Back to Geneos FAQ

MQ - Connection to MQ server failed; reason code #2035. MQRC_NOT_AUTHORIZED

MQRC_NOT_AUTHORIZED Copied

The IBM MQ Queue, MQ Queue Info and MQ Channel samplers encounter the “MQRC_NOT_AUTHORIZED” error because a MQ permission is not granted to the Netprobe user. Check the Prerequisites section of the MQ Plug-in guide for the permissions needed by the Netprobe user.

Troubleshoot Copied

The MQ administrator can troubleshoot this error because they have access to the Queue Manager’s error logs. The said logs contain the exact error and the next steps to address it. If the MQ administrator is not familiar with the troubleshooting steps, you may do the following:

1. Log in to the Queue Manager host using the mqm user.
2. Go to /var/mqm/qmgrs//errors

   • $ cd /var/mqm/qmgrs/SAMPLEQM8/errors/
     $ ls -l
     total 88
     -rw-rw----. 1 mqm mqm 82104 Apr 23 22:09 AMQERR01.LOG
     -rw-rw----. 1 mqm mqm     0 Apr 23 16:06 AMQERR02.LOG
     -rw-rw----. 1 mqm mqm     0 Apr 23 16:06 AMQERR03.LOG
     

3. Open the updated AMQERR*log

   • 04/24/2019 03:48:16 PM - Process(16850.3219) User(mqm) Program(amqzlaa0)
                         Host(pato) Installation(Installation1)
                         VRMF(8.0.0.4) QMgr(SAMPLEQM8)
     
     AMQ8077: Entity 'sandbox' has insufficient authority to access object
     'SYSTEM.ADMIN.COMMAND.QUEUE'.
     
     EXPLANATION:
     The specified entity is not authorized to access the required object. The
     following requested permissions are unauthorized: put/inq
     ACTION:
     Ensure that the correct level of authority has been set for this entity against
     the required object, or ensure that the entity is a member of a privileged
     group.
     ----- amqzfubx.c : 687 --------------------------------------------------------
     04/24/2019 03:48:16 PM - Process(16850.3219) User(mqm) Program(amqzlaa0)
                         Host(pato) Installation(Installation1)
                         VRMF(8.0.0.4) QMgr(SAMPLEQM8)
     
     AMQ8077: Entity 'sandbox' has insufficient authority to access object
     'SYSTEM.ADMIN.COMMAND.QUEUE'.
     
     EXPLANATION:
     The specified entity is not authorized to access the required object. The
     following requested permissions are unauthorized: put/inq
     ACTION:
     Ensure that the correct level of authority has been set for this entity against
     the required object, or ensure that the entity is a member of a privileged
     group.
     ----- amqzfubx.c : 687 --------------------------------------------------------
     

   • The above error means that the user sandbox (sandbox is the Netprobe user) has no put and inq permissions to the queue SYSTEM.ADMIN.COMMAND.QUEUE. The MQ Plug-in guide states that this is a required permission.

4. Execute the command setmqaut -m queue_manager -t queue -n queue_name -p user +put +inq

   • $ setmqaut -m SAMPLEQM8 -t queue -n SYSTEM.ADMIN.COMMAND.QUEUE -p sandbox +put +inq
     The setmqaut command completed successfully.
     

5. If the error still persists, check the latest AMQERR*log again.

   • 04/24/2019 03:56:44 PM - Process(16850.3219) User(mqm) Program(amqzlaa0)
                         Host(pato) Installation(Installation1)
                         VRMF(8.0.0.4) QMgr(SAMPLEQM8)
     
     AMQ8077: Entity 'sandbox' has insufficient authority to access object
     'SYSTEM.DEFAULT.MODEL.QUEUE'.
     
     EXPLANATION:
     The specified entity is not authorized to access the required object. The
     following requested permissions are unauthorized: get
     ACTION:
     Ensure that the correct level of authority has been set for this entity against
     the required object, or ensure that the entity is a member of a privileged
     group.
     ----- amqzfubx.c : 687 --------------------------------------------------------
     

   • The above error means that the user sandbox has no get permission to the queue SYSTEM.DEFAULT.MODEL.QUEUE. The MQ Plug-in guide states that this is a required permission.

6. Execute the command setmqaut -m queue_manager -t queue -n queue_name -p user +get

   • $ setmqaut -m SAMPLEQM8 -t queue -n SYSTEM.DEFAULT.MODEL.QUEUE -p sandbox +get
     The setmqaut command completed successfully.
     

7. If the error still persists, check the latest AMQERR*log again and apply the appropriate step/permission

The above steps are also applicable to the error:

WARN: Failed to execute command; reason code #3008. Detailed reason: #2035 MQRC_NOT_AUTHORIZED