Websphere QM configuration - error with musr_mqadmin account - ibm-mq

I was trying to configure my WMQ.
queue manager was running until i changed the password of my musr_mqadmin account.
Now it the local queue manager that i created cannot be start any more
The pop up says "The MQ service for installation "installation1" must be running"
While i tried to reset the musr_mqadmin account, it says "mq configuration an error while validating the security credentials "
I am really stuck and helpless. Please kindly advise.

MQ Service runs under MUSR_MQADMIN account. You will need to provide the same password for MQ Service also. Go to Administrative Tools/Services console. Select IBM WebSphere MQ service and open the properties by double clicking on the service. On the Log On tab provide the new password and OK to close the dialog and start the service.
HTH/Shashi

Related

Can we rename the MUSR_MQADMIN with some other user

We are using IBM MQ version 9.0 windows server. We require a little information about MUSR_MQADMIN. Can we rename MUSR_MQADMIN to some other user? If it's renamed to some other user and pointing to the "IBM Websphere MQ services", will it face any challenges?
#Team,
we have a one more question why we always get the " error 1069:the services didn't start due to the logon error " and we have seen logon properties ./musr_mqadmin is having some encrypted password.Kindly confirm us after installation this password is created by with operational user password( mqm#123 )( means Ex: user : op_mqm & password : mqm#123 )or is there any default password ? if it is default password how we can decrypt the default password
Yes, default user MUSR_MQADMIN can be deleted, before that you should create another user account and make this user member of mqm group, then associate this new user name with IBM MQ Services. If you are working with MQ Client then MUSR_MQADMIN user is NOT needed.
I have tried this and it works fine.

IBM MQ service on Windows not starting

What's the difference of amqsvc and strmqsvc?
I have installed IBM MQ and configured for multi instance. It uses amqsvc.exe to start the service as installed, the service is logon from a domain account, and the account is a member of group mqm.
It was working fine but yesterday for some unknown reason the service is not starting properly, here is what happened:
when amqsvc is run on automatic or manual, amqzxma0 runs on full cpu usage until timeout and windows prompted the service not starting with error 1053, but the MQ service is started, then I tried to start the queue manager but fail to start, however it can be started on interactive.
However I can start the service fine with strmqsvc and can start the queue manager normally. So what's the difference between these two and what is the problem behind it?
amqsvc is the actual windows service.
strmqsvc is the command used to start the above service.
The IBM v7.5 Knowledge Center documents the error 1053 as:
Windows: amqmsrvn.exe process removed
The amqmsrvn.exe DCOM process was replaced by a Windows service,
amqsvc.exe, in Version 7.1. This change is unlikely to cause any
problems. However, you might have to make some changes. You might have
configured the user that runs the IBM® WebSphere® MQ Windows service
MQSeriesServices without the user right to Log on as a service.
Alternatively, the user might not have List Folder privilege on all the subdirectories from the root of the drive to the location of the
service amqsvc.exe.
If you omitted the Log on as a service user privilege, or one of
the subdirectories under which IBM WebSphere MQ is installed does not
grant the List Folder privilege to the user, the MQ_InstallationName
IBM WebSphere MQ Windows services in Version 7.5 fails to start.
...
If you did not give the user the List Folder privilege, the Windows Service Control Manager adds an event: 7009: Timed out waiting for the
service to connect. The strmqsvc command reports error 1053.
Ensure that you have provided List Folder privilege on all the subdirectories from the root of the drive to the location of the service amqsvc.exe. This should resolve the issue.

An unexpected error (2063) occurs when I connect to my queue manager

I'm looking to setup a Queue Manager Using WebSphere MQ V7 MQ Explorer.
After Creating my Queue Manager, normally I expect that some sub directories are automatically generated under it, "Queues", "Topics", "Channels" .. as illustrated in the photo below.
In my case, no sub directories are generated, as illustrated below in the second snapshot.
PS: the status of my Queue manager is : Running but disconnected from WebSphere MQ Explorer.
When I right-click on the QMgr Name and choose Connect, I get "An unexpected error (2063) has occurred (AMQ4999)"
Could you advise please about a possible cause of this behavior ?
Administrative tools -> Local Security Policy -> Local Policies -> User Rights Assignment -> Log on as a service -> Properties -> add your user here
Same problem with MQ v9 and i solved it this way.
Go to control panel – Administrative tools
Control Panel\All Control Panel Items\Administrative Tools
Local
Inside Local Security Policy
Enter your domain user name then click check names – finalize by clicking ok. Then apply.
Now the domain user can log on as a service – Now open the services running on your machine.
Double click on the MQ service – then go on log on tab
Then apply click okay button – from the restart your machine for the changes to take effect
Finally open WebSphere MQ Explorer as admin - queue manager should be able to connect
Same issue with MQ 9.0 installed on Windows 10 EE.
(Run as Administrator) secpol.msc /s
(open) Local Policies > User Rights Assignment > Log on as a service
then add your User. Same user should be used for "IBM MQ (Installation1)" (Properties> Log On), installation default (when you do not setup the Domain Policy during installation) is MUSR_MQADMIN.
(Maybe you can try to run "MQ Explorer" as MUSR_MQADMIN user, but it's password is automatically generated during the installation. It's possible to change it, but it doesn't seem to be a safer against the using local account to run the MQ service)

Authentication Error in Hermes JMS while Connecting to Tibco EMS 8.2

I am using Hermes v1.4 SOAP UI to connect with Tibco EMS 8.2. I followed this tutorial.
Problem:
After doing all the settings , when I tried to connect with EMS server which is running on local machine. It is giving me authentication error.
I provided the default username and password that is "admin" and "admin".
I can see the following error in my EMS console.
Why my EMS server is not authorizing the Hermes JMS to connect? Do I also need to do anything on EMS Side as well. Please guide.
By default there is no password for TIBCO EMS. You can try with username admin and password ''(empty). Hopefully, it will solve you your problem.
Please follow the below steps:
1. Right-click on free space in plugin section and press “Add property”.
2. You have to enter all three properties: username, password and serverURL
3. Do the same for Connection Factory
4. Give the username as "admin"
Please refer attached screenshot for more details

can not create queue for QManager

I encountered a really wired problem. I have successfully install Websphere MQ on my windows machine and want to create QManager and Queue to connect to a remote Qmanager server. I have already created a QManager as you can see in the picture below. However, when I tried to create a queue for this QManager, I could not find any expand button as the IBM tutorial mentioned.
I have already tried to create a queue with MQSC but when I run runmqsc in the command prompt with administrator user, it shows AMQ8135: Not Authorized error!
Check your error logs (AMQERR01.LOG) for an explanation of why AMQ8135 was returned to the client - for security reasons clients aren't given more information and so you have to go to the logs to get the detail.
I suspect the user you're running MQ Explorer and runmqsc as isn't in the 'mqm' group, or is otherwise not authorised to connect to the queue manager.
Run your IBM MQ Explorer as administrator and it will solve most of the issues.

Resources