| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Providing Restrictive access to remote MQ client user |
« View previous topic :: View next topic » |
| Author |
Message
|
| pandeg |
 Posted: Mon Aug 31, 2015 10:14 am Post subject: Providing Restrictive access to remote MQ client user |
 |
|
Disciple
Joined: 21 Oct 2014
Posts: 195
|
Hi, I have installed MQC8 on the linux machine and able to connect to remote Queue Manager (MQ Server 8 version) using "mqm" user. Remote OS/MQ server machine is not asking for password authentication for mqm userid and allowing execute "runmqsc" command on the queue manager. Also, MQ admin team has disabled security on the queue manager using below command
alter qmgr CHLAUTH(DISABLED)
alter qmgr CONNAUTH('')
I want to connect to Remote Queue manager using non-mqm user ID. I cannot execute runmqsc command in client machine without su mqm userid. Is it possible to execute "runmqsc" without non-mqm user and how can i achieve that. If possible , i want to get only certain privileges on that user id |
|
| Back to top |
|
 |
| mqjeff |
| Posted: Mon Aug 31, 2015 10:18 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
If you want to provide runmqsc like functions with a more restricted access (and a better gui...  ) you can look at https://github.com/ibm-messaging/mq-mqsc-editor-plugin (shameless plug). This will run your mqsc commands as whatever user you've configured the MQ Connection in MQExplorer to use.
Basic runmqsc is intended to be an admin only tool, and not intended to be used by normal users.
MQGem also makes tools that can be used to provide command line access to runmqsc like functions that can use more restricted security and run from non-mqm users.
_________________
chmod -R ugo-wx / |
|
| Back to top |
|
|
| Vitor |
| Posted: Mon Aug 31, 2015 10:39 am Post subject: Re: Providing Restrictive access to remote MQ client user |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| pandeg wrote: |
Also, MQ admin team has disabled security on the queue manager using below command
alter qmgr CHLAUTH(DISABLED)
alter qmgr CONNAUTH('') |
I do hope you're not doing that in a Prod environment......
| pandeg wrote: |
| Is it possible to execute "runmqsc" without non-mqm user |
No it's not, as you were told in your other thread here.
The reasons for this are very well explained by my most worthy associate, as well as some very good alternatives.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
