Home

 

Configure additional authority for Windows applications connecting to WebSphere MQ

 

You might experience problems if you have Windows applications, for example ASP pages, connecting to WebSphere MQ that are configured to run at a security level higher than usual.

WebSphere MQ requires SYNCHRONIZE access to application processes in order to coordinate certain actions. APAR IC35116 changed WebSphere MQ so that the appropriate privileges are specified. However, the account under which WebSphere MQ processes run might need additional authorization before the requested access can be granted. Directions for configuring additional authority are given below.

To configure additional authority to the user ID under which WebSphere MQ processes are running:

• Bring up the Local Security Policy tool, click on Security Settings ->Local Policies->User Right Assignments, click on "Debug Programs".

• Double click "Debug Programs", then Add your WebSphere MQ user ID to the list

If the system is in a Windows domain and the effective policy setting is still not set, even though the local policy setting is set, the user ID must be authorized in the same way at domain level, using the Domain Security Policy tool.

 

Parent topic:

WebSphere MQ security

fa12850_

 

Home