带身份验证的WMQ JNDI查找

Question

 public class JMSSamplePut 
    {
      private static String initialContextUrl = null;
      private static String connectionFactoryFromJndi = "UM_QMGR_QCF";
      private static String queueFromJndi = "BCUFXW.EXB.ATHENA.FX.IN";
      private static String outString = "A sample text message " +
                                    "from JMSSampleput";
      private static int retryInterval = 10;
      private static int retryCount = 3;
      private static int connStatus = 1;


      /**
       * @param args
       */
      public static void main( String[] args ) 
      {

        // Variables
        Queue                   ioQueue      = null;
        QueueSession            session      = null;
        QueueSender             queueSender  = null;
        QueueConnection         connection   = null;
        QueueConnectionFactory  factory      = null;
        boolean                 transacted   = false;
        int i = 0;

        try { 
          // Instantiate the initial context for JNDI
          String contextFactory ="com.sun.jndi.fscontext.RefFSContextFactory";
          Hashtable environment = new Hashtable();
          environment.put(Context.INITIAL_CONTEXT_FACTORY, contextFactory);
          environment.put(Context.PROVIDER_URL, "file:/c:/jndi"); 
          Context context = new InitialDirContext(environment);
          System.out.println("Initial context found!");

          // Create a Queue ConnectionFactory
          factory = (QueueConnectionFactory) context.lookup(connectionFactoryFromJndi);

    ...........

最后一行失败了

捕获的JMSException：com.ibm.msg.client.jms.detailedJMSSecurityException：JMSWMQ2013:为连接模式为“Client”、主机名为“Natmib1.hostname.net（1414）”的QueueManager“提供的安全身份验证无效。请检查您正在连接到链接异常：com.ibm.MQ.mqexception:jmscmq0001:WebSphere MQ call failed with compcode'2'('mqcc_failed')原因'2035'('mqrc_not_authorized')的QueueManager上提供的用户名和密码是否正确。已完成

JVM args

-Djavax.net.ssl.keystore=c://keystore//a_dev.jks \
-Djavax.net.ssl.keyStorePassword=******** \
-Djavax.net.ssl.trustStorePassword=******** \
-Djavax.net.ssl.trustStore=c://keystore//cacerts.jks \
-Djavax.net.debug=all   

UM_QMGR_QCF/RefAddr/3/Content=NATMIB1.xyz.net

提前致谢

桑达尔

Answer 1

如果有合适的工具，调试WMQ安全错误非常简单。首先，按照说明获取SupportPac MS0P并安装到WMQ Explorer中。如果您没有现代版本的WMQ Explorer，可以从SupportPac MS0T下载它。

接下来，在QMgr上启用授权事件并重新创建错误。

此时，右键单击WMQ Explorer中的事件队列并选择Format event Messages。这将向您展示错误的各个方面，包括：

null