| Author |
Message |
 Topic: MQexplorer read only user group -AMQ4036 |
amitjain
Replies: 22
Views: 22130
|
 Forum: IBM MQ Security Posted: Wed Apr 29, 2015 5:47 am Subject: MQexplorer read only user group -AMQ4036 |
:~/mq_scripts ] $ groups ajain
ajain : unx-appsupp splunk tg dev all unx-beauchamp
peviously unx-is was primary and now I have unx-appsupp as primary. |
| Topic: MQexplorer read only user group -AMQ4036 |
amitjain
Replies: 22
Views: 22130
|
Forum: IBM MQ Security Posted: Wed Apr 29, 2015 5:46 am Subject: MQexplorer read only user group -AMQ4036 |
Could you please point me to some documentation to understand how primary group things work in context of MQ.
I was thinking it will check what all groups I am member of and according pick matching ... |
| Topic: MQexplorer read only user group -AMQ4036 |
amitjain
Replies: 22
Views: 22130
|
Forum: IBM MQ Security Posted: Wed Apr 29, 2015 5:38 am Subject: MQexplorer read only user group -AMQ4036 |
Don't know but it started working fine now.
In windows AD I have changed my unix primary group id to unx-appsupp and it started working fine.
I am again perform all steps from beginning for new ... |
| Topic: MQexplorer read only user group -AMQ4036 |
amitjain
Replies: 22
Views: 22130
|
Forum: IBM MQ Security Posted: Wed Apr 29, 2015 4:14 am Subject: MQexplorer read only user group -AMQ4036 |
:~/mq_scripts ] $ groups ajain
ajain : unx-is splunk unx-appsupp |
| Topic: MQexplorer read only user group -AMQ4036 |
amitjain
Replies: 22
Views: 22130
|
Forum: IBM MQ Security Posted: Wed Apr 29, 2015 4:02 am Subject: AMQ4401 - MQ explorer issue |
Hi,
I have defined the group unx-appsupp on windows and on linux when I execute below command I get the proper output.
~/mq_scripts ] $ getent group unx-appsupp
unx-appsupp:*:111515:ajain
I ... |
| Topic: MQexplorer read only user group -AMQ4036 |
amitjain
Replies: 22
Views: 22130
|
Forum: IBM MQ Security Posted: Wed Apr 22, 2015 7:17 am Subject: MQexplorer read only user group -AMQ4036 |
Thanks mqjeff.
Thanks exerk for Morag Hughson's various blogs
Now I understand the purpose of AUTHINFO objects.
After defining authinfo properly I am able to connect to LDAP from MQ and also ... |
| Topic: MQexplorer read only user group -AMQ4036 |
amitjain
Replies: 22
Views: 22130
|
Forum: IBM MQ Security Posted: Wed Apr 22, 2015 2:40 am Subject: MQexplorer read only user group -AMQ4036 |
What could be wrong ? BASEDNU in AUTHINFO('L') AUTHTYPE(IDPWLDAP) ?
----- amqrmrsa.c : 925 --------------------------------------------------------
AMQ5531: Error authenticating user in LDAP
... |
| Topic: MQexplorer read only user group -AMQ4036 |
amitjain
Replies: 22
Views: 22130
|
Forum: IBM MQ Security Posted: Wed Apr 22, 2015 2:12 am Subject: MQexplorer read only user group -AMQ4036 |
ALTER QMGR CONNAUTH('L')
AMQ8005: WebSphere MQ queue manager changed.
REFRESH SECURITY TYPE(CONNAUTH)
5 : REFRESH SECURITY TYPE(CONNAUTH)
AMQ8560: WebSphere MQ security cache refreshed.
DIS ... |
| Topic: MQexplorer read only user group -AMQ4036 |
amitjain
Replies: 22
Views: 22130
|
Forum: IBM MQ Security Posted: Wed Apr 22, 2015 12:47 am Subject: MQexplorer read only user group -AMQ4036 |
[ajain@ulonapmqss01 ~]$ id
uid=111623(ajain) gid=28(unx-is) groups=28(unx-is),6001(unx-beauchamp),10004(tg dev all),108671(splunk),111515(unx-appsupp)
As mqjeff suggested , now I am trying below ... |
| Topic: MQexplorer read only user group -AMQ4036 |
amitjain
Replies: 22
Views: 22130
|
Forum: IBM MQ Security Posted: Tue Apr 21, 2015 8:22 am Subject: MQexplorer read only user group -AMQ4036 |
setmqaut -m TEST_GTX_QM -n "**" -t authinfo -g "unx-appsupp" +dsp
will it not allow mq explorer to have readonly access ? |
| Topic: MQexplorer read only user group -AMQ4036 |
amitjain
Replies: 22
Views: 22130
|
Forum: IBM MQ Security Posted: Tue Apr 21, 2015 7:47 am Subject: MQexplorer read only user group -AMQ4036 |
I am using below mq explorer.
IBM WebSphere MQ Explorer
Version: 8.0.0.1
I will download 8.0.0.2 support pac from IBM webiste and check. Thanks |
| Topic: MQexplorer read only user group -AMQ4036 |
amitjain
Replies: 22
Views: 22130
|
Forum: IBM MQ Security Posted: Tue Apr 21, 2015 7:05 am Subject: MQexplorer read only user group -AMQ4036 |
I am trying to read and understand the below link on know center
http://www-01.ibm.com/support/knowledgecenter/SSFKSJ_8.0.0/com.ibm.mq.sec.doc/q113250_.htm
display qmgr CONNAUTH
4 : disp ... |
| Topic: MQexplorer read only user group -AMQ4036 |
amitjain
Replies: 22
Views: 22130
|
Forum: IBM MQ Security Posted: Tue Apr 21, 2015 6:58 am Subject: MQexplorer read only user group -AMQ4036 |
I am looking at ibm knowledger center but not able to understand what need to set/corrected in authinfo.
display authinfo(*) ALL
3 : display authinfo(*) ALL
AMQ8566: Display authentication i ... |
| Topic: MQexplorer read only user group -AMQ4036 |
amitjain
Replies: 22
Views: 22130
|
Forum: IBM MQ Security Posted: Tue Apr 21, 2015 6:45 am Subject: MQexplorer read only user group -AMQ4036 |
What should I configure for unx-appsupp
Connection authentication : SYSTEM.DEFAULT.AUTHINFO.IDPWOS
display authinfo(*)
1 : display authinfo(*)
AMQ8566: Display authentication informati ... |
| Topic: MQexplorer read only user group -AMQ4036 |
amitjain
Replies: 22
Views: 22130
|
Forum: IBM MQ Security Posted: Tue Apr 21, 2015 6:30 am Subject: MQexplorer read only user group -AMQ4036 |
dmpmqaut -m TEST_GTX_QM -t qmgr -g unx-appsupp
dmpmqaut output
profile: self
object type: qmgr
entity: unx-appsupp
entity type: group
authority: inq connect dsp |
