqaut' command (again, as both the 'mqm' and 't20ora' user) gives the following:
As mqm user:
sauron:mqm >dspmqaut -m QM_STLMQI -t qmgr -g mqm
Entity mqm has the following authorizations for object QM_STLMQI:
inq
set
connect
altusr
crt
dlt
chg
dsp
setid
setall
sauron:mqm >dspmqaut -m QM_STLMQI -n INPUT_OUTPUT_Q -t q -g mqm
Entity mqm has the following authorizations for object INPUT_OUTPUT_Q:
get
browse
put
inq
set
crt
dlt
chg
dsp
passid
passall
setid
setall
clr
As t20ora user:
sauron:t20ora >dspmqaut -m QM_STLMQI -t qmgr -g mqm
AMQ7077: You are not authorized to perform the requested operation.
sauron:t20ora >dspmqaut -m QM_STLMQI -n INPUT_OUTPUT_Q -t q -g mqm
AMQ7077: You are not authorized to perform the requested operation.
Summary:
Given that all the necessary queue & user permissions, and group memberships appear to be in place, please can someone advise whether I have missed anything obvious, and potentially explain why I am experiencing this fundamental MQ problem?
Many thanks in advance,
Sean Dowding.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
whether MQ client was same UNIX machine? i have similar problem.
My MQ server is on window box and client is on UNIX.
I have create queue manager and server channel on window. started listener. it is running.
on UNIX, i can ping IP address of window machine.
here i have set MQSERVER variable correctly. but i ma getting below error:
[anzsun:mqm]/home/mqm> echo $MQSERVER
CHANNEL1/TCP/172.21.181.11
[anzsun:mqm]/home/mqm> cd /opt/mqm/samp/bin
[anzsun:mqm]/opt/mqm/samp/
Sample AMQSPUT0 start
MQCONN ended with reason code 2035
[anzsun:mqm]/opt/mqm/samp/
Business Accounts
Answer for Membership
by: shalomcPosted on 2006-05-25 at 05:06:56ID: 16760023
To start with, you should apply all CSD patches.
Try giving mq permissions to group tlm - group mqm had all of them anyway.
This worked on a linux machine.
setmqaut -m QM_STLMQI -t qmgr -g tlm +connect +inq +dsp
setmqaut -m QM_STLMQI -n INPUT_OUTPUT_Q -t q -g tlm +get +put +browse
ShalomC