|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
 |
|
MUSR_MQADMIN |
« View previous topic :: View next topic » |
Author |
Message
|
kats |
Posted: Fri May 05, 2006 1:27 pm Post subject: MUSR_MQADMIN |
|
|
Voyager
Joined: 20 Apr 2006 Posts: 78
|
By default, MUSR_MQADMIN user ID is given administrative rights when MQ Series is installed in Win 2003 server.
But if this right is revoked, what are the consequences?
PS: Qmgr is running under this ID
(amqmdain start qmgrName) |
|
Back to top |
|
 |
mvic |
Posted: Fri May 05, 2006 1:38 pm Post subject: Re: MUSR_MQADMIN |
|
|
 Jedi
Joined: 09 Mar 2004 Posts: 2080
|
kats wrote: |
But if this right is revoked |
I assume you mean, remove MUSR_MQADMIN from the mqm group?
Quote: |
what are the consequences? |
(Assumption noted above...) Quite simply, anything that was running as this user will no longer have mqm-group privileges. If you run nothing as MUSR_MQADMIN, there will be no effect at all. If you do run things as this user, and rely on it being a member of mqm group, then things will fail.
Does this help? |
|
Back to top |
|
 |
kats |
Posted: Fri May 05, 2006 2:26 pm Post subject: |
|
|
Voyager
Joined: 20 Apr 2006 Posts: 78
|
Thanks Mvic
What if MUSR_MQADMIN right is revoked from system administrator group but it still there in mqm group?? What can be implications!!
In my understanding, MUSR_MQADMIN just needs to be under mqm group(pls correct me if I am wrong)
And another scenario: what if you logged on as local user and MUSR_MQADMIN has mqm administrative rights but you don't.
Can you still create qmgr and start it under MUSR_MQADMIN by giving command:
amqmdain start qmgrName !!
PS. By default, MUSR_MQADMIN also becomes the member of administrator group along with mqm group when MQSeries is installed. |
|
Back to top |
|
 |
mvic |
Posted: Fri May 05, 2006 3:51 pm Post subject: |
|
|
 Jedi
Joined: 09 Mar 2004 Posts: 2080
|
kats wrote: |
What if MUSR_MQADMIN right is revoked from system administrator group but it still there in mqm group?? What can be implications!!
In my understanding, MUSR_MQADMIN just needs to be under mqm group(pls correct me if I am wrong) |
I can't answer this question for your system, I'm afraid. You will need to ask questions (ask yourself, or others who have an interest in the system...): what processes on this system are running under the user MUSR_MQADMIN? Will these processes fulfill their tasks successfully with the group membership you are planning? (NB. I am not asking you these questions - they the questions that need to be asked and answered between you and/or your colleagues for your system).
Quote: |
And another scenario: what if you logged on as local user and MUSR_MQADMIN has mqm administrative rights but you don't.
Can you still create qmgr and start it under MUSR_MQADMIN by giving command:
amqmdain start qmgrName !! |
Don't know. What happens when you try it?
Quote: |
PS. By default, MUSR_MQADMIN also becomes the member of administrator group along with mqm group when MQSeries is installed. |
OK, I didn't know that. I had thought mqm group would be enough for the processes that run under this user.
There are more details available by searching for MUSR_MQADMIN at http://publib.boulder.ibm.com/infocenter/wmqv6/v6r0/index.jsp |
|
Back to top |
|
 |
|
|
 |
|
Page 1 of 1 |
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|
|
|