Retrieve messages from AMS enabled IBM web sphere MQ

513 Views Asked by At

I'm trying to achieve message security with AMS

I have two users one is a domain user xxx\herath (192.168.10.1) other user is a local user in my websphere mq server machine (192.168.10.2) wmqserver\bobmquser.

I log in to wmqserver mcahine as a wmqserver\dilantha , This user is a member of Administrator,mqm and users user groups.

So I followed the instructions from following link http://www-01.ibm.com/support/knowledgecenter/api/content/SSFKSJ_8.0.0/com.ibm.mq.sec.doc/q014690_.htm

I created self-signed certificates and exchanged with both users

client side certificate

server side certificate

Then created .mqs folders in their respective locations and added these things

wmqserver\bobmquser's keystore.conf
     cms.keystore = D:\AMSKeyRepo\key 
     cms.certificate = Bobmquser_Cert

xxx\herath's keystore.conf 
    cms.keystore = D:\AMSKeyRepo\key
    cms.certificate = Herath_Cert

Set the security policies enter image description here enter image description here enter image description here

and then setmqaut -m QM_AMSTest -t queue -n SYSTEM.PROTECTION.POLICY.QUEUE -p musr_mqadmin -p bobmquser +browse

setmqaut -m QM_AMSTest -t queue -n SYSTEM.PROTECTION.ERROR.QUEUE -p musr_mqadmin -p bobmquser +put

When I try to retrieve messages by using "amqsget XYZ QM_AMSTest" as wmqserver\bobmquser ,I'm getting following errors. enter image description here

but if I use MQExplorer UI, then I'm able to see these messages. I checked error log files in both client and server and I couldn't find anything. I already googled for reason code 2110 but I'm not able to find suitable solution for this issue.

So anyone can pointing me how to fix this? Thank you.

1

There are 1 best solutions below

1
Morag Hughson On BEST ANSWER

Type mqrc 2110 or look it up in the Knowledge centre.

MQRC_FORMAT_ERROR

Are you on latest maintenance?