| Author |
Message
|
| rmah |
 Posted: Thu Aug 02, 2007 2:40 pm Post subject: Giving authority to groups |
 |
|
Centurion
Joined: 04 May 2007
Posts: 142
|
Hi!
Is there an easier way to grant read only authority to all the queues in a queue manager to a specified group, instead of using the setmqaut command for each queue?
I tried issuing this command but it spat out an error:
setmqaut -m <qmgr name> -n * -t q -g mqr +browse
AMQ7093: An object type is required but you did not specify one.
I do have the -t flag there, but it's still complaining....
Thoughts? |
|
| Back to top |
|
 |
| AkankshA |
| Posted: Thu Aug 02, 2007 8:17 pm Post subject: |
|
|
Grand Master
Joined: 12 Jan 2006
Posts: 1494
Location: Singapore
|
i executed
setmqaut -m TEST1 -n * -t queue -g guests +browse
and its working fine. i hv mq 6.0.2 on windows
as per sys admin guide
give user1 full access to all queues with names beginning a.b. on queue manager qmgr1. The profile is persistent and applies to any object with a name that matches the profile.
setmqaut -m qmgr1 -n a.b.* -t q -p user1 +all
which version of mq are u using???
_________________
Cheers |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Thu Aug 02, 2007 9:08 pm Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
I think what he is looking for is -n **. Don't know if the order of the flags on the command line has an influence but I would try -t q -n ** based on the error message.
Enjoy 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| rmah |
| Posted: Fri Aug 03, 2007 8:23 am Post subject: |
|
|
Centurion
Joined: 04 May 2007
Posts: 142
|
| Akanksha wrote: |
i executed
setmqaut -m TEST1 -n * -t queue -g guests +browse
and its working fine. i hv mq 6.0.2 on windows
as per sys admin guide
give user1 full access to all queues with names beginning a.b. on queue manager qmgr1. The profile is persistent and applies to any object with a name that matches the profile.
setmqaut -m qmgr1 -n a.b.* -t q -p user1 +all
which version of mq are u using??? |
I'm using MQ 6.0.2.1 64bit.
Linux 2.6.9-42 64bit |
|
| Back to top |
|
|
| Nigelg |
| Posted: Sat Aug 04, 2007 11:36 am Post subject: |
|
|
Grand Master
Joined: 02 Aug 2004
Posts: 1046
|
In Linux you have to protect the metacharacter * from the shell, so the generic object name * msut be enclosed in single quotes, '*'. Note that this matches only objects which do not contain a period (.); to specify all objects in a generic profile you need to specify '**', as fjb said. Look up generic profiles in the sysadmin manual.
_________________
MQSeries.net helps those who help themselves.. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Sun Aug 05, 2007 8:40 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
Don't know about Linux but the other way to protect * in Unix is to prefix it with the \ (escape) char. So i would be -n \*\*
Enjoy
_________________
MQ & Broker admin |
|
| Back to top |
|
|
|
|
