| Author |
Message |
 Topic: How to restrict MQ Channels |
ARI126
Replies: 11
Views: 7869
|
 Forum: IBM MQ Security Posted: Wed Aug 06, 2014 9:03 am Subject: How to restrict MQ Channels |
Joseph,
I was really hoping -all +none would work. But unfortunately, the channels still show up. I delete and recreate the connection on the MQ Explorer every time, just to be thorough.
I'll o ... |
| Topic: How to restrict MQ Channels |
ARI126
Replies: 11
Views: 7869
|
Forum: IBM MQ Security Posted: Wed Aug 06, 2014 5:09 am Subject: How to restrict MQ Channels |
| I tell the user to use the SYSTEM.BKR.CONFIG channel (the one with mqexpusr). The rest of the SVRCONN channels have been set to 'nobody'. |
| Topic: How to restrict MQ Channels |
ARI126
Replies: 11
Views: 7869
|
Forum: IBM MQ Security Posted: Tue Aug 05, 2014 5:31 pm Subject: How to restrict MQ Channels |
The user, "mqexpusr", has been entered as the value of the MCAUSER field for the channel being used to connect to the Queue Manager (SYSTEM.BKR.CONFIG).
This id is a member of only one gr ... |
| Topic: How to restrict MQ Channels |
ARI126
Replies: 11
Views: 7869
|
Forum: IBM MQ Security Posted: Tue Aug 05, 2014 1:42 pm Subject: How to restrict MQ Channels |
MQJeff,
I agree. I am trying to control what permissions someone has after they connect. I am trying to prevent them from viewing the list of channels on the queue manager, after they connect using ... |
| Topic: How to restrict MQ Channels |
ARI126
Replies: 11
Views: 7869
|
Forum: IBM MQ Security Posted: Tue Aug 05, 2014 1:26 pm Subject: How to restrict MQ Channels |
Hey Exerk,
Thanks for the response. That was the blog, based off which I built most of my script. Here's what T-Rob has to say about giving view access to channels.
setmqaut -m YOUR_QUEUE_MANAGER ... |
| Topic: How to restrict MQ Channels |
ARI126
Replies: 11
Views: 7869
|
Forum: IBM MQ Security Posted: Tue Aug 05, 2014 10:53 am Subject: How to restrict MQ Channels |
Environment: MQ v7.1, WMB v7.0.0.5, RHEL v5
Hello,
I'm trying to create a security setup that would allow the MQ Explorer to be used as a View Only interface for my queue managers and brokers. I'm ... |
