Configure WebSphere MQ accounts
WebSphere MQ checks that only authorized users can access queue managers or queues. Whenever a user attempts such access, WebSphere MQ uses its own local account to query information about the user. However, if a domain controller runs on Windows 2000 or Windows 2003, it can be set up so that local accounts cannot be used to make these queries. In this situation, provide WebSphere MQ with a special account to use. This is necessary when both of the following conditions apply:
- Any domain controller on your network is running on Windows 2000 or Windows 2003
- Local user accounts are not authorized to query the group membership of the Windows 2000 or Windows 2003 domain user accounts
When you install the product, towards the end of the installation procedure, in the Prepare WebSphere MQ wizard, you are asked to enter details of this account...
- domain
- user name
- password
If these conditions apply and you install WebSphere MQ without a special account (or without entering its details), many or all parts of WebSphere MQ will not work, depending upon the particular user accounts involved. In particular, if you are currently logged on with a Windows 2000 or Windows 2003 domain user account, we cannot complete the Default Configuration, and the Postcard and API Exerciser applications will not work. Also, WebSphere MQ connections to queue managers that run under Windows 2000 or Windows 2003 domain accounts on other computers might fail.
- Information for domain administrators
- Set up Windows 2000 and Windows 2003 domain accounts for WebSphere MQ
Parent topic:
Configure a WebSphere MQ Server