MQSeries.net :: View topic - user conflict while creating log files using log4j

MQSeries.net

Tech Exchange

Education

Certifications

Library

Info Center

SupportPacs

FAQÂ Â

Usergroups

RSS Feed - WebSphere MQ Support

RSS Feed - Message Broker Support

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » user conflict while creating log files using log4j

user conflict while creating log files using log4j

« View previous topic :: View next topic »

Author

Message

sk_gladiator

Posted: Thu Jun 24, 2010 11:56 pm Post subject: user conflict while creating log files using log4j

Newbie

Joined: 24 Jun 2010
Posts: 1

Hi All

we are trying to create logfiles (written in JCN) using log4j through a message broker flow.

things are working fine, but issue is the AIX box, we have been given a user id for the environment and the file is created under mqbrkrs user for which we have no access. Client is not willing to add our user to the mqbrkrs group.

due to which we are not able to read the files created (permission denied)

is there any way that the log4j can specify the user through which we can create the logfiles.

thanks in advance please

smdavies99

Posted: Fri Jun 25, 2010 1:07 am Post subject: Re: user conflict while creating log files using log4j

Jedi Council

Joined: 10 Feb 2003
Posts: 6076
Location: Somewhere over the Rainbow this side of Never-never land.

sk_gladiator wrote:

Client is not willing to add our user to the mqbrkrs group.

This is IMHO, a very sensible stance to take.

What they can do is give everyone read access to the directory where the logs are created. This way, your sticky fingers

can read the file(s) but can't change anything.

Adding your user(s) to the mqbrkrs group is very dangerous. Do you really want to give your users the rights to delete the broker?

There could quite well be other solutions to this problem depending upon the security packages used on your AIX box.

As an ex Unix/Linux SysAdmin I can't really undertand the reluctance of SysAdmins to let users have read access to things like the Broker & WMQ logs especially in DEV environments. One place I worked in refused this even in DEV and to get even a snapshot required you to raise a service ticket.
_________________
WMQ User since 1999
MQSI/WBI/WMB/'Thingy' User since 2002
Linux user since 1995

Every time you reinvent the wheel the more square it gets (anon). If in doubt think and investigate before you ask silly questions.

Display posts from previous:

Page 1 of 1

MQSeries.net Forum Index » WebSphere Message Broker (ACE) Support » user conflict while creating log files using log4j

Jump to:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Protected by Anti-Spam ACP