| Author |
Message
|
| mqlover |
 Posted: Tue Mar 10, 2015 1:09 am Post subject: Restarting Brk with different userid |
 |
|
Disciple
Joined: 25 Jul 2010
Posts: 176
|
Hi,
We have broker version WMB7003 installed on AIX. The broker was created with the userid "abcd". This userid belongs to the group mqbrkrs and DB group.
I created another userid "efgh" and also belongs to the same mqbrkrs group and DB group.
I started the broker with userid "efgh" and was successful. while I tried stopping the broker with the userid "efgh" there was an error :
| Quote: |
BIP8016E: Unable to stop component.
A request to stop this component was refused.
Investigate the reason for this failure and reissue the command. The problem may be that the component was in the process of being stopped or started, in this case just reissue the command. It may be that the command could not be issued because of insufficient userid permissions. If you are unable to resolve the problem, contact your IBM support center.
|
Kindly could anyone help me how to go about this process?
I also saw that all the broker processes and Dataflowengines were running with the userid abcd. |
|
| Back to top |
|
 |
| Vitor |
| Posted: Tue Mar 10, 2015 4:01 am Post subject: Re: Restarting Brk with different userid |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| mqlover wrote: |
| We have broker version WMB7003 installed on AIX. |
- That's old
- It's going to be out of support soon
| mqlover wrote: |
The broker was created with the userid "abcd". This userid belongs to the group mqbrkrs and DB group.
I created another userid "efgh" and also belongs to the same mqbrkrs group and DB group. |
Why change users? What's wrong with "abcd"?
| mqlover wrote: |
| I started the broker with userid "efgh" and was successful. while I tried stopping the broker with the userid "efgh" there was an error |
I'm mildly surprised it started.
| mqlover wrote: |
| Kindly could anyone help me how to go about this process? |
What process? Changing the id the broker runs as?
Delete it and recreate it with the new id, using the scripts you used to create it originally, and then push the code out using your automated deployment tool. An ideal oppertunity to create it at a higher level of software, i.e. one that's not going out of support.
| mqlover wrote: |
| I also saw that all the broker processes and Dataflowengines were running with the userid abcd. |
The one they were created with? Gosh.....
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| mqlover |
| Posted: Tue Mar 10, 2015 5:13 pm Post subject: |
|
|
Disciple
Joined: 25 Jul 2010
Posts: 176
|
Hi,
Thanks for your reply.
Ok the id "abcd" is held by admins and the id "efgh" is given for the operators for whom a menu is created just to start and stop the broker.
So is there any way that the support id "efgh" has complete access to the broker BRK1 which was created using the id "abcd'.
i.e the id "efgh" can stop and start broker, deploy MFs on to the broker too, and also create EGs.
Ya we are working on upgrading the broker to IIB9. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Wed Mar 11, 2015 4:32 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
what is the primary group of id efgh ? 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| mqlover |
| Posted: Wed Mar 11, 2015 5:10 pm Post subject: |
|
|
Disciple
Joined: 25 Jul 2010
Posts: 176
|
The id "abcd" belongs to following groups
uid=abcd gid=mqbrkrs groups=mqm,db2cgrp2
The id "efgh" belongs to following groups
uid=6319(efgh) gid=6319(efghg) groups=401(mqm),402(mqbrkrs),501(db2cgrp2)
The groupid "efghg" is the primary group for the user id "efgh" |
|
| Back to top |
|
|
| smdavies99 |
| Posted: Wed Mar 11, 2015 11:12 pm Post subject: |
|
|
Jedi Council
Joined: 10 Feb 2003
Posts: 6076
Location: Somewhere over the Rainbow this side of Never-never land.
|
| mqlover wrote: |
The groupid "efghg" is the primary group for the user id "efgh" |
And that could be your problem. Make the primasy group for the account 'mqbrkrs' and see what happens.
There are a good number of posts on this topic in this forum. Please take time to read them.
_________________
WMQ User since 1999
MQSI/WBI/WMB/'Thingy' User since 2002
Linux user since 1995
Every time you reinvent the wheel the more square it gets (anon). If in doubt think and investigate before you ask silly questions. |
|
| Back to top |
|
|
| mqlover |
| Posted: Thu Mar 12, 2015 12:29 am Post subject: |
|
|
Disciple
Joined: 25 Jul 2010
Posts: 176
|
Thanks much for your suggestion. Will defintely have a look in the forum.
Also kindly could anyone suggest if this could be handled by giving sudo access to execute the mqsistop command? |
|
| Back to top |
|
|
| Vitor |
| Posted: Thu Mar 12, 2015 4:31 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| mqlover wrote: |
| Also kindly could anyone suggest if this could be handled by giving sudo access to execute the mqsistop command? |
Yes it could.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
|
|
