Author |
Message
|
mrlazy |
Posted: Thu May 18, 2006 12:07 pm Post subject: MQ 5.2 - amqoamd |
|
|
Centurion
Joined: 19 Apr 2006 Posts: 144
|
Hi,
In one of our production boxes we still have MQ 5.2, base level .
When asked to backup the Object definitions and authorizations, I took the object definitons, but when tried to get the authorizations using the command amqoamd -s -m 'QMgr', it says invalid flag.
But when I used the command 'amqoamd -m Qmgr > output.txt', it's not in the runmqsc format. So is there any way that I could convert this into the required format so that i can restore it?
KINDLY HELP ME... |
|
Back to top |
|
 |
vennela |
Posted: Thu May 18, 2006 12:09 pm Post subject: |
|
|
 Jedi Knight
Joined: 11 Aug 2002 Posts: 4055 Location: Hyderabad, India
|
Quote: |
it's not in the runmqsc format |
It should give you control commands not MQSC commands
Commands like setmqaut |
|
Back to top |
|
 |
mrlazy |
Posted: Thu May 18, 2006 12:11 pm Post subject: |
|
|
Centurion
Joined: 19 Apr 2006 Posts: 144
|
Sorry about tht, but that's what I meant to say.
This is our MQ Version:
C:\Documents and Settings\mqseries>mqver
MQSeries Version: 5200
CMVC level: p520-CSD01G
BuildType: IKAP - (Production)
Is there a way that I could get it in control commands?
Last edited by mrlazy on Thu May 18, 2006 12:40 pm; edited 1 time in total |
|
Back to top |
|
 |
vennela |
Posted: Thu May 18, 2006 12:14 pm Post subject: |
|
|
 Jedi Knight
Joined: 11 Aug 2002 Posts: 4055 Location: Hyderabad, India
|
The older one has a -f flag I think.
What do you get when you do amqoamd -? |
|
Back to top |
|
 |
mrlazy |
Posted: Thu May 18, 2006 12:26 pm Post subject: |
|
|
Centurion
Joined: 19 Apr 2006 Posts: 144
|
C:\SaveQMgr>amqoamd -?
Usage: amqoamd [-m QMgrName ] [-t ObjType] [-n ObjName] [-f]
-f old authorization file format
I tried with -f flag too, but shows in the same old format, not setmqaut. |
|
Back to top |
|
 |
mrlazy |
Posted: Thu May 18, 2006 12:32 pm Post subject: |
|
|
Centurion
Joined: 19 Apr 2006 Posts: 144
|
Sorry, only one of the machines has MQ 5.2 base level. But other two have 5.2 CSD 4. So when I tried with -s command, I get the output in setmqaut format for the other two machines.
But only one of the machines isn't(since no CSD is applied). Please let me know if there is any other alternative using which I can get the output in setmqaut format. |
|
Back to top |
|
 |
vennela |
Posted: Thu May 18, 2006 1:02 pm Post subject: |
|
|
 Jedi Knight
Joined: 11 Aug 2002 Posts: 4055 Location: Hyderabad, India
|
There was a support pack called mq52auth
See if you can find it |
|
Back to top |
|
 |
mrlazy |
Posted: Thu May 18, 2006 1:21 pm Post subject: |
|
|
Centurion
Joined: 19 Apr 2006 Posts: 144
|
Vennela, I tried to search for mq52auth, but could not find any support pack with that name. There is a support pack called ms0i,but tht's for UNIX.But I use windows. Writing the setmqaut commands using that output file is the only option left, if not? |
|
Back to top |
|
 |
vennela |
Posted: Thu May 18, 2006 2:29 pm Post subject: |
|
|
 Jedi Knight
Joined: 11 Aug 2002 Posts: 4055 Location: Hyderabad, India
|
I think you are lucky
Quote: |
MS68: MQSeries - MQAUTH Converter |
This SupportPac provides mqauth which converts the output of the amqoamd (MQSeries V5.2) command into setmqaut statements. This output can be saved as an executable file which can simply be executed in the event that authorities need be restored. |
|
Back to top |
|
 |
mrlazy |
Posted: Thu May 18, 2006 5:31 pm Post subject: |
|
|
Centurion
Joined: 19 Apr 2006 Posts: 144
|
Vennela,
I really appreciate your help, but this script is for UNIX machines. But in mycase, we have MQ 5.2 installed on Windows. |
|
Back to top |
|
 |
wschutz |
Posted: Fri May 19, 2006 2:32 am Post subject: |
|
|
 Jedi Knight
Joined: 02 Jun 2005 Posts: 3316 Location: IBM (retired)
|
mrlazy wrote: |
Vennela,
I really appreciate your help, but this script is for UNIX machines. But in mycase, we have MQ 5.2 installed on Windows. |
Do you have access to a unix where where you can ftp the output of amqoamd, run the script and then ftp it back?
