IBM Support

After changing the domain for WMQ on Windows you are unable to start the MQ service

Troubleshooting


Problem

After you installed WebSphere MQ on Windows, you changed the domain and now you are unable to start the MQ service.

Symptom

The Windows system event log shows the following:

DCOM got error "Logon failure: unknown user name or bad password. " and was unable to logon <Domain1>\mqmservice in order to run the server:
The IBM MQSeries service terminated with the following error: An attempt was made to reference a token that does not exist.

The <Domain1>\mqmservice no longer exists in the new domain. The MQ service userid in the new domain is <Domain2>\mqmservice.
Also, you reset the password of your windows account in an attempt to correct the problem but then you see an error message reporting "Logon failure: unknown user name or bad password"

Diagnosing The Problem

MQ traces shows:

----}! xcsGetConsoleOutputCP (rc=Unknown(1B5))
.
-----}! xurGetSpecificRegStanza (rc=xecU_W_KEY_NOT_FOUND)
.
------}! xcsBrowseRegistryCallback (rc=xecU_W_KEY_NOT_FOUND)
-----}! xcsBrowseIniCallback (rc=xecU_W_KEY_NOT_FOUND)
----}! xcsGetIniAttrs (rc=xecU_W_KEY_NOT_FOUND)
---}! xcsGetAttrs (rc=xecU_W_KEY_NOT_FOUND)
---} xcsFreeMemFn (rc=OK)
--} amqjxcoa.wmqGetAttrs (rc=OK)
---} Message.getMessage (rc=OK)
-}! NativeCalls.getAttrs (rc=Unknown(C35E))

AMQERR logs show:

AMQ8077: Entity 'mqmservice' has insufficient authority to access object 'QM_1'.
EXPLANATION: The specified entity is not authorized to access the required object.
The following requested permissions are unauthorized: connect/system.

AMQ5525: The WebSphere MQ Object Authority Manager has failed.

Resolving The Problem

Change the Domain from <Domain1> to <Domain2> for the MQ Identity property in DCOM:

  • Open a Windows command prompt and type: dcomcnfg.
  • Once the Component Services MMC opens, double-click "Component Services"
  • Double-click "Computers"
  • Double-click "My Computer" Double-click "DCOM Config".
  • In the window, look for "IBM MQSeries Services", and on it right click, then choose properties.
  • Click the Identity tab.
  • Change the Domain from <Domain1> to <Domain2> for the MQ Identity property, where Domain1 is the old domain and Domain2 is the new Domain.

[{"Product":{"code":"SSFKSJ","label":"WebSphere MQ"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"Install \/ Migration","Platform":[{"code":"PF033","label":"Windows"}],"Version":"7.1;7.0","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]

Historical Number

Product Synonym

WMQ MQ MQSeries

Document Information

Modified date:
15 June 2018

UID

swg21504016