MQSeries.net :: View topic - Looking for a work around for a training class---w/security

MQSeries.net

Tech Exchange

Education

Certifications

Library

Info Center

SupportPacs

FAQÂ Â

Usergroups

RSS Feed - WebSphere MQ Support

RSS Feed - Message Broker Support

MQSeries.net Forum Index » General Discussion » Looking for a work around for a training class---w/security

Looking for a work around for a training class---w/security

« View previous topic :: View next topic »

Author

Message

lnm

Posted: Tue Jun 11, 2002 7:09 am Post subject: Looking for a work around for a training class---w/security

Apprentice

Joined: 12 Mar 2002
Posts: 43
Location: Florida

We are planning a training class and don't really want to put everyone in an mqm group. Is there another way to allow users to create qmgrs, queues, etc?

Can we add all the users to a group and then add the group to the mqm group?

Any suggestions would be appreciated.

cvshiva

Posted: Tue Jun 18, 2002 11:02 pm Post subject:

Apprentice

Joined: 04 Mar 2002
Posts: 35
Location: Chennai

Hi ,

Looks like you are trying to implement Security Over MQSeries.

If you don't want to include all of them to "mqm" group then , you can create another group "mqusers" ( for example) and add all the users to this group (not the administrator).

Now the users are grouped under one group, but they won't have rights on MQ unless and until it is granted. So you should use the MQSeries Installable Service "Object Authority Manager" ( comes along with MQ) to do this.

There are two basic commands ( which work on the OS prompt )

1. "setmqaut" to grant / revoke rights on a Queue Manager and its objects
to an user / group.
2. "dspmqaut" to display the rights that an user/group has on a Queue
manager and its objects.

The detailed explanations of these commands can be found in the "System Administration" manual under section "Protecting MQSeries Objects" ( this is downloadable as a PDF from IBM Website).

Still the non-members of "mqm" group can't create a queue manager. This has to be done only by the "mqm" user or a member of "mqm" group.
That's how MQ works.

So use a spare admin user id who is a member of "mqm" group to demonstrate the creation of the queue manager. May be you can have a demo PC where the attendees can try creating a queue manager and return back to their own pc to do other stuff.

Hope the above was useful...!!!

Regards
_________________
Ramnath Shiva
IBM Certified SOA Specialist
IBM Certified MQSeries Specialist
Standard Scope International Pvt Ltd , Chennai

Display posts from previous:

Page 1 of 1

MQSeries.net Forum Index » General Discussion » Looking for a work around for a training class---w/security

Jump to:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Protected by Anti-Spam ACP