I have'nt looked, what language is the s/p written in? Perl? ksh? There are free implementations of those for windows ars well..... _________________ -wayne |
|
Back to top |
|
 |
Michael Dag |
Posted: Fri May 19, 2006 4:07 am Post subject: |
|
|
 Jedi Knight
Joined: 13 Jun 2002 Posts: 2607 Location: The Netherlands (Amsterdam)
|
even if he can ftp to unix and modify the script, there is still the challenge of finding whether an id is a group or principal on windows.
another way is to apply CSD4 to 5.2 as the -s parm was added in CSD4 ... _________________ Michael
MQSystems Facebook page |
|
Back to top |
|
 |
mrlazy |
Posted: Fri May 19, 2006 6:25 am Post subject: |
|
|
Centurion
Joined: 19 Apr 2006 Posts: 144
|
But the format to run the mqauth file is: mqauth <Qmgr Name>. I even tried with the output of amqoamd inplace of QMgr on UNIX box,but no result.
I guess I'm left with writing setmqaut commands on my own.Can someone just let me know whether I'm right in converting the old format to setmqaut format:
Eg:
ObjectType: Queue Manager
ObjectName: @CLASS
User name: MUSR_MQADMIN@PRODA
Authorities: crt (0x00010000)
SID: S-1-5-21-1957994488-329068152-682003330-1005
setmqaut -m PRODA -n @class -t qmgr -p MUSR_MQADMIN@PRODA +crt
ObjectType: Queue
ObjectName: SYSTEM.DEFAULT.MODEL.QUEUE
User name: mqm@PRODA
Authorities: browse get inq passall passid put set setall setid chg clr dlt dsp (0x001e07ff)
SID: S-1-5-21-1957994488-329068152-682003330-1003
setmqaut -m PRODA -n SYSTEM.MODEL.QUEUE -t queue -g mqm@PRODA +browse +get +inq +passall +passid +put +set +setall +setid +chg +clr +dlt +dsp |
|
Back to top |
|
 |
vennela |
Posted: Fri May 19, 2006 6:29 am Post subject: |
|
|
 Jedi Knight
Joined: 11 Aug 2002 Posts: 4055 Location: Hyderabad, India
|
Quote: |
setmqaut -m PRODA -n @class -t qmgr -p MUSR_MQADMIN@PRODA +crt |
There is no -n flag with -t qmgr
The other ones look OK.
Except you should really be doing
setmqaut -m PRODA -n SYSTEM.MODEL.QUEUE -t queue -g mqm@PRODA -all +browse +get +inq +passall +passid +put +set +setall +setid +chg +clr +dlt +dsp |
|
Back to top |
|
 |
mrlazy |
Posted: Fri May 19, 2006 6:54 am Post subject: |
|
|
Centurion
Joined: 19 Apr 2006 Posts: 144
|
Thanks for ur reply.
Quote: |
setmqaut -m PRODA -n SYSTEM.MODEL.QUEUE -t queue -g mqm@PRODA -all +browse +get +inq +passall +passid +put +set +setall +setid +chg +clr +dlt +dsp |
Did you mean to add -all infront of all the other authorizations in every other setmqaut command for queues? |
|
Back to top |
|
 |
|