ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum IndexSearch

Search found 347 matches
Author Message
Topic:setmqaut for full admin access
belchman

Replies: 27
Views: 432

PostForum:General IBM MQ Support Posted: Wed Apr 17, 2019 5:24 am Subject: setmqaut for full admin access
It is pretty poor but it did have a pretty blue field displayed that said REQUESTED. I did not see it. So I am mostly culpable.

Topic:setmqaut for full admin access
belchman

Replies: 27
Views: 432

PostForum:General IBM MQ Support Posted: Wed Apr 17, 2019 5:02 am Subject: setmqaut for full admin access
Mea Culpa

I appreciate all of the attention but I figured out the problem. It was my inability to read our tool that tells me is my LDAP request was completed properly.

When I said the ...
Topic:setmqaut for full admin access
belchman

Replies: 27
Views: 432

PostForum:General IBM MQ Support Posted: Wed Apr 17, 2019 4:12 am Subject: setmqaut for full admin access
mcauser on the channel is null
Topic:setmqaut for full admin access
belchman

Replies: 27
Views: 432

PostForum:General IBM MQ Support Posted: Wed Apr 17, 2019 4:10 am Subject: setmqaut for full admin access
I currently have chlauth disabled until I get LDAP working. Then I will get chlauth going.

AMQ8408I: Display Queue Manager details.
QMNAME(CMMQD_1) ACCTCONO(DISABLED)
...
Topic:setmqaut for full admin access
belchman

Replies: 27
Views: 432

PostForum:General IBM MQ Support Posted: Wed Apr 17, 2019 3:41 am Subject: setmqaut for full admin access
Rujova,

I do not plan on making them nested. I plan on making the mqm group a super set of all of them plus MQ total admin. The group pusr is a power user and will be a superset of mon, usr and som ...
Topic:setmqaut for full admin access
belchman

Replies: 27
Views: 432

PostForum:General IBM MQ Support Posted: Wed Apr 17, 2019 3:36 am Subject: setmqaut for full admin access
Morag,

Say my ID is myID in the LDAP and myID is in the LDAP group g.qmgrname.mqm.

I have granted the group g.qmgrname.mqm access to everything I have specified.

In the MQ Explorer connection ...
Topic:setmqaut for full admin access
belchman

Replies: 27
Views: 432

PostForum:General IBM MQ Support Posted: Tue Apr 16, 2019 9:25 am Subject: setmqaut for full admin access
I have 4 mq groups in descending order of MQ OAM auth

1) g.cmmqd_1.mqm
2) g.cmmqd_1.mqmpusr
3) g.cmmqd_1.mqmusr
4) g.cmmqd_1.mqmmon

My ID is in all 3. It was my brilliant way of thinking I co ...
Topic:setmqaut for full admin access
belchman

Replies: 27
Views: 432

PostForum:General IBM MQ Support Posted: Tue Apr 16, 2019 9:22 am Subject: setmqaut for full admin access
Right now I have 2 theories in the order I think they are likely;

1) When MQ does a lookup of what group I am in, it stops when it finds the first hit. Perhaps that first hit is not g.cmmqd_1.mqm. ...
Topic:setmqaut for full admin access
belchman

Replies: 27
Views: 432

PostForum:General IBM MQ Support Posted: Tue Apr 16, 2019 9:16 am Subject: setmqaut for full admin access
No. I issued setmqaut commands from the command line as specified earlier in this thread. I issued those command while logged on as mqm because I could not connect to the queue manager as myself from ...
Topic:setmqaut for full admin access
belchman

Replies: 27
Views: 432

PostForum:General IBM MQ Support Posted: Tue Apr 16, 2019 4:39 am Subject: setmqaut for full admin access
Yes I refreshed security. I did it from the command line on the Linux command line.

I am not authorized to issue refresh security from MQ Explorer on the remote host

EXPLANATION:
The specified ...
Topic:setmqaut for full admin access
belchman

Replies: 27
Views: 432

PostForum:General IBM MQ Support Posted: Mon Apr 15, 2019 10:09 am Subject: setmqaut for full admin access
Morag,

I appreciate your attention to this a bunch.

All I know is if I look in the tool that says what entitlements the ID has, it says it has the entitlement g.CMMQD_1.mqm. It also says it has ...
Topic:setmqaut for full admin access
belchman

Replies: 27
Views: 432

PostForum:General IBM MQ Support Posted: Sat Apr 13, 2019 3:36 am Subject: setmqaut for full admin access
Morag,

Here is your output

DISPLAY ENTAUTH PRINCIPAL('myID') OBJTYPE(CHANNEL) OBJNAME('mySVRCONN')
1 : DISPLAY ENTAUTH PRINCIPAL('myID') OBJTYPE(CHANNEL) OBJNAME('mySVRCONN')
AMQ8866I: Di ...
Topic:setmqaut for full admin access
belchman

Replies: 27
Views: 432

PostForum:General IBM MQ Support Posted: Sat Apr 13, 2019 2:23 am Subject: setmqaut for full admin access
Peter,

I have that +crt allowance but I did not add +dsp allowance to it. I am not really sure what -n @class is.
Topic:setmqaut for full admin access
belchman

Replies: 27
Views: 432

PostForum:General IBM MQ Support Posted: Fri Apr 12, 2019 10:10 am Subject: setmqaut for full admin access
No worries all. I am stumped too. I will ask IBM for a clue.
Topic:setmqaut for full admin access
belchman

Replies: 27
Views: 432

PostForum:General IBM MQ Support Posted: Fri Apr 12, 2019 9:33 am Subject: setmqaut for full admin access
I have my QMgr LDAP enabled and my ID is in the mqm LDAP group and I have done what is here:

https://www.ibm.com/support/knowledgecenter/en/SSFKSJ_9.0.0/com.ibm.mq.sec.doc/q013750_.htm

Yet I sti ...
Goto page 1, 2, 3 ... 22, 23, 24  Next Page 1 of 24

Jump to:
Protected by Anti-Spam ACP


Theme by Dustin Baccetti
Powered by phpBB 2001, 2002 phpBB Group

Copyright MQSeries.net. All rights reserved.