MQSeries.net :: View topic - how to configure broker web admin security

ruimadaleno

Hi all,

fists of all some data:

1) environment:
message broker 8.0.0.4 running on windows 2008 server R2 standard

2) what i'm trying to achieve:

Activate Web admin security and segregate users: users with admin rights and users with read only rights.

3) The error i'm facing:

"The logged-on user ID does not have the required permissions to access data or broker resources in the web user interface. See your broker administrator to set up the required permissions."

What i have done so far:

- Create two groups on operating system
BRKDEVAdmins - Group for users with admin privs
BRKDEVUsers - Group for users with read only privs

- Grant authorities to each of the groups. I have used message broker explorer to navigate the queues and assign authorities

- Create web user accounts and grant the role to each user account

mqsiwebuseradmin <broker name> -m -u teste -r BRKDEVAdmins

So, when i navigate to web admin console url (http://<broker machine>:4414) i get the following warning:

"The logged-on user ID does not have the required permissions to access data or broker resources in the web user interface. See your broker administrator to set up the required permissions."

I have read and follow instruction on the following documentation:

Configuring role-based security with the IBM Integration Bus V9 web user interface

http://www.ibm.com/developerworks/websphere/library/techarticles/1312_fan/1312_fan.html

Web and REST security from 8.0.0.4 infocenter

http://www-01.ibm.com/support/knowledgecenter/SSKM8N_8.0.0/com.ibm.etools.mft.doc/bp28497_.htm

What is failing here ?

it might be one lacking authority but how to find it ? can i have some kind of verbose output / log from web admin console and get more detail from the error message ?

_________________
Best regards

Rui Madaleno